{"report_id":"a80506e0-d262-4931-b21b-588ae84b39b7","version":6,"status":"done","tags":["scotiabank","financial","phishing"],"date":"2026-05-20T07:52:49Z","url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/signinfolder/login.html","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/signinfolder/login.html","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"title":"Sign in | Scotiabank","dom":{"size":1254,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1254), with no line terminators","md5":"08fd6f34ae2a42aac3450295a811b2f0","sha1":"293ccca1ae4fd8a154fd84d2fd81b9d0195f2c91","sha256":"2449af4a36964a705a143219696f7be8d9d42d97ed9926e667f0ff1cb839a4cc","sha512":"53772bffe173c003f3987ca92aed9e963e893cf8da31960caccb2f8c65d3d8dba163327896a16b1153f08478f39d00ed68ede30c2ec51f44c6f57dea87f352c5","ssdeep":"","tlshash":"f72145f0abd1e12bbaed0717fd01eaf80176955e32a17907836cba8f25e55c7c5a0488","dom_hash":"domhasha43c535ff78d9099ca945cae11d88518","first_seen":"2026-01-20T16:43:35.313894Z","last_seen":"2026-06-06T21:48:34.892235Z","times_seen":38,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/signinfolder/login.html","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-24T07:52:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]},"summary":[{"fqdn":"scotiaonlinebank-chi.vercel.app","ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-19T21:01:49.423356Z","last_seen":"2026-05-19T21:01:49.423356Z","alert_count":114,"request_count":38,"received_data":103195,"sent_data":23106,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"dlslhpkfqfglo.cloudfront.net","ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2023-08-30T02:21:59Z","last_seen":"2026-05-15T15:10:17.940608Z","alert_count":0,"request_count":10,"received_data":2855382,"sent_data":5563,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"log-appfrst.scotiabank.com","ip":{"addr":"52.230.151.60","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1996-04-09","domain_rank":1470730,"first_seen":"2025-09-26T04:43:03.949077Z","last_seen":"2026-05-15T15:10:16.7282Z","alert_count":0,"request_count":1,"received_data":193,"sent_data":552,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dmtags.scotiabank.com","ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"1996-04-09","domain_rank":878914,"first_seen":"2019-04-29T13:18:57Z","last_seen":"2026-05-15T15:10:16.6797Z","alert_count":0,"request_count":6,"received_data":1489336,"sent_data":3174,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Akamai Bot Manager","description":"Akamai Bot Manager detect bots using device fingerprinting bot signatures.","website":"https://www.akamai.com/us/en/products/security/bot-manager.jsp","common_platform_enumeration":"","icon":"Akamai.svg","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}]},{"fqdn":"1.b406929acabac9b095f124c81bdfcf57f.com","ip":{"addr":"52.84.50.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-03-20","domain_rank":166079,"first_seen":"2020-11-23T09:04:27Z","last_seen":"2026-05-17T21:53:18.469935Z","alert_count":0,"request_count":1,"received_data":701,"sent_data":586,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"somniture.scotiabank.com","ip":{"addr":"63.140.62.236","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1996-04-09","domain_rank":742193,"first_seen":"2012-11-14T17:00:34Z","last_seen":"2026-05-15T15:10:17.390717Z","alert_count":0,"request_count":1,"received_data":738,"sent_data":662,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"wup-appfrst.scotiabank.com","ip":{"addr":"4.249.171.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1996-04-09","domain_rank":1355923,"first_seen":"2025-09-26T04:43:03.942029Z","last_seen":"2026-05-15T15:10:16.578095Z","alert_count":0,"request_count":4,"received_data":5409,"sent_data":2226,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1.c81358859121583b7adf2ace89cb39f44.com","ip":{"addr":"3.164.240.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-03-20","domain_rank":165871,"first_seen":"2020-11-23T09:04:27Z","last_seen":"2026-05-17T21:53:18.78116Z","alert_count":0,"request_count":1,"received_data":701,"sent_data":586,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-17T22:41:40.561616Z","alert_count":0,"request_count":1,"received_data":201274,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1.a79ab95c1589a13f8a4cab612bc71f9f7.com","ip":{"addr":"13.249.8.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-03-20","domain_rank":166102,"first_seen":"2020-11-23T09:04:27Z","last_seen":"2026-05-17T21:53:18.549485Z","alert_count":0,"request_count":1,"received_data":701,"sent_data":586,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/signinfolder/login.html","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7be9e0b1ed86cbe9aff02f7dbc4ae2d7","sha1":"fee50525fb34841a267455d9e405b681862cba6b","sha256":"310e2ad44b8c64f045242336a4deaaa784e352c77e57b6459115c1f4a131bb1a","sha512":"b19fbcd07e19defd2c96b8b00602ad351d52a2f1f5b126e6dee634dd6befa3d8c43c63179615e4225d33f85afb5e92f1f6dd025979f67679bcbbb25920a0f5c9","ssdeep":"","tlshash":"3ac04c4d5195200041af307c4b4b2249367211db2505c9003d0e5b446f2412f4b17a9d","size":153,"data":"","first_seen":"2026-05-15T15:10:24.406672Z","last_seen":"2026-05-20T10:04:12.946018Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html","fqdn":"1.c81358859121583b7adf2ace89cb39f44.com","domain":"c81358859121583b7adf2ace89cb39f44.com","tld":"com"},"ip":{"addr":"3.164.240.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e4d7d52e5909922bf021f1cc09b8932","sha1":"dc20df92c388423464243e53c7a378f0016effc9","sha256":"0242c236e7c83d9c9d5281fc2614b82c4bf516e7e2552c4e042ecbf9fcf45027","sha512":"3688150585a105000ce97509bdc6f57458ba180e835e6312a1fc386da30e41738b9ab08c87d90dabb5a2508d806346fd2b91373dff46fe215f54a9700685e7e3","ssdeep":"","tlshash":"dfb012c09c7480cb242120370855c0d010339e3b2b805116724095390511024031d2e0","size":87,"data":"","first_seen":"2025-03-14T16:11:06.601637Z","last_seen":"2026-06-06T18:30:37.156148Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html","fqdn":"1.b406929acabac9b095f124c81bdfcf57f.com","domain":"b406929acabac9b095f124c81bdfcf57f.com","tld":"com"},"ip":{"addr":"52.84.50.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e4d7d52e5909922bf021f1cc09b8932","sha1":"dc20df92c388423464243e53c7a378f0016effc9","sha256":"0242c236e7c83d9c9d5281fc2614b82c4bf516e7e2552c4e042ecbf9fcf45027","sha512":"3688150585a105000ce97509bdc6f57458ba180e835e6312a1fc386da30e41738b9ab08c87d90dabb5a2508d806346fd2b91373dff46fe215f54a9700685e7e3","ssdeep":"","tlshash":"dfb012c09c7480cb242120370855c0d010339e3b2b805116724095390511024031d2e0","size":87,"data":"","first_seen":"2025-03-14T16:11:06.601637Z","last_seen":"2026-06-06T18:30:37.156148Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/ca/lwsa.html","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0008388513f67d842c706478a0504329","sha1":"ed84471ff35bd73b71b413d6ecbbbd6948e0dabd","sha256":"1b040007a0198853fafad54820c9c55b08bb7b9fc8d4d7ddf091fafd3ed76a90","sha512":"df265f58e35384ab1c2992ee3a72e0c0040791ed621128f935fc44d632d5ffd4b3c1a0e6f3fe21c47211ba15967ebb0f96653b52304bd67524193770f21d124a","ssdeep":"","tlshash":"bb1191e07ad0d127baec0b17fd01eaf40076a95e71a03547836c7a8e15f1186c1a4445","size":931,"data":"","first_seen":"2026-01-13T11:56:27.328314Z","last_seen":"2026-06-06T21:48:34.971183Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/launch/novaweb/27c34d6e7144/094054a424e3/f71e695e756b/hostedLibFiles/EP31dbb9c60e404ba1aa6e746d49be6f29/AppMeasurement_Module_ActivityMap.min.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddda3fb3f27121fcba6a33a82f32d57c","sha1":"0f4765c47022c3713dd7b45d8e52ab82e9cdef38","sha256":"2a250e2f225e48cf583d54a0a42d623c700847de17323bf23ea372e5d9e89cb2","sha512":"c07a9ecf855bea02ccfd29c6331e7d90b1a5655da82f5e3c954fcd83202427a9498ba1c0a8c510705188cc7c8e08a0650ba85bba11d0b2e20b6fd3375cc21a06","ssdeep":"","tlshash":"9561ca9ebf0960335a9622f54cdf490fc57027291d44d070d9c5ecc9b82caf35056a7b","size":3284,"data":"","first_seen":"2024-11-05T10:55:53.33155Z","last_seen":"2026-08-20T12:21:16.266217Z","times_seen":11208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/launch/novaweb/27c34d6e7144/094054a424e3/launch-edbf66c903b6.min.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"de0350536cbc54f6607c24182f9ea02c","sha1":"87bda4ea840cfc0f62be4e01d5e6d8986d39a00f","sha256":"02842720f41680b07e601797bcc1616fbbe5a7983a170a84fa52ff103bef647e","sha512":"34c978ebf0b65857a8d90b0e8995fc60371908b4e81906720e61c1454b4d60ca3c48f805d8342e161e96b9449f713c85725b1bdab6d31086091c4eebe9cef3d6","ssdeep":"6144:+sJUcrPAHvuxANtn49ZgCG10BL3Ut4tRUyY20N2TEUNpnRn39bA97Y/yhpHPn:pp7Aj49ZtG1uY","tlshash":"30443c8eb354b4ae0ba730b1d56f110ab1ba3845648cc120f6e5f8d97dad98d5273f38","size":263916,"data":"","first_seen":"2026-05-15T15:10:24.322203Z","last_seen":"2026-05-20T10:04:12.882029Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/aempublic/Onetrust/scotiabank/oneTrust_production/scripttemplates/otSDKStub.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf426cd1788c8356ee58c7abf14c38be","sha1":"609b5a8f0b4c7b5d3d955152a76db699d0eb5382","sha256":"6b1fc966c38b12c845f9fd8bdb76027106b776783fd44eeed917663942b5fd16","sha512":"4650b0fe646169b23104fba724b8c3595f990a2d162954549490165ea379bb1d6aa5e4e071d7abf0133604f6e86ef316b00c9336813b65dc7b4acb052b50fa12","ssdeep":"384:TRFZqWtdbD5ABwXwLrekrff8eTr+xITxMcsn9LuJPvV/:TUAD5ABwXw+krfflyxUx0n96/","tlshash":"0192f78ab100af3406c3529d5a37e34e7336755d3886d068b899dce0657dc8b3623bb5","size":21067,"data":"","first_seen":"2023-10-31T04:12:59Z","last_seen":"2026-07-20T17:45:45.024569Z","times_seen":3313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/ca/mutha-scotia-wrapper.js?a=5d912602cc592c340155668ee117a520","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f544c5f66a12a729a5fd262681fed8f8","sha1":"2d97f2c2f78d2ff439749111e47c8c73fc56c19b","sha256":"ae0934c663aa974c5f560ae495c28ead74c438de08b6f863784e53f2163fc630","sha512":"d7be24860af42624d6e9beb89596c9ab8d6b24ca16c61c22c0b09bec4fee1be78371d10c88432b7fcb6fca8b59d158e653ae8421849de95f8ee98113a6bf4464","ssdeep":"96:shktoJj+y+QbMtV6Y1kXpRAjrnf3GzRiJz30sU:C5Jj+8bMLNApujrnf3aW30sU","tlshash":"30b1e2d87be5e10f7bdd0e93fd249fea00ba966a61927307c36cf98d14a9207c1ac444","size":5260,"data":"","first_seen":"2026-04-21T16:53:49.524246Z","last_seen":"2026-05-20T10:04:12.865514Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/signinfolder/login.html","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5379279be874ec525087db767d854a7d","sha1":"6ee19ad6baefa8a2a1223c68c99ae4ddbabb99a5","sha256":"429362c37df6744c74097bca0f90bd881c4770ffae186c09bc6abb4ccd0c4bbe","sha512":"5c4a60d70be9f095922de34bcb53693fe679aeb4f89e0c5f4e889549315016a0bee66aea35df583175aebc9930cec43dc1250e7c33a2a0d33651b51d05df7889","ssdeep":"","tlshash":"6441ce4604f1082387525197a71a6b47f3b7048b9da87c35bb4cad281f0d62fbcb51dd","size":1958,"data":"","first_seen":"2026-05-15T15:10:24.411897Z","last_seen":"2026-05-20T10:04:12.948635Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js","fqdn":"1.c81358859121583b7adf2ace89cb39f44.com","domain":"c81358859121583b7adf2ace89cb39f44.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee48a4da9c402e8a23ad085fb71f28f","sha1":"f0c59306d6313f9bee02b53ca8903991bd24bfd7","sha256":"9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622","sha512":"2c25a0ba0b95622da682d5f1d238c77a3858d621655ecf352bd49be5fa7d92c6417410accf16f50e039fe1c2863c575fa725c23a6f3587ac95a061e53b90e6d3","ssdeep":"","tlshash":"8c613fc432d0fc9622e671e4200b3525f03bc86a246e74c1f6358cd5ade448d93b6fb6","size":3227,"data":"","first_seen":"2023-03-07T12:09:16Z","last_seen":"2026-08-19T07:40:41.327387Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/ca/jquery-3.6.1.min.js","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fad37abd32cee131dba1807ba658f4e","sha1":"c770a00f4d95fd5eb469b41cfcf7dd66cba6d0e5","sha256":"879bc05f7ce3cc40240000acd9253353c3b1af98b8985c9784cab76b834cdcb8","sha512":"2d34e4056bb2464ac1e5e51dc28b909bacc5b3504a73df2d550437ed8bf72ddfa8c89e0b48c7afde8a73fa3f753a26b7ae1638e2543b2b373f8c9502011574db","ssdeep":"12288:GKymV93dvQyWH8feD+6E3v2R8TjaKEgKN5+woHSDXo1FIzAMslfJVxFvC9TdCiTn:XVu0eD+j+MaKEpovZCqDy","tlshash":"b9d5b1d867d5e51b67cd0e43fe11affa017a966790c87207c3a8ba8d14f924bc5a8cc4","size":2828575,"data":"","first_seen":"2026-04-21T16:53:49.582176Z","last_seen":"2026-05-26T04:54:59.227231Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js","fqdn":"1.a79ab95c1589a13f8a4cab612bc71f9f7.com","domain":"a79ab95c1589a13f8a4cab612bc71f9f7.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee48a4da9c402e8a23ad085fb71f28f","sha1":"f0c59306d6313f9bee02b53ca8903991bd24bfd7","sha256":"9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622","sha512":"2c25a0ba0b95622da682d5f1d238c77a3858d621655ecf352bd49be5fa7d92c6417410accf16f50e039fe1c2863c575fa725c23a6f3587ac95a061e53b90e6d3","ssdeep":"","tlshash":"8c613fc432d0fc9622e671e4200b3525f03bc86a246e74c1f6358cd5ade448d93b6fb6","size":3227,"data":"","first_seen":"2023-03-07T12:09:16Z","last_seen":"2026-08-19T07:40:41.327387Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html","fqdn":"1.a79ab95c1589a13f8a4cab612bc71f9f7.com","domain":"a79ab95c1589a13f8a4cab612bc71f9f7.com","tld":"com"},"ip":{"addr":"13.249.8.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e4d7d52e5909922bf021f1cc09b8932","sha1":"dc20df92c388423464243e53c7a378f0016effc9","sha256":"0242c236e7c83d9c9d5281fc2614b82c4bf516e7e2552c4e042ecbf9fcf45027","sha512":"3688150585a105000ce97509bdc6f57458ba180e835e6312a1fc386da30e41738b9ab08c87d90dabb5a2508d806346fd2b91373dff46fe215f54a9700685e7e3","ssdeep":"","tlshash":"dfb012c09c7480cb242120370855c0d010339e3b2b805116724095390511024031d2e0","size":87,"data":"","first_seen":"2025-03-14T16:11:06.601637Z","last_seen":"2026-06-06T18:30:37.156148Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/signinfolder/login.html","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"98c414f16b38782315743bbb38ffce1f","sha1":"688f57fd2b003d1a5cbd910c65e28b28996612ac","sha256":"5c42cf515709d9a21875c15f2305149ee1b345d9cfeb797e9fadeffa7b1a1d29","sha512":"37da1cbdb60cc1b1aa03cfbfc5ebc9e3b6c51e7b219e9284214728aad890406b890c810954bf529dccb38a3ecee4fb09d7f0d85054bc2283a3dcddc8a370a82e","ssdeep":"","tlshash":"8131206376fa283426636a954bcbc1022060f8133844d640367c4b6c2f12911a3ffbef","size":1520,"data":"","first_seen":"2026-05-19T21:01:56.367083Z","last_seen":"2026-05-20T10:04:12.949264Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/signinfolder/login.html","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a2e3b9324336b050f99a2eaf4f10ce7","sha1":"35ab521a0ac1e3cf96b967e8e2f38ee39c391f42","sha256":"d957cf22ca391e65bdcaacabe6312b1f7bb175bc888098f9366bc4f24f05be11","sha512":"b2d358bf77352adf951d27870dc1ce53c10fb3e6c2eae820f05ea1fe4bf975ad72fd4e454d172bfef9c17a2239339ba644f3497db861b6a079999f575e5f85eb","ssdeep":"","tlshash":"f071b32b69e7a021052bf04db17bf3807271e41a0f88d609b4ed89b02f11c7f9979ce6","size":3504,"data":"","first_seen":"2025-12-25T21:23:54.685677Z","last_seen":"2026-05-20T10:04:12.946829Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/frst/common/24b4fa14.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b46afca64e3cb74faf97f7bd9fb6904","sha1":"140534ac6904f69e788933fc37d484be717e33aa","sha256":"c374441115bb73a159938497613fdc36ba3b4d2e4c331c8154c3c8f2df64ae71","sha512":"49f04730d97a9c3048b75dfd26209266249d352c21e4096117f9e6eaf16e170ab326e1bd876ed5ce523028d1c84662c2cfae558c849425e9c6107a9f8efa30f3","ssdeep":"6144:PS8UvxKQ2WYosNCaT51id1BUKFX23aygawxZglZy4LzdUWDJlZceezyM7orMl+9j:6vxfE5EUhm1iuUlHYTbu","tlshash":"1e35e98cb291b03547976265413f010bf2396566609e90d8f679d8e9befc8ce9273f38","size":1154370,"data":"","first_seen":"2025-09-20T05:01:04.298172Z","last_seen":"2026-05-20T10:04:12.947875Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/js/auth-shared.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d2342693326de02f425033765a5a074","sha1":"72c5dfdfc49ffef7e2d2d56af15f45d057862df4","sha256":"c5698a9dd1b8e78ba6f18a8da76243f796ef350f17d7546ffbcb9f21bd4ec44c","sha512":"ff43bc8f63d8b0049d307dd436b36049fb3d7129cb15c8c26f9be2dc670328dc8e102e238dda7135382d9848232f56eade06c04ff9e460f9f6d614061218d0d3","ssdeep":"","tlshash":"4e4167cb79fe211a5562e0a857cb900130bfd0573acce640b73c45683f197aa436b59f","size":2076,"data":"","first_seen":"2026-05-19T21:01:56.32071Z","last_seen":"2026-05-20T10:04:12.868947Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/signinfolder/login.html","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8528722712469238e51788c8d80aac5","sha1":"b9ea19d41339f77699bacb8a6749fd73e82e3060","sha256":"4a4ff4edb69d6f24f46173647987c86c22243bf586e1f4c68ddf9b27a6b0f4d0","sha512":"db966aa605d4c611515e8c2d76fe5f03a13d7cbc57bbe857bb6ef2a6eba475aa25c9644399044e1f6d3627849cb359667c9847b345a7b98f6640910cdf8158d5","ssdeep":"96:rzhktoJj+y+QbMtV6Y1kXpRAjrnf3Gzkis:rl5Jj+8bMLNApujrnf3d","tlshash":"7a9147d87be5e10b3bdc0e93fd149ffa01ba946ba0d2710bd36c798c16a9206c1b8484","size":4544,"data":"","first_seen":"2026-04-21T16:53:49.577304Z","last_seen":"2026-05-20T10:04:12.945238Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@supabase/supabase-js@2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b4e55e7f384bacd1ea8adc505fa38d4","sha1":"9c2e8f38795a9e300cd761be3a3d69ab79189d0d","sha256":"df19aeb6c97ef48cbd839f201410868c8fb5f78e04c0f8a5f4191dfa2b45cfc7","sha512":"9b83128068e59a16acad07d36fd94fb71ca3fc00454eb88792735cf2f4205f9507ab3523da8212bf25a0bae86a056feb397a301803e751449ab3c30b049a6c85","ssdeep":"6144:jUcJo29r5tlVTOgPoHeoWE/Vzc1z7yyPv3B9KagOp4lvKbOMguyyCf2ejNS3tapq:r51O4o+oWE/Vzceq+q","tlshash":"0d1417d573b7a43347d69062d4742502f378a949b81e402cbbbc5edf6998908eb3af31","size":200135,"data":"","first_seen":"2026-05-18T20:48:39.491767Z","last_seen":"2026-05-24T07:22:25.906151Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js","fqdn":"1.b406929acabac9b095f124c81bdfcf57f.com","domain":"b406929acabac9b095f124c81bdfcf57f.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee48a4da9c402e8a23ad085fb71f28f","sha1":"f0c59306d6313f9bee02b53ca8903991bd24bfd7","sha256":"9cdad69a4b967c882c3d8e9cb054e7334b7f8870e96427a5d20ae2d17eff2622","sha512":"2c25a0ba0b95622da682d5f1d238c77a3858d621655ecf352bd49be5fa7d92c6417410accf16f50e039fe1c2863c575fa725c23a6f3587ac95a061e53b90e6d3","ssdeep":"","tlshash":"8c613fc432d0fc9622e671e4200b3525f03bc86a246e74c1f6358cd5ade448d93b6fb6","size":3227,"data":"","first_seen":"2023-03-07T12:09:16Z","last_seen":"2026-08-19T07:40:41.327387Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/launch/novaweb/27c34d6e7144/094054a424e3/f71e695e756b/hostedLibFiles/EP31dbb9c60e404ba1aa6e746d49be6f29/AppMeasurement.min.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"66aabcd8a7ba429711eebdad8acc3dd6","sha1":"9e8e5ea927fafd770719ab4ef81ae0325351724e","sha256":"7db8d077fc21c20f1449a2603d524e423cfa25d7df6d5fd845a8e5e883aa227e","sha512":"05291cb7776b1f86d6dcb9d54a3e2724403628d9c1c808a7ff54b314449d0b07d32d658ca091f936d6f44d4dbed5230ba71ac70a2df3df27c537e6ea6a38473a","ssdeep":"768:/YRKHdumNd/M2r+VVXJrk6Hx372qDgDsVKg7CUgBFmY7K:/fdu+d/76vXKSySGbK","tlshash":"acf23dc531ebb87e169260f46c6f180ea13ddf5a898984b8e081c9e15878ec6115fff7","size":36178,"data":"","first_seen":"2024-11-05T10:55:53.328136Z","last_seen":"2026-08-20T12:21:16.225874Z","times_seen":12821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/cd/uppopi-81f541cd2f4ea9c2908b9e39b03e0a80-sb.min.js?a=5d912602cc592c340155668ee117a520","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7215ee9c7d9dc229d2921a40e899ec5f","sha1":"b858cb282617fb0956d960215c8e84d1ccf909c6","sha256":"36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068","sha512":"f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-20T07:43:56.746753Z","times_seen":39711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/main.3eea98c15f18c9f89199.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /main.3eea98c15f18c9f89199.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jz7rq-1779263547600-0583490e2f63\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ba373ad4396dd5bc010239ec13ec0ef1","sha1":"89b0962de43c812fbbad74b55b2add7a2da6ac1e","sha256":"bea966042976e0759ae2a9068f28a48d7ad5926cadd7a19ac508704a8f938393","sha512":"7b209abda4efc84c00beed503209624793e125a0d30c04d47fde15bf3bf445198f9cadba1376aa4f07c2455c12a005e50b6331040626d051e108402778fb2dab","ssdeep":"","tlshash":"e3a0121e06d9080933c8141410064138041001167e61e60800ca1328720048e67400c5","first_seen":"2026-05-20T07:52:57.838721Z","last_seen":"2026-05-20T07:52:57.838721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"wup-appfrst.scotiabank.com/v3.1/QmJcXyhhDqoDD","fqdn":"wup-appfrst.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"4.249.171.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:39.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wup-appfrst.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R40","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:AC:2D:70:10:E0:D0:E8:0A:64:EF:C0:64:10:AF:ED:55:B2:54:FE","sha256":"00:CD:03:88:7A:93:A4:03:C0:AE:DC:65:69:50:51:35:E2:63:8B:6E:18:FE:03:9F:5C:48:88:99:54:8C:AA:A0"}}},"request":{"raw":"POST /v3.1/QmJcXyhhDqoDD HTTP/1.1\r\nHost: wup-appfrst.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1580\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1580,"data":"{\"ds\":\"js\",\"cdsnum\":\"1779263547887-sjn0000701-7727d83e-a681-4a30-9543-bd4f8f8ea817\",\"csid\":null,\"psid\":null,\"muid\":\"1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\",\"context_name\":\"cd_auto\",\"requestId\":3,\"agent_type\":\"primary\",\"agent_id\":null,\"sts\":\"gAAAAABqDWg-ptGkhbV_EpGn-q9lzpNVp7xPWjgaihjGjzB63M81Td4tggixdkymGzvK5c9kp6B7Eczyh1NlJPPAKvuogFVFyWfj5upgzMDM4yc0hawXisdXnoo9tVju34qzSJs6UMJQTYuLOptbNiShxJYs_3SQO9KpQq4kaXJ-Tt24Ng6dNQicHcui8xSH41D5ducMdOwYmVgI8kTVVRHYOx-edDoZ66Wh7DrtmC0K6t1ovjG4LLUwnxMDZyXMVqmApm0m55MCRnI91L5-nPIZYuOaPLEibdJ1lyJphQP6R-UFcSSSu62ulJvR4W0GioVR9ZtrTKx6uc5Pf_VBa64jJ0Zl1cx7aw==\",\"std\":\"gAAAAABqDWg-t05vdqEzWoxAv3J2UUHNeytQzk18leYzPiZeP2zIJcitOLThwdf-fRLluuMaeZ4fzOIuDVKI_wJdlj-ERw7geDUfeK_ZCT35awhqoGm0bP0eLR42L-1zCZ_WmwRdD181xOq4h64gRozOlCd8nhB5eaa6lZYdIG5oyl00nEblsNRFxJObLbHNxW2C6EmRxlJPX9q19T_-V9I1to1i5oq_Gg==\",\"d\":[\"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\"],\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 625\r\ndate: Wed, 20 May 2026 07:52:38 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: 140f96af-0e1a-4492-bad8-8b8148213d00\r\ncontent-security-policy: self\r\nreferrer-policy: no-referrer\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nstrict-transport-security: max-age=63072000;includeSubDomains:preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":625,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f1e9d59aaed43d888d90f94226919afa","sha1":"fe1afb34e4231eacbe2420b7c81baeb31e2bd12c","sha256":"f48c576a66c67fce1f293764a85b692c418b64083349e980c9bfc9b90f3f7ff4","sha512":"50e0bf1bd1e20c45152e0196909e7970826274a8c535bc07a5a7dea6cb088c7ece05d4ecb5cea4b2ee66c7c949531aa21967c11ff930e309763ea4fae3e62baa","ssdeep":"","tlshash":"d6f062e091081a0892fc2219304560f9acb005a040083bd56fef57a581ec3ccf93d3ea","first_seen":"2026-05-20T07:52:57.840096Z","last_seen":"2026-05-20T07:52:57.840096Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/1242.ef89c7caadc83a35f220.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /1242.ef89c7caadc83a35f220.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::btlj8-1779263547599-c67bd9a3e26c\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4b5fa0b54794ca347a628dddb061fe44","sha1":"38f3ce74bced5807f3c2189f548b97020feaf2f0","sha256":"32fe2d361b85c1131a74c7602019c0b804ca3fc8471ae92efebf1d6ea490e571","sha512":"40000035285e2be478d25a740916c6a9696767216504bd001fa06f29c49fa32958ae5b9a4c3465b940d27cb5341d61afac40bd9a76b3c6cae8160bc88df783a8","ssdeep":"","tlshash":"dca0244f01d01d4f33cc013150110137144004337f51d10000cd537f15014cd73044c1","first_seen":"2026-05-20T07:52:57.84486Z","last_seen":"2026-05-20T07:52:57.84486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/cd/e58f0d0de3ce9fa5ebc118ad6482af34/5d912602cc592c340155668ee117a520/bootstrap.min.css","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /cdn/cd/e58f0d0de3ce9fa5ebc118ad6482af34/5d912602cc592c340155668ee117a520/bootstrap.min.css HTTP/1.1\r\nHost: dlslhpkfqfglo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 157\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: la9CQ_4KbWnhDeo-Ty7yZuiF520crQIyvmryqNXoAju1NAI0psNNxA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"13ad92f0a95aeeba37695c64e3e73777","sha1":"9b521e3aa525e57517d7d1a4b8e6244756f0517d","sha256":"e468f1f0fd21bac6ca86b88b8632eb00a605e4ac432e8c0ac984b8880346fa13","sha512":"232f4a7fa90a17ba7cb8e4e8150e37fab5f7df25edd14433220f01d4b8b2967e75c76c16fbf79e8b58d461978d645a122eb08a1ebed6b19843ca972a10e8944d","ssdeep":"","tlshash":"80c08c105b7980383e828a933ece8b432024e30fe1a9b0a4778d6ca04f1490868a3020","first_seen":"2026-05-20T07:52:57.845776Z","last_seen":"2026-05-20T07:52:57.845776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":34,"dns":11,"connect":1,"send":0,"wait":743,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/resource-loader.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /resource-loader.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::s6zgt-1779263546765-75c66c0ce349\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"3a34ab699ce634bd41f7d230405e034f","sha1":"7074445b2f3559806da6cfb5dbc119b7d5b6ad1d","sha256":"b544eadc6432084113cdcf536e02f8b3e104940fae36fa3ec8542278dbc0a807","sha512":"fb590cef92d77e3bee2382bcb9e6ed8b48a2e07971c4cacba7e4d003e5eb6a73b83a866e49fbe54976139eb91dc0a3fa165e1705895d3452fcc174bd0e0084d3","ssdeep":"","tlshash":"63a0120f00c20d9b768414001101133c710821527da0d11014cc2339515048ea300085","first_seen":"2026-05-20T07:52:57.846673Z","last_seen":"2026-05-20T07:52:57.846673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/cd/uppopi-81f541cd2f4ea9c2908b9e39b03e0a80-sb.min.js?a=5d912602cc592c340155668ee117a520","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /cdn/cd/uppopi-81f541cd2f4ea9c2908b9e39b03e0a80-sb.min.js?a=5d912602cc592c340155668ee117a520 HTTP/1.1\r\nHost: dlslhpkfqfglo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 1\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 8rEImb8fyUejJt51bfd2BBLwHp9tztNDujliuqETb1aI_EzOpqQAXg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"very short file (no magic)","md5":"7215ee9c7d9dc229d2921a40e899ec5f","sha1":"b858cb282617fb0956d960215c8e84d1ccf909c6","sha256":"36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068","sha512":"f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-20T07:43:56.746753Z","times_seen":39711,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":7,"dns":2,"connect":1,"send":0,"wait":750,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/3800.e8b5f2bfeae1f16b0048.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /3800.e8b5f2bfeae1f16b0048.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::blsr4-1779263547617-ce442b91fe57\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c40a098a56d435069378ab1b049e74f5","sha1":"1fbf8aa61a4522570a20966567b4ea8340ef5549","sha256":"55ebda8d01c03394bb74525f111036a6f8682f50cd0140c2fbe48539bd6f23b7","sha512":"95fe9faaf5eee62c69d9240a8c104dc97bee01cd44a6ac142e8b2318933b74e332914273602558a28e9e54c68edea6abb43fb95a0f3433abb09e041c2dd9825f","ssdeep":"","tlshash":"e6a0110e02c0080c32c800a020a2023800280233bee8e20000caa33c22088cea3800c0","first_seen":"2026-05-20T07:52:57.848219Z","last_seen":"2026-05-20T07:52:57.848219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/9455.1a5911ce08a5b092e306.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /9455.1a5911ce08a5b092e306.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jz7rq-1779263547622-4955ea55f520\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0643be0b6a1699451e2426fb4536277f","sha1":"9375af12cf5a3a8a8375c84a2c1f2dd0ce7485e6","sha256":"19c51f407344ac4e44096a8507dbf2309f49da02e5eb9c2accc6fbfeef0d90fb","sha512":"226a6c3cc323ecdbb96de418beaec397a179872c59037b87f93eac93d9234230af2172d3452558884e7aa629d830c4a6dd40505dc25eff310554d31cfa8f396a","ssdeep":"","tlshash":"cba0112e0ae2888c32c820202203023808200222bfa2f200008e23382a0088ea388082","first_seen":"2026-05-20T07:52:57.84903Z","last_seen":"2026-05-20T07:52:57.84903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/login3.21af1f942eb7bd654864.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /login3.21af1f942eb7bd654864.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jz7rq-1779263547625-0ac09eeb2bc6\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"3700ad7ae071e7993658ff050f37859b","sha1":"e28a4546e5076863326e25df3a18cc48f7d3d5cf","sha256":"55229a1e6b1010b93c8b2cf64bf31e79f7933c7a77cf330fdf3410a6dcd4e9f0","sha512":"a012125cdebaa934996ebf60bbece9e2643b7f1b167ebe1c79b4abaf333bbff24bd856b10d3eff07c6f83ac9511751c2442164f6553e457139be2b0d2dc9eaff","ssdeep":"","tlshash":"42a0012e0ae6094d32d824212947123a1424526afea6e719648e6b7d6345d9eab440e6","first_seen":"2026-05-20T07:52:57.849961Z","last_seen":"2026-05-20T07:52:57.849961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"log-appfrst.scotiabank.com/api/v1/sendLogs","fqdn":"log-appfrst.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"52.230.151.60","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:30.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"log-appfrst.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R40","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"78:EE:77:2A:F4:6F:68:F9:E4:A5:5C:EF:6B:22:CC:0E:97:2A:16:DF","sha256":"DC:43:DD:D8:58:A7:49:6B:53:C2:28:AA:0A:C3:C9:DE:D7:9A:B7:50:16:37:C4:65:8A:9D:8C:65:6B:77:0D:78"}}},"request":{"raw":"POST /api/v1/sendLogs HTTP/1.1\r\nHost: log-appfrst.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 92\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":92,"data":"m9y8JL8oM31JbmJm3pK8xNzUbSV6JZm5qSGZOTnBqUVlqUXO+XlpmemLyxJzzjJ9RVe9CaE6IDE91Sc/MQWskteReJUA"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 20\r\naccess-control-allow-origin: *\r\ndate: Wed, 20 May 2026 07:52:30 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5820854f62a6eb3d38ba7ba0d1b3ea75","sha1":"639df0b84fe699b4a290a713fd6b9a94bd4deb95","sha256":"912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d","sha512":"4452c0a26fa81357f95bf6160c3f5d35ff39f62e03d5faa1e69eb9dfdcb2c83eda4235463ee4065dceb534cc497891a05535467337ad84693e5fa48c317dbbbb","ssdeep":"","tlshash":"f67000020000208008803c0000000a203ae00aa0822a00c0802c00288e08088f08a000","first_seen":"2023-03-13T15:21:35Z","last_seen":"2026-08-20T10:27:36.287818Z","times_seen":93600,"resource_available":true,"data":null}},"time_used":853,"timings":{"blocked":362,"dns":48,"connect":125,"send":0,"wait":128,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html","fqdn":"1.c81358859121583b7adf2ace89cb39f44.com","domain":"c81358859121583b7adf2ace89cb39f44.com","tld":"com"},"ip":{"addr":"3.164.240.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:28.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.c81358859121583b7adf2ace89cb39f44.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3C:48:E7:EF:2A:51:0E:DF:D5:3D:45:32:3A:E9:93:C2:C6:60:61:F7","sha256":"7F:88:CA:54:D5:47:98:7F:6F:F5:AB:1B:2F:D0:88:C3:5C:17:38:58:49:E5:A0:8E:91:18:2B:4F:15:F6:09:DA"}}},"request":{"raw":"GET /scripts/prod/crossdomain.html HTTP/1.1\r\nHost: 1.c81358859121583b7adf2ace89cb39f44.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 221\r\ndate: Tue, 19 May 2026 23:33:37 GMT\r\nlast-modified: Tue, 13 Oct 2020 12:04:25 GMT\r\netag: \"21e34cf6a03f570df49e212018a567d0\"\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e6b6fb416c0f8841679973bf6325a4a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: NEPZIg1gfTYUTsFH8CZdUaIK3C07Q5id-uNme3uw8jBz57cZrKXglA==\r\nage: 29932\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":221,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"21e34cf6a03f570df49e212018a567d0","sha1":"f0be4058936850ae0163f5137600d14b6632bbb3","sha256":"0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6","sha512":"85f32ea67b64f49cb438a32c9f77d2d746cf67d3387c4c9d5e78ee181b7fb11f444d6dc17dea19a69f8efa5d4d52ac016e6eea78a741a6658cf86c15b7fdace9","ssdeep":"","tlshash":"37d023cd6c71d14b146070551465f0d42073af7a3343c50022c1e0750d107bc8f0f3d4","first_seen":"2023-04-07T05:40:57Z","last_seen":"2026-08-19T07:40:41.328947Z","times_seen":507,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":74,"dns":46,"connect":8,"send":0,"wait":8,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/npb_lQOutwZ84SJPng/Luac6m5c5D7t9D1SSi/KSMWAQ/I3V3/dHQHJ1IB","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /npb_lQOutwZ84SJPng/Luac6m5c5D7t9D1SSi/KSMWAQ/I3V3/dHQHJ1IB HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jz7rq-1779263546781-86ca351a9bde\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c911f6d46579b53b522c0a2c1be78090","sha1":"0a73b7f0f5216cc93046fbbaa198dd03004cfb51","sha256":"9e80fb32e5a84fd20406335af518dd1832d81ec3f322d04c3a36368c3ce094b3","sha512":"3e8929f01dea754ac22c2698740fa330a0dd16f4712ba4223f2de9497f53bb9af79e62c9b7e7f30baa26bfda38d2b97d036cdfd81406cb3dc4b462e448750570","ssdeep":"","tlshash":"d5a0112e0ae20a0c33c80200220a223a00080223feeaea20808a232c220088ea380082","first_seen":"2026-05-20T07:52:57.851985Z","last_seen":"2026-05-20T07:52:57.851985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/launch/novaweb/27c34d6e7144/094054a424e3/f71e695e756b/hostedLibFiles/EP31dbb9c60e404ba1aa6e746d49be6f29/AppMeasurement.min.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 07 Apr 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:42:D2:6A:C0:19:F3:C8:FE:20:91:E7:CC:ED:E7:AA:65:F7:B2:5C","sha256":"17:3A:7C:D0:BF:82:FC:D9:7B:71:30:FE:12:BA:9E:F9:25:EB:E4:69:DD:19:9F:7B:68:01:7C:4F:AF:DF:C8:33"}}},"request":{"raw":"GET /launch/novaweb/27c34d6e7144/094054a424e3/f71e695e756b/hostedLibFiles/EP31dbb9c60e404ba1aa6e746d49be6f29/AppMeasurement.min.js HTTP/1.1\r\nHost: dmtags.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: application/x-javascript\r\nETag: \"1dc09d84-8d52\"\r\nLast-Modified: Sat, 26 Oct 1985 08:15:00 GMT\r\nx-vcap-request-id: e1086234-7ed0-43b5-7020-e5ff90a6d6b7\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\nContent-Length: 13011\r\nDate: Wed, 20 May 2026 07:52:27 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://scotiabank.com\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' https://*.scotiabank.com https://www.scotiaitrade.com/ https://www.scotialifefinancial.com/ https://www.scotiafunds.com/ http://*.bns https://*.bns ;\r\nX-Frame-Options: SAMEORIGIN\r\nCache-Control: private\r\nVary: Accept-Encoding, origin\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36178,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32755)","md5":"66aabcd8a7ba429711eebdad8acc3dd6","sha1":"9e8e5ea927fafd770719ab4ef81ae0325351724e","sha256":"7db8d077fc21c20f1449a2603d524e423cfa25d7df6d5fd845a8e5e883aa227e","sha512":"05291cb7776b1f86d6dcb9d54a3e2724403628d9c1c808a7ff54b314449d0b07d32d658ca091f936d6f44d4dbed5230ba71ac70a2df3df27c537e6ea6a38473a","ssdeep":"768:/YRKHdumNd/M2r+VVXJrk6Hx372qDgDsVKg7CUgBFmY7K:/fdu+d/76vXKSySGbK","tlshash":"acf23dc531ebb87e169260f46c6f180ea13ddf5a898984b8e081c9e15878ec6115fff7","first_seen":"2024-11-05T10:55:53.328136Z","last_seen":"2026-08-20T12:21:16.225874Z","times_seen":12821,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/6566.d60397f1c43d6fba0d78.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /6566.d60397f1c43d6fba0d78.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::s6zgt-1779263547618-e3499d436485\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1cc6c077239a68dd277d3105e2f444e2","sha1":"3a25ebfd3479aa44897844c7cc148debaa98c60a","sha256":"be5ed8bb384403876bbd620f50e7ff80173c07f12e299a3b1123f48b548ddab2","sha512":"e380a14892348616e5c8eed96f8800bce598ed87b5c23cd53d9b4ae572fe5982af1d8566c6b175a330a3c9267b027c9310eb3e5b807970944215099583e97272","ssdeep":"","tlshash":"48a0220e00c80f0c3bcc28202203033c302e0223beeae20020ceebac22008cfb3000ea","first_seen":"2026-05-20T07:52:57.853304Z","last_seen":"2026-05-20T07:52:57.853304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/ca/jquery-3.6.1.min.js","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /cdn/ca/jquery-3.6.1.min.js HTTP/1.1\r\nHost: dlslhpkfqfglo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 20 May 2026 07:25:26 GMT\r\nlast-modified: Sun, 05 Apr 2026 10:26:09 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\netag: W/\"0fad37abd32cee131dba1807ba658f4e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 5rcNKDSOKfZT-tfCzgirfP2W_4ftysajULSyTA4szNdj4E85AThOSg==\r\nage: 1621\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2828575,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b2335da987ba33dc806416cbfcd3c590","sha1":"7290b641a7b9cc9f01a99dbc164c4867392cb85d","sha256":"61ebdb1256d974a9429ed1afc9929446ea542179e5f88e9fb2505d4ddca453a1","sha512":"89c2afea06bbf06b6db99cd4b7189c12b4c02400785b2c7d65bd7a20afa34b0fa20b813d9d0694274652a9a622ddd26a9bb85dfeabde7a775494aacc96880745","ssdeep":"6144:GXaX1pamBx2A9DqwygdDdTV2RdSlLI/uCBbKiSl0uQyLyH8i8eD+6E3jq:GKymV93dvQyWH8feD+6E3G","tlshash":"3d25f2d867d1e11f6bdd0e43fe15aafa017a966790d97307836cba8d14e824bc27cc84","first_seen":"2026-03-06T21:46:55.505329Z","last_seen":"2026-05-26T04:54:59.214197Z","times_seen":98,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/favicon.ico","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CMCAID%7CNONE%7CMCOPTOUT-1779270747s%7CNONE%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB; AMCVS_0AAF22CE52827A080A490D4D%40AdobeOrg=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::blsr4-1779263547929-c590271cc828\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"08a38e5dfee152ed9b2c89e6e95a4756","sha1":"ba4f5b9bcefc6be8156ad88cc2315a6aedcf3380","sha256":"f9419bde92097140eace907ce4804451da859d1d18f465abce533d18e099c931","sha512":"50d731eb34345da3f939a9452ec9256638849b52a6cead385285d61d405cdeb665b830329d1cf06b9eb56b998fda55ebe978fe7d209b39fa1bdcfb4c92a28790","ssdeep":"","tlshash":"c2a0110e02c20a0a3ac82020208222383a888222beaae28080cea328220028fa380080","first_seen":"2026-05-20T07:52:57.855286Z","last_seen":"2026-05-20T07:52:57.855286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/signinfolder/login.html","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-20T07:52:26.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /signinfolder/login.html HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 40187\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"login.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\netag: W/\"3815e878b5c73388570fd5e2a4fbd291\"\r\nlast-modified: Tue, 19 May 2026 20:42:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nrrw4-1779263546389-32bd29f554ec\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":84154,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (828)","md5":"3815e878b5c73388570fd5e2a4fbd291","sha1":"54dbe74de5f3b9cf58c43e2f539c2827d23397ee","sha256":"8b5e7cff9f888db600e58ae7aef3db9966abe5020fdf1505109a06686e0d635a","sha512":"7cc1cd92abc7e522732cb318d4a1c56ae4c009a859a4b1f7855084478d7aedcfcc71d386fff55c5b23e53c07a815cc35c70c296e72254019b889ac317b916523","ssdeep":"768:7rK2BKmtK7bKLpP6ym24fTKfE5KAr/hkPmBPCsft4:3KQKoKXKN6ym247cGuPmB34","tlshash":"ce83b76a5ff3118a640716a86bab31442324c123db49eddc3d9d67688f1fa8c85e37cd","first_seen":"2026-05-19T21:01:56.350338Z","last_seen":"2026-05-20T10:04:12.905011Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":22,"dns":4,"connect":1,"send":0,"wait":11,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/styles.8c26692140c7bd9a2ef3.css","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /styles.8c26692140c7bd9a2ef3.css HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::4bbpf-1779263546765-e8008a1de451\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"37d8a0f34faf5c113727fa90dd4952e1","sha1":"e9a4dd5064fa95cb26c8ed7cf6dffde374f14116","sha256":"8f2ecac16f15cc73292517baff7ac09ac4c772a8dbaef686295408448e76bb16","sha512":"2b17b75255991ebbf8b3c540367e48fa55b2f5df3c30988427761bdfa91fa6293aae19d092ab9eb9caa8bd40f192a374f49c54b28c396b91b90a340556605364","ssdeep":"","tlshash":"6ea0222e00cb2c0cb3cc022022032338282a03a3fea0e32080cca33c22a02cef3008c8","first_seen":"2026-05-20T07:52:57.857402Z","last_seen":"2026-05-20T07:52:57.857402Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@supabase/supabase-js@2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@supabase/supabase-js@2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 50962\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.106.0\r\nx-jsd-version-type: version\r\netag: W/\"30dc7-nC6POHlanjAM12G+Oj1pq3kYnQ0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220172-FRA, cache-bma-essb1270036-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4557\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBE4oaRhhagf468M08t0LyEfWtf2oOBs58UC3SQ377%2B3BfQS9zDj1L2wF%2Btj%2FkB7t%2BAuI0neIB4BfkH2o1PQuUfmWZBHgZ%2BkKeQVhDmuLAcRqYejdYIZzrvfPKrxRhB%2FT1o%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9fe9c30fa9ac35a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200135,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6b4e55e7f384bacd1ea8adc505fa38d4","sha1":"9c2e8f38795a9e300cd761be3a3d69ab79189d0d","sha256":"df19aeb6c97ef48cbd839f201410868c8fb5f78e04c0f8a5f4191dfa2b45cfc7","sha512":"9b83128068e59a16acad07d36fd94fb71ca3fc00454eb88792735cf2f4205f9507ab3523da8212bf25a0bae86a056feb397a301803e751449ab3c30b049a6c85","ssdeep":"6144:jUcJo29r5tlVTOgPoHeoWE/Vzc1z7yyPv3B9KagOp4lvKbOMguyyCf2ejNS3tapq:r51O4o+oWE/Vzceq+q","tlshash":"0d1417d573b7a43347d69062d4742502f378a949b81e402cbbbc5edf6998908eb3af31","first_seen":"2026-05-18T20:48:39.491767Z","last_seen":"2026-05-24T07:22:25.906151Z","times_seen":56,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":18,"dns":2,"connect":11,"send":0,"wait":6,"receive":4,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/js/auth-shared.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /js/auth-shared.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33811\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"auth-shared.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\netag: W/\"1d2342693326de02f425033765a5a074\"\r\nlast-modified: Tue, 19 May 2026 22:28:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4bbpf-1779263546777-baa03e766f03\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"1d2342693326de02f425033765a5a074","sha1":"72c5dfdfc49ffef7e2d2d56af15f45d057862df4","sha256":"c5698a9dd1b8e78ba6f18a8da76243f796ef350f17d7546ffbcb9f21bd4ec44c","sha512":"ff43bc8f63d8b0049d307dd436b36049fb3d7129cb15c8c26f9be2dc670328dc8e102e238dda7135382d9848232f56eade06c04ff9e460f9f6d614061218d0d3","ssdeep":"","tlshash":"4e4167cb79fe211a5562e0a857cb900130bfd0573acce640b73c45683f197aa436b59f","first_seen":"2026-05-19T21:01:56.32071Z","last_seen":"2026-05-20T10:04:12.868947Z","times_seen":3,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/npb_lQOutwZ84SJPng/Luac6m5c5D7t9D1SSi/KSMWAQ/I3V3/dHQHJ1IB","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /npb_lQOutwZ84SJPng/Luac6m5c5D7t9D1SSi/KSMWAQ/I3V3/dHQHJ1IB HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CMCAID%7CNONE%7CMCOPTOUT-1779270747s%7CNONE%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB; AMCVS_0AAF22CE52827A080A490D4D%40AdobeOrg=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::blsr4-1779263547777-142f5b748630\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"becea4a7070462693782c8abf60efcdc","sha1":"accf37b75cdba8868c2c0558546d81edb1d911a5","sha256":"f56db14b34dc3baf604040a84815e731adf45debb91a8805e6fadf9b0177a136","sha512":"e043961e2ace499a498d8775348ee93c9d4a10caf6d61dd85ff46eccf245a765296110bd51ffd4c20f3ae4fdda95300b518030a13a2c5b25b02c26f9f47ca496","ssdeep":"","tlshash":"92a0110e02c20c0a32c822002382023800000222bea8e208a8caa32c23c008fab80883","first_seen":"2026-05-20T07:52:57.859921Z","last_seen":"2026-05-20T07:52:57.859921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/cd/gwf?e=v\u0026v=latest","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:30.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"OPTIONS /cdn/cd/gwf?e=v\u0026v=latest HTTP/1.1\r\nHost: dlslhpkfqfglo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-h-token\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 3\r\ndate: Wed, 20 May 2026 07:52:30 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-origin: https://scotiaonlinebank-chi.vercel.app\r\naccess-control-allow-headers: x-h-token\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: cQMhsU5GFomR_i10HPpR6UlqPvLMYM7QA4gdCe-QFLSzeHds-Cen9A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"202cb962ac59075b964b07152d234b70","sha1":"40bd001563085fc35165329ea1ff5c5ecbdbbeef","sha256":"a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3","sha512":"3c9909afec25354d551dae21590bb26e38d53f2173b8d3dc3eee4c047e7ab1c1eb8b85103e3be7ba613b31bb5c9c36214dc9f14a42fd7a2fdb84856bca5c44c2","ssdeep":"","tlshash":"c72000000c00000000000000c00000000000000000000000000000000000000000c000","first_seen":"2023-03-12T09:12:21Z","last_seen":"2026-08-18T14:13:09.222199Z","times_seen":501,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/cd/l?e=v\u0026v=latest","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:31.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"POST /cdn/cd/l?e=v\u0026v=latest HTTP/1.1\r\nHost: dlslhpkfqfglo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\ncontent-type: application/x-www-form-urlencoded\r\nx-h-token: Fl1gyjD3R5wq2WAo19UmTMPYm8zHxjQZMqglCvNblM8=\r\nContent-Length: 1188\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1188,"data":"o=ODFmNTQxY2QyZjRlYTljMjkwOGI5ZTM5YjAzZTBhODA%3D\u0026m=OyD%2BgPpyYXiqrb0%2FMgXHJ6z5SupnStQNUPaiAJQD4B5jCSefH0q25TXOhMnEXGxLYPfZjQNvfV9vU%2BpSPt1nYo40Sd1v7hQEAEOA9kAEmbL6EhId3ib32dUCfy0uaXwC9XD92DiL22EoGcZYC%2B2xh4%2FOJIp7B0rkyc5ErRPfn7oL3MiteIWk3F%2B4U1IZ87pFhRo8O0Be%2FS%2Bewrc1w3VVqtVuaJ8CulASysYimiLk626JhG7W0pTZFijlwyMoNfeNjePZWCe0Ilt7GXQ%2BZf8hLFCokPLcD4qFNENzTIjnv13U9er19qCWByil9HHVaxsA%2FQpPGUJj1OJB%2BeB8tsy6%2F%2BBFpqVh3oSPKjN6jewiYYcmVXWx4anGP9zNa19L1y4p0rZfDe9FNMQwpbheqtIrBxGxXjhYCySGE0gLP6K%2BFB0MjguDWQvFzIXpFd74BqEsFiGUZ7SmP%2FHSwrU%2FKM%2FbSjECt28j6UseaJcCCdEHIUaggfREmhQzKZGJBtg%2BhleXNyNBVQcVvNDIXpAedMtnjjr%2FsSznwp8oEbFQ%2FSi%2FdJ4PfcmdeIlpwSxkx8wzhr5oHLya%2BDJeAFkIU7PdVQI8%2FREkm%2Bf9nQ0zPR4E7475AFdQnH3YWYzx%2FTSPQiAkwunc%2BxFSsFq7hcAWZekOu7jUqdTBbpbIxAFByr2Ah1%2B%2BYgcciZwwXUheenZ73%2FoPFBsmFmd8W470Yx763imNk3pmenfsTxU5wWhhQBH2UYiTjCgOrE3McnkfQueHKknx%2B54jEj8hK3Pr%2B4KHkjxWZxe5bmmZNhT87CYgGp%2FB4ZmsoOC0X4Kg%2FwRs7r7iGnZG4P%2F2IrFxD1xEqrjBvnZtT6vzSml38%2FQMEpCm4EWV5xOizAXo%2FlMwEezxrPI1yYtGqVvUQgM79V3r03IZWrxiLiSD1g%2F1t0t%2B9rpsI9wq%2FaQGXpXW%2FyOgKhHptKYsVf09ssnG7dkT\u0026s=3gKHhM7FshCpilXyY5OR7b6mdNO3dDlYWLfehHJjm0U%3D\u0026a=5d912602cc592c340155668ee117a520\u0026v=latest"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 104\r\ndate: Wed, 20 May 2026 07:52:31 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-origin: https://scotiaonlinebank-chi.vercel.app\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: n7DG3nt2GET2MrwEu8poXq_kXKTJywO3QVD_C8pP9FZ7kkJzBX4cAA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":104,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"451d14a7d0ca1269e833569e9da0f09c","sha1":"639ed3f4d4e5d60b0ccc2a1681aab71067533b1a","sha256":"14b7f462aca5083ee1f178f1c8d161fc9fc372ce75d40a908e158cd9b09e6aa3","sha512":"9d883c16e280880728bddcbe9e1478cbc001e24d7e49e7d1210272c68c348ba87c861f6ac6facec83a67c81d1c56b1ad67e7c1474a8f8b4f3a5f1c4d7781d180","ssdeep":"","tlshash":"bdb09268552a6ae6c7c939d21a2a36a6e61b2002102001888c3283286e88e093c2921c","first_seen":"2026-05-20T07:52:57.86147Z","last_seen":"2026-05-20T07:52:57.86147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/8903.329ad59d72534d00ebfc.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /8903.329ad59d72534d00ebfc.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::blsr4-1779263547621-4c516ca2329d\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c0f496ec824fee43f0e32f937e7bfcc3","sha1":"95b5963a61de12c75f4eb82e0936e466f02cc04b","sha256":"034b74620a76f742e1d1ff5efebf1991bb3c1c1ddc60545af6f1c2fbdc8eb29a","sha512":"b998ab5d96c66d83f287cf6f36491a6d25ae8a204c1711d1e4bc4e31908cc3507dd57fd31d2eda49cd32f53d873fa215f432b52bd7a2b2c91ea3ec03a8657c28","ssdeep":"","tlshash":"4da0112e22c80c0a32cc20a0208202380020822abeaaea0080ce2b2c238008eb3208c0","first_seen":"2026-05-20T07:52:57.862565Z","last_seen":"2026-05-20T07:52:57.862565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html","fqdn":"1.b406929acabac9b095f124c81bdfcf57f.com","domain":"b406929acabac9b095f124c81bdfcf57f.com","tld":"com"},"ip":{"addr":"52.84.50.80","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:28.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b406929acabac9b095f124c81bdfcf57f.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 09 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:58:4B:EA:DD:0C:82:81:BD:D5:FE:91:1E:65:E5:8E:48:8C:F4:EE","sha256":"54:BB:25:12:36:6C:F0:6A:9E:B0:48:AA:8A:9B:E2:57:31:26:0E:4B:35:6D:D4:E8:4D:B9:0F:B9:57:BB:33:13"}}},"request":{"raw":"GET /scripts/prod/crossdomain.html HTTP/1.1\r\nHost: 1.b406929acabac9b095f124c81bdfcf57f.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 221\r\nlast-modified: Tue, 13 Oct 2020 12:04:25 GMT\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 19 May 2026 08:55:41 GMT\r\netag: \"21e34cf6a03f570df49e212018a567d0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: QKib7reU4CLOOlSTig_-uHW69o9wXMgi6IJAv1AYrK7pORRw4EwuwA==\r\nage: 82608\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"21e34cf6a03f570df49e212018a567d0","sha1":"f0be4058936850ae0163f5137600d14b6632bbb3","sha256":"0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6","sha512":"85f32ea67b64f49cb438a32c9f77d2d746cf67d3387c4c9d5e78ee181b7fb11f444d6dc17dea19a69f8efa5d4d52ac016e6eea78a741a6658cf86c15b7fdace9","ssdeep":"","tlshash":"37d023cd6c71d14b146070551465f0d42073af7a3343c50022c1e0750d107bc8f0f3d4","first_seen":"2023-04-07T05:40:57Z","last_seen":"2026-08-19T07:40:41.328947Z","times_seen":507,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":107,"dns":52,"connect":1,"send":0,"wait":3,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/launch/novaweb/27c34d6e7144/094054a424e3/launch-edbf66c903b6.min.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 07 Apr 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:42:D2:6A:C0:19:F3:C8:FE:20:91:E7:CC:ED:E7:AA:65:F7:B2:5C","sha256":"17:3A:7C:D0:BF:82:FC:D9:7B:71:30:FE:12:BA:9E:F9:25:EB:E4:69:DD:19:9F:7B:68:01:7C:4F:AF:DF:C8:33"}}},"request":{"raw":"GET /launch/novaweb/27c34d6e7144/094054a424e3/launch-edbf66c903b6.min.js HTTP/1.1\r\nHost: dmtags.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: application/x-javascript\r\nETag: \"69fe42df-406ec\"\r\nLast-Modified: Fri, 08 May 2026 20:09:03 GMT\r\nx-vcap-request-id: bef6971d-7f87-4713-655d-1bb7979a60dc\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\nContent-Length: 69176\r\nDate: Wed, 20 May 2026 07:52:26 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://scotiabank.com\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' https://*.scotiabank.com https://www.scotiaitrade.com/ https://www.scotialifefinancial.com/ https://www.scotiafunds.com/ http://*.bns https://*.bns ;\r\nX-Frame-Options: SAMEORIGIN\r\nCache-Control: private\r\nVary: Accept-Encoding, origin\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":263916,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (32705)","md5":"de0350536cbc54f6607c24182f9ea02c","sha1":"87bda4ea840cfc0f62be4e01d5e6d8986d39a00f","sha256":"02842720f41680b07e601797bcc1616fbbe5a7983a170a84fa52ff103bef647e","sha512":"34c978ebf0b65857a8d90b0e8995fc60371908b4e81906720e61c1454b4d60ca3c48f805d8342e161e96b9449f713c85725b1bdab6d31086091c4eebe9cef3d6","ssdeep":"6144:+sJUcrPAHvuxANtn49ZgCG10BL3Ut4tRUyY20N2TEUNpnRn39bA97Y/yhpHPn:pp7Aj49ZtG1uY","tlshash":"30443c8eb354b4ae0ba730b1d56f110ab1ba3845648cc120f6e5f8d97dad98d5273f38","first_seen":"2026-05-15T15:10:24.322203Z","last_seen":"2026-05-20T10:04:12.882029Z","times_seen":4,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":51,"dns":47,"connect":4,"send":0,"wait":12,"receive":11,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/5015.d3650de4964e6f8d93a6.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /5015.d3650de4964e6f8d93a6.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jz7rq-1779263546775-12803362e149\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"62693f7f8bd0ff2544d000ce972abdba","sha1":"d75e08da8e52891b46c281f874f9ab515940315a","sha256":"8a56d4f502a1b4b4c38b5a1976847139d5a295f4423a4c10060c290e69822afe","sha512":"bf4c8d931a445edb297fd26220684bfc247d72babb07c38925c90ad7ce1d3dc04e19423e734d5d1218e5f46f010fad441f721353b299815d370e7837ad311d97","ssdeep":"","tlshash":"1aa0121e05d208cc33c4120021472138401402127f91f64000c81728610888fb300057","first_seen":"2026-05-20T07:52:57.864614Z","last_seen":"2026-05-20T07:52:57.864614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/6566.d60397f1c43d6fba0d78.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /6566.d60397f1c43d6fba0d78.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::9szt2-1779263546775-34d6b6cc8145\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d707fe277bc85ae5c40819b86e07ad43","sha1":"ed1d9bec56d86c0d254c639916a0b064e4727798","sha256":"a2a32fb21f25d1162a549d58612f3c3886844b030cfd782f989310cfd9dafef7","sha512":"d0dc5cf6347cd814cde747c0c8be0d8563432bb47a9b0965d46775b752c3d2a73323282213a375ca3760b7e6d0055d846b97d0ea04d7bb6919a4039a50dcae00","ssdeep":"","tlshash":"86a0121d40c1080873c4090015821338042410237e9491000599622811450cfa3040c5","first_seen":"2026-05-20T07:52:57.865485Z","last_seen":"2026-05-20T07:52:57.865485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/2094.5f9d1e9767e99d017614.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /2094.5f9d1e9767e99d017614.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::khshz-1779263546775-ad801752ce21\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2e9de7637422f9f2254105649063c521","sha1":"963b43c8b950ea5ae23b7610b89755faa69314f0","sha256":"46413e322730c730a2da838d4eccec8e4b6b67f64e850d5a427604834fde642e","sha512":"dd76aa4b76f682322229d1387965ac515210e8f475edb06e9038636b8c357eae0452d85859b3bd93d10de2fb16821397d9061dcb3582e4205b4c20c87fceac31","ssdeep":"","tlshash":"8fa0110e0ee2088a33c822002282323a00808023bea0e208808ca22ca308a8ee300082","first_seen":"2026-05-20T07:52:57.866201Z","last_seen":"2026-05-20T07:52:57.866201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/aempublic/Onetrust/scotiabank/oneTrust_production/scripttemplates/otSDKStub.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 07 Apr 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:42:D2:6A:C0:19:F3:C8:FE:20:91:E7:CC:ED:E7:AA:65:F7:B2:5C","sha256":"17:3A:7C:D0:BF:82:FC:D9:7B:71:30:FE:12:BA:9E:F9:25:EB:E4:69:DD:19:9F:7B:68:01:7C:4F:AF:DF:C8:33"}}},"request":{"raw":"GET /aempublic/Onetrust/scotiabank/oneTrust_production/scripttemplates/otSDKStub.js HTTP/1.1\r\nHost: dmtags.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: application/x-javascript\r\nETag: \"1dc09d84-524b\"\r\nLast-Modified: Sat, 26 Oct 1985 08:15:00 GMT\r\nx-vcap-request-id: eb608ee6-3710-4be9-65e5-719bb9547437\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\nContent-Length: 6793\r\nDate: Wed, 20 May 2026 07:52:27 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://scotiabank.com\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' https://*.scotiabank.com https://www.scotiaitrade.com/ https://www.scotialifefinancial.com/ https://www.scotiafunds.com/ http://*.bns https://*.bns ;\r\nX-Frame-Options: SAMEORIGIN\r\nCache-Control: private\r\nVary: Accept-Encoding, origin\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21067,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (21066)","md5":"cf426cd1788c8356ee58c7abf14c38be","sha1":"609b5a8f0b4c7b5d3d955152a76db699d0eb5382","sha256":"6b1fc966c38b12c845f9fd8bdb76027106b776783fd44eeed917663942b5fd16","sha512":"4650b0fe646169b23104fba724b8c3595f990a2d162954549490165ea379bb1d6aa5e4e071d7abf0133604f6e86ef316b00c9336813b65dc7b4acb052b50fa12","ssdeep":"384:TRFZqWtdbD5ABwXwLrekrff8eTr+xITxMcsn9LuJPvV/:TUAD5ABwXw+krfflyxUx0n96/","tlshash":"0192f78ab100af3406c3529d5a37e34e7336755d3886d068b899dce0657dc8b3623bb5","first_seen":"2023-10-31T04:12:59Z","last_seen":"2026-07-20T17:45:45.024569Z","times_seen":3313,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/aempublic/Onetrust/scotiabank/oneTrust_production/consent/4fbad486-5e37-45d2-bcbc-b89a6d33ea60/4fbad486-5e37-45d2-bcbc-b89a6d33ea60.json","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 07 Apr 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:42:D2:6A:C0:19:F3:C8:FE:20:91:E7:CC:ED:E7:AA:65:F7:B2:5C","sha256":"17:3A:7C:D0:BF:82:FC:D9:7B:71:30:FE:12:BA:9E:F9:25:EB:E4:69:DD:19:9F:7B:68:01:7C:4F:AF:DF:C8:33"}}},"request":{"raw":"GET /aempublic/Onetrust/scotiabank/oneTrust_production/consent/4fbad486-5e37-45d2-bcbc-b89a6d33ea60/4fbad486-5e37-45d2-bcbc-b89a6d33ea60.json HTTP/1.1\r\nHost: dmtags.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: text/plain\r\nETag: \"1dc09d84-129c\"\r\nLast-Modified: Sat, 26 Oct 1985 08:15:00 GMT\r\nx-vcap-request-id: d2770873-ca02-44c0-6eda-607006f73f2e\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\nDate: Wed, 20 May 2026 07:52:27 GMT\r\nContent-Length: 1663\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://scotiabank.com\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' https://*.scotiabank.com https://www.scotiaitrade.com/ https://www.scotialifefinancial.com/ https://www.scotiafunds.com/ http://*.bns https://*.bns ;\r\nX-Frame-Options: SAMEORIGIN\r\nCache-Control: private\r\nVary: Accept-Encoding, origin\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\nSet-Cookie: ak_bmsc=98055ED68A6A768BECCC789247B3349F~000000000000000000000000000000~YAAQTuEWAg6JLkCeAQAAfyhfRB+1GP0iXx8CGKQotMU/xqVbmAo27sQw7XXz59z+6AnKCiLlT14UofQxR40oprnZwG+Mc6wM8FD2E9xxJSN88kz1FJmYlCQcgfyKSzD9Q60Pd/tkWQDbRcxwcEhletHTDqOQ8RASc2ecGpboVVzPAiY6IZOAAWxfwH4iYe9saK4tH3IyaWxd/eQ5SNQOmGA/FwyJ6e+wzSrVV+JOCRQLTPdGkArB4LA7WmsABE/bR/hpe6oHUWrI6amGgEUCmgCZponn7CelwSFug5xl3dPPjYPTKqejatLkinI92i0CyIpsEdaFg+EMUj3F7thROh0XH0TOZWvkusiYl2efplcY1yL1FidPN1ybrWYSw7UM55UkGw==; Domain=.scotiabank.com; Path=/; Expires=Wed, 20 May 2026 09:52:27 GMT; Max-Age=7200; HttpOnly\nbm_sz=5CD91DCBEDF9DB9F6AE2A2B448D47CB8~YAAQTuEWAg+JLkCeAQAAfyhfRB+feEqtUPYzSjBGTD8cBMwgPwQ7UlP6wjMxkykHkkW9R5sDD/hP5We6z69h8hRfHMjWzpZeT2RcHdLRcrz73hExjDJpFyorferkgh3wIx98bb4tm54izDIVj5wGCBcPk10Ug2vtvsxMX494vLItEdpl3sYsR9c7JeTgye9qs61kXsEspw/V1LxDoUgN3FvhYx5konvlnnRa+norlwvaZ8PlCgsZYKX4Z98jtUEV+R/r5hLz/5z0v0fmDI4wAiGu4R3Eg+vSgqFpL+9yrp09bAfYRWgC+nsxbzdxJLpplqj1MA/RFg9XcasBD8bnOQl1bxwQo3/QYIUpz/r4g38=~3294790~3687472; Domain=.scotiabank.com; Path=/; Expires=Wed, 20 May 2026 11:52:27 GMT; Max-Age=14400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Akamai Bot Manager","description":"Akamai Bot Manager detect bots using device fingerprinting bot signatures.","website":"https://www.akamai.com/us/en/products/security/bot-manager.jsp","common_platform_enumeration":"","icon":"Akamai.svg","categories":["Security"]},{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"a5c83dd0c55b426a3c30b19e3a9995a0","sha1":"59b982ba2cb9efd68339d546486096e553ea4b20","sha256":"de125b3c6b2e6c0d7aafdca50a9d0324506829b4497bc099c167fc7d1c2fe806","sha512":"3e980f3fe93675bea6ab4c1acfdef6d5ad55fcd7b637ca1b6a523b16ad539be0872677e2383af1222144f8e8bee62858781a78ba195945cd9881c953cbe8cb78","ssdeep":"96:npyme40wqGWTZO4LvdixCVKxYa6AyPx2jsNj/vjJjzZ5h7e:Tv6EolixT6vZCsV/LJrI","tlshash":"49a1925e764c853ecbaa83dac85dbd094bde38721189fc14c88f4d2c17ab7b71891627","first_seen":"2023-12-07T21:48:20Z","last_seen":"2026-06-08T08:36:25.59435Z","times_seen":233,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":197,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/main.3eea98c15f18c9f89199.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /main.3eea98c15f18c9f89199.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::gpwrg-1779263546768-f3d772038631\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"06b342fd3e3410d9c0f8dabf758ad2d6","sha1":"f932500435b282fbd165bb01d540050ce124439d","sha256":"9a12ca88af1d9ce2b8a21fa9805b65409484ff65323533feb1780c71a60d2d1c","sha512":"52db6a240a8c68da5271c1b5db953e961c33bdc22e54316753c07277e689d9dd48174cd79a8d712ffc5f662b7c36f3b2a6e6ca9953fe756095214ddb99da1429","ssdeep":"","tlshash":"1ba0112e02e20a0cb3c80a00b2022238002000a2bee2ea28808a232822008cea3880a0","first_seen":"2026-05-20T07:52:57.868053Z","last_seen":"2026-05-20T07:52:57.868053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/1603.a3dd99e08fedc44633c8.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /1603.a3dd99e08fedc44633c8.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::blsr4-1779263546775-c72be58278d3\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"72e85e238a2eda7b80e9ef14e88a4776","sha1":"1f5eee5f5d4a94984ec577bb51e52d03c012dc25","sha256":"9a32aa6533551bd0ec3dc2549f660af38190b975b05c710c5b0f8cb94125bbf4","sha512":"c5f0a064e0c095f346ccdf97f77107fb2c7b760e1cb94d3fe359919a282f1c43ac6d457ee9c49f02d6d79a9e7d9265ef862642961a2b8d4411765d1421e7db06","ssdeep":"","tlshash":"05a0110e02c20c0c33c80202228222b8a02022a2bea8e20008cc2b2c228808fe30008a","first_seen":"2026-05-20T07:52:57.868858Z","last_seen":"2026-05-20T07:52:57.868858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/2094.5f9d1e9767e99d017614.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /2094.5f9d1e9767e99d017614.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::s6zgt-1779263547623-9e58b042c35a\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"26908f9e6907751e5a94267f54bd014e","sha1":"fc447eca6dc9aa3c1b1d9e57c765420d5944cb14","sha256":"50b90bf898f29702754c67596fdba0857c45200a7f12aa2a13d85d40fd64f8ef","sha512":"975b8d8e685f6fe65f65024f4f9053561170f3f93a506f85e25d16946e4f00047c29642c5d12fc2bf0208d98eb35a71c0fe5b521cc56198565ca122daf4ee0da","ssdeep":"","tlshash":"daa0110e02c00a8832ccac203002023c202800a2bea2ea0020ef2aa8a20888fa3000e2","first_seen":"2026-05-20T07:52:57.869692Z","last_seen":"2026-05-20T07:52:57.869692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/assets/698eb6d352a5f2f0b96d.woff","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/698eb6d352a5f2f0b96d.woff HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::s6zgt-1779263547757-5359cf83e542\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"64d51193360ac568a8a16b81f09f6b3a","sha1":"c853d9b92d71e9c308f806f400861c913b2ab37b","sha256":"78ca0535b4670c330f72f4e4c3f2683f8f7e765ca1301ceccf1cfca0b597a066","sha512":"6474d5c20a35ce0f46ad522ce57af8b326f83776ea0727ea5fca4f1ab5343a1d818ab7fba43dcbaa3910af45741a4957bece45728a3ec858dfad442eeb587c12","ssdeep":"","tlshash":"98a0110f00c02a0832880a002202023ea08a002bbeacea0028ce2a2c22008cea3080ca","first_seen":"2026-05-20T07:52:57.87038Z","last_seen":"2026-05-20T07:52:57.87038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/cd/gwf?e=v\u0026v=latest","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:30.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"POST /cdn/cd/gwf?e=v\u0026v=latest HTTP/1.1\r\nHost: dlslhpkfqfglo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\ncontent-type: application/x-www-form-urlencoded\r\nx-h-token: Fl1gyjD3R5wq2WAo19UmTMPYm8zHxjQZMqglCvNblM8=\r\nContent-Length: 1442\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1442,"data":"o=ODFmNTQxY2QyZjRlYTljMjkwOGI5ZTM5YjAzZTBhODA%3D\u0026m=HxRAE1MXn%2B3ueFUDNOdbde5EiELLBwk4Bs0yyUzSS23T%2FFiphSfklSma8QIHxAqkgBGivyrT6OHkq69luUJ7AnN61q2YP0ATMVcKSQX8u%2FYS75LY%2Fo0S45l4nMlZ0txg9jHuKqqwVeuwqeCamLr0pUt1EOJ3nwr24uYt3v5x67wmwK8OIVmt3xdGl%2F3G0rr54zUIXE7m8KPeAb1BlNGY4F1rgaKL6MsXoSQmNNGtFq3UaUOSHSr82xOYeGVr%2Bnz8gFsGfeN9VXkwXNNkZv8sYiRtdEgI09nRd5kqq9SnT4HV9t%2FXeV2TPjmsRyviv8%2FZiXY5Pxw2qEnoJJbGxnuaQxwPQenhkVGmoB7uy4QM0XzyGAyV4VGk%2FbyDtL2PudWxlAwe4xd2aG%2FdOlRrKj%2B5GLa5SUQQozuXfDF4vxwHOY%2BvkF2FR0AnWUB99F7MCs707xXUp5b3FpWcBESIYAS6mAvFeyKnrTF%2Fw9BO2YWI8aFb7EP2tlN4xXl%2FFK5OW23RT2Lsl%2BgpzvzQ%2BGTYUou%2Bq1UztPLHWFHhb89DWUFCXJEWnJ%2BEzjEhoplmFEO7zDAjGSiUgbLYEPj8j0fDin%2FNpU8p0NygVv3MddYditYMGSFDHiJxs0ZmXNgk3g%2BYawPJIQrJlFZkLG3uLpDNpQOzHWmlC3LWW3M5aq8oFLJod2%2BpFm6L4lHq8jpE%2B3WMjwjufHHN4CRnhaaNJh5kivep8IeKR0ZjygKKsuRFgl3hKp70Vf%2F81l8LyMv1nayBGiJG4E7SRKi%2BWupXC28fn%2FRZAflo6gpOhQjcWXC%2B%2BaLJVFBlAc40s4m9iqEbbpLQFppsNb6ac67Y1I%2BFE%2Bg9venKaf32JLakjMDzc8Zd8FWcqjR%2F%2B39xG8bdvXyMXcND7jWftMw6FPfvPCmCrbdUbIyiWBkLazyuwtuy1NNO84psrzzLOAnbb5AkYziaIF%2BQuT5OOi8bfcrrYtKbU2PSh6FVVumuQeTZdsbB9CTD0XJVbXy14XU%2F7WHwIbGlcnbL71H46tiPqj2j4lAhwdjnPStpfUMMN%2B7PwVSxD%2B10TXjNEypHKVlxb9%2Boz8yDp4aUiusIBTcQZg%2FOaBOTZVL9co7HKIIF7PETsTIxNsTxz60ur95jjCdz1p02%2FBGIVvi0M3zDw1bdJaf3hFhxOf6FOI8I6fbVxopt69NsafZUXgjYKo%2FT%2BO31JgdDVQI%3D\u0026s=DRbbw7yn2lsP62K%2F0%2Bp8YGWLXZOVvLh%2BZ9xSi%2FIMBCc%3D\u0026a=5d912602cc592c340155668ee117a520\u0026v=latest"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 20 May 2026 07:52:30 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-origin: https://scotiaonlinebank-chi.vercel.app\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Ykbw3ATjXNdWvX9iPXX_ktpn-L4YSnjuQH4cwivkY_Lb7SBg-mzulw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":12320,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (12320), with no line terminators","md5":"e52d7714d90d82de6b71c96017b30528","sha1":"7ee16d02505acb9c75c4974570e5a971e69cbba0","sha256":"a347610bf89335bdc1cfee848d77756afd7df2a7386b3042c9737215ec174362","sha512":"eb5de76fd6431b2464f793df46f3eb539bec4d7db8ab20bb9cf93f2f5f8f02a65ef834e4e997e1bffa0efd4fb94dc0da0dd1ff862eb0c94b8225759916e42393","ssdeep":"384:2UhT7J3W+RWyiXWuEszVsw+UsRaDrs5ZaD:2UhT70WX7uEoOwleYrs2D","tlshash":"b442d0ebd082dda27e6520545ac75edcf8712ac86f44072bec8177870f876f81ac25ac","first_seen":"2026-05-20T07:52:57.871397Z","last_seen":"2026-05-20T07:52:57.871397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":0,"dns":0,"connect":0,"send":1,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"somniture.scotiabank.com/id?d_visid_ver=5.5.0\u0026d_fieldgroup=A\u0026mcorgid=0AAF22CE52827A080A490D4D%40AdobeOrg\u0026mid=30274541510401873205375665618182737133\u0026ts=1779263547206","fqdn":"somniture.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"63.140.62.236","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"somniture.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 07 Jul 2025 00:00:00 GMT","end":"Mon, 06 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8A:1E:60:39:38:76:41:EB:AC:DA:BB:CD:FA:C2:10:58:AF:D4:2A:EB","sha256":"93:72:E9:32:52:7E:E9:24:F5:4E:04:92:FA:DB:5F:07:97:FD:8B:56:A2:A4:6F:DC:1B:02:86:4D:FA:FF:03:FA"}}},"request":{"raw":"GET /id?d_visid_ver=5.5.0\u0026d_fieldgroup=A\u0026mcorgid=0AAF22CE52827A080A490D4D%40AdobeOrg\u0026mid=30274541510401873205375665618182737133\u0026ts=1779263547206 HTTP/1.1\r\nHost: somniture.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://scotiaonlinebank-chi.vercel.app\r\naccess-control-allow-credentials: true\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\np3p: CP=\"This is not a P3P policy\"\r\nserver: jag\r\nset-cookie: s_ecid=MCMID%7C30274541510401873205375665618182737133; Path=/; Domain=scotiabank.com; Max-Age=63072000; Expires=Fri, 19 May 2028 07:52:52 GMT; SameSite=Lax;\r\nvary: Origin\r\ncontent-type: application/x-javascript;charset=utf-8\r\ncontent-length: 48\r\ncache-control: no-cache, no-store, max-age=0, no-transform, private\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/x-javascript; charset=utf-8","magic":"JSON text data","md5":"fc1f179728922c5716b6307bc4092b08","sha1":"24b81f6b4d7d8c5f77a3c4ab03c2b527e202124a","sha256":"163c1f67746c789c67587acf5693d006ad3e4179594ee932c10fe75269ce30bb","sha512":"8172719b16feb3d1ef55852cacdc2a67e5db712d34f980c1114ae908b7703e9e6727f5fd003568c1fadd3a0f419f26d5a7e632658fde616fed153f816711d70c","ssdeep":"","tlshash":"63900253c6542556502a111b004b5d1020151b6445df460510490a447d52418198b90d","first_seen":"2026-05-20T07:52:57.872219Z","last_seen":"2026-05-20T07:52:57.872219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":301,"dns":31,"connect":32,"send":0,"wait":38,"receive":1,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/assets/8b09a2396c536b9bb789.woff2","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/8b09a2396c536b9bb789.woff2 HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CMCAID%7CNONE%7CMCOPTOUT-1779270747s%7CNONE%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB; AMCVS_0AAF22CE52827A080A490D4D%40AdobeOrg=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::blsr4-1779263547803-862732ae4c58\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ecbe41c623f556114aea726cef2fde59","sha1":"af6fc8a40b80d2f39d2627a02a7d1b8b91f7889e","sha256":"da82aa2a4cfdf365ec3277c843cc73dce8fdab5ee1b31b44844156bbc1b74e35","sha512":"7a526db0c37cd58b6d9ae185ca220a9ff8874fcd469e6a5b4d76998920294f74f79f1765a61ff495d68d5bfdf70fcd32171112e26ae8a53e353f34107c7f275a","ssdeep":"","tlshash":"0ca0123e06d1080832c4144110421234900051167d69e50090c9131c22010dfb300080","first_seen":"2026-05-20T07:52:57.873035Z","last_seen":"2026-05-20T07:52:57.873035Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/runtime.2ab4744471b5a1b74bc0.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /runtime.2ab4744471b5a1b74bc0.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::q8hhg-1779263546766-0716d6731f91\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ab0e5a3c8851f88a6baea3b3300a14ef","sha1":"bab1f353be3027e5b26d212de3b1741b9c2ab183","sha256":"e217b3be9f05c4df499fd257805e1cd00ae470e8fb24c9857525908c34389043","sha512":"4c8d397d68aee1ed95006262802cadfb4486e6e6075526e673aec57bc8d3588e406402c65ea1ca58f5e193e205074f38afe11dea2e769696f5f144abdf9b4d9a","ssdeep":"","tlshash":"14a0120d06c10c4a728c110052a1223520001153bd599110008e233c52140ce6300085","first_seen":"2026-05-20T07:52:57.873832Z","last_seen":"2026-05-20T07:52:57.873832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/3800.e8b5f2bfeae1f16b0048.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /3800.e8b5f2bfeae1f16b0048.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::blsr4-1779263546768-25e1342e65ae\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1cf1045b9ef81badcbfe6d2243cb2eb4","sha1":"ffa940f652060696c3b8d891bf5118ca6740f5fd","sha256":"42baa604fe5f491dc85b960578a8477535002e59da6bcddb77e3ba98603d8f0a","sha512":"a164d08c59d9d9d64594daf07d0fae2cac8eb154874f7ab13be5d9d1d42b90aae55097129e3a9038df0ebaca4dd153665ac188115d5011ca2e79a11169c935e5","ssdeep":"","tlshash":"b1a0110e02e20c0833c80000328222b8a2000222bee8ea2000ca232833220cea300080","first_seen":"2026-05-20T07:52:57.874663Z","last_seen":"2026-05-20T07:52:57.874663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/runtime.2ab4744471b5a1b74bc0.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /runtime.2ab4744471b5a1b74bc0.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::btlj8-1779263547594-42f9eb0b358c\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0fa84bfc1de72562d02278a77db99981","sha1":"31c9427ff0076a17e1cb6def35ae9b89eb84dbaa","sha256":"f88ee1b144bf82c9661d80f8d8c6f2bfe4ad81aae61f2a5eb5fa723a803b37bf","sha512":"1202702c4e67c02f801809a4334e6acc0118b8677c22cafe1cf3ddde74b4692b470de51ab8f35cd373619048ba528e5e52fe55e439b82f77acebdbe81aee36ea","ssdeep":"","tlshash":"c7a011ae00e20e8a33880022e222233828000022beaea22800ca232e320808eb3008c2","first_seen":"2026-05-20T07:52:57.875482Z","last_seen":"2026-05-20T07:52:57.875482Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/9466.53254bc063fa88fe3542.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /9466.53254bc063fa88fe3542.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::btlj8-1779263547601-544f22c4f2be\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"359c00d1feb747df1041eb5443f151d3","sha1":"bc382c7042ebb6c640c89add5d74c4a88db3f5b2","sha256":"be40277bdcd6cd62ec741954d7c95b54e5c7881b5d1f2cada92dfe71372ab9a9","sha512":"070c88225f79b97f50bd751871077d981b4c2ebaa80942e775b6aa7a87bc20d3fcc4e4d6482918843b520c641e25c5b1cab99f20f735f678646e8b6bb86eb695","ssdeep":"","tlshash":"dfa0220e0ae80c2f33cc0830202202bce82000b3bea3e22000ce332e2b000ceb3088c2","first_seen":"2026-05-20T07:52:57.876286Z","last_seen":"2026-05-20T07:52:57.876286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/launch/novaweb/27c34d6e7144/094054a424e3/f71e695e756b/hostedLibFiles/EP31dbb9c60e404ba1aa6e746d49be6f29/AppMeasurement_Module_ActivityMap.min.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 07 Apr 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:42:D2:6A:C0:19:F3:C8:FE:20:91:E7:CC:ED:E7:AA:65:F7:B2:5C","sha256":"17:3A:7C:D0:BF:82:FC:D9:7B:71:30:FE:12:BA:9E:F9:25:EB:E4:69:DD:19:9F:7B:68:01:7C:4F:AF:DF:C8:33"}}},"request":{"raw":"GET /launch/novaweb/27c34d6e7144/094054a424e3/f71e695e756b/hostedLibFiles/EP31dbb9c60e404ba1aa6e746d49be6f29/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1\r\nHost: dmtags.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: application/x-javascript\r\nETag: \"1dc09d84-cd4\"\r\nLast-Modified: Sat, 26 Oct 1985 08:15:00 GMT\r\nx-vcap-request-id: de499433-2302-4225-79d3-8aa0ead80c92\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\nContent-Length: 1598\r\nDate: Wed, 20 May 2026 07:52:27 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://scotiabank.com\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' https://*.scotiabank.com https://www.scotiaitrade.com/ https://www.scotialifefinancial.com/ https://www.scotiafunds.com/ http://*.bns https://*.bns ;\r\nX-Frame-Options: SAMEORIGIN\r\nCache-Control: private\r\nVary: Accept-Encoding, origin\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3284,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3138)","md5":"ddda3fb3f27121fcba6a33a82f32d57c","sha1":"0f4765c47022c3713dd7b45d8e52ab82e9cdef38","sha256":"2a250e2f225e48cf583d54a0a42d623c700847de17323bf23ea372e5d9e89cb2","sha512":"c07a9ecf855bea02ccfd29c6331e7d90b1a5655da82f5e3c954fcd83202427a9498ba1c0a8c510705188cc7c8e08a0650ba85bba11d0b2e20b6fd3375cc21a06","ssdeep":"","tlshash":"9561ca9ebf0960335a9622f54cdf490fc57027291d44d070d9c5ecc9b82caf35056a7b","first_seen":"2024-11-05T10:55:53.33155Z","last_seen":"2026-08-20T12:21:16.266217Z","times_seen":11208,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/ca/mutha-scotia-wrapper.js?a=5d912602cc592c340155668ee117a520","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /cdn/ca/mutha-scotia-wrapper.js?a=5d912602cc592c340155668ee117a520 HTTP/1.1\r\nHost: dlslhpkfqfglo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 20 May 2026 05:36:49 GMT\r\nlast-modified: Tue, 10 Feb 2026 16:44:19 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\netag: W/\"f544c5f66a12a729a5fd262681fed8f8\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: dU76-6-JJFPDDWgY85E7t8QcfKZqruXVGva7pWp_EPZ0Cyp8YXpGpA==\r\nage: 8138\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5260,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5260), with no line terminators","md5":"f544c5f66a12a729a5fd262681fed8f8","sha1":"2d97f2c2f78d2ff439749111e47c8c73fc56c19b","sha256":"ae0934c663aa974c5f560ae495c28ead74c438de08b6f863784e53f2163fc630","sha512":"d7be24860af42624d6e9beb89596c9ab8d6b24ca16c61c22c0b09bec4fee1be78371d10c88432b7fcb6fca8b59d158e653ae8421849de95f8ee98113a6bf4464","ssdeep":"96:shktoJj+y+QbMtV6Y1kXpRAjrnf3GzRiJz30sU:C5Jj+8bMLNApujrnf3aW30sU","tlshash":"30b1e2d87be5e10f7bdd0e93fd249fea00ba966a61927307c36cf98d14a9207c1ac444","first_seen":"2026-04-21T16:53:49.524246Z","last_seen":"2026-05-20T10:04:12.865514Z","times_seen":8,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":28,"dns":10,"connect":1,"send":0,"wait":4,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wup-appfrst.scotiabank.com/v3.1/vtkWnf2KZlhEZk7X","fqdn":"wup-appfrst.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"4.249.171.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wup-appfrst.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R40","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:AC:2D:70:10:E0:D0:E8:0A:64:EF:C0:64:10:AF:ED:55:B2:54:FE","sha256":"00:CD:03:88:7A:93:A4:03:C0:AE:DC:65:69:50:51:35:E2:63:8B:6E:18:FE:03:9F:5C:48:88:99:54:8C:AA:A0"}}},"request":{"raw":"POST /v3.1/vtkWnf2KZlhEZk7X HTTP/1.1\r\nHost: wup-appfrst.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 229\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":229,"data":"{\"ds\":\"js\",\"cdsnum\":null,\"csid\":null,\"psid\":null,\"muid\":\"1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\",\"context_name\":\"cd_auto\",\"requestId\":0,\"agent_type\":\"primary\",\"agent_id\":null,\"c\":\"js\",\"sts\":null,\"std\":null,\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 1497\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: d48d8c45-7815-4896-b12b-5b7e69d5c7ac\r\ncontent-security-policy: self\r\nreferrer-policy: no-referrer\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nstrict-transport-security: max-age=63072000;includeSubDomains:preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1497,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2bd345c26c171e9330057b7ccb4756d7","sha1":"7232359c57f7ad322d9baefab3120878a1bc0160","sha256":"dbac4812fe625338385fcf8571b7049f357de9ede8a564698d9d6c6cff324077","sha512":"f534544499ceb3e2c010d32d7235488914ef622db67ae6afe2de66a291b7df1b9f82283f14907fe3025e5c477de4ea2ef47efb2bcaf2b6dcea7754ecf82d14ad","ssdeep":"","tlshash":"a9316526126cd47196de01ae623272959ff4337780cfa455329fe44805e13b65d1b40f","first_seen":"2026-05-20T07:52:57.878788Z","last_seen":"2026-05-20T07:52:57.878788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":978,"timings":{"blocked":424,"dns":69,"connect":126,"send":0,"wait":129,"receive":1,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/assets/014f38a6d2766385fd66.svg","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/014f38a6d2766385fd66.svg HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jmpcz-1779263546766-77de59ba5e7c\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e3dd2cf1abdaeefa75671806ff146c7d","sha1":"ad4b6a6181026a562435c083b6c9835cc7dc0857","sha256":"561458cc22720f7987fc59891b31ec430c5e23aa754e88e9761bb41d178ecfd9","sha512":"c92e8b666cf56d6e1715f86c965c9f65bdbd3d3bf07d3ad261cb46f44d10f812135cd12fc3d6e5bddf5eccc9fe8b9a0e1394261828f3bd7a4f9d28f90b5fd45c","ssdeep":"","tlshash":"c8a0240d15d10c4d33cd01001143113404c411d37d57d51000cc173cf3700df7340041","first_seen":"2026-05-20T07:52:57.87956Z","last_seen":"2026-05-20T07:52:57.87956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/5015.d3650de4964e6f8d93a6.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /5015.d3650de4964e6f8d93a6.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jz7rq-1779263547619-5880082d5cd3\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c1869a8c8ece815f6c0a9054f10192a3","sha1":"c0a15b1d7a65161523dc98c775c5071ac5d53845","sha256":"30c3ac8f491a825ad2adae5110fbc5e46a330f418f3bb20f10488c352027414c","sha512":"8ec0734ce34ca1c3c1c2e5713bd7adcd7dff6b3309ef98923972985b35ff572e7a92e8caaaab6896900173863a2f6c507042ecdd1d309fbb00e2a21f9cea26b3","ssdeep":"","tlshash":"d2a0112e0aea088c33c80820220a2238282c022abfa2e200c08a2328220088ea302082","first_seen":"2026-05-20T07:52:57.880303Z","last_seen":"2026-05-20T07:52:57.880303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/cd/l?e=v\u0026v=latest","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:31.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"OPTIONS /cdn/cd/l?e=v\u0026v=latest HTTP/1.1\r\nHost: dlslhpkfqfglo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-h-token\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 3\r\ndate: Wed, 20 May 2026 07:52:31 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: nginx\r\npragma: no-cache\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-origin: https://scotiaonlinebank-chi.vercel.app\r\naccess-control-allow-headers: x-h-token\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: FYgNBMvPFpuGpp3jYUj6BAOi-0SrgiEbtR4fEYkTNJBWcvfAji3j9g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"202cb962ac59075b964b07152d234b70","sha1":"40bd001563085fc35165329ea1ff5c5ecbdbbeef","sha256":"a665a45920422f9d417e4867efdc4fb8a04a1f3fff1fa07e998e86f7f7a27ae3","sha512":"3c9909afec25354d551dae21590bb26e38d53f2173b8d3dc3eee4c047e7ab1c1eb8b85103e3be7ba613b31bb5c9c36214dc9f14a42fd7a2fdb84856bca5c44c2","ssdeep":"","tlshash":"c72000000c00000000000000c00000000000000000000000000000000000000000c000","first_seen":"2023-03-12T09:12:21Z","last_seen":"2026-08-18T14:13:09.222199Z","times_seen":501,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/login3.21af1f942eb7bd654864.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /login3.21af1f942eb7bd654864.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::s6zgt-1779263546775-de5ee6cef827\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c91e20921b9e7901692607c96d6181ae","sha1":"c0f8ec9ebe62134e1d13665f909b5114de480e5d","sha256":"f4f7efe89b49925caaa34cc2a5ad64a56c679d0db37cef403f386239ea943326","sha512":"6371a895f3c99e2df671aad834e0b6e4c1babeb651a1f49629b1cf62ff7cb6f54185941644dcfd47cf8135a15189fbae0a6694aee465acb97c3f35994be7e9ea","ssdeep":"","tlshash":"5aa0112e00ca0a8832880b02220222be200c00abbfa0a20020cc2228b28a88fa308082","first_seen":"2026-05-20T07:52:57.881111Z","last_seen":"2026-05-20T07:52:57.881111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/7118.bd71c4ff46b87aca6f52.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /7118.bd71c4ff46b87aca6f52.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::btlj8-1779263547616-b63251b5f0af\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1b262fa17046e123da84964d469dd1af","sha1":"770df8a83be79c2a8d230b47008de596f1e3244f","sha256":"59161a7cf0336c867b1fcbf7978b748ec602acdef6cd9d6f9dce69faebcf1db4","sha512":"79af4dfbc19b92e2c0d530ab03b3b43546cdcaf28da10716c18e573d9742b1c3d40da71febc9bce25c07accc4519caae718a3f67ff86049632303ac5e7e5974b","ssdeep":"","tlshash":"fba0110e02e02808bfc82830202a023808280022bea2b20000cea32e220828efb000c2","first_seen":"2026-05-20T07:52:57.881959Z","last_seen":"2026-05-20T07:52:57.881959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/1603.a3dd99e08fedc44633c8.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /1603.a3dd99e08fedc44633c8.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::blsr4-1779263547623-36c1b861e1a9\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0ede74d0bf8d796bf71f05948d1eec76","sha1":"56fe00d48262964409bdd1d096c8d76fae5a7acc","sha256":"8732c4c00b04cd62ca2f2f218be228401a3448c7b72ad2a3f23a74285c0b7451","sha512":"84d00708bfc71adf295a77952979b15c58c210bf05b1427d2d1bd4b5018a7fa60fee5a15220689e70f51d11baf86300d6aab5f38044a920b94b0a6aa03fe6537","ssdeep":"","tlshash":"4ea0120d11c40a0933c810111183013e243442127d56e51004cd2318630108d6300081","first_seen":"2026-05-20T07:52:57.882755Z","last_seen":"2026-05-20T07:52:57.882755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/ca/lwsa.html","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:29.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /cdn/ca/lwsa.html HTTP/1.1\r\nHost: dlslhpkfqfglo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 20 May 2026 02:19:34 GMT\r\nlast-modified: Sun, 05 Apr 2026 10:26:10 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\netag: W/\"63115651eeb096dc7615e44565cb8579\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: sEXJFjCO5mhvOwm7VVZAn2yLm_VCMbK_XpaZTeFCpEWp3r9KZflIHA==\r\nage: 19976\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1269), with no line terminators","md5":"63115651eeb096dc7615e44565cb8579","sha1":"1c6608b4ac9caf047d2feadb81bf881b920c2cda","sha256":"f389ac64ee847c0071245c49f0add1981153c17da4c9e62c262f61cd4e37acb5","sha512":"55efebdd2db56ade879f385aed6c0ac71b93742a6e40e10044cfd051ad0f305ff4a58c03b38f5a3e82ed3d89b2d29bfd8539c6152d97da65a4716572dc314eec","ssdeep":"","tlshash":"4a2168f0abd0e12bbaad0717fc01eaf80136965e32a13903836c7a8e15e55c7c5a0484","first_seen":"2026-01-13T11:56:27.14933Z","last_seen":"2026-08-14T21:55:49.342035Z","times_seen":233,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/9466.53254bc063fa88fe3542.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /9466.53254bc063fa88fe3542.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::khshz-1779263546767-e672b178c2db\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"233ceaa7feae09e1bab53da86a1b0a85","sha1":"b8aadfe1be6935603453b30ed2aee853711a8d98","sha256":"4d64dcec1846c5786439deff68628025570f7c28c951f4c8428a71635e529779","sha512":"67289b5c6f01b294a799535e60560725e2a5ad1adff54a254016d57cf7d7866640ab9d61a326c8addeffa1edf1d6802d6a797d80eb911c08852e8fac449c9f2d","ssdeep":"","tlshash":"e4a0120e88d10a0a728c51005101323800008012bd95d224408c522c12205cde701050","first_seen":"2026-05-20T07:52:57.884062Z","last_seen":"2026-05-20T07:52:57.884062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/7118.bd71c4ff46b87aca6f52.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /7118.bd71c4ff46b87aca6f52.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::94fkb-1779263546767-08b5215d2ebe\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"529e6f089d7a6ae2468f1810700fa821","sha1":"33246ec99ca783e1bd3e83e99380e5c03f419b40","sha256":"116175403b891a6c49323d296f9d5941d7ede2dd1101c053b77e7a13fb854cac","sha512":"46dd839a21879c219b65c770728998617dc4a4bffd4ae8c15d50beb425923ffa5316c0e42bb05560cd85061cac3f2c15ac8f390371e4d8b964b17f1040cb126f","ssdeep":"","tlshash":"7ba0129e04c54dc8338401102182213518101112bee29614408d223811000cea300044","first_seen":"2026-05-20T07:52:57.884909Z","last_seen":"2026-05-20T07:52:57.884909Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/8421.7d179393bd3a2e0f5ef6.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:27.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /8421.7d179393bd3a2e0f5ef6.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nCookie: AMCV_0AAF22CE52827A080A490D4D%40AdobeOrg=179643557%7CMCIDTS%7C20594%7CMCMID%7C30274541510401873205375665618182737133%7CvVersion%7C5.5.0; cdContextId=1; bmuid=1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jz7rq-1779263547616-a1cbf6b49f8a\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2a0d3644a01446639dd5a20f1064583e","sha1":"01457c1608e950532ee54f7c50785d45f670769d","sha256":"522fe3e27002115839753ae83cbdc8f660578eca205618e0a545cc806087d96d","sha512":"0ecc95268272842e82c63e4eada25c943d91fb7cbb09bff805c4d76558a2ce6a602f00a121e9d61672b58a0cf13d577353f3dbb0c58fcf338ea4faa42d4954c3","ssdeep":"","tlshash":"eca0121f05d3090c32c8061010460139101402137fe2f20c04c92338520848db700081","first_seen":"2026-05-20T07:52:57.885706Z","last_seen":"2026-05-20T07:52:57.885706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html","fqdn":"1.a79ab95c1589a13f8a4cab612bc71f9f7.com","domain":"a79ab95c1589a13f8a4cab612bc71f9f7.com","tld":"com"},"ip":{"addr":"13.249.8.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:28.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.a79ab95c1589a13f8a4cab612bc71f9f7.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 31 Mar 2026 00:00:00 GMT","end":"Thu, 15 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E1:A8:B1:4D:F7:FD:A1:7B:08:91:67:E8:53:68:54:45:35:31:5D:45","sha256":"D8:CF:AC:19:8A:FC:A9:13:F6:05:B6:E6:90:14:5C:A9:F8:17:80:69:8A:67:40:CD:64:9E:F3:CB:11:41:3D:9C"}}},"request":{"raw":"GET /scripts/prod/crossdomain.html HTTP/1.1\r\nHost: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 221\r\nlast-modified: Tue, 13 Oct 2020 12:04:25 GMT\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 19 May 2026 15:37:20 GMT\r\netag: \"21e34cf6a03f570df49e212018a567d0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 014a11ebf8efb524b8c418cda7b185d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: WJ7rMdxl4UikBRd0o96Y7-gzti-lu0ydhhb5VEmV3I_e3ykXKY8h7Q==\r\nage: 58509\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"21e34cf6a03f570df49e212018a567d0","sha1":"f0be4058936850ae0163f5137600d14b6632bbb3","sha256":"0a23512ea579554af1f2614d6dea6120d38660028fc7624c71a978478fae0eb6","sha512":"85f32ea67b64f49cb438a32c9f77d2d746cf67d3387c4c9d5e78ee181b7fb11f444d6dc17dea19a69f8efa5d4d52ac016e6eea78a741a6658cf86c15b7fdace9","ssdeep":"","tlshash":"37d023cd6c71d14b146070551465f0d42073af7a3343c50022c1e0750d107bc8f0f3d4","first_seen":"2023-04-07T05:40:57Z","last_seen":"2026-08-19T07:40:41.328947Z","times_seen":507,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":75,"dns":43,"connect":8,"send":0,"wait":9,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dmtags.scotiabank.com/frst/common/24b4fa14.js","fqdn":"dmtags.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"2.22.225.82","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apps.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 07 Apr 2026 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:42:D2:6A:C0:19:F3:C8:FE:20:91:E7:CC:ED:E7:AA:65:F7:B2:5C","sha256":"17:3A:7C:D0:BF:82:FC:D9:7B:71:30:FE:12:BA:9E:F9:25:EB:E4:69:DD:19:9F:7B:68:01:7C:4F:AF:DF:C8:33"}}},"request":{"raw":"GET /frst/common/24b4fa14.js HTTP/1.1\r\nHost: dmtags.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nContent-Type: application/x-javascript\r\nETag: \"68d56046-119d42\"\r\nLast-Modified: Thu, 25 Sep 2025 15:31:18 GMT\r\nx-vcap-request-id: db4a601d-bc5e-4adf-7df7-c523cba72a39\r\nx-xss-protection: 1; mode=block\r\nContent-Encoding: gzip\r\nContent-Length: 214055\r\nDate: Wed, 20 May 2026 07:52:26 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://scotiabank.com\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: frame-ancestors 'self' https://*.scotiabank.com https://www.scotiaitrade.com/ https://www.scotialifefinancial.com/ https://www.scotiafunds.com/ http://*.bns https://*.bns ;\r\nX-Frame-Options: SAMEORIGIN\r\nCache-Control: private\r\nVary: Accept-Encoding, origin\r\nStrict-Transport-Security: max-age=31536000 ; includeSubDomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1154370,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63549)","md5":"65a2694dcdeb7516fef4aa650bfd56c2","sha1":"fd28dca4d86af7f1a610e19524aeb06c86d9c448","sha256":"ef71ef9104275744dfc43a32b970b1d0c65ada111b7b3c4a3de00b5f5be301f2","sha512":"007b3e872d8856415deccab280a25ea0b010099a0ce80dc449559aa61adc62b0054786aca1fc24ba0abb91386548e51b303c9dcc795d25b5d1c5051b853e61c1","ssdeep":"6144:PS8UvxKQ2WYosNCaT51id1BUKFX23aygawxZglZy4LzdUWDJlZceezyM7orMl+9S:6vxfE5EUhm1iuUlHYTZ","tlshash":"f925f98cb291b03547976161413f010bf2396966609e90d8f679d8e9befc8ce9273f39","first_seen":"2025-09-20T05:01:04.225458Z","last_seen":"2026-05-20T10:04:12.88549Z","times_seen":25,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":52,"dns":47,"connect":3,"send":0,"wait":12,"receive":11,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/9455.1a5911ce08a5b092e306.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /9455.1a5911ce08a5b092e306.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::q8hhg-1779263546775-c83f99a12aaa\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"883d326e8abd52bf4b29256d0e75ca13","sha1":"851027639307c458f4c0a1583f43fd164eabdc49","sha256":"787875ff276527fa5c5d1aecb09f172d94b6575f73d9b02853770b52d2e14b7e","sha512":"f6e078d4e5bc6ddd10b50dedca07212ae7cae369e202e17119a7b61dbd577b3ccb149c73073f5e7a175f01d42b612987cb655d6de1df90204acc6b6636a2518c","ssdeep":"","tlshash":"0ea011ae0ae2088f33cc0200a2822238000800a3bea2e22080ce233c220808ee308082","first_seen":"2026-05-20T07:52:57.887686Z","last_seen":"2026-05-20T07:52:57.887686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"wup-appfrst.scotiabank.com/v3.1/pofOcwIrpMmo","fqdn":"wup-appfrst.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"4.249.171.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:29.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wup-appfrst.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R40","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:AC:2D:70:10:E0:D0:E8:0A:64:EF:C0:64:10:AF:ED:55:B2:54:FE","sha256":"00:CD:03:88:7A:93:A4:03:C0:AE:DC:65:69:50:51:35:E2:63:8B:6E:18:FE:03:9F:5C:48:88:99:54:8C:AA:A0"}}},"request":{"raw":"POST /v3.1/pofOcwIrpMmo HTTP/1.1\r\nHost: wup-appfrst.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1552\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1552,"data":"{\"ds\":\"js\",\"cdsnum\":\"1779263547887-sjn0000701-7727d83e-a681-4a30-9543-bd4f8f8ea817\",\"csid\":null,\"psid\":null,\"muid\":\"1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\",\"context_name\":\"cd_auto\",\"requestId\":1,\"agent_type\":\"primary\",\"agent_id\":null,\"sts\":\"gAAAAABqDWg7w5uvwGoCfNrMLXLiu8gRhCDxcr4y7mFtYr9NmBCBBKfUcLwG29Sk-zHikqSf6F4NCDwAGOZixr6NNlZzjV7nnz743_dsT0ePlU-zEuDgXSku3K1GPGIONEiRlXiLGcok9CvGvuZWKEaIZ5OPt3htecs2bovIUwzwj2c7KmBYXaNMTC3TAfsrgRew-FDqeW5RsaIr2ohGqk4nyphSMQlcGve6BnxBZcHrVyocfIUvl6Q=\",\"std\":\"gAAAAABqDWg7EcQDn_LaI0Del-WFv3rzDHOC3pPSeWl5jOVN1aWGxvosffIAuaSgVsCT9s4uvCPqzVOs2PiFMcPNDcj9jjlOEuyFWhG1XexyVuMtPxp3tmPQqqB7dWsRCfrKhFQVaI1UcYb-GVAucSxFkkT_mUX-eJ1B6ftr4Sbvb7yIc0j6RGNmDvYve1LSYTM98KhxhQrQMv6AjaWElgnQE86suanW3A==\",\"d\":[\"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\"],\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 625\r\ndate: Wed, 20 May 2026 07:52:28 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: 6d638693-d68c-4f46-96cb-2fdbe65e8a1c\r\ncontent-security-policy: self\r\nreferrer-policy: no-referrer\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nstrict-transport-security: max-age=63072000;includeSubDomains:preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":625,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c0b2fc6b7d33ff23928b1196c1c240eb","sha1":"35e62d773d945f2fae6429669918cf9420d2b883","sha256":"f6c0dc518e267e2c332388113501df0bf5db1cc566440378928090f59092cc12","sha512":"2cc1216d4f0707846097b0d0f28b45f42d4e72df1bcf976b1c50327ef899b0802612e0a131008d37e0c5cfa38fa30f23dcb7c5ac6804b9ad2eeb1bedf0fa842d","ssdeep":"","tlshash":"dcf06840c8c1df0642a01de7505d78501cf70595837695897471d5717472514fb9c32f","first_seen":"2026-05-20T07:52:57.888393Z","last_seen":"2026-05-20T07:52:57.888393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/8903.329ad59d72534d00ebfc.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /8903.329ad59d72534d00ebfc.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::gpwrg-1779263546775-9db8f21888a3\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"06f0c20a60cb26db9fb84e84f4e356ec","sha1":"46762dce2d22db4639b4c79a92e86bed62c9e143","sha256":"94874929774dbb5d239ab60f7ddc6c7392b58e396d9d675a5985cc47ff52eb93","sha512":"e10c4ffa06b6e4a6b408c69da3cbc457c8625cededcf1e9e21fabf73eaee476fb267ca594435e553b24294f3f003ae38cf7b0f0e77bd1510d1bfad3e1062cbc6","ssdeep":"","tlshash":"eea0120f06d20e0972c405006141123440140032be91a504408a6218110428fa300081","first_seen":"2026-05-20T07:52:57.889257Z","last_seen":"2026-05-20T07:52:57.889257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"dlslhpkfqfglo.cloudfront.net/cdn/cd/gpk?orgID=81f541cd2f4ea9c2908b9e39b03e0a80\u0026v=latest\u0026udevid=\u0026e=v\u0026v=latest","fqdn":"dlslhpkfqfglo.cloudfront.net","domain":"dlslhpkfqfglo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.203","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:28.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /cdn/cd/gpk?orgID=81f541cd2f4ea9c2908b9e39b03e0a80\u0026v=latest\u0026udevid=\u0026e=v\u0026v=latest HTTP/1.1\r\nHost: dlslhpkfqfglo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Wed, 20 May 2026 07:52:28 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nserver: nginx\r\npragma: no-cache\r\nx-k-comm: ek7g87u/vsVkYF/CDQrUEw==\r\ncache-control: no-cache, pre-check=0, post-check=0, max-age=0, s-maxage=0, no-store, must-revalidate\r\nreferrer-policy: unsafe-url\r\nx-content-type-options: no-sniff\r\naccess-control-allow-origin: https://scotiaonlinebank-chi.vercel.app\r\naccess-control-expose-headers: X-K-Comm\r\naccess-control-allow-credentials: true\r\nx-permitted-cross-domain-policies: master-only\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 2f3a70deb5812eb0e48215ada7b72404.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 7Rscv3wZ30GHB3OyVLawTmmxYMhNKeejAkprmXO0OMpzGyQtEEHbTA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1080,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (1080), with no line terminators","md5":"5d413bf5574d27bd8c700fe3ef402c42","sha1":"cdcb6596187fcd720238705e4bbfa19450bcbaaf","sha256":"2e684a71b7263362463d5c5964fa77c57e69586e24896a6c6422f1039aea15d0","sha512":"b4dd6ddb10d0f27fd86bd7c526aa33acbce380e99c53165470f040d67c1e28554cbac20333269a9f1442d9864b3844c4790f8925306b2de9e983759fd4387b4f","ssdeep":"","tlshash":"6d11e9c67973be66acc3c4eca31622a8d0c22f04b8027406261f35f0652d44fee1d8cb","first_seen":"2026-05-20T07:52:57.890013Z","last_seen":"2026-05-20T07:52:57.890013Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/1242.ef89c7caadc83a35f220.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /1242.ef89c7caadc83a35f220.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jz7rq-1779263546766-ae09ef1690a4\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2f456d7f6cc0894ff63399e034b5da16","sha1":"6fc2a060a9f2f5d5b95b5d0dc8dc45265eb7c7f4","sha256":"3d37a2e7da41a05e72f1675f238d5c3004f9279813ebbd8498331b4fed459e5e","sha512":"60b95f01c2e8f2d8f8843f9949bcfbe5303fe36788c5d5dcf37cba4b2dc0c72a5ae2be4c2d3fcf2f09e477db8136e80dcf60974b15ff7f20dc7d995497078f3c","ssdeep":"","tlshash":"cca0122e05d2090932c401102186153a100012227e96e31400895778230448e630006a","first_seen":"2026-05-20T07:52:57.890832Z","last_seen":"2026-05-20T07:52:57.890832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"scotiaonlinebank-chi.vercel.app/8421.7d179393bd3a2e0f5ef6.chunk.js","fqdn":"scotiaonlinebank-chi.vercel.app","domain":"scotiaonlinebank-chi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:26.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /8421.7d179393bd3a2e0f5ef6.chunk.js HTTP/1.1\r\nHost: scotiaonlinebank-chi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 20 May 2026 07:52:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::9szt2-1779263546767-5bb1e7f15290\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"2d70a191c1ca09c9b6021ee17257d5c6","sha1":"9f86e5f1e18366ed33c18586eb8e6e0246313c21","sha256":"2b152617e5b093e80710defbeb668c36bb8d1b1880b5511d095224bcea7f16b2","sha512":"821ff851848135cd5237fba1d8a227ea2b1d994d35df14a745a5dcc7534a402c6333b18707b141826f1bc3970190f8074eb562bca11f5324179f61be42a6adb6","ssdeep":"","tlshash":"f1a0120e01c16d08338805002141323d04044163bd59991c00c81a3851041ce6340044","first_seen":"2026-05-20T07:52:57.891629Z","last_seen":"2026-05-20T07:52:57.891629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-20","alert":"Sinkholed","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-20","alert":"Phishing Block","trigger":"scotiaonlinebank-chi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Scotiabank","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Scotiabank phishing","tags":["scotiabank","financial","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"wup-appfrst.scotiabank.com/v3.1/GTVNz2wJTJ","fqdn":"wup-appfrst.scotiabank.com","domain":"scotiabank.com","tld":"com"},"ip":{"addr":"4.249.171.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://scotiaonlinebank-chi.vercel.app/signinfolder/login.html","date":"2026-05-20T07:52:30.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wup-appfrst.scotiabank.com","organization":"The Bank of Nova Scotia"},"issuer":{"commonName":"Sectigo Public Server Authentication CA OV R40","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B0:AC:2D:70:10:E0:D0:E8:0A:64:EF:C0:64:10:AF:ED:55:B2:54:FE","sha256":"00:CD:03:88:7A:93:A4:03:C0:AE:DC:65:69:50:51:35:E2:63:8B:6E:18:FE:03:9F:5C:48:88:99:54:8C:AA:A0"}}},"request":{"raw":"POST /v3.1/GTVNz2wJTJ HTTP/1.1\r\nHost: wup-appfrst.scotiabank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3808\r\nOrigin: https://scotiaonlinebank-chi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://scotiaonlinebank-chi.vercel.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3808,"data":"{\"ds\":\"js\",\"cdsnum\":\"1779263547887-sjn0000701-7727d83e-a681-4a30-9543-bd4f8f8ea817\",\"csid\":null,\"psid\":null,\"muid\":\"1779263547276-C66C0832-1AE4-499C-A0B2-9A2F610810CB\",\"context_name\":\"cd_auto\",\"requestId\":2,\"agent_type\":\"primary\",\"agent_id\":null,\"sts\":\"gAAAAABqDWg9u9qPchjXPZeacXt3bwcZ_ubE_omuiU07s021Mqx8CzTWriY0qQSVJMhPzqI2D5muhvWg4-5HJW6Zzvx6EGlBPytucM0eIeeTNKZjmiCSfmvTWfVk4C2z83oBeAkmqcE5BNgAeAhGY9VxuNR2e1WElQm5hFJ5C21sZzgd5vIa4Ee3NNrZ1nTj7i-JmDvxXGejksgRx7Ww2jn939gWA4PQnqsWiysnLI5YkfTetR5ml1r_5UlMDcYwkO941jZV0BRXzS2Lh-6JopiI_UuFCtY8W9KIYf1GTn41pb5iCGDl6tZXcHn8xgRjfTphomSNvM3QVerSSVO2zuP6wcefQzJvfg==\",\"std\":\"gAAAAABqDWg9XDClHPDOTI0IFjl0BqNER9yTLuEYAQrjVHQbP0155KAd8Hqs5BANWtNJnk-5oAZY6uZzJ3--w0mPY--Y_L6RNbMfXXryPHZwS0E9Dhrc9M2A96CxC1FgJ9PU6DxyEMmQBeh50gZ5uvT4UKZ7DcHrUZO0LpOk0nNbnJMHVEh2E2_7Z_AB13R5l2m1exavCKuHfVPPq0q8tMHIHDVz3Dom7g==\",\"d\":[\"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\"],\"ott\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 625\r\ndate: Wed, 20 May 2026 07:52:29 GMT\r\naccess-control-allow-origin: *\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\ntail-id: c5bc1180-c68b-4f74-a3b5-6fe8651d3d47\r\ncontent-security-policy: self\r\nreferrer-policy: no-referrer\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nstrict-transport-security: max-age=63072000;includeSubDomains:preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":625,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6544d1f11d080884a324bad3073df016","sha1":"ef6e88d7cf064845e51657f1e0de2608d942b425","sha256":"758aa2f51802fa47bf67b0b212fa2302c644b79da2da040e0c43de5ae6483502","sha512":"883261d2710a924bc9c16ececd0937130899f7937d4472fbff4f5209347064d61927044760568d25a16e8c483c5303213029e091dc0b736848bff2b2defc1cb4","ssdeep":"","tlshash":"a6f02da79c24ec4134c0ea72305669321cab715696885fb03ac7035202e2958ea6128f","first_seen":"2026-05-20T07:52:57.892393Z","last_seen":"2026-05-20T07:52:57.892393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}