{"report_id":"b10350c0-ab16-4e43-9ace-907f392be8cf","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-10-14T13:05:23Z","url":{"schema":"http","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"title":"Log In | Ent Online Banking"},"submit":{"url":{"schema":"http","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-18T13:05:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-14","alert":"Detects file containing Telegram Bot API","trigger":"entcu-service.vercel.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"online.ent.com","ip":{"addr":"104.19.168.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1993-02-11","domain_rank":959734,"first_seen":"2014-11-26T22:59:27Z","last_seen":"2025-10-14T13:02:15.510133Z","alert_count":0,"request_count":1,"received_data":745,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"use.typekit.net","ip":{"addr":"23.36.77.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":4054,"first_seen":"2012-07-05T01:42:39Z","last_seen":"2025-10-12T22:16:38.028463Z","alert_count":0,"request_count":4,"received_data":210663,"sent_data":2316,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"entcu-service.vercel.app","ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-10-14T13:02:14.888121Z","last_seen":"2025-10-14T13:02:14.888121Z","alert_count":50,"request_count":16,"received_data":510377,"sent_data":7553,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Adobe Fonts","description":"Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.","website":"https://fonts.adobe.com","common_platform_enumeration":"","icon":"Adobe Fonts.svg","categories":["Font scripts"]},{"name":"Typekit","description":"Typekit is an online service which offers a subscription library of fonts.","website":"https://typekit.com","common_platform_enumeration":"","icon":"Typekit.png","categories":["Font scripts"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":2,"received_data":830858,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"libs.salemove.com","ip":{"addr":"3.167.2.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-02-08","domain_rank":97606,"first_seen":"2018-08-28T18:19:24Z","last_seen":"2025-10-07T23:23:49.376809Z","alert_count":0,"request_count":1,"received_data":274909,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"p.typekit.net","ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-02","domain_rank":4638,"first_seen":"2012-05-23T14:28:57Z","last_seen":"2025-10-12T22:16:37.971457Z","alert_count":0,"request_count":2,"received_data":680,"sent_data":1168,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"content-cdn.com","ip":{"addr":"34.237.178.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2021-05-12","domain_rank":779094,"first_seen":"2019-04-11T17:07:45Z","last_seen":"2025-10-12T03:38:12.886964Z","alert_count":0,"request_count":1,"received_data":299,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"md5":"65e823be20f215bcdf11b2a64eb802dc","sha1":"7d8e01942b7e4c90485ce84b20c50c978bb5bc8a","sha256":"aec034dce4d82007301cb2949b711d037703155f9773a6a70f82df66eabf13bd","sha512":"8d7f66ebf08ade8c6fec46980afa25d4e4a8a56c8c9835631ffdeac4c90afaa4da199e3980924cf71cd0f6ea196df7f4848ed7adec7f053b9ec995c4925e120e","size":1101,"token":"7579447717:AAHlYUIcNTKAAOxIl3ZCBbKHYJZTNOXZSp4","is_revoked":false,"bot":{"token":"7579447717:AAHlYUIcNTKAAOxIl3ZCBbKHYJZTNOXZSp4","user_id":"7579447717","username":"GlobalCUVplugBOT","first_name":"GlobalCUBot","last_name":"","chat":{"chat_id":"614648422","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a49c8744598e96c01d2daf881826b49","sha1":"4b30cfb7324189bd047c1f6e8b7852ebc8122fee","sha256":"31d792d13c95f38b128c5aff77154428f3d0b1b6153bb29c0b4af23aeedb1859","sha512":"ef2a03b0ed696ed4923f5a00355f6d17a5b0c38d8c2d1c2ac2c738ccf9b01b4f091a7d48331392cb077703bcdbaa10f6a610e8f0fa8c28c459efdf8c69c71794","ssdeep":"","tlshash":"416000c003330f0030c003f00f0c30000c03300000cc00303c00f30f000fc0000000c0","size":15,"data":"","first_seen":"2023-03-08T03:48:18Z","last_seen":"2026-05-01T11:29:45.144222Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8695ea480060b1bd5fcd1d8394fcdd6","sha1":"e6e91ef25af29177e138edcf076397ed3b375e30","sha256":"90dd087cd9451c6ddd9a9b6a3af4a97c91a8efa9830ee71fcf0bf39b74d295fc","sha512":"8af2bc8347c3e254b9252ba1e6c1a0045e5e67d0f4e4e7418c0bced2b9b5b47a6a7c8ef3d7af40a49f7acea949ebb5d49974e9cbbe6be8c27a04f4e2a1bcdff2","ssdeep":"","tlshash":"90c08cae3e20e8858246d028311946f4887269327db0d245e52492aa22d9b3e005b6dc","size":157,"data":"","first_seen":"2025-10-14T13:02:19.480693Z","last_seen":"2025-10-14T13:05:27.730126Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8620a3107fa5d9f49dd0ee53799e9fe","sha1":"67e950eb5295637d0a880e9905813fe46c01cc3c","sha256":"85306fdc1b702634834d7b59c0d5eef10c0d9fcb972f670ac8ea75e05bb8ffc6","sha512":"a9155ca0a6a7652cec12d6d40442cf5b24b761b6dd49096c169359115d73aa0086f86c20d405c855c166eb939ef7279e6f8ff6d2a8daf595186f0b48075a0099","ssdeep":"","tlshash":"bad0a766197689306798024f71b7e3d8266165606b12664086cedc2b5b21ed309a19ac","size":236,"data":"","first_seen":"2025-08-16T14:29:15.951754Z","last_seen":"2025-12-16T20:05:50.603178Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MBFQ2W","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d01ba64e2aed100ee21ad02972d7dc","sha1":"bfe4995848b625831298e14e701921b2181fd8e5","sha256":"8d1ed5ddbe10f0bfb5c34e67d81003b07f78d86b52ce8b2875b9004fa7f40b9d","sha512":"226deb8e53da343d86497ac2e02d3c50e2aae39319e226a43e1d0ed8f88f11a2ba54e60f0500599509cc0baa697d0a13f3b9b2ac25dd985c277f1380f7214b15","ssdeep":"6144:oxrfwcwg/AptWhM0uwbWFiJQk+Nju5204OfVWyYYpFc:VuG0KIJW0ZC","tlshash":"e8b418cdb3d674768296b574803f014fb57a28e2b54cd854f08acde42d74aa92223fbd","size":505961,"data":"","first_seen":"2025-10-14T13:05:27.505286Z","last_seen":"2025-10-14T13:05:27.505286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c982c4332456a20b33ce672c7f91b77","sha1":"f4bab7cb5396fda420a55c1a8ba35d1c164da409","sha256":"5ab2d7a0507603528bebd0c2a6a129813a83e1c03c3aa8c9e940cfe682e52f08","sha512":"92cf9aae71404f20e5dcd9dd4bccfefeb98fceee4216a6cf4cfa394fc9c77c5a4d3b9bb3603081498271d7b73f896b58a396f0dfa88ac23e457d31cfe646401e","ssdeep":"","tlshash":"d660008080080b0880028803b008202022c80000000220828008280000200000800e80","size":16,"data":"","first_seen":"2023-03-08T03:48:18Z","last_seen":"2026-05-01T11:29:45.145958Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd29666fcd867114f9250061c1bb7ae8","sha1":"8ed080f5f62496672e44c5d107c6b6e08be5a8fd","sha256":"68a653da8f66a09575549ef1e5b04bdac80d600e475efb074756e81804d444f0","sha512":"db8d2ddc9120d7ef2c3aa428205de390a18c6b210b05351b8498aebe01a301c20f4a1bf4ebb875c1d14dd368cc23d2be4d28bc781dcd7fb993a5411f3fd0dac1","ssdeep":"","tlshash":"be60003f30c00000000300003000c30030003000300303c00330300000c0c000000c00","size":13,"data":"","first_seen":"2023-03-08T03:48:18Z","last_seen":"2026-05-01T11:29:45.147584Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"adb04412b000242d87ffbf8c25749d07","sha1":"9e6f8258f42b2d370bc3179de830a22437fcabd1","sha256":"c8a1ea8fb75746c96ba7fb1f62c139e68716d0c7ef447b94548d89a52466c109","sha512":"97916ac6151f389d0a1843e2c84fb7ea18d1468c4f59dda14365cb4d44266f050d8f3aaeae3fe6cfa7f0e8d6ce9d9209e0b40c8a9e9ff74b9ca14ccaa9d96767","ssdeep":"","tlshash":"efa002554ee507846679810455576b277a230097367126d3854760d4bee4a4bc8dea90","size":65,"data":"","first_seen":"2023-03-08T03:48:18Z","last_seen":"2026-05-01T11:29:45.148451Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"063ac75b635fe5287525cdca8d7cce16","sha1":"0ed2b79f5e0ca221bdb63756d612fe541db10b8c","sha256":"d4a20dd45ea405dbfa51b5567001e1ed22f3cca97b2b13f94a36080ab320abba","sha512":"d73029047bb15de76ee19262bdcafcfda674206abfac019d8ea5b4b087150e4e6f9b8a9758890379e944433ef42d96fd5cab5c8d4449bdf3f89b07d8b9b3f5bd","ssdeep":"","tlshash":"a0a022ffce822ac0a2c000e0af00080b8283300c00a3a3080e8300388a088b380300a2","size":72,"data":"","first_seen":"2023-03-08T03:48:18Z","last_seen":"2026-05-01T11:29:45.152413Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d5afdbce892c5e5d7637d6bf6d784f6","sha1":"f8a8954018c3cec64d80643a517a345e7a11a672","sha256":"a0f7b5ea50614eb782f351a000a066fad85f4500a7996124e6bba6bace732646","sha512":"75a0be0418d59504df8f76dd4f65b2cf1fd00601e6b89774bf0228731d3030270ea8281eb1d7a540b7fe4e175effd7a5241c6992311927092600e737619f04f3","ssdeep":"","tlshash":"6cc08cd6a696042016f770329830020e6036a8d968484d872976405020a6f6c223388a","size":145,"data":"","first_seen":"2025-04-17T11:32:28.921196Z","last_seen":"2026-05-01T11:29:45.15508Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"179673b7f1b1f7b7ab85ea80e5769227","sha1":"bbeee58d305d9ff56c9658ab5f13d75d5fad909a","sha256":"3c08fe6c6fc61c6186dda3056fad404b7db51061763c80c433def5f2f0fda5c5","sha512":"2596f1e4b8319b25a64d5410be29e95fa5aa1ee83c92f210d78236028c01398b51127c667326c4c3d66735d23b47c6a033ae3f91898d020af95a023fccf88b15","ssdeep":"","tlshash":"6311d0753b1a1534c685418b317ee7a93d3250217b029184c36cdc295918ec3149fcbe","size":921,"data":"","first_seen":"2025-08-16T14:29:15.960095Z","last_seen":"2025-12-16T20:05:50.603786Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eaa50cb2da7f07beac420455ab214fa4","sha1":"f9b20062eec900c708a166b2c284676e4f4b6ad8","sha256":"3e1ba2292cab4274762cf111e326aab1a0ff7a1a24612f3c8f19f0ca68da1b64","sha512":"fd90af3b5d91bcfacda997aa6c7535bdd5e2e2f14982f73b44039660f8305fe9c5fa41eb545d3bf886f27a75a1abe555cd42fd240e61e49af77c7a2f5bafba85","ssdeep":"","tlshash":"b5019caebcd38430d5a3a0ab2b2b8094357210173d11d942b80c8a591fa0a6f1c2afec","size":737,"data":"","first_seen":"2023-03-08T03:48:18Z","last_seen":"2026-05-01T11:29:45.151142Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-15591247\u0026cx=c\u0026gtm=4e5a81","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0557d2493fa4aa57485cdd4f7054244f","sha1":"b22b49609992a772986ea5751f6acf75dd3514ae","sha256":"ff912b832c35ab565353ae23a53f32b112bea1201928c63e867608a89c07b79c","sha512":"0a680d7462e0f227164531e045a7d804d52c19abcda53b3b09ab98b300443f6c22f9b29c551d4b0f51376d073cf6642b3218a4b83bf1daa0aef28fc17ee6bd48","ssdeep":"3072:Bdap1am+So4ype106s6VIMDcajIu1yeZGbQ9hJ2RT8PWNjxW55204O/XYAmCRs1a:c1/ype4hM0uwbWhJT+Nju5204ObtIiZ","tlshash":"9a6418cd73d674664393a478503f004bb17b6992f84cc898f186dae52e70aaa4277f7c","size":323617,"data":"","first_seen":"2025-10-14T13:05:27.369819Z","last_seen":"2025-10-14T13:05:27.369819Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4865c9a47a151a54360ce161fe991df8","sha1":"8bbb324123be19f9304355deec47f6d47490b28a","sha256":"dbe28ec3ff9a9bdd24fc58f7d6170a78c922e999a24d9769f618463579e05e92","sha512":"37bce9a2d0bef039b814600598669d5ededd844e101cb53c1fd68ce8eecad112e43a65881d68e3e0e975cff971c46cf6e1d6a774a2e5fdd580220cc9728c3cfa","ssdeep":"","tlshash":"dbc08ccc00a196748262309f5a8f4d6810b1201bf0679e67333ce108af5ae7c1786add","size":185,"data":"","first_seen":"2025-08-16T14:29:15.96545Z","last_seen":"2025-12-16T20:05:50.604991Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"65e823be20f215bcdf11b2a64eb802dc","sha1":"7d8e01942b7e4c90485ce84b20c50c978bb5bc8a","sha256":"aec034dce4d82007301cb2949b711d037703155f9773a6a70f82df66eabf13bd","sha512":"8d7f66ebf08ade8c6fec46980afa25d4e4a8a56c8c9835631ffdeac4c90afaa4da199e3980924cf71cd0f6ea196df7f4848ed7adec7f053b9ec995c4925e120e","ssdeep":"","tlshash":"8111214644fa012007b3904e5b87b68a2523202f7c94e9563e0c47930f8967e78b23db","size":1101,"data":"","first_seen":"2025-08-16T14:29:15.967619Z","last_seen":"2025-12-16T20:05:50.605514Z","times_seen":27,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-14","alert":"Detects file containing Telegram Bot API","trigger":"entcu-service.vercel.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"use.typekit.net/af/ab749c/00000000000000003b9af1da/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a\u0026fvd=n5\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Sat, 10 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89","sha256":"6A:79:75:73:C0:A8:12:54:14:ED:26:F6:54:AA:3F:01:34:4E:41:17:1C:AB:70:3C:72:0B:AF:BE:E1:75:6F:6E"}}},"request":{"raw":"GET /af/ab749c/00000000000000003b9af1da/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a\u0026fvd=n5\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://entcu-service.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 65044\r\netag: \"4549db46ac4ae6393a61e42460bb5406bfabeffe\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nakamai-grn: 0.6f4d2417.1760447097.1429797\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65044,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65044, version 1.0","md5":"c04304c52b40a1d131f82ffaf2bc910f","sha1":"9edec67d45a2749814f8916f527523cef08458de","sha256":"4e6b3ef425ab736614f94fbe9328cfd0b90f3479bca1071aaa4400847ed21405","sha512":"f951ed3270d5a38477203b0aea739ffb9de136819e553c1b39b85f4c9d2755b21b0121f549ce20f60283b00c6402f60cd6d5ac2ab3f262451e066c1cdfe4b07e","ssdeep":"1536:tHzp271GlylkwRB07EjZ88u6EiIsstrPx8iDgp1qv1c:tHzp8GlPNojwPxYz","tlshash":"38530285b7a293d4dadd43e0a793d405dc4f85818f505a43366e4ee1fa28848f3eb8cb","first_seen":"2023-04-05T03:22:30Z","last_seen":"2026-05-01T11:29:45.105994Z","times_seen":61,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":29,"dns":4,"connect":1,"send":0,"wait":2,"receive":4,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/Banking/hlm/Ent.React.Template/media/js/main.778d3401.js","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /Banking/hlm/Ent.React.Template/media/js/main.778d3401.js HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::nxqln-1760447097727-4569d2541e05\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"548089793942f365221bd4e36222406c","sha1":"9fb72a432f37b4629ae8fca2167846c7b2e0de99","sha256":"20c4794632fb27cc70e798ac10ab3c47fd33013e14b8987e2ab9457e18bfd14b","sha512":"b71bb43b8e6b362a1e2ce1d9b3f8ab8f6a7305d5c9a0a9836b300aea8c6e10b7ff3825cc6249b59b488d271c39106129e5f6bc4008e8f79ec5b9511852240fc3","ssdeep":"","tlshash":"fca0128f02c0085e33d080103142013c441c01325d11aa10209f261416009cd6340090","first_seen":"2025-10-14T13:05:27.358833Z","last_seen":"2025-10-14T13:05:27.358833Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-15591247\u0026cx=c\u0026gtm=4e5a81","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=DC-15591247\u0026cx=c\u0026gtm=4e5a81 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nexpires: Tue, 14 Oct 2025 13:04:57 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 14 Oct 2025 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 113765\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323617,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"0557d2493fa4aa57485cdd4f7054244f","sha1":"b22b49609992a772986ea5751f6acf75dd3514ae","sha256":"ff912b832c35ab565353ae23a53f32b112bea1201928c63e867608a89c07b79c","sha512":"0a680d7462e0f227164531e045a7d804d52c19abcda53b3b09ab98b300443f6c22f9b29c551d4b0f51376d073cf6642b3218a4b83bf1daa0aef28fc17ee6bd48","ssdeep":"3072:Bdap1am+So4ype106s6VIMDcajIu1yeZGbQ9hJ2RT8PWNjxW55204O/XYAmCRs1a:c1/ype4hM0uwbWhJT+Nju5204ObtIiZ","tlshash":"9a6418cd73d674664393a478503f004bb17b6992f84cc898f186dae52e70aaa4277f7c","first_seen":"2025-10-14T13:05:27.369819Z","last_seen":"2025-10-14T13:05:27.369819Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/Banking/hlm/Ent.React.Template/media/css/vendor.36ec3a08.css","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /Banking/hlm/Ent.React.Template/media/css/vendor.36ec3a08.css HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::4jqff-1760447097320-5b97e7a90b7f\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"185d0064f154907e644079ef9d3664ed","sha1":"4300204c7f5ac122db02514a4911dffe79d4d241","sha256":"fb7fa70cd083f50dc978c10dfa9f2509c0e094e510fa4379911f0d3ac3916121","sha512":"87ed8c5342dcf9916034eeb1a22f00299a09dad52ac4e8d2a58aa2417c4ec5d48a941e32242b2b0de1aedff796927e8277537a2eee5c4710ec1807002d842ce5","ssdeep":"","tlshash":"f5a0128e04860d183380011130410275900405315ea6960040cf271016406cd9380041","first_seen":"2025-10-14T13:05:27.380026Z","last_seen":"2025-10-14T13:05:27.380026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/Banking/hlm/Ent.React.Template/media/css/main.7113223b.css","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /Banking/hlm/Ent.React.Template/media/css/main.7113223b.css HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::nxqln-1760447097321-76bd9f435c65\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"b16d566541e86d38566c8fa1d1cc6ab2","sha1":"5d6bd5384c75083ffcfa5ff715c1c1098c979158","sha256":"30423ea0c18913bf4229a92ced5b692fdd62d341ca98507d6b06fbebfca4fcc1","sha512":"6a277bc39b1e01ff2200f79ebca24051b2b608929b4ab94d50642d0d28466902b813a187a5de2b786103cb144a20ab845bd13a032f88c46e473fc8404c9afa60","ssdeep":"","tlshash":"a4a0118f22a0080e32c000282302023820088232ae28aa0028ce23282228a8ea3a00a2","first_seen":"2025-10-14T13:05:27.390867Z","last_seen":"2025-10-14T13:05:27.390867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/one.css","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /one.css HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 16111\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"one.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\netag: \"6ff4fabaa496c894bd08ad4ba3255dce\"\r\nlast-modified: Tue, 14 Oct 2025 08:36:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dv5w5-1760447097322-5bcbb6726c8e\r\ncontent-length: 36121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":221320,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (63389)","md5":"12d24747b20eac02069357b106800edb","sha1":"3dfcdac48d743bcff0c5e9e77b8781f2240a2073","sha256":"8cde9f9f2f7ffc277e35dd423f57e8f10a2deba6b5ab2039e3bf4ae8654cb682","sha512":"787a009a318c630c8d7cf7552be97290786ab13da9dfa3232a5869b87fb251e421bf4ece44fa27818530110f77e471908c9a3ed4eba12c6822e7397493f93b9b","ssdeep":"1536:lgNF0to7UbejToc4BauoxCkQoRa3KnFJ/ya46SeaJNJ5:liiroxCroRaanFJ/1SeaJNv","tlshash":"472493a0e01031eb7273c65eb3c4fe86271db222d17a4eb6f55a685c4bc55ce12a3f19","first_seen":"2023-04-16T08:02:42Z","last_seen":"2026-05-01T11:29:45.11454Z","times_seen":53,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/two.css","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /two.css HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 16111\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"two.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\netag: \"fbd1ac00289023de0093e464d261a809\"\r\nlast-modified: Tue, 14 Oct 2025 08:36:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zk47j-1760447097323-9243e9b610f1\r\ncontent-length: 7752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":227560,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14902)","md5":"d646e4c865ee4fb1e58a26f71d37fe54","sha1":"784de76d15a1634973d7b0c9207d83bc9882f49a","sha256":"cf0f1c5739bf87f8fbc322f6e4a25bddd9b2c582e3494c49a2b842498576c498","sha512":"043f6c5a67402f1446e900ead80cd879e33ccb12abe49c6080cfdf97eab1d46d955d4a111eb2b4ef6941bcf68d641e5ae4c48439d3380af3a2ddef5b996092df","ssdeep":"768:rEqOEqNEqiEqnyOEq+EqwEqOEq8SEqEa7GEq4EqUEqGyEqjqEq0cEqNEqHcSEqJY:HyQc+F","tlshash":"5f24439974f012bf60f74fae66dccd91961c696290f53e7abdac206085432ce3263e53","first_seen":"2025-08-16T14:29:15.936222Z","last_seen":"2025-12-16T20:05:50.594763Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libs.salemove.com/visitor-app.5439b767-55012431.default.css","fqdn":"libs.salemove.com","domain":"salemove.com","tld":"com"},"ip":{"addr":"3.167.2.7","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.glia.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 16 Apr 2025 00:00:00 GMT","end":"Fri, 15 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8B:55:D0:9D:BD:56:04:5B:20:08:9F:3E:38:28:4B:55:F9:1E:69:B7","sha256":"73:55:F2:AD:47:5D:5F:58:67:17:92:95:60:72:0D:69:A3:66:8C:CC:04:33:7F:22:EB:2E:78:CC:68:0C:34:52"}}},"request":{"raw":"GET /visitor-app.5439b767-55012431.default.css HTTP/1.1\r\nHost: libs.salemove.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ndate: Tue, 14 Oct 2025 05:23:50 GMT\r\nlast-modified: Tue, 12 Aug 2025 08:53:27 GMT\r\netag: W/\"d7b0c2109deacb7cd43d9b7fbea027c5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-s3cmd-attrs: md5:d7b0c2109deacb7cd43d9b7fbea027c5\r\ncache-control: max-age=31536000\r\nserver: AmazonS3\r\nstrict-transport-security: max-age=63072000; includeSubdomains; preload\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method,Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1b7f8001b2b06f9624559a35b6822156.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Zp3laCarEBdJaiuUDmt_RqA8xYfp9z9p5AmjkZfacORygvagFdAc2A==\r\nage: 27668\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":274174,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7b0c2109deacb7cd43d9b7fbea027c5","sha1":"bfd4da49a3bf3d8107dd75d312df52f678a41bbd","sha256":"d0adc421fae71d292a29cc1eb13a4a424113a0ffc8cd7ae30b19cceeaa4eea89","sha512":"27c14958e856f3fa63233454bd8c2edf689a4b4559be19fff042ab56593edc9a5ef02c794fd5a649f9c245e34dd06e5d15c7d92b49ec01ff7527e3602c8be306","ssdeep":"1536:fcuMwE42J3wIYa3/r59VrpVQwpyloByBHFoWozgli4DOicywKs4oA9BQnY+Ox4f6:fe94+wIYiBWV59AOx7zzf","tlshash":"4f444418eec3452ab5aa6a3d6d4a645d2b0de443c4fe8ffd7018e194a2c73b11374e72","first_seen":"2025-06-13T19:01:50.278541Z","last_seen":"2025-12-16T20:05:50.554067Z","times_seen":372,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":224,"dns":21,"connect":1,"send":0,"wait":2,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/Banking/hlm/Ent.Responsive.Template/media/scripts/glia-channel-events.js","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /Banking/hlm/Ent.Responsive.Template/media/scripts/glia-channel-events.js HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::dv5w5-1760447097337-128081d87b47\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"315948652558ff13c9420a0f7390a3ab","sha1":"9515ec7d530cda82f4400d94ba00176bf7a03a40","sha256":"40090413d66164e387aba1b8c15d3ac059c6ff526ecb3f0ab8916568bd0b3c4b","sha512":"2cb256c202135afe4b43e72dd6b71479c6fd0c33ab7bd9f2b0e4cd57e0b2a4e3316bad50ca25643ea8913c7855c00076cfa57fb2ce3366ecc0b72f516bbb5199","ssdeep":"","tlshash":"24a011af028c0888b3a000003282223808088322aa38ea0280c82a0c2280acea380088","first_seen":"2025-10-14T13:05:27.454815Z","last_seen":"2025-10-14T13:05:27.454815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p.typekit.net/p.css?s=1\u0026k=bjh0ewy\u0026ht=tk\u0026f=18456.18457.18458.18460.18461.22705.37555.32854.32855.32861.32862.32863.32864.32867.32868.32869.32870.32872\u0026a=10162005\u0026app=typekit\u0026e=css","fqdn":"p.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Sat, 10 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89","sha256":"6A:79:75:73:C0:A8:12:54:14:ED:26:F6:54:AA:3F:01:34:4E:41:17:1C:AB:70:3C:72:0B:AF:BE:E1:75:6F:6E"}}},"request":{"raw":"GET /p.css?s=1\u0026k=bjh0ewy\u0026ht=tk\u0026f=18456.18457.18458.18460.18461.22705.37555.32854.32855.32861.32862.32863.32864.32867.32868.32869.32870.32872\u0026a=10162005\u0026app=typekit\u0026e=css HTTP/1.1\r\nHost: p.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\ncontent-length: 5\r\nlast-modified: Sun, 01 Dec 2024 12:58:09 GMT\r\netag: \"674c5d61-5\"\r\ncache-control: public, max-age=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"83d24d4b43cc7eef2b61e66c95f3d158","sha1":"f0cafc285ee23bb6c28c5166f305493c4331c84d","sha256":"1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb","sha512":"e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6","ssdeep":"","tlshash":"e630000000000000000000000000000000000c00000000000000000000000000000000","first_seen":"2023-03-12T07:28:04Z","last_seen":"2026-08-13T13:45:57.042878Z","times_seen":176499,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":54,"dns":38,"connect":3,"send":0,"wait":2,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MBFQ2W","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtm.js?id=GTM-MBFQ2W HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nexpires: Tue, 14 Oct 2025 13:04:57 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 14 Oct 2025 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154937\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":505961,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (58798)","md5":"14d01ba64e2aed100ee21ad02972d7dc","sha1":"bfe4995848b625831298e14e701921b2181fd8e5","sha256":"8d1ed5ddbe10f0bfb5c34e67d81003b07f78d86b52ce8b2875b9004fa7f40b9d","sha512":"226deb8e53da343d86497ac2e02d3c50e2aae39319e226a43e1d0ed8f88f11a2ba54e60f0500599509cc0baa697d0a13f3b9b2ac25dd985c277f1380f7214b15","ssdeep":"6144:oxrfwcwg/AptWhM0uwbWFiJQk+Nju5204OfVWyYYpFc:VuG0KIJW0ZC","tlshash":"e8b418cdb3d674768296b574803f014fb57a28e2b54cd854f08acde42d74aa92223fbd","first_seen":"2025-10-14T13:05:27.505286Z","last_seen":"2025-10-14T13:05:27.505286Z","times_seen":1,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":64,"dns":19,"connect":8,"send":0,"wait":54,"receive":26,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/IMAGE/ncua.c8630dbf.png","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /IMAGE/ncua.c8630dbf.png HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 16111\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"ncua.c8630dbf.png\"\r\ncontent-type: image/png\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\netag: \"c8630dbf4c00c0357ced180b4dd474b9\"\r\nlast-modified: Tue, 14 Oct 2025 08:36:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dv5w5-1760447097331-145c6bad48bf\r\ncontent-length: 12361\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":12361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 84, 8-bit/color RGB, non-interlaced","md5":"c8630dbf4c00c0357ced180b4dd474b9","sha1":"7aeacdd1144480dc8dee234cf518c6734c6891d0","sha256":"560fd3e537cc4bb9f6ba03c8ae68778d6217b037db1be9b82a50440a602b7725","sha512":"ecae11d490f7156a4c99baa917b1e7ab7bad38ef428e334135d40745e04938de4f0dd0705fb0ca1a52de049aadc6601840f7d6829bf80e6555302eb8e438b779","ssdeep":"384:fOBEA0DnkT0Cu1f/o8lHHfk/dRrtGAfqno4F:fOmFkZUg8xk/dRrtTE","tlshash":"c942c0d18e6ea0e37008d4813ca9d8694647a751d4d5742aa0fecc87a3312872e3afdb","first_seen":"2023-05-11T14:49:54Z","last_seen":"2026-05-01T11:29:45.126123Z","times_seen":60,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/Banking/hlm/Ent.React.Template/media/js/vendor.d01b8a74.js","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /Banking/hlm/Ent.React.Template/media/js/vendor.d01b8a74.js HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::nxqln-1760447097333-15490a497d82\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c304bbdc7923351d3b32881740c88c21","sha1":"a892592eaafb272e732cbcf2e4388453a693ff8e","sha256":"1d7af4fc30e150ec7a9018b6c4ccb997d8906ec8a94ba4c2e11875149d43b562","sha512":"b77cf44f98a7ad9ee12e014b0acb93ab05a7fb10d39c4f01832c05bcf5edf2a1cd319a966d5c570b9328db0fdbc466adce7f4405e904f21610293e1b23ff1b95","ssdeep":"","tlshash":"53a0118e02800a0e33a0088220020a3a28280222ae2aae0020a8a22a2200acea3800a0","first_seen":"2025-10-14T13:05:27.538509Z","last_seen":"2025-10-14T13:05:27.538509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/Banking/hlm/Ent.React.Template/media/js/main.778d3401.js","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /Banking/hlm/Ent.React.Template/media/js/main.778d3401.js HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::dv5w5-1760447097335-09eb2ea2256d\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0dfbde9586d8bee53ac52c8313449a7e","sha1":"50e679dda386735864d128e89c83ee30747aec43","sha256":"80ce71133d8d88048d6eb54ca71d18eccc27caa395aa3568574495f62fc20805","sha512":"47edf12e2281995edb64d531e607d65bd324edef4eda43decc65b412c232cf4137af6d97b016135ceb29b305ec399e9dc7259d7d27a7d32d6df92650b27d3d97","ssdeep":"","tlshash":"0ca022ef00c00c0cb3e000203202233c80080232aeacef0080ce233c2208ecfb3a0080","first_seen":"2025-10-14T13:05:27.565861Z","last_seen":"2025-10-14T13:05:27.565861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/IMAGE/d8f10800a50e29d08462edd9163a6d18.svg","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /IMAGE/d8f10800a50e29d08462edd9163a6d18.svg HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 27728\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"d8f10800a50e29d08462edd9163a6d18.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\netag: \"d8f10800a50e29d08462edd9163a6d18\"\r\nlast-modified: Tue, 14 Oct 2025 05:22:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::56bq9-1760447097670-87155885ea1d\r\ncontent-length: 617\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8f10800a50e29d08462edd9163a6d18","sha1":"5b9f3f431769cea1609c0547ce0e134160d3c1af","sha256":"b7dae6bd9ece0e8a99328534cb45e49db075d93c65d49dec10ecd8d3f397aa5c","sha512":"ead3c9b9a3704115f8d43e3da0fe8bab7757627c7e18f5ffa1fd278f271cf573f8c3b583ccbf7401908cc1cdfb4a24fe440ca0487e1f9a6332633e81c42467a2","ssdeep":"","tlshash":"dc211f9452fc0828d86c83bee2f638069e2932cfb1c40907b18c3a95af231b51f4725b","first_seen":"2023-05-11T14:49:54Z","last_seen":"2026-05-01T11:29:45.104948Z","times_seen":51,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/bcdde2/00000000000000003b9af1d8/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a\u0026fvd=n4\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Sat, 10 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89","sha256":"6A:79:75:73:C0:A8:12:54:14:ED:26:F6:54:AA:3F:01:34:4E:41:17:1C:AB:70:3C:72:0B:AF:BE:E1:75:6F:6E"}}},"request":{"raw":"GET /af/bcdde2/00000000000000003b9af1d8/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a\u0026fvd=n4\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://entcu-service.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 65044\r\netag: \"39fcbcccdc182545b47e239448f1c81501bae443\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nakamai-grn: 0.6f4d2417.1760447097.1429794\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65044,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65044, version 1.0","md5":"6b5f17c95cedab1eadec850395ba2d00","sha1":"dca0787d2c0e7d8e97baf79100d0c09ed0b1e0e9","sha256":"eec2cb838f76cfdf9254021a3247670aba0afb0dfdaa26f901114a3eaaed4c29","sha512":"6c1b835bcd63b6f06ec6382cda35493c3a18da1a1edb0e1c176418a4f4202c094106486678216919ea52926b2ddbfb0f79db9c97313bd6b40e6bba3fde535daa","ssdeep":"1536:fJTpWuDxOwtdZWLFvLpn3l6Kmf2uUbQ8NVJun13bsCAX:BqwZWRvLpn/EkVJU2X","tlshash":"ca5302743249a61bbcc8fe9c0dba78221ef924b8d07e7509d2cd1be121dc8e6d85159f","first_seen":"2023-04-16T08:02:42Z","last_seen":"2026-06-23T13:12:23.544004Z","times_seen":62,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":28,"dns":0,"connect":1,"send":0,"wait":2,"receive":3,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/af/8db0ad/00000000000000003b9af1df/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a\u0026fvd=n7\u0026v=3","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Sat, 10 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89","sha256":"6A:79:75:73:C0:A8:12:54:14:ED:26:F6:54:AA:3F:01:34:4E:41:17:1C:AB:70:3C:72:0B:AF:BE:E1:75:6F:6E"}}},"request":{"raw":"GET /af/8db0ad/00000000000000003b9af1df/27/l?primer=f592e0a4b9356877842506ce344308576437e4f677d7c9b78ca2162e6cad991a\u0026fvd=n7\u0026v=3 HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://entcu-service.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/font-woff2\r\ncontent-length: 65776\r\netag: \"070d3fad7fa4a2f1a4648b83e9ad3b82d8f8b2d8\"\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=31536000\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nakamai-grn: 0.6f4d2417.1760447097.1429795\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65776,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65776, version 1.0","md5":"110cdcf41d3d4543f638a18ba8b92393","sha1":"30c7cad625201175d1f8c2c9217440ed79f0b1e2","sha256":"681b0c00d0eb207178a979ce2dce8afdce278bdb1c419eb31f18d0ab59a55af5","sha512":"69992cf4f4f56078fbefb0f9041dd72c9ae44c8bbb3c45b0846caea566d5b34c4fbdc96f128f523b22f96aad6b8c4afc8f94ddea958b2d420338ff9145162f58","ssdeep":"1536:aMF2VP3Qbc72RxD9usy+r3k/eibvt6iJzKxz7wTh:TeF7WxBuH+r3qRbvtV5yi","tlshash":"345302b97a80b8f5c191f67fa9eeac3ab16c88d120b11bc52f2bc934341756b911254e","first_seen":"2023-04-05T03:22:30Z","last_seen":"2026-06-23T13:12:23.54523Z","times_seen":62,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":5,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/Banking/hlm/Ent.Responsive.Template/media/scripts/glia-channel-events.js","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /Banking/hlm/Ent.Responsive.Template/media/scripts/glia-channel-events.js HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::mmbzs-1760447097809-0a1f39783528\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"32ce918510b07158e6645b5f4d282e90","sha1":"a66e83b49aeedec4ab98b425c7b5c8378110ecdf","sha256":"e2e82cbd744d8f60ece4f60807807e462adc6b37e67c27601f6de63306652991","sha512":"996db1a04db47e78193626d2142671a2637374c94c4cc400c33da4b250b616254eec01e3a489ee3347eb2f9add81fdef26ae0ddd6df4412640ba462d28118c07","ssdeep":"","tlshash":"09a0124f05c20808328000541043423864840222595ce210109d6700930058e97c0045","first_seen":"2025-10-14T13:05:27.616912Z","last_seen":"2025-10-14T13:05:27.616912Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content-cdn.com/1028/dWdnY2Y6Ly9yYWdwaC1mcmVpdnByLmlyZXByeS5uY2Mv.gif","fqdn":"content-cdn.com","domain":"content-cdn.com","tld":"com"},"ip":{"addr":"34.237.178.183","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"content-cdn.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 23:56:10 GMT","end":"Sun, 16 Nov 2025 23:56:09 GMT"},"fingerprint":{"sha1":"C8:55:34:E8:0D:F7:67:93:B0:7F:1A:C0:1B:A3:F7:1B:DA:F2:C5:13","sha256":"4B:7D:C6:A5:7B:D3:C8:39:2D:1E:66:FA:42:E7:63:37:7C:6D:E1:5D:27:70:EB:8E:EA:BE:CD:97:D9:88:BD:B6"}}},"request":{"raw":"GET /1028/dWdnY2Y6Ly9yYWdwaC1mcmVpdnByLmlyZXByeS5uY2Mv.gif HTTP/1.1\r\nHost: content-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nserver: envoy\r\nvary: Origin\r\ndate: Tue, 14 Oct 2025 13:04:58 GMT\r\ncontent-length: 42\r\nx-envoy-upstream-service-time: 117\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-13T13:50:08.940565Z","times_seen":1029582,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":211,"dns":20,"connect":93,"send":0,"wait":210,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.typekit.net/bjh0ewy.css","fqdn":"use.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.81","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Sat, 10 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89","sha256":"6A:79:75:73:C0:A8:12:54:14:ED:26:F6:54:AA:3F:01:34:4E:41:17:1C:AB:70:3C:72:0B:AF:BE:E1:75:6F:6E"}}},"request":{"raw":"GET /bjh0ewy.css HTTP/1.1\r\nHost: use.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css;charset=utf-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains;\r\ncache-control: private, max-age=600, stale-while-revalidate=604800\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\ncontent-length: 1322\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nakamai-grn: 0.6f4d2417.1760447097.1429759\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13175,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (516)","md5":"d5ac71821da4672c6cfd27f250e24e7b","sha1":"b32ea391e5411d45121abc4a26fe0385503a9be0","sha256":"0ab9e139277bfbf49fbea35d1ad2b30f028f2dfb618df33be276006f592848b6","sha512":"04c8a511f3b2be8953543edd0f27950b0faba7290d55fe5d0dcc6466c4fa1760728e25161e5bcae42fb55844beb3a3e81f19d12b2a7c469f4442fbea93379464","ssdeep":"192:pCnQM7MMH/JMBM0BMYMgM1MdM1MMMMMSM2McMXM3M0VMN5E:wQNC0CxJWuWFFPD1c802N5E","tlshash":"a0424a61080851e1d5a60e227bceb359781f353a7dd15c82a6a84d74af37dbbb200fdd","first_seen":"2025-04-17T11:32:28.872395Z","last_seen":"2026-03-03T16:56:10.444589Z","times_seen":55,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":40,"dns":38,"connect":1,"send":0,"wait":3,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::mmbzs-1760447097828-c1a3528fc731\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"eed1e48258ea2a7ef6a1c23cc04cbde8","sha1":"fc258a1188f4f6555bb11043bf51647fc2743e19","sha256":"1638400f66489c451354d8872ea991fabe0532352c56fdf31e59c1a79a322e74","sha512":"8f3d1136423cf46ebe4a785bda9811a2d9325428ffd3fdd018ae83e0c8cd5ccfc3baf0e6b8c5f9eba9e9259ac17b6fc522150bb9a221419d32ca38f2715266ea","ssdeep":"","tlshash":"21a0125f4881088c328400001002023854d502219bade600109d6310130058d5350059","first_seen":"2025-10-14T13:05:27.656995Z","last_seen":"2025-10-14T13:05:27.656995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"online.ent.com/favicon.ico","fqdn":"online.ent.com","domain":"ent.com","tld":"com"},"ip":{"addr":"104.19.168.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:58.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ent.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Sep 2025 11:42:11 GMT","end":"Sat, 27 Dec 2025 12:42:10 GMT"},"fingerprint":{"sha1":"AA:F6:D0:FE:17:8E:86:5F:AD:96:86:89:DF:C0:C6:04:3B:FA:93:C3","sha256":"10:84:48:FB:3B:2B:77:C2:6C:83:AC:67:B3:E6:30:D7:4B:6D:65:F1:0B:13:A9:BB:14:18:EE:95:C1:60:03:9A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: online.ent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 14 Oct 2025 13:04:58 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\ncf-ray: 98e7491af8a15691-OSL\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-powered-by: ASP.NET\r\nset-cookie: __cf_bm=ExsOJ0A4Me03kQtoNqizc1Mdtki12GtCNFkNsGKXluE-1760447098-1.0.1.1-B0QlBKdIaUuH0lUMxm4BYsCPbNGRRflP2ouVRjJVZlzfHvxXHvf8S7vRVhLR6HZimbk7eXL.ojZPjsjIxVu8kbSPaNHvxJ5Xm6nDnoMdlFE; path=/; expires=Tue, 14-Oct-25 13:34:58 GMT; domain=.ent.com; HttpOnly; Secure; SameSite=None\n_cfuvid=4cKS2PkXUy1Az3IVkG1T2K_luZxvSL8VZAnGdPq7chQ-1760447098963-0.0.1.1-604800000; path=/; domain=.ent.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":940,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":894,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T13:04:57.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 16111\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\netag: \"4c2da5330a2d3055f76eac421866924d\"\r\nlast-modified: Tue, 14 Oct 2025 08:36:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8z7mn-1760447097108-d9f5f782381a\r\ncontent-length: 13441\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Adobe Fonts","description":"Adobe Fonts is a web-based service providing access to a vast library of high-quality fonts for web and print design.","website":"https://fonts.adobe.com","common_platform_enumeration":"","icon":"Adobe Fonts.svg","categories":["Font scripts"]},{"name":"Typekit","description":"Typekit is an online service which offers a subscription library of fonts.","website":"https://typekit.com","common_platform_enumeration":"","icon":"Typekit.png","categories":["Font scripts"]}],"data":{"size":26829,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7379)","md5":"4c2da5330a2d3055f76eac421866924d","sha1":"5a6f987898ded19d83014753f2d55813aafe6c54","sha256":"c2d29626a77153220f53dafff34f632d7ae7b84f088777e2b0a52c3c52a0b77f","sha512":"30c6fd77e19145d94f9d3e80e4d0326b46d4c14d25dba069d6c12530a1875be169d4e21db059182f2134795dda87a72d29316bdbc2b2b546d87b893ee29e2561","ssdeep":"768:fzWAqsxp6qLA7MVEcvHbV6V6hlsx/LkiigeVwG8eweYVQn:qAqsxp6kFbYglsx/Lk+eVwG8eweYSn","tlshash":"b8c25c325c531a36114b44a9b636734a3ab7d10fc956ac04b7fca3da0fdee548c22b99","first_seen":"2025-08-16T14:29:15.908208Z","last_seen":"2025-12-16T20:05:50.596876Z","times_seen":27,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":11,"receive":11,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-14","alert":"Detects file containing Telegram Bot API","trigger":"entcu-service.vercel.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/index.css","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 16111\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\netag: \"544e0ded49661e97e7b20e28f7b1a519\"\r\nlast-modified: Tue, 14 Oct 2025 08:36:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9jhft-1760447097321-88d4c178d69d\r\ncontent-length: 1189\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13174,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (516)","md5":"3a89b95952427140a591fe18057ff160","sha1":"02df26ea0287c2ba2cc56f6d9b252348d7676fa3","sha256":"d8bdb06d485918895ad8b0c1456bda9da66cb1283d085e98d80e33cb46a2e311","sha512":"40fa5ce0dba3fce5fa9b5aee4a9f720abff8ddd239a7b512ab0ed2cdeba8854803272b329f106c9cf1dbef94295a281ddaa5db6d497b9542f269fdd4e3ed25fc","ssdeep":"192:pCnQM7MMH/JMBM0BMYMgM1MdM1MMMMMSM2McMXM3M0VMN56:wQNC0CxJWuWFFPD1c802N56","tlshash":"a1424a61080851e1d5a60e227bceb359781f353a7dd15c82a6a84d74af37dbbb200fdd","first_seen":"2025-08-16T14:29:15.912052Z","last_seen":"2025-12-16T20:05:50.548458Z","times_seen":25,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/three.css","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /three.css HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 27728\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"three.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\nlast-modified: Tue, 14 Oct 2025 05:22:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4jqff-1760447097326-f1160c233fb8\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T13:51:54.014064Z","times_seen":17872158,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"p.typekit.net/p.css?s=1\u0026k=bjh0ewy\u0026ht=tk\u0026f=18456.18457.18458.18460.18461.22705.37555.32854.32855.32861.32862.32863.32864.32867.32868.32869.32870.32872\u0026a=10162005\u0026app=typekit\u0026e=css","fqdn":"p.typekit.net","domain":"typekit.net","tld":"net"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.typekit.net","organization":"Adobe Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Sat, 10 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F3:36:2A:08:11:E8:8C:54:E5:3C:6A:03:53:BF:AA:D7:7A:84:8B:89","sha256":"6A:79:75:73:C0:A8:12:54:14:ED:26:F6:54:AA:3F:01:34:4E:41:17:1C:AB:70:3C:72:0B:AF:BE:E1:75:6F:6E"}}},"request":{"raw":"GET /p.css?s=1\u0026k=bjh0ewy\u0026ht=tk\u0026f=18456.18457.18458.18460.18461.22705.37555.32854.32855.32861.32862.32863.32864.32867.32868.32869.32870.32872\u0026a=10162005\u0026app=typekit\u0026e=css HTTP/1.1\r\nHost: p.typekit.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://use.typekit.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: text/css\r\ncontent-length: 5\r\nlast-modified: Sun, 01 Dec 2024 12:58:09 GMT\r\netag: \"674c5d61-5\"\r\ncache-control: public, max-age=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"83d24d4b43cc7eef2b61e66c95f3d158","sha1":"f0cafc285ee23bb6c28c5166f305493c4331c84d","sha256":"1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb","sha512":"e6e84563d3a55767f8e5f36c4e217a0768120d6e15ce4d01aa63d36af7ec8d20b600ce96dcc56de91ec7e55e83a8267baddd68b61447069b82abdb2e92c6acb6","ssdeep":"","tlshash":"e630000000000000000000000000000000000c00000000000000000000000000000000","first_seen":"2023-03-12T07:28:04Z","last_seen":"2026-08-13T13:45:57.042878Z","times_seen":176499,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":50,"dns":0,"connect":1,"send":0,"wait":4,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entcu-service.vercel.app/Banking/hlm/Ent.React.Template/media/js/vendor.d01b8a74.js","fqdn":"entcu-service.vercel.app","domain":"entcu-service.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://entcu-service.vercel.app/","date":"2025-10-14T13:04:57.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /Banking/hlm/Ent.React.Template/media/js/vendor.d01b8a74.js HTTP/1.1\r\nHost: entcu-service.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://entcu-service.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 14 Oct 2025 13:04:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::56bq9-1760447097679-4be815bda78c\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"ec6201954c659ec63ffa0e55935e6a4e","sha1":"ca200bf8aa2dad3428495119a30149c70f0a74aa","sha256":"b67f43b9d53b3cb84c49ac15980714e7bf8af234a682a75a60dccf28cdc194a7","sha512":"5f9c63821b24797e9748daba560fdbbdf6e562e55dd69d4b139e0963ab8bf2a848fdcc7b20ade7a5eff35cb13a05835f68d40ea9c34aa6ccad96cc86da86ad3a","ssdeep":"","tlshash":"68a012de01860848338401207142163498044231de669210008d97002100cce5344441","first_seen":"2025-10-14T13:05:27.703434Z","last_seen":"2025-10-14T13:05:27.703434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-14","alert":"Phishing Block","trigger":"entcu-service.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"entcu-service.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}