{"report_id":"a253023e-b69e-45e5-bf8e-654f3ca25c2e","version":0,"status":"done","tags":[],"date":"2026-07-17T15:26:01Z","url":{"schema":"http","addr":"barrick1.com","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":0,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"title":"Btw","dom":{"size":19900,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10544)","md5":"0aca8672977f77e71ea863ecc4ad16ec","sha1":"410aa0b910a7c7e1dab1108890b465b889a7843d","sha256":"8fac9eaae2b46aaa57b65582309711da9ac2e3f7b579963d8bec344fb0f725dd","sha512":"3318c3608abf2f1d79a86679f56e34cc1aaf52689e68cdb1795351df68c66e3aeb93e019c0a0495b21a098c9473b0b9cb5a52496f26b1c4043e56b2ab3841cd0","ssdeep":"192:ek7RfXEhIRbgwDH6nfD3b8lRtJ/vf5D/i6LwS2SxV:2W6wDaM99","tlshash":"8f92bb31b488846602738bc2f4b17f587697f33f8c0ac051bddd01a85fd7db6a9958a9","dom_hash":"domhashef367c8ec4def97281e6664cb58267e0","first_seen":"2026-07-17T15:26:11.000553Z","last_seen":"2026-07-17T15:26:11.000553Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"barrick1.com","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":0,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-21T15:26:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"barrick1.com","ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":51,"request_count":51,"received_data":2493117,"sent_data":21644,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"webapi.barrick1.com","ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":15,"request_count":16,"received_data":410026,"sent_data":8232,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"barrick1.com/index-8391cbb6.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"50a931dd63c75ed0e11487a980f0d3da","sha1":"0fa8e6f8954ee9864f8f2763db4b84fe8a7f4873","sha256":"b7c0d938e6454ca5122194eb8a531f2ce6c845223ae71db866cf2cab3d7731bb","sha512":"555b33e512cb7293f7711a9992add25251dec2fe1dbc9e3dc3b8a44ea5df4451e79f7ebfda4f2946ff8a57fbc90335e978c7fbe14fba07cb58134d5f6d482079","ssdeep":"","tlshash":"28011eb074ae4bbb8f569c18a11c084142980e8dda30a4c0e5bf017857e4862e62eb2c","size":821,"data":"","first_seen":"2026-07-17T15:26:11.006584Z","last_seen":"2026-07-17T15:26:11.006584Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/public-c4c40539.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bce7dc807e2552f21cedd589871264aa","sha1":"6aa509e110ed96f8f89436d78a0b29fea791c17f","sha256":"77a9034a1982c84b87e8c22c4f30e434e99c43a0604a01c45ed7ae5ed7ec097b","sha512":"67bfdf1c470d57f703a503360bdfd32f8c895804faafbebcdfb315931a60ba99c346471ceba800597307b1b0eaa7a733ea696bec5f0e174ee587613462f88003","ssdeep":"","tlshash":"10313671fc4ed6b69ad78cb490441c040a4d9f5de73912d4eddb303663dd5a4660eb20","size":1696,"data":"","first_seen":"2026-07-17T15:26:11.025946Z","last_seen":"2026-07-17T15:26:11.025946Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-f9e3d309.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"27a250e54b30e24ad71c61fe422f727f","sha1":"0ad0970c8edb9e7d165e10bdfb19de4efeb6d071","sha256":"ec36ef0b540534b898b4962b5ca5b22a6f047b7ddf177ebe01fba2710f4f8542","sha512":"f13a6ddc2354b1e854ff65cdc0a045b0e2ef8b1088fef610d34438facc4ab5313ac24f85148ea4415242082e9deca66552ffa3db88c1d94dd5b1b9d851f9c499","ssdeep":"","tlshash":"4f210107fd56c776e2238ca0d20d185082681fabba98d4d5e1df89560ba3cf0d60eb25","size":1330,"data":"","first_seen":"2026-07-17T15:26:11.019035Z","last_seen":"2026-07-17T15:26:11.019035Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d04ecacbb9296ea4094351aff9af2ee2","sha1":"be6c1fdaf63e88919df0f576f1362deed743ad0c","sha256":"f7a21ccc993c5d87ef5877d63e21cd127bb9e9cfc34298e7b545c05fc170c579","sha512":"3d0e6693e5b8bab3076604407787e9161049a9a0d1c8f613063369c6fe3c68d982055232f9b2eaa94731002314872bbe8bbbfcd97c1b3d567147a3d1e9e41f83","ssdeep":"","tlshash":"4821ee3206b8043152639173775abb423b3251a794804e257e0cef289fa6a678a973c4","size":1438,"data":"","first_seen":"2026-07-17T15:26:11.090137Z","last_seen":"2026-07-17T15:26:11.090137Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"64ae622ee17ac00e0bb580d55fc437a2","sha1":"25264c5d5eaf343e32548f49fc28d1066efff9e3","sha256":"18f1115a193905ebfb96d2e3f054c913a6a43cd7e8369e1f52762197fbd08d01","sha512":"e5aa2200383e0de1876e07b6552d874227c42318512d6231e465df12ad14f89c273ccd958b0ca1d9f5b129764df0bdef7c079366627a66e0601d51878ef92105","ssdeep":"","tlshash":"ca11bdfe151a60196303404f936f35157436a0ad000a184172ccae8dababf6ad0cbb8c","size":949,"data":"","first_seen":"2026-07-17T15:26:11.099931Z","last_seen":"2026-07-17T15:26:11.099931Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/en-6551d504.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1899e1ede3c700682bd98e4590ec6222","sha1":"c086cff368c570a9d14ae86c2dab3064d3a944cb","sha256":"c2b1ddf0468d6bfb384551c80dc8e4ca7bea31cd63d367e82b89b6710cd3cf71","sha512":"4934587b8b625eebb7b77766f7156cb36811a5dcb3d35a99d908e3907472a15d22f9dcee8466640024870b5fb302d5a29d4144ea08c2f16ac7b4fc6af9b2f483","ssdeep":"768:KGtZcEw/o7rnOYhF4jnAMC/aAMFzrCPGaQwmQONfpk7aOzj3Sc:uponnOYHRAFzrCPfQczj3p","tlshash":"4003d7c97e19989a04f3537774ce2e6020f609c18255881f4fedcaf99392b676367b34","size":38815,"data":"","first_seen":"2026-07-17T15:26:11.045326Z","last_seen":"2026-07-17T15:26:11.045326Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/termsOfuse-40106d72.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fa90cf7d5c4b8025ab53ba3de14b0ea","sha1":"6897f9db5b9ffd8d4eed3ba930fa900b91b20aaf","sha256":"03b8af117bd3e3ab88b0ad6ea6d37d3249d17088762c63cb416c831f9e0cd4f5","sha512":"be152432952e15c45ca260d1c1d27b1a2c7a5fee5d5b3c8113d07ebf954bbac74d4ddcb521ee832458ac2d251168f5b8c5fbf00c48872d9f2456d3c99902a8db","ssdeep":"","tlshash":"31012c1bd806c7f2c2068ce8c22684720a3f0a633a89d0d0c1df8e026bf58e0d10f328","size":773,"data":"","first_seen":"2026-07-17T15:26:11.026964Z","last_seen":"2026-07-17T15:26:11.026964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/vant-e94ae821.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"947a1347422e54d55bca70df056cdb75","sha1":"64ba6668ba2045db12095188c8c329a11b633cee","sha256":"1cc5729362558f4983c1339c796c2d0cff7ed7ccc5af9f4cc191a1bcc40bf24e","sha512":"33999a9cca9ac63787ac320e3038363e3392366df922100983cea7794f7bf4a44b7a9f5b3948a82195381a3e196a8a470e0bcc0b1aab70e4717a481942798641","ssdeep":"1536:Os1qxoIW8J2C43ffoSLMfgKIqnpchp81hStG59BzJy2IhKN52J7wIH9UZgQQiJaj:vqx/W8J2C4noSLXZqnp2GhX59BzJpI8o","tlshash":"86831ad1f895f53497bb94d950aa0020a62d1b88b009c1f1f07e6d4a3ba9dd4b6faf1c","size":88183,"data":"","first_seen":"2026-07-17T15:26:11.034809Z","last_seen":"2026-07-17T15:26:11.034809Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-01T17:00:36.715564Z","times_seen":4421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-aee241de.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01712e6eb911b8438100cc08ea54cd99","sha1":"e578844619d1befc29360351407226b25ff5b1ae","sha256":"8d41605a2a7a9aaa6d1edee1d3b5d6371ece95dadad649562d70da4973397bf4","sha512":"47d0a3a59af5f1d5680df893af0dd76465a8283de4bb019eb075e1f90ca5ee975517f247395d4eccf228fddec7746c10ed14fe4b7f20fc5ddb5ecc75c1365080","ssdeep":"192:RnX6ihd9qMzn3h/LyO04FZJGY5Nhmbg888yv:wifsS3QO04FZJd7QbN8dv","tlshash":"78e1f741ec0987bd96a3478548ad1020166cb7e6f10c48e6fafd4d708b6aab0deeb741","size":7017,"data":"","first_seen":"2026-07-17T15:26:11.04632Z","last_seen":"2026-07-17T15:26:11.04632Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/filters-b7223f29.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0df1650b7d016006799dc3d4992222eb","sha1":"a606b765a3194985415095d52b9582967ce67c85","sha256":"5aabdef0b2abaddaa7ab46410f740ac36c5ab1baca90323c080e58286b396390","sha512":"b94f78b7e38efbc560f8450242523bcfe5109ce5cea3abda00ed137f76a0872f32c21760cd0b357995622e9330f379b27b1df5aba4fd3d52251ea5e4ba91b26e","ssdeep":"","tlshash":"a45122e9f6d7703353ed59e98814c870b18eae04687e070ef11fa0595c9348ad0bf654","size":2500,"data":"","first_seen":"2026-07-17T15:26:11.053235Z","last_seen":"2026-07-17T15:26:11.053235Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-07-28T19:39:17.544705Z","times_seen":1766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-28T19:32:04.786467Z","times_seen":1206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-174acf4e.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1949a82b0f8d0cf11ac598ec14134b12","sha1":"aaa22909100037db84f86ad9323ed350b05e4948","sha256":"25b96097fb89da9151a55abfd634e1efb6e53ee50e5906d6c1e1b6d6568e9f89","sha512":"5ad472e9eb23c2fa082ddcc4cff716d60637c740a7d2997157cfa09712f7abf19c45c855162767cc732ec36a8dd92e7f98fe1b4c5bf5b0df2578f80ce0ff119f","ssdeep":"","tlshash":"f54147e4a959c936d6769cdac1700c3023ec1fddfa2915c4f5ff946533998d49209358","size":2205,"data":"","first_seen":"2026-07-17T15:26:11.042485Z","last_seen":"2026-07-17T15:26:11.042485Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-7f3af360.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"16f46f4364d620d26396b260785e5689","sha1":"f4175b01f83e417c3adc87377764383d03c98fc1","sha256":"e46f7da8bbaf770154b9826ef43d81f5f8d23f6f0fa7a0c0cee409fe1a956430","sha512":"b9e2a6d502aed32d388193b5f08cf29dd24cd7894e4b12102200c7ccc1c63efcb1953574dc50c33e8e0b355d65c3328c8fbc76e4697b2171987c5f1c9773f902","ssdeep":"","tlshash":"bac02b8b8c230453c33c0c4543131d0cc82f8730834b46f4c004811380460d3409ef10","size":132,"data":"","first_seen":"2026-07-17T15:26:11.044367Z","last_seen":"2026-07-17T15:26:11.044367Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/utils-117de97f.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1ae97cb3368de21e63ab47a57b8b10a","sha1":"6f87bebcfcd5d4bc37114e902faa30592627064e","sha256":"9130cd0c7c3c12905d6b433f4b8dbdacb159ccb24bb0b6c2317e5ee06999af4d","sha512":"89a3ee2edd934758cf39cad5fe759b9e05e6a1dd82a8eaec375bbc38ac0d6d0d562c72dc67346dc77a6fc763371300b1140edd3ae06eabf4835b178493918872","ssdeep":"3072:z8mBsFt7pVHH2JiU2xlp9YCntldU2zl8IUY:z8mB0pIJiU2Dp9YAnat1Y","tlshash":"37c3c6c9b5d2f02153a360b4006f004bf23ead69b44f8594e265e8dabc7954ed2b7f2d","size":128165,"data":"","first_seen":"2026-07-17T15:26:11.037865Z","last_seen":"2026-07-17T15:26:11.037865Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/vendor-734ebae4.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12178a3cc95fd05a10b21b29a05d7034","sha1":"17863ddcb6e655debc819ac7e17e900ef37284c1","sha256":"91bdd20d2ef52a660d6401a2104af3925d82c50a61176bede80d64e6c715c619","sha512":"80f1cd3c6fba67765a6c152f410b93759338e92abe3234f7d90d951dd4a1767d168c3a72d00866743e9681420a9b9119c9c74cf26afb20c489ca701f376519d7","ssdeep":"12288:bMELs0hhCX0dF/J2SdpncFFCBLglFFxDsM:oELs0hhxnB5bncFFOgDsM","tlshash":"38053bb47792b0e907aa60d640771803ee7c6e57305ec0a8f15d98eb3d74a4ad673b38","size":850293,"data":"","first_seen":"2026-07-17T15:26:11.019981Z","last_seen":"2026-07-17T15:26:11.019981Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-da639d63.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d598eaa0691f3efde172655b7ce545ae","sha1":"c86842ceeb38e91c1a03bd737f3ba3414716352e","sha256":"578d63326ab711aae61129792d28ebac97cec69936935aaa7024be8f20bf48c3","sha512":"5cb957f65f95d9a4f3cddca3d1666b86a1a86b196c01c07807a1ea93652948ce4f8410a3bf1197daa5ec6ffafc7dc833b353b623c31d12d3f4c6a4a15b35ec37","ssdeep":"","tlshash":"8e01c9f1fd1dceba3fa3499012953a4060090f9dfa0015e2988b7e291be2a50c6ce72c","size":814,"data":"","first_seen":"2026-07-17T15:26:11.048017Z","last_seen":"2026-07-17T15:26:11.048017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/collectItem-ad1638e5.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3018f6ba62af2eaa516e2eb1a6be5ef0","sha1":"2b7f6fad4d62e0fa0f7508972e1b10238aaafa7f","sha256":"caa1cbb2a48882cb2c22c6ac3a02983c439affd36f282be294af317819a2a88f","sha512":"78554f198d180457100bbee936b8a9916c263888fd2805f0a80453e75af90580557729d1875c5f830478b8ef9e918d9d47af1e0451b1839c5d788b2fe868954d","ssdeep":"","tlshash":"9e11fcc2dc03cf71e3ee749b80ac08b096447fc878009089b6aa526eb7029fdd628716","size":1102,"data":"","first_seen":"2026-07-17T15:26:11.031057Z","last_seen":"2026-07-17T15:26:11.031057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-07-28T19:41:49.895426Z","times_seen":1403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-c82fb7fb.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ec37cc7ef5f2a2992e1b55b6a4d36e3","sha1":"99ce2584da928b5f4533d6d30bebaabf9a7df005","sha256":"27ba3b8723ef337a7a31804f3e4851036bec64e46d1a882ffbe4216b26172e00","sha512":"363c5cfafd17bdb687f03e4f7a5f70ec926d711138b09679e44620520d0beb7e565df249b807b9c6d02fd82da358aee33a53136c87f452890b8f9f9281325134","ssdeep":"192:lrNh0n6G+mTzuzGC/5smOnQiS9/48gbEy6T5XaSy+PkcCSpobwPY4pU5ypZMXwYX:rhGh+mTzuzGC/NeEy6T4Sy+sDSGkQ4pQ","tlshash":"59f18345f4438a3ce9b2a88010544400b25dbfda604d88e7bafd2dc27756df9fb4eb19","size":8055,"data":"","first_seen":"2026-07-17T15:26:11.024061Z","last_seen":"2026-07-17T15:26:11.024061Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-066255f8.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b0ba597134627c5a507ed951eece354","sha1":"d2121fe46eed2500f7a5e34774077ad1d20b6902","sha256":"e3e356b14c4ce335cc1cb6eaa063f9eb275b36b97b2b1d8eb8b98cad7fdb6906","sha512":"e18004f4963f3b059770f5f5513b6ff06284da4300d85699b2666fb844f4ada28d6cf75c54f5eefa502cc37407a6e4894e10dd8007866c6b66e0039499eb55ea","ssdeep":"96:ngb2rcyTGD5wSnkFRYOYF/tJC00AErLRzoFGTSu7pq3wQGwUoP51ZTdWaL8wAIqV:gb2rrTGD5wYkF6XF/tt0AEPRzeGTSuWq","tlshash":"e9c1a306b10ad6bb9abb4af4d8309194714d2f5be155c1e692ff4d393b234b0b20af20","size":6077,"data":"","first_seen":"2026-07-17T15:26:11.083947Z","last_seen":"2026-07-17T15:26:11.083947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/framework-b93179a4.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a0391cc572bf9c9a6c2f7ddaa45a878","sha1":"c741d245dc226f8d18581ca83fd4c731846992cf","sha256":"1f39fbbc8a9176f637acf54e69927b431d6fd29f6d88745c4a758386c0443b74","sha512":"240e7708cd409dd0927fc3cbe38f5f99e416e7d5cc4d325fdd9dbe3dca0b70f6c78e1a18af24cc75c144541b943666b093edb784e0c720ee79982c972be32157","ssdeep":"768:ykXbWOWuPWsUEz/wvnDbikLGb2nYncZjeXU/JNuhADp4PH8GGXiVww+XVg/pTqHp:jdw9F+xBXcplAw0io7Ce+N","tlshash":"b34318d632d2706647ba45e260772142fb3d0b99344f88d4f16caa973d33d4e42abf29","size":55187,"data":"","first_seen":"2026-07-17T15:26:11.050985Z","last_seen":"2026-07-17T15:26:11.050985Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-793d9126.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"936e8548d1a1740fe6240ce493e74794","sha1":"8941141bd33bc1253b5d996adaef88cf05ae2ecb","sha256":"9482608584c68e1adc2e65c22d02b65f57f384962a09c93a3247cafcae1bbe7c","sha512":"61ec3422d3089e63ba11b65e2621859ea5b0dd03b5dd96eb18284aaf01a9f4161b718ac23a19424fb7e20ca186176134a5e3a7850070814c28ca93b7af4017e0","ssdeep":"384:Q4SCaBm1PR1T8Gtf+lZDeMGA3+yInKK+9CI:QyahSVyIe9CI","tlshash":"9372e801f78d493ed5b3d59510840060720d1feea91e04e279fd2a766ba7cf0be5b728","size":16007,"data":"","first_seen":"2026-07-17T15:26:11.012798Z","last_seen":"2026-07-17T15:26:11.012798Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-30T19:44:59.582021Z","times_seen":1652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-c1ce3a34.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f585f7eb7566919310bea80a98ea170d","sha1":"bbba7f0d1e15a72cec1c9df793e55ef75efdea6e","sha256":"4e6f2b5b441a180ac665277304144834cf6366bfe61a062118b9dd94a64e053d","sha512":"08429e815550744f0c6ddb88c9bc4d6a59a89e8bb7fbb7244b7342091a4e6b8829b96872eb1956945423c75eb276961ac701bd96d2e1a51742cc2bb50b8a286a","ssdeep":"","tlshash":"05e0f1059c06cbf7831b48b4d31000092a182df01748cac9e5ef2418b7318f6d50fb34","size":413,"data":"","first_seen":"2026-07-17T15:26:11.052422Z","last_seen":"2026-07-17T15:26:11.052422Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/currencyItem-6e9d7ef9.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b795d13ddb5a7085de18ad8d19d49bb3","sha1":"26eb6f1d188b9ae46394eecb8269a58a019bae7b","sha256":"7810d5324a0ef98636159fa78f3821df1ee7ca0335076fa6272c90262c8a6f1a","sha512":"cd97ad11688d532a86b4033a2cb44ff25dee015007f03319c2277e757d9fcf9f251c7639e4526b72fb26e65086b5f667d698024e0f18bdfb40963d9300e741b0","ssdeep":"","tlshash":"2a219b819901c7b5d3be2463907c1814329e7fd6b50086d5baee120d7b879bcd328f31","size":1146,"data":"","first_seen":"2026-07-17T15:26:11.054062Z","last_seen":"2026-07-17T15:26:11.054062Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"cb64f94097307a2fbaa5805f2b1fe8f0","sha1":"7c03403d2fbab163596889da4be720d87e19e64f","sha256":"877614d99573c405a6cfad337e01fe0e68f18e8455bc75eff280f9b6644d3167","sha512":"503ef4542e64da3c0fb5017b16f072f859e3a5c32069d3d44c8a595a129af2ff9378b1c6134d814832ce4307f8d60565bd7a2ca2aa7b391b09b13c115c77a79d","ssdeep":"","tlshash":"b9c080c5b0c37d216601655555af28e49134551675481717cc9cdc453f274f0a237f98","size":169,"data":"","first_seen":"2025-08-13T22:50:23.288315Z","last_seen":"2026-07-24T20:44:12.112187Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/privacyPolicy-572462b5.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"10a088c8b69b011d05d24db2143b672b","sha1":"0941c7b70df35ed4fb112e92b96482a2c22c7b19","sha256":"beb81a408c917ffe6efd8f150ab38f45752bea101d24f682f766e022f6951f50","sha512":"4ac6cae68f549c2adda1c1093427ac18615f56ea2cd8099c54da0bfbdff763a4df06b2862b4691c4af6b35442f078fe6171711feeb17cc1235bddbe2bbb7f27c","ssdeep":"","tlshash":"fb01dc1fd886c7fa92238ce8d22584a25a7b56673689c1d0c6cf4e129bb58d1e50f728","size":776,"data":"","first_seen":"2026-07-17T15:26:11.008805Z","last_seen":"2026-07-17T15:26:11.008805Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-cd0bcbe1.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc89b41d3adade957467afaa02072da","sha1":"96219293145aeec51b9b9a3ab338302cc677fb18","sha256":"dd7c6bd0759192351e996697df25110f463a9e89cbffa174fac72d87ca299749","sha512":"4a7da6c738c7d2a279ec9e6bef98dba4b04299f1b867e4daab6b07d3c5b7b2e2e630b016a31dcd6866518186432b355a5c355b1a61f6ad0645be8349f72fa303","ssdeep":"","tlshash":"fef0a34eb81dc7b35ad79c48521d15041a2d068a273025d4637f313c6611feed20ff18","size":447,"data":"","first_seen":"2026-07-17T15:26:11.047156Z","last_seen":"2026-07-17T15:26:11.047156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"b556c2c0a4c814573ca9bc8ae47f2649","sha1":"88eb118ebbd82aac991ed0ee380fae4e56155678","sha256":"99b14518c3784b550ef4ca7d178036e6379a7787050b0d4e2e53a02152df7ca7","sha512":"78533481b004fc6dc82e506a5e7401e5b2d632248f95886aa7ed55747a7b65fbd859665374f6d59e6b1b38c6b320d88eddff58486b84e203d66a461782793875","ssdeep":"","tlshash":"41c08ceab0d73d006602642110afb8e8a0384027708c5b439cd4d8882eb30b08233fa8","size":151,"data":"","first_seen":"2025-06-05T02:32:06.52036Z","last_seen":"2026-07-17T15:26:11.105312Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-28T19:32:04.78001Z","times_seen":504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-54d16e6f.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d722d7d59b4a61c1f835f8a4f775911","sha1":"d93f3de091f1359acb420eb5dc3155f3b7718ee0","sha256":"18152be71d02f36d3466224daaeaf6ea8f2070da8f6a052ee6a08f43b78f9c03","sha512":"79cdb6d1743187f77dac8f912fef0062544f9e6f68ef499a04c94c5f292e75dcc74429fcd7211b3540b4c7b15fe82b7269835413bd6b17344cefe5568a81f38b","ssdeep":"768:M6JHRWe89gTaajnOZ9HP9RZR6lqu929ja3V5AZTjQCc/5ZXIUrx1vbjudv+c1koH:Diajn29vnE929jAgjayvJPyEwLQMBa","tlshash":"e673e75b8b060f7f7f7c0c9a2b1a181224f219511ecfd1abdd4e1da917b98c9328da71","size":77130,"data":"","first_seen":"2026-07-17T15:26:11.011338Z","last_seen":"2026-07-17T15:26:11.011338Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-28T19:32:04.784298Z","times_seen":1389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-106f0101.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b149b67f1d9fa5e5ce4fadc48a4c9733","sha1":"3e82b5388d0776fe2f2b5a3aaff64a884e1a5a28","sha256":"363d220af704f31b9ddbd4524f7f59c53aac953bc27ae540c471970c104d2649","sha512":"45e420cd8e1c99a42e8a024372469ea4061e140865f92ac47424722531a520dc18a826e2f45221420abf180f0bbab53a2edb2e37a66550d316899b4ffb4ed0f8","ssdeep":"","tlshash":"2411d01b550f8af317b11980d3262d42bf0a278a6510d2c671947e3db66388bc35eba8","size":914,"data":"","first_seen":"2026-07-17T15:26:11.083024Z","last_seen":"2026-07-17T15:26:11.083024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-577a081d.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"95c27c964b39a632c6ca540a69efb41d","sha1":"624f423949bf1432dec07273a8a0a5aad7806ffc","sha256":"46e6539e793609b00d37c65a26c67331a3cf03d7c657613910834dc2fb03cfd8","sha512":"80aa2b2cf7ee4540c3384251c8a15e8cbd67929b72c1fb8cc88df2db5fabf85144d6b21ab3c37926fbbd4b0cf88de19d3dc079513f237a75f0df520c57cd2d56","ssdeep":"","tlshash":"bff06208d92bb7fbc52d4c08911914841b2c2fc8226447c6f5aa3c24b740875c45cb04","size":627,"data":"","first_seen":"2026-07-17T15:26:11.043377Z","last_seen":"2026-07-17T15:26:11.043377Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-3977436f.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91516761417bbeebe72bda43355f0142","sha1":"5c1b6aa2b67760be0197d79425afbdf9c1b9c980","sha256":"2f1483391c9c0954295ac6a57bae045df5e326bd92fef0b5d04b358b4cd84150","sha512":"d33334865ac5e0d3df281cc3e93276fabdd725c555039bf789a4f07082592142fae9114d4aae33024ba97b265f54a5f78f9469d94d4b6040d6482081d3298faa","ssdeep":"768:dskhKzcO+tj6tvvINJFRkMXt+smO4yTw2zc4wZki86MqbXHd7+IP2wsrWdOgYg4r:djc1IJqDzZgqBRdQMCl7ob4gmxU8Rt","tlshash":"3a330911f6024e35d2fb50a418a9080177093f95e05a85f7f6fc6a9f0fd6da8533ab2b","size":50412,"data":"","first_seen":"2026-07-17T15:26:11.024983Z","last_seen":"2026-07-17T15:26:11.024983Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/charting_library/charting_library.min.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-29T22:52:22.712247Z","times_seen":1299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:32:04.785689Z","times_seen":667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/#/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-08-01T11:42:40.692207Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"barrick1.com/assets/index-fea07e0c.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.612Z","timestamp":1784301933612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-fea07e0c.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 298\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-12a\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298,"size_decoded":803,"mime_type":"text/css","magic":"ASCII text","md5":"4c06c4486b37d4ac4a5cf0985f608e0f","sha1":"76d8af45bc8de64fa06af912fa1b13f6126c844f","sha256":"fea07e0c929e1c8467e65c8b1ce8339ff0444d793e2f94f4ab2fc7274b926f39","sha512":"c41c16b25b31838fe279626da242c478c27c01b7dd1b60498e658e78686709a2eaf984b62d3248d97b2aaf4c60430e328e5406d7d7a7b7187c724b9f1f57b3a0","ssdeep":"","tlshash":"bee0cdb1690a3d3c4d66faab3f6d8bc9c044e571e21659c44847405d88df18714f4658","first_seen":"2026-07-17T15:26:11.002542Z","last_seen":"2026-07-17T15:26:11.002542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/coin-logo/eth.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.627Z","timestamp":1784301934627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /coin-logo/eth.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3437,"size_decoded":3814,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"174b0414fece541456d82f84a296e380","sha1":"b5705bc9d5e6c5d7f70e9a1a2773f7211f474657","sha256":"99bf2102cc13a51bb226f931b8d0fa4c5b3ca9dc4179167e89d7ee3f677c3fdb","sha512":"6a5fb1f896da4d1bda7474e19880294be83017a5da5cd39113adfeb5032cb9b7566e706845209e4312408a99b7305b27a84748637bed44aa2622246bea0bda94","ssdeep":"","tlshash":"a5615d8d039107bec5d46349519fd6698c278705862f4fe84b67c8fc0e99dccc4c6b59","first_seen":"2024-12-25T23:55:17.402619Z","last_seen":"2026-07-31T11:09:01.23356Z","times_seen":87,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/coin-logo/avax.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.636Z","timestamp":1784301934636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /coin-logo/avax.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1110,"size_decoded":1487,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"155f85dfe1fe971302126e81ecbeeda0","sha1":"a41ab8f31d2461f114a1a0625ab6a9520c7f90fb","sha256":"b15f065d7ef77728658b464df170ed55c4592b33fbd5114a6c9ba6959c4fc9ff","sha512":"c6e452c6fe1d358a72107c34475ddf3de212e4bc2ef539bedcb655643313154b68ede92cc37c68e9a2c55adf219821059bfdf9a67f33572c49687f30dd8b34e9","ssdeep":"","tlshash":"2711ecd5b3cacee484b9380fd583059d0d98454bd1304bdc54bd5336d5914cc1a07f67","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-31T03:02:34.020457Z","times_seen":180,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/resource/fonts/DINOT-Medium.otf","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.642Z","timestamp":1784301934642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://barrick1.com/assets/index-735910fd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":73551,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-30T19:44:59.551352Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-8391cbb6.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.297Z","timestamp":1784301933297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-8391cbb6.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 821\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-335\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":821,"size_decoded":1340,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (821), with no line terminators","md5":"50a931dd63c75ed0e11487a980f0d3da","sha1":"0fa8e6f8954ee9864f8f2763db4b84fe8a7f4873","sha256":"b7c0d938e6454ca5122194eb8a531f2ce6c845223ae71db866cf2cab3d7731bb","sha512":"555b33e512cb7293f7711a9992add25251dec2fe1dbc9e3dc3b8a44ea5df4451e79f7ebfda4f2946ff8a57fbc90335e978c7fbe14fba07cb58134d5f6d482079","ssdeep":"","tlshash":"28011eb074ae4bbb8f569c18a11c084142980e8dda30a4c0e5bf017857e4862e62eb2c","first_seen":"2026-07-17T15:26:11.006584Z","last_seen":"2026-07-17T15:26:11.006584Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-65894781.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.304Z","timestamp":1784301933304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-65894781.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-1951\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6481,"size_decoded":2284,"mime_type":"text/css","magic":"ASCII text, with very long lines (6480)","md5":"f608e2646767555861249fc96b30e7a3","sha1":"397268e6f7a89878378fe787ef0b6399ba60d6ea","sha256":"6589478110da109fc7a89fad48906f68a0b0d8164e75216fa029a156be6dbe27","sha512":"a969bad0b7a0d211fbcfc55d835836e4da6f3dc512104ebf031a7aed577bc8b7bddf19dfa15efbff61ab962b69ef3eee1dcd5e9da22fdba326b86b755220b889","ssdeep":"96:VbcOlytN/EuLDVJVYAkXXQHQ/iTLRjXDuIueKPOrBiEHvxZiCrEb/ER8:VbHMtdEuLyAGQxRD9WOFiEHvxsCiMR8","tlshash":"bbd19728fa40162cf433de877eb49a0de509e561f0931685b14f74964e4baef2cbe711","first_seen":"2026-07-17T15:26:11.007691Z","last_seen":"2026-07-17T15:26:11.007691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":477,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/privacyPolicy-572462b5.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.634Z","timestamp":1784301933634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /privacyPolicy-572462b5.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-308\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":1295,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (776), with no line terminators","md5":"10a088c8b69b011d05d24db2143b672b","sha1":"0941c7b70df35ed4fb112e92b96482a2c22c7b19","sha256":"beb81a408c917ffe6efd8f150ab38f45752bea101d24f682f766e022f6951f50","sha512":"4ac6cae68f549c2adda1c1093427ac18615f56ea2cd8099c54da0bfbdff763a4df06b2862b4691c4af6b35442f078fe6171711feeb17cc1235bddbe2bbb7f27c","ssdeep":"","tlshash":"fb01dc1fd886c7fa92238ce8d22584a25a7b56673689c1d0c6cf4e129bb58d1e50f728","first_seen":"2026-07-17T15:26:11.008805Z","last_seen":"2026-07-17T15:26:11.008805Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/resource/images/svg/light/noyet.svg?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.831Z","timestamp":1784301933831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /resource/images/svg/light/noyet.svg?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16655,"size_decoded":12686,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71b246997de6e88c2a4b933fb0a52cc4","sha1":"600e8a1d3faf072e527d7b669735a42af3329e1b","sha256":"51d24c53291f23934a6cca8836df3ced319d0a08485e447b2eeb40177e2623c1","sha512":"c126c1ab66c307fa4cf26736e00f5f4c59803c24eb8862c1789b5d7841f7ad0bd26b9d644eda04ad029b5b4f450387dcea10db77d42f3d7628b4f05bdb3015f1","ssdeep":"384:dgGW0qoU56j8qIm2w3b1pzhN7Slagaz3E3MFdwZIx359pGLCNaXYfJCmat:ljqC8qH2wL3Om3lFeIR59pHU0JCzt","tlshash":"2e72c0a80ba55e3067f9e26d921a28efcb94f167c063681bd622735235c20f3176673d","first_seen":"2025-08-13T22:50:23.246756Z","last_seen":"2026-07-23T13:42:44.949621Z","times_seen":18,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/coin-logo/trx.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.638Z","timestamp":1784301934638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /coin-logo/trx.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6884,"size_decoded":7261,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"4485ad0ffccf92c98a17fbc03505699a","sha1":"491829698bcdfef16a76dbd51179a9407eb3b15d","sha256":"91329e8a180b0fc75f4b8b4cd252a64e4f13f33edf4aa6664fbde442cedff001","sha512":"1596e5a7cc7c103f73df1a61fd50c377fbeb4b0b71c8d6aabe7d0d021f7cdfd96679f33352527d74688cc2f2b5f6a1488f46b21e3d2d7d2f578a79f6f8e64ffe","ssdeep":"192:bya20oqaVgVwA5+c+Eq3IHUUDrHph1LbpwxS9wgF:byGoje6ol+xadLbbRF","tlshash":"62e18f13d15e5e08c6cf21308773564b6facc5307e0eb2c12f76a6514d2ba809fa132e","first_seen":"2025-08-31T01:19:13.315017Z","last_seen":"2026-07-30T21:34:04.890573Z","times_seen":41,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":717,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-54d16e6f.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:31.842Z","timestamp":1784301931842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-54d16e6f.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-12d4a\"\r\nexpires: Sat, 18 Jul 2026 03:25:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77130,"size_decoded":20130,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"7d722d7d59b4a61c1f835f8a4f775911","sha1":"d93f3de091f1359acb420eb5dc3155f3b7718ee0","sha256":"18152be71d02f36d3466224daaeaf6ea8f2070da8f6a052ee6a08f43b78f9c03","sha512":"79cdb6d1743187f77dac8f912fef0062544f9e6f68ef499a04c94c5f292e75dcc74429fcd7211b3540b4c7b15fe82b7269835413bd6b17344cefe5568a81f38b","ssdeep":"768:M6JHRWe89gTaajnOZ9HP9RZR6lqu929ja3V5AZTjQCc/5ZXIUrx1vbjudv+c1koH:Diajn29vnE929jAgjayvJPyEwLQMBa","tlshash":"e673e75b8b060f7f7f7c0c9a2b1a181224f219511ecfd1abdd4e1da917b98c9328da71","first_seen":"2026-07-17T15:26:11.011338Z","last_seen":"2026-07-17T15:26:11.011338Z","times_seen":1,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-793d9126.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.282Z","timestamp":1784301933282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-793d9126.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-3e87\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16007,"size_decoded":5631,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (15975), with no line terminators","md5":"936e8548d1a1740fe6240ce493e74794","sha1":"8941141bd33bc1253b5d996adaef88cf05ae2ecb","sha256":"9482608584c68e1adc2e65c22d02b65f57f384962a09c93a3247cafcae1bbe7c","sha512":"61ec3422d3089e63ba11b65e2621859ea5b0dd03b5dd96eb18284aaf01a9f4161b718ac23a19424fb7e20ca186176134a5e3a7850070814c28ca93b7af4017e0","ssdeep":"384:Q4SCaBm1PR1T8Gtf+lZDeMGA3+yInKK+9CI:QyahSVyIe9CI","tlshash":"9372e801f78d493ed5b3d59510840060720d1feea91e04e279fd2a766ba7cf0be5b728","first_seen":"2026-07-17T15:26:11.012798Z","last_seen":"2026-07-17T15:26:11.012798Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-47952458.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.296Z","timestamp":1784301933296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-47952458.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 458\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-1ca\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":458,"size_decoded":963,"mime_type":"text/css","magic":"ASCII text, with very long lines (457)","md5":"2739b644f72f97b53ec468f27ea77c6e","sha1":"f1284a230db7aca9218f57c6a7f7da965c048ed5","sha256":"4795245841f5b1a7fdee549319a47331e467aec25f733b996dee1ae194b1529d","sha512":"f74054455aab414043930a468e033f190700c255d4f5ac57cadda7785dd4b468928b6128804cc90dbe8754c43ba55c5ae3489fe25b2aafa7e6fbfe4bb54af0b7","ssdeep":"","tlshash":"39f08955f2845031bc5be95d7e19e6bfd2e4ad938a400f54e72af2a003c3be60215054","first_seen":"2026-07-17T15:26:11.013781Z","last_seen":"2026-07-17T15:26:11.013781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/currencyItem-3e9c4706.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.311Z","timestamp":1784301933311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/currencyItem-3e9c4706.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-6d6\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":1015,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"411a096748c779caffb0c2c2f149309f","sha1":"063f8ec64ecb25e3699e78a2e8f704fa92af8476","sha256":"3e9c470615876a61e66edb2b3fc528eed2e5e599b3a9b3d94af45d241f3785ef","sha512":"2250d653cabc9aeb7e914c60dc1716c06bdc76d6a78f94aa2a93b91ba613950bced0be2325e26547014c58a0c1566ee91a8b3864f90a3602e81f2c1d9cef1008","ssdeep":"","tlshash":"dd31ad4463590774e936c587beb822d480197ba1540756d9eccb86371ccfa930e70dae","first_seen":"2026-07-17T15:26:11.014741Z","last_seen":"2026-07-17T15:26:11.014741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-8a1d4979.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.630Z","timestamp":1784301933630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-8a1d4979.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 440\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-1b8\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":440,"size_decoded":945,"mime_type":"text/css","magic":"ASCII text, with very long lines (439)","md5":"22730e7304c001f4e48c22d50440186a","sha1":"6a54fdb125e60cc30708af13efa79b971f0de5d8","sha256":"8a1d4979e2087eb7065df4224c9d03bcbb24ebae53603aa373395f2a8c017599","sha512":"08cef33490cf450d49d54214f84961c4f5adfc9e115391a7bbe33313272ca85c6d971c304c8464b36c9672e3504aea33ed717d4083a5d993b99d370893627732","ssdeep":"","tlshash":"6ff05c89f16521315873e7dabf80550ce5505b9ae6c3ded1d943444a9cd7df33a10325","first_seen":"2026-07-17T15:26:11.015706Z","last_seen":"2026-07-17T15:26:11.015706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/profile/upload/2026/07/03/360_20260703224108A001.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.596Z","timestamp":1784301934596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /profile/upload/2026/07/03/360_20260703224108A001.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Fri, 03 Jul 2026 14:41:08 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":360976,"size_decoded":361461,"mime_type":"image/png","magic":"PNG image data, 750 x 360, 8-bit/color RGB, non-interlaced","md5":"62bc2f1785bcf6e8566a0fe6b5a3ee23","sha1":"476a5d8734711dd02616d732f9345215243ec57b","sha256":"1619ee704a45cfe43efdb6f8f5a55b9582b386ba35edaf078a6d678325dd7913","sha512":"8998e3ea020bc5a910f726cea0616e076832a011e565605b50020189f5e9f5114e04469b5bf7374b104da6c853d39f21dd4a46c80bfb949b121fb7cc1c6af2cc","ssdeep":"6144:4ooF0cSaPMpgTX19bcwUuom8DF2UcUps/KlcnplDZaQV6VsD+Os3iPg:4ooUd4zYwUY8pQJplDZaQV9+DYg","tlshash":"e6742374c949e962f70a9d94c6882c5cd28c84ef8fc6267415804e2a6fbd4c2b8d56fb","first_seen":"2026-07-17T15:26:11.016762Z","last_seen":"2026-07-17T15:26:11.016762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/coin-logo/ltc.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.640Z","timestamp":1784301934640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /coin-logo/ltc.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1660,"size_decoded":2002,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"95507ffd15fb458032339c7dc775ed70","sha1":"e374f127ccd850868577125ddda835210f9f9c12","sha256":"7160750bcbc115ac8a3229bc1120fb59e96a737d607a57b42fa8e2b092a14159","sha512":"6fe799554171ee690f22ad0c86752f8ee12826ca378e15a0531b50d1f84458805ca6abc9ff8684bd62171afda6ed546ed21ae7dfb6689de65a248351fc1f3a58","ssdeep":"","tlshash":"82311a099a662da282350f2ae84c6128cd012340cd0123d7fbbdfc12d2e81c1503cea0","first_seen":"2025-03-09T08:32:31.736669Z","last_seen":"2026-07-30T21:34:04.942489Z","times_seen":67,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":964,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-f9e3d309.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.627Z","timestamp":1784301933627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-f9e3d309.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-532\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1330,"size_decoded":1230,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1330), with no line terminators","md5":"27a250e54b30e24ad71c61fe422f727f","sha1":"0ad0970c8edb9e7d165e10bdfb19de4efeb6d071","sha256":"ec36ef0b540534b898b4962b5ca5b22a6f047b7ddf177ebe01fba2710f4f8542","sha512":"f13a6ddc2354b1e854ff65cdc0a045b0e2ef8b1088fef610d34438facc4ab5313ac24f85148ea4415242082e9deca66552ffa3db88c1d94dd5b1b9d851f9c499","ssdeep":"","tlshash":"4f210107fd56c776e2238ca0d20d185082681fabba98d4d5e1df89560ba3cf0d60eb25","first_seen":"2026-07-17T15:26:11.019035Z","last_seen":"2026-07-17T15:26:11.019035Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/vendor-734ebae4.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:31.846Z","timestamp":1784301931846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /vendor-734ebae4.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-cf975\"\r\nexpires: Sat, 18 Jul 2026 03:25:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":850293,"size_decoded":256073,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"12178a3cc95fd05a10b21b29a05d7034","sha1":"17863ddcb6e655debc819ac7e17e900ef37284c1","sha256":"91bdd20d2ef52a660d6401a2104af3925d82c50a61176bede80d64e6c715c619","sha512":"80f1cd3c6fba67765a6c152f410b93759338e92abe3234f7d90d951dd4a1767d168c3a72d00866743e9681420a9b9119c9c74cf26afb20c489ca701f376519d7","ssdeep":"12288:bMELs0hhCX0dF/J2SdpncFFCBLglFFxDsM:oELs0hhxnB5bncFFOgDsM","tlshash":"38053bb47792b0e907aa60d640771803ee7c6e57305ec0a8f15d98eb3d74a4ad673b38","first_seen":"2026-07-17T15:26:11.019981Z","last_seen":"2026-07-17T15:26:11.019981Z","times_seen":1,"resource_available":true,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":746,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/vant-cacbd11f.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:31.857Z","timestamp":1784301931857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/vant-cacbd11f.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-39122\"\r\nexpires: Sat, 18 Jul 2026 03:25:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":233762,"size_decoded":80115,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"f30279da36f338e58227efb0c998281e","sha1":"309a2de7478830f24f2eedf57c67c7d61afe6433","sha256":"cacbd11f3c20daad6daafe4acf3f5e36c794415b9846e710f3cdd716a129d306","sha512":"5c7e2b4b7438204a418a7104e937e669575f4257428d608838d28d9cc0fc1640dbaab104d9dd8c166ac5063c27976a141513bb1933bd0673d48dd6001105d66a","ssdeep":"1536:+CwsBlDOFIxuVoxHtIyNBi3MFYaQj7FCwsBlDOFIxuVoxieN2BBFVAViIH2b1AhV:+ClDsIxuVSHnNIClDsIxuVSWmWcV","tlshash":"4734d795e69091bcaf2bf175ab8b56dcf23cf570ed01daa4f10091580ec7bf50623a1a","first_seen":"2026-07-17T15:26:11.020986Z","last_seen":"2026-07-17T15:26:11.020986Z","times_seen":1,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-471eedeb.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.292Z","timestamp":1784301933292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-471eedeb.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 45\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-2d\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45,"size_decoded":548,"mime_type":"text/css","magic":"ASCII text","md5":"fbe8ff72a83e44228636f0d26d50691e","sha1":"abaacc958f0ac73dca65af59673f8dfacfa6a794","sha256":"471eedeb56f583d5d72b49653c9cb6f427c069d99f70d8c82d2e707513564cdc","sha512":"c91852c65345e36ba8d827c7a9cbc3da4b5dfe027a3dfbadccfe4673159a5e74fa2e69e2d6d382f80d2b1b8625b2c90ebd292afca9c7cedce08c9e4477d7c791","ssdeep":"","tlshash":"b4900221121521194072500a6159c9942b1571051f1506435110a821193a84c3c10151","first_seen":"2026-07-17T15:26:11.021966Z","last_seen":"2026-07-17T15:26:11.021966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-1294203f.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.299Z","timestamp":1784301933299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-1294203f.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 109\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-6d\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109,"size_decoded":613,"mime_type":"text/css","magic":"ASCII text","md5":"8c03d0e526910c8e80c1d8d840ca45f1","sha1":"959fe5a139ab962c0282b561949a5da2824298a1","sha256":"1294203f86896575b30a68b18215895be4624e2a9b4561cea62d80767eddbc1d","sha512":"edd1cf17602fbf0d402a55cbbb55edc71ef66a5ca62697b802707986b1af4dc9ca4f30c35bbeeb43d19b0073636b381d3ac05a61723bf3518bf5f628f6f3f3f8","ssdeep":"","tlshash":"2fb09248565905201972f6927c850f96914936129993b8926c035ea1ecab2af5b9088d","first_seen":"2026-07-09T07:06:56.77764Z","last_seen":"2026-07-19T06:12:44.704322Z","times_seen":6,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-c82fb7fb.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.603Z","timestamp":1784301933603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-c82fb7fb.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-1f77\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8055,"size_decoded":3449,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8055), with no line terminators","md5":"8ec37cc7ef5f2a2992e1b55b6a4d36e3","sha1":"99ce2584da928b5f4533d6d30bebaabf9a7df005","sha256":"27ba3b8723ef337a7a31804f3e4851036bec64e46d1a882ffbe4216b26172e00","sha512":"363c5cfafd17bdb687f03e4f7a5f70ec926d711138b09679e44620520d0beb7e565df249b807b9c6d02fd82da358aee33a53136c87f452890b8f9f9281325134","ssdeep":"192:lrNh0n6G+mTzuzGC/5smOnQiS9/48gbEy6T5XaSy+PkcCSpobwPY4pU5ypZMXwYX:rhGh+mTzuzGC/NeEy6T4Sy+sDSGkQ4pQ","tlshash":"59f18345f4438a3ce9b2a88010544400b25dbfda604d88e7bafd2dc27756df9fb4eb19","first_seen":"2026-07-17T15:26:11.024061Z","last_seen":"2026-07-17T15:26:11.024061Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-3977436f.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.607Z","timestamp":1784301933607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-3977436f.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-c4ec\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50412,"size_decoded":16111,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (50402), with no line terminators","md5":"91516761417bbeebe72bda43355f0142","sha1":"5c1b6aa2b67760be0197d79425afbdf9c1b9c980","sha256":"2f1483391c9c0954295ac6a57bae045df5e326bd92fef0b5d04b358b4cd84150","sha512":"d33334865ac5e0d3df281cc3e93276fabdd725c555039bf789a4f07082592142fae9114d4aae33024ba97b265f54a5f78f9469d94d4b6040d6482081d3298faa","ssdeep":"768:dskhKzcO+tj6tvvINJFRkMXt+smO4yTw2zc4wZki86MqbXHd7+IP2wsrWdOgYg4r:djc1IJqDzZgqBRdQMCl7ob4gmxU8Rt","tlshash":"3a330911f6024e35d2fb50a418a9080177093f95e05a85f7f6fc6a9f0fd6da8533ab2b","first_seen":"2026-07-17T15:26:11.024983Z","last_seen":"2026-07-17T15:26:11.024983Z","times_seen":1,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/public-c4c40539.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.614Z","timestamp":1784301933614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /public-c4c40539.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-6a0\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1696,"size_decoded":1296,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1696), with no line terminators","md5":"bce7dc807e2552f21cedd589871264aa","sha1":"6aa509e110ed96f8f89436d78a0b29fea791c17f","sha256":"77a9034a1982c84b87e8c22c4f30e434e99c43a0604a01c45ed7ae5ed7ec097b","sha512":"67bfdf1c470d57f703a503360bdfd32f8c895804faafbebcdfb315931a60ba99c346471ceba800597307b1b0eaa7a733ea696bec5f0e174ee587613462f88003","ssdeep":"","tlshash":"10313671fc4ed6b69ad78cb490441c040a4d9f5de73912d4eddb303663dd5a4660eb20","first_seen":"2026-07-17T15:26:11.025946Z","last_seen":"2026-07-17T15:26:11.025946Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/termsOfuse-40106d72.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.631Z","timestamp":1784301933631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /termsOfuse-40106d72.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 773\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-305\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":773,"size_decoded":1292,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (773), with no line terminators","md5":"8fa90cf7d5c4b8025ab53ba3de14b0ea","sha1":"6897f9db5b9ffd8d4eed3ba930fa900b91b20aaf","sha256":"03b8af117bd3e3ab88b0ad6ea6d37d3249d17088762c63cb416c831f9e0cd4f5","sha512":"be152432952e15c45ca260d1c1d27b1a2c7a5fee5d5b3c8113d07ebf954bbac74d4ddcb521ee832458ac2d251168f5b8c5fbf00c48872d9f2456d3c99902a8db","ssdeep":"","tlshash":"31012c1bd806c7f2c2068ce8c22684720a3f0a633a89d0d0c1df8e026bf58e0d10f328","first_seen":"2026-07-17T15:26:11.026964Z","last_seen":"2026-07-17T15:26:11.026964Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/platform/dev/config.js?1784301933570","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.575Z","timestamp":1784301933575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /platform/dev/config.js?1784301933570 HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\netag: \"65424d1a-18a\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394,"size_decoded":913,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-28T19:32:04.748559Z","times_seen":509,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/coin-logo/xrp.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.631Z","timestamp":1784301934631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /coin-logo/xrp.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2393,"size_decoded":2690,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"2308acc5cb079e77004f6ae91cc7b051","sha1":"8f720c008e92589aecad00f9338e63dff7dba67b","sha256":"0875539d872ac02066c129360ade039e835bd7b9b2320f3a4d24ed4ef72c3051","sha512":"b18ef5a99aacedf38a3cfa584a8451df96097682fa4dbd5f54fb2ec4011811e3e800474dd5306d64f588f92e4210be0568725038b8664863f45dba12ba3d4ddd","ssdeep":"","tlshash":"f6410ba2c3b63a51b428f219ca4b044d150abeae3534f074714e365fe67d3637aa9051","first_seen":"2025-03-09T08:32:31.721939Z","last_seen":"2026-07-30T21:34:04.825552Z","times_seen":46,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T15:25:30.561Z","timestamp":1784301930561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:31 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-15dc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5596,"size_decoded":2304,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1843), with CRLF, LF line terminators","md5":"ff13e6fe7c3e097a5bd4c5afdc5d2c0f","sha1":"42f18e86030f9529337c03071a660449881a6a43","sha256":"1a1b7ef0977f800cf85eeb4de4662a23a8b5600c6dc2045de026d316db82554c","sha512":"0d1dd2f807f799459c4d9494a1b2ff04da1b4fcd03e963ffcfc086f88a511baf14e2b512d2ec3e484dba7c5a9f62e781c901a3ad1731622aa180a0dd45593b4a","ssdeep":"96:+r82RZ3uC6i5M5PMSF45LJfXEp/IpHbg6kczbzt/v95HmUsGKAiowGV:+FD64fXEhIRbg3cTNnfD3bV","tlshash":"98b1867704a448062332423aafc7b51ceb32a19385595d14b88c59ae8fe7fd3c1d7369","first_seen":"2026-07-17T15:26:11.028954Z","last_seen":"2026-07-17T15:26:11.028954Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1049,"timings":{"blocked":0,"dns":47,"connect":250,"send":0,"wait":249,"receive":0,"ssl":503},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-735910fd.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:31.860Z","timestamp":1784301931860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-735910fd.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-4a1f\"\r\nexpires: Sat, 18 Jul 2026 03:25:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18975,"size_decoded":4903,"mime_type":"text/css","magic":"ASCII text, with very long lines (18974)","md5":"db75c1caf0bf7ea3c2324f3ad1147328","sha1":"de3559c68b3b38367d62085230dbbc9ba819e00c","sha256":"735910fd7b4406a933217dd3e30a29b3fa948d39f02cba15306c8a6fcc541011","sha512":"08568cfec600949a3664e28feeeb4b66e96b4ffee814f3721bbe0f9234752cf2d8ca774bff05fa476138b33b4cdb30f84b9cac79ab0807e94e907542feab0c0e","ssdeep":"192:yiOVdNA3ymit1/gxQVP37GeFWNYiszn/xZLf7c+FWOY2oEn3WI4vEMgIBULn0t:nOVmBUgxQLFaMzn/xZ/FtAEnmJcMgIae","tlshash":"af829451f204143768278d5c28e8f504e722f6c1c7091becfdd861a8b6eed44af796ba","first_seen":"2026-07-17T15:26:11.029952Z","last_seen":"2026-07-17T15:26:11.029952Z","times_seen":1,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":735,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/collectItem-ad1638e5.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.312Z","timestamp":1784301933312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /collectItem-ad1638e5.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-44e\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1102,"size_decoded":1078,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1102), with no line terminators","md5":"3018f6ba62af2eaa516e2eb1a6be5ef0","sha1":"2b7f6fad4d62e0fa0f7508972e1b10238aaafa7f","sha256":"caa1cbb2a48882cb2c22c6ac3a02983c439affd36f282be294af317819a2a88f","sha512":"78554f198d180457100bbee936b8a9916c263888fd2805f0a80453e75af90580557729d1875c5f830478b8ef9e918d9d47af1e0451b1839c5d788b2fe868954d","ssdeep":"","tlshash":"9e11fcc2dc03cf71e3ee749b80ac08b096447fc878009089b6aa526eb7029fdd628716","first_seen":"2026-07-17T15:26:11.031057Z","last_seen":"2026-07-17T15:26:11.031057Z","times_seen":1,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-08d82fe6.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.625Z","timestamp":1784301933625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-08d82fe6.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-10c6\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4294,"size_decoded":1871,"mime_type":"text/css","magic":"ASCII text, with very long lines (4293)","md5":"28ff041122c833dc6cf171d34dca6bb2","sha1":"b7775705bc5310d4aa52b9944dc951339e1e4276","sha256":"08d82fe69e29bf6b5d533aadbe9dfd3fc14b7cbe5d0ef3300d7cf81b2d2f3428","sha512":"c9389454d6c9076d298f3dfdc87d89f1fd1717db889094506d150f219bf506e3f2b2922fd33d58aa338629b91afe82254873a79508dfd53b1c565783286d387b","ssdeep":"96:qRoYouEqoXUo0oPo+ojoAoVHoVo3oV0UR2m3CqZFc:exn6U1KD03KUG5z/MFc","tlshash":"9d915425b7805026f833c7e57a709a8df0167e13d2879af6c55b7c311acf16b3839a68","first_seen":"2026-07-17T15:26:11.031953Z","last_seen":"2026-07-17T15:26:11.031953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/coin-logo/sol.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.629Z","timestamp":1784301934629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /coin-logo/sol.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4222,"size_decoded":4596,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0bf2916a9c679e99dc9060ee1cc2dde5","sha1":"7b54d567258f440651c4a41d2f955c9c412451bd","sha256":"b9296ce1118a6d150e57049190aeb4c024199e0787e0c6198c244230b8d704f5","sha512":"1749edaf7c45f50df246f209b5d26801f3ec20f449a82a9deff48b348c5fded272fc3cfdaec44eccf27ffb5225774a7ec0c6a564d7a0e558665411d5bc3c8675","ssdeep":"96:hvuOg3LKz5FT+ae8o5VngkGBh6WQZsrHzXIY4:yYdzinN6wCQY4","tlshash":"ed915dd8f39d7610a3c05d3590aa3ff78ec6818c0c258888f926f67c54ad4e11c85e5a","first_seen":"2025-09-08T14:29:09.791256Z","last_seen":"2026-07-31T11:09:01.251164Z","times_seen":46,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":725,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/coin-logo/btc.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.625Z","timestamp":1784301934625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /coin-logo/btc.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2589,"size_decoded":2930,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"8f8d12b8691a706a99e7544bd33527c2","sha1":"1ecd8325658f45911e28e94afb85f3aba3ea38c4","sha256":"8022fd53c251f18cb39cefede445f1c78a3b265989232f0bb46b9c4622e55a9e","sha512":"36abf50c637a730a26ceea1ab4e2c9d153274b5c1a03d273372f0b580eeed3267d08d4512326da520bd19b425288d72f0c2edc8abdbd3549b03612c639946021","ssdeep":"","tlshash":"a9513aa1c3955ea0445ad9910b83ea56263031dca284f7d6ee3024900f68b35b4d2b73","first_seen":"2023-04-13T08:11:26Z","last_seen":"2026-08-02T03:46:40.863816Z","times_seen":342,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/vant-e94ae821.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:31.849Z","timestamp":1784301931849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /vant-e94ae821.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-15877\"\r\nexpires: Sat, 18 Jul 2026 03:25:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88183,"size_decoded":31879,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65244), with no line terminators","md5":"947a1347422e54d55bca70df056cdb75","sha1":"64ba6668ba2045db12095188c8c329a11b633cee","sha256":"1cc5729362558f4983c1339c796c2d0cff7ed7ccc5af9f4cc191a1bcc40bf24e","sha512":"33999a9cca9ac63787ac320e3038363e3392366df922100983cea7794f7bf4a44b7a9f5b3948a82195381a3e196a8a470e0bcc0b1aab70e4717a481942798641","ssdeep":"1536:Os1qxoIW8J2C43ffoSLMfgKIqnpchp81hStG59BzJy2IhKN52J7wIH9UZgQQiJaj:vqx/W8J2C4noSLXZqnp2GhX59BzJpI8o","tlshash":"86831ad1f895f53497bb94d950aa0020a62d1b88b009c1f1f07e6d4a3ba9dd4b6faf1c","first_seen":"2026-07-17T15:26:11.034809Z","last_seen":"2026-07-17T15:26:11.034809Z","times_seen":1,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-00437303.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.307Z","timestamp":1784301933307,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-00437303.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 256\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-100\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":256,"size_decoded":761,"mime_type":"text/css","magic":"ASCII text","md5":"b13c29d0124ad9104cff693d081bc44f","sha1":"96325b539bede300f9212e68f390f0f1471c6272","sha256":"0043730338fd15d07168579fdf7f2868a1aa84bb64bb5822b6e741c832da7762","sha512":"3ae8a211eddb35a641179f78ed195694e9c18949a5323fd0c3c425379b3c9dce90d0305b6096c0fd6b03fb75cd9e4fd44677e1cf878e2ae39d8dd7940882d77b","ssdeep":"","tlshash":"a3d05b05a2557862247f48dc2800494d51513d627cc7aed3d553d45179db5b7b32031a","first_seen":"2026-07-06T16:35:34.046535Z","last_seen":"2026-07-23T13:42:44.848153Z","times_seen":10,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/platform/dev/logo_144.png?2.0.1783453117271","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:35.720Z","timestamp":1784301935720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1783453117271 HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 03 Jul 2026 14:45:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a47caf2-2ead\"\r\nexpires: Sun, 16 Aug 2026 15:25:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11949,"size_decoded":11575,"mime_type":"image/png","magic":"PNG image data, 750 x 320, 8-bit/color RGBA, non-interlaced","md5":"911fe3138970f11ec41b4c5881dbb092","sha1":"9c6c9743e3e13804da5a013600a56b87e3b8fa96","sha256":"a33653c8e0a2ac8639441fff54a8c52def9e0ed0443cae09c479613c4d51d6c6","sha512":"adaf3552a331e898655ac88d2797fc1270def3de66bc35f984b967d579aa4972d749449c4371e57bbf22b054f3798a993fd91dc0639a58a29a8d26994f773ba3","ssdeep":"192:jKGLnJhFsF3eXnetUgZLjfBTJe3C11nZEw5sIvI2SewRee2DQjy:jRs1YOLtMwZEw5sP22EQe","tlshash":"9532bf8aebaf47b0c7bb1e35e0406317fb22c8fdfe4943154ce6053b42a6025da79109","first_seen":"2026-07-17T15:26:11.036857Z","last_seen":"2026-07-17T15:26:11.036857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/utils-117de97f.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:31.844Z","timestamp":1784301931844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /utils-117de97f.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-1f4a5\"\r\nexpires: Sat, 18 Jul 2026 03:25:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128165,"size_decoded":46659,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65340), with no line terminators","md5":"e1ae97cb3368de21e63ab47a57b8b10a","sha1":"6f87bebcfcd5d4bc37114e902faa30592627064e","sha256":"9130cd0c7c3c12905d6b433f4b8dbdacb159ccb24bb0b6c2317e5ee06999af4d","sha512":"89a3ee2edd934758cf39cad5fe759b9e05e6a1dd82a8eaec375bbc38ac0d6d0d562c72dc67346dc77a6fc763371300b1140edd3ae06eabf4835b178493918872","ssdeep":"3072:z8mBsFt7pVHH2JiU2xlp9YCntldU2zl8IUY:z8mB0pIJiU2Dp9YAnat1Y","tlshash":"37c3c6c9b5d2f02153a360b4006f004bf23ead69b44f8594e265e8dabc7954ed2b7f2d","first_seen":"2026-07-17T15:26:11.037865Z","last_seen":"2026-07-17T15:26:11.037865Z","times_seen":1,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/platform/dev/favicon.ico?2.0.1783453117271","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:35.722Z","timestamp":1784301935722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1783453117271 HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:35 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 714084\r\nlast-modified: Sat, 21 Mar 2026 17:58:44 GMT\r\netag: \"69bedc54-ae564\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":714084,"size_decoded":714528,"mime_type":"image/x-icon","magic":"PNG image data, 2048 x 2048, 8-bit/color RGB, non-interlaced","md5":"5f85d966092db075d1cbc486c1e94a51","sha1":"6331ba38684b7a689adb57f6f7bf84bc1caa78d2","sha256":"8b60d3959878971c33eb922aecee90c27bf4b4f46b4ec39355659f7e00cc9599","sha512":"3d402952f84c13aa06a6a78523170cfc384bf5fc2fdba9cb1307ae754c3d18a5567e9c8d2851965463a06eda0b3866e85b881d54c70a69dfd940524e9416ab7b","ssdeep":"12288:UaodbI43poIbfOmxgCCH6/YBikth799UEWt9ALAI91dRPbROPUJ90Y4tPq2aht9F:UaodbI43poIbfOmxgCiTQ29UE0MXPIIL","tlshash":"f8e423a4d44fef71e05e127ab3c217b10be631b9c0260b223d25b6ea7e741e95e5c742","first_seen":"2026-07-17T15:26:11.03876Z","last_seen":"2026-07-17T15:26:11.03876Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1001,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":751,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/termsOfuse-6e4e8f77.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.632Z","timestamp":1784301933632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/termsOfuse-6e4e8f77.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 163\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-a3\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163,"size_decoded":667,"mime_type":"text/css","magic":"ASCII text","md5":"564a424774b15b9438065acbc05cd9c1","sha1":"40efe62d92cf95c73a1fb621ec97af18367a3aa5","sha256":"6e4e8f774eb6a8c7bf281dde6cea283d2736ba136ee409db7dba22445d806d35","sha512":"5a0f175ddba94bb2ccc802feedb7f622ac69e7d75ffa599a2d4ef7780d5de9efcd4ae3915b36620f6d3b661b09c6e6d917481240311d5f849dfa072ced97b116","ssdeep":"","tlshash":"c5c0c08e6103403a7608069d720bf08df8009c06c0002120c2a2e3102180ba31130304","first_seen":"2026-07-17T15:26:11.039723Z","last_seen":"2026-07-17T15:26:11.039723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/api/common/getCoinList","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.581Z","timestamp":1784301933581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://barrick1.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://barrick1.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":452,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T04:58:21.288715Z","times_seen":17667037,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":0,"dns":0,"connect":254,"send":0,"wait":241,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/public-9d1ad713.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.616Z","timestamp":1784301933616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/public-9d1ad713.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 824\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-338\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":824,"size_decoded":1329,"mime_type":"text/css","magic":"ASCII text, with very long lines (823)","md5":"ac9286fba871ddba3be4399ebfafcce7","sha1":"a055df7a89aa01a07e798d4959265c8b65f116a5","sha256":"9d1ad71360c112c0a0f63898edd9266d8196257be63540103d18467ede5ecffa","sha512":"b87c4a3d0acee87c8bfe0fdedf3b6f151327d45b34a43048b9d5c2260ca625d1296007bdaed2f0aab5e5aef57c1d4945ea9c88294c8f7cb8fcb92ea222a27639","ssdeep":"","tlshash":"4601eb39bd49a03cad2ed339ebc00becc12ab901b2426ef5fd2305a01ccb7d25170114","first_seen":"2026-07-17T15:26:11.041294Z","last_seen":"2026-07-17T15:26:11.041294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-174acf4e.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.622Z","timestamp":1784301933622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-174acf4e.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-89d\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2205,"size_decoded":1555,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2205), with no line terminators","md5":"1949a82b0f8d0cf11ac598ec14134b12","sha1":"aaa22909100037db84f86ad9323ed350b05e4948","sha256":"25b96097fb89da9151a55abfd634e1efb6e53ee50e5906d6c1e1b6d6568e9f89","sha512":"5ad472e9eb23c2fa082ddcc4cff716d60637c740a7d2997157cfa09712f7abf19c45c855162767cc732ec36a8dd92e7f98fe1b4c5bf5b0df2578f80ce0ff119f","ssdeep":"","tlshash":"f54147e4a959c936d6769cdac1700c3023ec1fddfa2915c4f5ff946533998d49209358","first_seen":"2026-07-17T15:26:11.042485Z","last_seen":"2026-07-17T15:26:11.042485Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-577a081d.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.609Z","timestamp":1784301933609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-577a081d.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 627\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-273\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":627,"size_decoded":1146,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (627), with no line terminators","md5":"95c27c964b39a632c6ca540a69efb41d","sha1":"624f423949bf1432dec07273a8a0a5aad7806ffc","sha256":"46e6539e793609b00d37c65a26c67331a3cf03d7c657613910834dc2fb03cfd8","sha512":"80aa2b2cf7ee4540c3384251c8a15e8cbd67929b72c1fb8cc88df2db5fabf85144d6b21ab3c37926fbbd4b0cf88de19d3dc079513f237a75f0df520c57cd2d56","ssdeep":"","tlshash":"bff06208d92bb7fbc52d4c08911914841b2c2fc8226447c6f5aa3c24b740875c45cb04","first_seen":"2026-07-17T15:26:11.043377Z","last_seen":"2026-07-17T15:26:11.043377Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-7f3af360.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.628Z","timestamp":1784301933628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-7f3af360.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 132\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-84\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":132,"size_decoded":650,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"16f46f4364d620d26396b260785e5689","sha1":"f4175b01f83e417c3adc87377764383d03c98fc1","sha256":"e46f7da8bbaf770154b9826ef43d81f5f8d23f6f0fa7a0c0cee409fe1a956430","sha512":"b9e2a6d502aed32d388193b5f08cf29dd24cd7894e4b12102200c7ccc1c63efcb1953574dc50c33e8e0b355d65c3328c8fbc76e4697b2171987c5f1c9773f902","ssdeep":"","tlshash":"bac02b8b8c230453c33c0c4543131d0cc82f8730834b46f4c004811380460d3409ef10","first_seen":"2026-07-17T15:26:11.044367Z","last_seen":"2026-07-17T15:26:11.044367Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/en-6551d504.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.279Z","timestamp":1784301933279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /en-6551d504.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-97a1\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38817,"size_decoded":12268,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (38797), with no line terminators","md5":"1899e1ede3c700682bd98e4590ec6222","sha1":"c086cff368c570a9d14ae86c2dab3064d3a944cb","sha256":"c2b1ddf0468d6bfb384551c80dc8e4ca7bea31cd63d367e82b89b6710cd3cf71","sha512":"4934587b8b625eebb7b77766f7156cb36811a5dcb3d35a99d908e3907472a15d22f9dcee8466640024870b5fb302d5a29d4144ea08c2f16ac7b4fc6af9b2f483","ssdeep":"768:KGtZcEw/o7rnOYhF4jnAMC/aAMFzrCPGaQwmQONfpk7aOzj3Sc:uponnOYHRAFzrCPfQczj3p","tlshash":"4003d7c97e19989a04f3537774ce2e6020f609c18255881f4fedcaf99392b676367b34","first_seen":"2026-07-17T15:26:11.045326Z","last_seen":"2026-07-17T15:26:11.045326Z","times_seen":1,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-aee241de.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.284Z","timestamp":1784301933284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-aee241de.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-1b69\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7017,"size_decoded":3283,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7017), with no line terminators","md5":"01712e6eb911b8438100cc08ea54cd99","sha1":"e578844619d1befc29360351407226b25ff5b1ae","sha256":"8d41605a2a7a9aaa6d1edee1d3b5d6371ece95dadad649562d70da4973397bf4","sha512":"47d0a3a59af5f1d5680df893af0dd76465a8283de4bb019eb075e1f90ca5ee975517f247395d4eccf228fddec7746c10ed14fe4b7f20fc5ddb5ecc75c1365080","ssdeep":"192:RnX6ihd9qMzn3h/LyO04FZJGY5Nhmbg888yv:wifsS3QO04FZJd7QbN8dv","tlshash":"78e1f741ec0987bd96a3478548ad1020166cb7e6f10c48e6fafd4d708b6aab0deeb741","first_seen":"2026-07-17T15:26:11.04632Z","last_seen":"2026-07-17T15:26:11.04632Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-cd0bcbe1.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.293Z","timestamp":1784301933293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-cd0bcbe1.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 447\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-1bf\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":447,"size_decoded":966,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (443), with no line terminators","md5":"ccc89b41d3adade957467afaa02072da","sha1":"96219293145aeec51b9b9a3ab338302cc677fb18","sha256":"dd7c6bd0759192351e996697df25110f463a9e89cbffa174fac72d87ca299749","sha512":"4a7da6c738c7d2a279ec9e6bef98dba4b04299f1b867e4daab6b07d3c5b7b2e2e630b016a31dcd6866518186432b355a5c355b1a61f6ad0645be8349f72fa303","ssdeep":"","tlshash":"fef0a34eb81dc7b35ad79c48521d15041a2d068a273025d4637f313c6611feed20ff18","first_seen":"2026-07-17T15:26:11.047156Z","last_seen":"2026-07-17T15:26:11.047156Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-da639d63.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.301Z","timestamp":1784301933301,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-da639d63.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 814\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-32e\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":814,"size_decoded":1333,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (814), with no line terminators","md5":"d598eaa0691f3efde172655b7ce545ae","sha1":"c86842ceeb38e91c1a03bd737f3ba3414716352e","sha256":"578d63326ab711aae61129792d28ebac97cec69936935aaa7024be8f20bf48c3","sha512":"5cb957f65f95d9a4f3cddca3d1666b86a1a86b196c01c07807a1ea93652948ce4f8410a3bf1197daa5ec6ffafc7dc833b353b623c31d12d3f4c6a4a15b35ec37","ssdeep":"","tlshash":"8e01c9f1fd1dceba3fa3499012953a4060090f9dfa0015e2988b7e291be2a50c6ce72c","first_seen":"2026-07-17T15:26:11.048017Z","last_seen":"2026-07-17T15:26:11.048017Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://webapi.barrick1.com/ws/dbdc6171-bf7b-4f4c-8260-f390af39a14f","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.317Z","timestamp":1784301933317,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /ws/dbdc6171-bf7b-4f4c-8260-f390af39a14f HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://barrick1.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DW3x1SN6xP2wU3sCceIBHA==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx\r\nDate: Fri, 17 Jul 2026 15:25:34 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://barrick1.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: vMMYEQ5+0mbqlsgaIjkKRjh+1es=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":442,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T04:58:21.288715Z","times_seen":17667037,"resource_available":true,"data":null}},"time_used":2258,"timings":{"blocked":-1,"dns":759,"connect":1000,"send":0,"wait":249,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-7d5749aa.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.606Z","timestamp":1784301933606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-7d5749aa.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-1398\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5016,"size_decoded":1643,"mime_type":"text/css","magic":"ASCII text, with very long lines (5015)","md5":"2f1b363a12555ed96488cad17e6b10ef","sha1":"809f94232ea6a3db181ea9b46ea70dd8ed5f6d22","sha256":"7d5749aa5a4e2bf5c7a84cd19978d43dd4fbc7d1dc61c56ec8d152194ccf46f7","sha512":"91760993be6cc96046297b0f16d93ee6328f06a567357bdff248f641a718da8fa847017af83dfc778ba31c7d4885614a5f3907fe0b1fe5e1fb9b7eae1ba647ab","ssdeep":"96:cw91E6OPxS1HhbnxexMliE59/HQvK7SnHjbnueuMU245td8DENDI2e9Hhf2u6dXu:cw9172xS1HhbnxexMliq/HQvK7SnHjbp","tlshash":"38a11089b3cd16316cbbd4cd3d64a79890807a5296439fd8fa63a2154ccfbe72e2120d","first_seen":"2026-07-17T15:26:11.048938Z","last_seen":"2026-07-17T15:26:11.048938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-10c9cfec.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.624Z","timestamp":1784301933624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-10c9cfec.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-447\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1095,"size_decoded":953,"mime_type":"text/css","magic":"ASCII text, with very long lines (1094)","md5":"a8e0b3b27a44c6d49597e3c5b5ff5759","sha1":"1d842ddb0d35dace485c2ecb1a138cc80a1d9530","sha256":"10c9cfec3c60c8f92be8638167d88aa8af3af1898e68d7b4ec672c45cef29989","sha512":"bc2fc3bcf7197e7156f478d4351772923378d48b39040bfd43c98aa7451e219058d82163e2ae3d67a202989f9aa60f3a331a36162fd153e3ae72e49c05cfded2","ssdeep":"","tlshash":"3011bb20261a6924a467f90fef544e0ee47c6f526207034ffa2bc4170debe9739912c0","first_seen":"2026-07-17T15:26:11.050094Z","last_seen":"2026-07-17T15:26:11.050094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.836Z","timestamp":1784301933836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://barrick1.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://barrick1.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":452,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T04:58:21.288715Z","times_seen":17667037,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":490,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/framework-b93179a4.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:31.855Z","timestamp":1784301931855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /framework-b93179a4.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-d793\"\r\nexpires: Sat, 18 Jul 2026 03:25:31 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55187,"size_decoded":19374,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (55187), with no line terminators","md5":"1a0391cc572bf9c9a6c2f7ddaa45a878","sha1":"c741d245dc226f8d18581ca83fd4c731846992cf","sha256":"1f39fbbc8a9176f637acf54e69927b431d6fd29f6d88745c4a758386c0443b74","sha512":"240e7708cd409dd0927fc3cbe38f5f99e416e7d5cc4d325fdd9dbe3dca0b70f6c78e1a18af24cc75c144541b943666b093edb784e0c720ee79982c972be32157","ssdeep":"768:ykXbWOWuPWsUEz/wvnDbikLGb2nYncZjeXU/JNuhADp4PH8GGXiVww+XVg/pTqHp:jdw9F+xBXcplAw0io7Ce+N","tlshash":"b34318d632d2706647ba45e260772142fb3d0b99344f88d4f16caa973d33d4e42abf29","first_seen":"2026-07-17T15:26:11.050985Z","last_seen":"2026-07-17T15:26:11.050985Z","times_seen":1,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":738,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-bc011be9.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.303Z","timestamp":1784301933303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-18d\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":902,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-29T22:52:22.70849Z","times_seen":1464,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-c1ce3a34.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.306Z","timestamp":1784301933306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-c1ce3a34.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 413\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-19d\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":413,"size_decoded":932,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (413), with no line terminators","md5":"f585f7eb7566919310bea80a98ea170d","sha1":"bbba7f0d1e15a72cec1c9df793e55ef75efdea6e","sha256":"4e6f2b5b441a180ac665277304144834cf6366bfe61a062118b9dd94a64e053d","sha512":"08429e815550744f0c6ddb88c9bc4d6a59a89e8bb7fbb7244b7342091a4e6b8829b96872eb1956945423c75eb276961ac701bd96d2e1a51742cc2bb50b8a286a","ssdeep":"","tlshash":"05e0f1059c06cbf7831b48b4d31000092a182df01748cac9e5ef2418b7318f6d50fb34","first_seen":"2026-07-17T15:26:11.052422Z","last_seen":"2026-07-17T15:26:11.052422Z","times_seen":1,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/filters-b7223f29.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.309Z","timestamp":1784301933309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /filters-b7223f29.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-9c4\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2500,"size_decoded":1396,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2500), with no line terminators","md5":"0df1650b7d016006799dc3d4992222eb","sha1":"a606b765a3194985415095d52b9582967ce67c85","sha256":"5aabdef0b2abaddaa7ab46410f740ac36c5ab1baca90323c080e58286b396390","sha512":"b94f78b7e38efbc560f8450242523bcfe5109ce5cea3abda00ed137f76a0872f32c21760cd0b357995622e9330f379b27b1df5aba4fd3d52251ea5e4ba91b26e","ssdeep":"","tlshash":"a45122e9f6d7703353ed59e98814c870b18eae04687e070ef11fa0595c9348ad0bf654","first_seen":"2026-07-17T15:26:11.053235Z","last_seen":"2026-07-17T15:26:11.053235Z","times_seen":1,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/currencyItem-6e9d7ef9.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.310Z","timestamp":1784301933310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /currencyItem-6e9d7ef9.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-47a\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1146,"size_decoded":1102,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1146), with no line terminators","md5":"b795d13ddb5a7085de18ad8d19d49bb3","sha1":"26eb6f1d188b9ae46394eecb8269a58a019bae7b","sha256":"7810d5324a0ef98636159fa78f3821df1ee7ca0335076fa6272c90262c8a6f1a","sha512":"cd97ad11688d532a86b4033a2cb44ff25dee015007f03319c2277e757d9fcf9f251c7639e4526b72fb26e65086b5f667d698024e0f18bdfb40963d9300e741b0","ssdeep":"","tlshash":"2a219b819901c7b5d3be2463907c1814329e7fd6b50086d5baee120d7b879bcd328f31","first_seen":"2026-07-17T15:26:11.054062Z","last_seen":"2026-07-17T15:26:11.054062Z","times_seen":1,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-7476c6bb.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.315Z","timestamp":1784301933315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-7476c6bb.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-3f0d\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16141,"size_decoded":3726,"mime_type":"text/css","magic":"ASCII text, with very long lines (16140)","md5":"d48e07673ece25aca0d5b8c2dc48bacf","sha1":"78a203b6b89b00cbc4dd87b2544722abe10a6a3a","sha256":"7476c6bbea52c50be5eee6e5ad6c0eab692372b83d187fe5afe149427ca17808","sha512":"d9cc6e722a0adcbccb1020e8cf0cef11ff764ee61cb1c38361c50f293595fb7929bd8f50c6ab1f62f1ba1856ca15ca41d10a47627315cf496a5fab217f657de4","ssdeep":"192:jxxCuMtlqbdDrma0NxjeZdu8E5TEo8pxVH+9p68g5jkogvRtnf8mEPLbrMjgxumR:jxxCuMtlSdfma3PEn38mEPLbrMGm/W","tlshash":"3d729735ba091638f433c587be90d94ce01ee662e3434ea6f65b75a12e473cf3a71648","first_seen":"2026-07-17T15:26:11.067192Z","last_seen":"2026-07-17T15:26:11.067192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/index-dca7b45f.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.618Z","timestamp":1784301933618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/index-dca7b45f.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-44f2\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17650,"size_decoded":3593,"mime_type":"text/css","magic":"ASCII text, with very long lines (17649)","md5":"9b06ee60c7097eb074c936a7d84143f2","sha1":"a2a7b4f8c5a657d0f861193e9e99e2b12740c147","sha256":"dca7b45f5d0bc49129fca4ec61a8faaef2b24840f09b681dd33cd94d6eef268c","sha512":"0a76c115c932e1a1d7e9d94a4aed1b7d5ae5cf5cd49f607a145ced7420342e4d8b4c608eb93cfcd62baa420b1d635d836df7bc87feb655dfcd3bc55d5845ceb4","ssdeep":"192:n9RsnopPilJs7dEzZSKGr1v8/2t2kphTsKlT/AS+XjTdbCQ:9KopeJs7d2SFr1v8ctwj","tlshash":"5b82749df39807366c7bd58d7d689a4c90807e11d4835ee8fb579a220ddbee31b2021e","first_seen":"2026-07-17T15:26:11.078661Z","last_seen":"2026-07-17T15:26:11.078661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/assets/collectItem-c490624b.css","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.314Z","timestamp":1784301933314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /assets/collectItem-c490624b.css HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-6ef\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1775,"size_decoded":1015,"mime_type":"text/css","magic":"ASCII text, with very long lines (1774)","md5":"d43758b0f3609371f83ae70139df00d0","sha1":"e59f69a655b253d900bbe8db924c3c12a0ee6252","sha256":"c490624bb51fc5c4cafb11e921a11d933c312188ff87681cbc81375deb4e4b30","sha512":"372535f72ac3584162c134f7cd06489f477643bc8f343fd5bbe6d81bb9483cdf3aba65f1a0264d686da2faf5db1c13f5951237938c2849ca7df279408ed2118d","ssdeep":"","tlshash":"a831acc9a2530f35e827e8deaee80198c1406fc18957c6d5f807273b8ddbee3197065a","first_seen":"2026-07-17T15:26:11.082043Z","last_seen":"2026-07-17T15:26:11.082043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-106f0101.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.289Z","timestamp":1784301933289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-106f0101.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 914\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\netag: \"6a4d55be-392\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":914,"size_decoded":1433,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (914), with no line terminators","md5":"b149b67f1d9fa5e5ce4fadc48a4c9733","sha1":"3e82b5388d0776fe2f2b5a3aaff64a884e1a5a28","sha256":"363d220af704f31b9ddbd4524f7f59c53aac953bc27ae540c471970c104d2649","sha512":"45e420cd8e1c99a42e8a024372469ea4061e140865f92ac47424722531a520dc18a826e2f45221420abf180f0bbab53a2edb2e37a66550d316899b4ffb4ed0f8","ssdeep":"","tlshash":"2411d01b550f8af317b11980d3262d42bf0a278a6510d2c671947e3db66388bc35eba8","first_seen":"2026-07-17T15:26:11.083024Z","last_seen":"2026-07-17T15:26:11.083024Z","times_seen":1,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/index-066255f8.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.621Z","timestamp":1784301933621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /index-066255f8.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jul 2026 19:38:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4d55be-17bd\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6077,"size_decoded":3098,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6077), with no line terminators","md5":"8b0ba597134627c5a507ed951eece354","sha1":"d2121fe46eed2500f7a5e34774077ad1d20b6902","sha256":"e3e356b14c4ce335cc1cb6eaa063f9eb275b36b97b2b1d8eb8b98cad7fdb6906","sha512":"e18004f4963f3b059770f5f5513b6ff06284da4300d85699b2666fb844f4ada28d6cf75c54f5eefa502cc37407a6e4894e10dd8007866c6b66e0039499eb55ea","ssdeep":"96:ngb2rcyTGD5wSnkFRYOYF/tJC00AErLRzoFGTSu7pq3wQGwUoP51ZTdWaL8wAIqV:gb2rrTGD5wYkF6XF/tt0AEPRzeGTSuWq","tlshash":"e9c1a306b10ad6bb9abb4af4d8309194714d2f5be155c1e692ff4d393b234b0b20af20","first_seen":"2026-07-17T15:26:11.083947Z","last_seen":"2026-07-17T15:26:11.083947Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"barrick1.com/charting_library/charting_library.min.js","fqdn":"barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.635Z","timestamp":1784301933635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"barrick1.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:28:15 GMT","end":"Thu, 01 Oct 2026 18:28:14 GMT"},"fingerprint":{"sha1":"95:D9:A5:7C:6E:AA:81:1F:02:D0:30:FA:15:BA:24:25:80:40:B2:CB","sha256":"5E:4B:52:0A:5E:C6:8F:32:BF:3C:0C:59:8E:2D:89:A5:38:21:B9:1F:6D:B0:1C:D2:C1:8A:98:87:79:BB:72:CB"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 13:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65424d1a-2a6b\"\r\nexpires: Sat, 18 Jul 2026 03:25:33 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":3705,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-29T22:52:22.712247Z","times_seen":1299,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/coin-logo/doge.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.634Z","timestamp":1784301934634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /coin-logo/doge.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1597,"size_decoded":1964,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"1938a5ea7cbe7458795a834563258ced","sha1":"d969fd854e1a997b7817ba60800cc1c7a6a1423b","sha256":"4a789f36f6ca12a6d1901ab8441a9cab7a4a9a5fd4ba87c887c4d45c729fffce","sha512":"e940ff74f8cb4f53b7463bbcd2b118e9d7c818eb8d2ab0a2ecfdce172e98cb91c44a4d5acd49402b12803c2b273d5ce3f96e1295ae612368bfb78e7f619546e3","ssdeep":"","tlshash":"bc319846a655c394f3cd0711c30b4a56215e579c786170c056b9a863cf393a8d5fef71","first_seen":"2024-11-30T11:37:49.082714Z","last_seen":"2026-07-30T21:34:04.831938Z","times_seen":76,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/api/common/getAllSetting","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:33.578Z","timestamp":1784301933578,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://barrick1.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://barrick1.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":452,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T04:58:21.288715Z","times_seen":17667037,"resource_available":true,"data":null}},"time_used":723,"timings":{"blocked":0,"dns":0,"connect":238,"send":0,"wait":241,"receive":0,"ssl":243},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/coin-logo/bnb.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.633Z","timestamp":1784301934633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /coin-logo/bnb.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1494,"size_decoded":1855,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"fefe5d0b26806c858130f0eb454e1106","sha1":"8f540e4d9b853acc0145bd37ec42fdeecd7f15f7","sha256":"7aef69406a4a5c74bd3569222a4fb3e534c8c6c1446755fdec7d7687bbf38a04","sha512":"98af45cf72a49d0776a57edc8cecb299d206723d1772c64439738e508f27ab92f0a06608bb76023267a34a8b433cec216329a8847836fc381f818ed2487fe3ff","ssdeep":"","tlshash":"2f31fce221413443e91adab851af83637ce009a05b8392456dd576d7b779ac45b44812","first_seen":"2023-08-29T23:22:40Z","last_seen":"2026-07-30T21:34:04.92695Z","times_seen":70,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":721,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.barrick1.com/coin-logo/link.png?1784301931816","fqdn":"webapi.barrick1.com","domain":"barrick1.com","tld":"com"},"ip":{"addr":"192.163.167.253","port":443,"asn":395954,"as":"LEASEWEB-USA-LAX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://barrick1.com/","date":"2026-07-17T15:25:34.639Z","timestamp":1784301934639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webapi.barrick1.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 18:40:19 GMT","end":"Thu, 01 Oct 2026 18:40:18 GMT"},"fingerprint":{"sha1":"4F:99:71:4F:E8:2E:79:BA:B6:0D:8B:79:21:2F:FE:16:65:99:1C:21","sha256":"87:C6:E9:D4:FF:3D:0A:B7:00:B6:18:5E:DA:8F:F4:B6:FB:6F:6C:61:91:97:3D:98:BD:3E:8F:AD:35:96:08:42"}}},"request":{"raw":"GET /coin-logo/link.png?1784301931816 HTTP/1.1\r\nHost: webapi.barrick1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 17 Jul 2026 15:25:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1008\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncache-control: max-age=86400, public\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1008,"size_decoded":1360,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1d8873b15ce7e65a262d1788f19912ef","sha1":"ef5b427eafdcd42ba4e2a785a49bbfb13fb0c1e0","sha256":"93d103ab945f2972cbdd53050d239c6b9df3d430e9343a21143e805b280e3967","sha512":"1d09a7cf6e12da2a6a2d7a16cba54408f3a90dd58acef01b268b37c3f0545b0541aca6725b894862af1de877dd6c7d2ab9cec94baa7584536e9011e6c5553dcb","ssdeep":"","tlshash":"5a11c461b9beb91ac362083381c121b0ca066c3b4120f2e7cc08b210a23c00ad7c782e","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-31T03:02:33.994245Z","times_seen":411,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"webapi.barrick1.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}