{"report_id":"b77a7b40-5df4-497c-86a4-92ecf9a2b943","version":0,"status":"done","tags":[],"date":"2026-09-09T10:40:35Z","url":{"schema":"https","addr":"xfinancebnk.com/","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":0,"asn":32561,"as":"Aquiryn LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"xfinancebnk.com/","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"title":"Xfinance - Banking Finance","dom":{"size":70740,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16279)","md5":"ba24ae09148181568d9c18a0363132c5","sha1":"6fc4b32d749d52782e84b497e9f8ba54f89f1f72","sha256":"8005c176bd9f33601f9d3df344479fc8c9650dff29e6f7c0314652d9f3abc59d","sha512":"faf3503d53591bf1c8b389a52743d1f941246c6be4dea5a6b21ad5b9bba6b38f54dc0344761c55edc5c1be731329d3448ae11b9e0a462e96a8eeb0650cb4ecf6","ssdeep":"768:Hk0/DouuyuuEuuMOF2XF7FrI0ahPHSSX710+K+Fy2XtV2nD5IhFpYS5e9C/4sCNS:HHDouuyuuEuuMB17c5WXbYl","tlshash":"5a63117116f6142f854781c1b6593a4aee86f303c6424c04b7fd4baa9fd3da6ed3b128","dom_hash":"domhashd809642fbd96f126bfdec2ae67f30274","first_seen":"2026-09-09T10:40:44.116517Z","last_seen":"2026-09-09T10:42:34.413852Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xfinancebnk.com/","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T10:40:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-09-04T19:33:47.933279Z","alert_count":0,"request_count":4,"received_data":330894,"sent_data":1870,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":2,"received_data":21540,"sent_data":1069,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.193.178.22","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-09-04T19:33:48.671709Z","alert_count":0,"request_count":1,"received_data":1579,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-09-04T19:33:48.035932Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"xfinancebnk.com","ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":73,"request_count":73,"received_data":3507384,"sent_data":36727,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":3,"received_data":65055,"sent_data":1650,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-09-04T19:33:47.716913Z","alert_count":0,"request_count":1,"received_data":7743,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.182.175.1","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-09-05T00:20:40.820062Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":630,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-09-04T08:05:21.698763Z","alert_count":0,"request_count":2,"received_data":21786,"sent_data":1018,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-06T23:16:32.201366Z","alert_count":0,"request_count":1,"received_data":100668,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/jquery.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-09-09T12:47:40.401677Z","times_seen":31803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/owl.carousel.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-09-09T14:07:37.991381Z","times_seen":69270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/jquery.waypoints.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"77b94c24f452f7f0c32f26a377d5d732","sha1":"6bcb5af99cf3166ccf867183b4f02239ddeae2af","sha256":"e08f3ca3b4b2564ace8f181fed1139c329c3a84829b905c95f2b41de6c8cb19d","sha512":"eade9a021839fdc3736dfaf274c18de5273a079c2df09b0c48a9c1a544aca0edd84661b42f7f7771c22bf5cb1380d9fa8c87aa32d50dadd5a220cc405a351103","ssdeep":"192:5BnaLNCKdJDm6hj8k6EErwvfgaekfkYlppEp47+oByc4VjB7Z:5BaEGJDmC83E8wvdekfkY9E7oBD4VjFZ","tlshash":"5722418976167832178f90faa91f474eb336152ca40640bdb0c8d4ee18f196c677bf7a","size":10282,"data":"","first_seen":"2023-04-08T03:22:34Z","last_seen":"2026-09-09T10:42:34.46072Z","times_seen":508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/script.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f71b610de16840379a77c45d8f4d3c6","sha1":"cc7f9f294b89eae0c4e6c4e8799f146256a081aa","sha256":"8d80b277b10eabb73503c192b330465f3f3c955d8df22a05650679c04b437f1b","sha512":"c80386eb39aadffce2b7a6c83bcb4b3d993f44f9b6d09dacf5d27dd7fe1a866c2c58fd0746d76e47b9bc60fdc715a652a443c5d38ec28205698b42ac990f2831","ssdeep":"192:7pLuXx2/v1i9FlywNFLZay2m1tr8Lk1i9FmeGaeoWru8rym1ibFLZayAZdcdS5ej:lyh231i9FJNFLZKm8Lk1i9nGL31ibFLx","tlshash":"5c122e0ab4f510625923327a5fef114476396507d408ed10b8bf6ba80f9626c63fafce","size":9696,"data":"","first_seen":"2025-11-19T10:57:33.208443Z","last_seen":"2026-09-09T10:42:34.5278Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-09T14:17:33.386239Z","times_seen":9228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DabC6aZO.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"484b339ab8994cd2aa6196b02c94bf40","sha1":"4859d1218ce4eabd728109388b5e999e361399cf","sha256":"6f1773ddd0916b4b176d423ef1ac87883da34e76dd895250be5ccca462fbf0b6","sha512":"ed195878480c14d1a519189d01ea5f90e05ba387f64c7f6958515af3a5cb3375f3a73ff98cf9f9602eaf50f779fc32521c76640ae170c056a00d76ec42f0cf92","ssdeep":"384:a2NcFT88tMPdBgaw5O+mvRan7/AKsDoKVwA3Q+crsbUzgfTtQfQIeIa:ZNcFX+dBgaw5O+aanrkoK2A3Q+cwbUwZ","tlshash":"9672e8741210743f712fac492a6df497723ad298e597c5289a2fdd5c36c8cc0a873bb5","size":16028,"data":"","first_seen":"2026-08-27T10:24:41.410826Z","last_seen":"2026-09-09T14:06:41.940412Z","times_seen":355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DqnxneoL.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"00e2016c8eaa5d81104f61ec86462ef5","sha1":"16249d91aa367532b08f1dc494900a84520301c3","sha256":"d7da9bee8ad6397d1e6788b169f82b37f111b2628a998188e707329483ce5596","sha512":"caefb7d25ba6b24a5864f3ef23b2c5200246c88d0fe8e22095b3672597b729e0b3b99447d4c1458c2c5d74204846caee20095e727b273020593b4e12dc878952","ssdeep":"6144:FMAopqOWSr8ad2jJKaQqhJp9cuRgufObV:4qOW2Rd29d/DRJfObV","tlshash":"f9443ad53294b035439b51e6906f2106f33e5c19580d812cf269ece639baec4a2f7fb8","size":274225,"data":"","first_seen":"2026-08-27T10:24:41.327319Z","last_seen":"2026-09-09T14:06:41.848992Z","times_seen":351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/d76a74af-5852-4efb-b9fa-20252b2fdc7f","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"d4d2e33d22f7a2dbd35e2dbd7bee2129","sha1":"cf245d12ae7abbe03b78bbd0017547825ca9664a","sha256":"4c2ee8c5f9e3275ec8697d7be4401dbde8534a095204c9b9fedb22d1e9acc3db","sha512":"0a76f0e5675d1438e210e6ff07a7854baeea5a958b431ebe0f4917e83e556a8f9f4af1d491a2dad37d3b4bc7232f36fc598fdfd4500f6c8bd8021e1effb8cb27","ssdeep":"","tlshash":"f14186f07a77e0b647c211f9f27dc0d691348a503ca54a30a76c2d0765f45b286a7f1a","size":1882,"data":"","first_seen":"2026-06-08T07:13:05.353966Z","last_seen":"2026-09-09T10:40:44.198379Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/fe9b4af4-9246-4837-9f15-0524a7513389","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"d4d2e33d22f7a2dbd35e2dbd7bee2129","sha1":"cf245d12ae7abbe03b78bbd0017547825ca9664a","sha256":"4c2ee8c5f9e3275ec8697d7be4401dbde8534a095204c9b9fedb22d1e9acc3db","sha512":"0a76f0e5675d1438e210e6ff07a7854baeea5a958b431ebe0f4917e83e556a8f9f4af1d491a2dad37d3b4bc7232f36fc598fdfd4500f6c8bd8021e1effb8cb27","ssdeep":"","tlshash":"f14186f07a77e0b647c211f9f27dc0d691348a503ca54a30a76c2d0765f45b286a7f1a","size":1882,"data":"","first_seen":"2026-06-08T07:13:05.353966Z","last_seen":"2026-09-09T10:40:44.198379Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/e0876366-256f-4ab2-bfb6-6bd98ee0cd64","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"d4d2e33d22f7a2dbd35e2dbd7bee2129","sha1":"cf245d12ae7abbe03b78bbd0017547825ca9664a","sha256":"4c2ee8c5f9e3275ec8697d7be4401dbde8534a095204c9b9fedb22d1e9acc3db","sha512":"0a76f0e5675d1438e210e6ff07a7854baeea5a958b431ebe0f4917e83e556a8f9f4af1d491a2dad37d3b4bc7232f36fc598fdfd4500f6c8bd8021e1effb8cb27","ssdeep":"","tlshash":"f14186f07a77e0b647c211f9f27dc0d691348a503ca54a30a76c2d0765f45b286a7f1a","size":1882,"data":"","first_seen":"2026-06-08T07:13:05.353966Z","last_seen":"2026-09-09T10:40:44.198379Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/form-validator.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"554a03f447998e9f33089be962f0c8ba","sha1":"8efcbd11492c0820b59e7ab1e882bbdda5ab101a","sha256":"d75c2fb5d02ad019032d5199295f9899dc91d7addcb966e4c3061d3ef863459d","sha512":"20110acf637fe0f3e94e72082b2a1844881ac26f2975a4134b7d62546a57fd053df5950d8fc2eaf558d8a7cb94691fae89e09d1e1ef18c67bd716366baeb1816","ssdeep":"192:CAGMLmHTNFuBv+Hr72dmDdY9clcNkfeL33tO8TRORIzrNMyVkJ:CAbyHTNOv+LKdmDaOlcafeL33tO8TROL","tlshash":"40f11349776220922f9220f4519b824b72793b79c50a409875ed85f1aaf8f84b7f7f3c","size":7729,"data":"","first_seen":"2023-03-07T01:11:37Z","last_seen":"2026-09-09T10:42:34.419828Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/counter-up.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e883f8bb599d73be9989280e5de38dc","sha1":"3e5e0b26bc885084d7f3c5f54acd904773f8028d","sha256":"9ece7cb6ee0d1133eafd235a6bdb617695beab104093f94bee54d6a573357246","sha512":"3ad6cf6d68dacb0d6a287c86cbc6eb1d8dd4e61840a21b0afcf15e23f91b747f3028e992af9712cfb8158680256fcb0fdaf27da07407b0d26c67ce5458bff605","ssdeep":"","tlshash":"8f11afb97a0f69cd6a10f46db1bfb4589036bdbc8841584bb0c551802f92a7e3b53b70","size":1054,"data":"","first_seen":"2025-02-06T00:27:59.828674Z","last_seen":"2026-09-09T10:42:34.423761Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/altcha/dist/altcha.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bebac533191faa79be87ec5b34354f82","sha1":"48c04a262afea7715857b961f6cb13f7cd5aca57","sha256":"7baf50cdd57bd393582341ccb47bd82bc08a47cef8713d42362f1737a3bf2e66","sha512":"4b54bccb1cde504db3479f512a824a49f43170bbf937785ef021512d2c8648e48162f6c084526209956991b0a1f0b2dbf26c6ac0a14ec5afbe73df8e245e928e","ssdeep":"1536:kavBLFo4A0YsHOOVU4qHNQWum+TF++yn3ysqN2LeXJQgWd:7s0XyqN2LeXJW","tlshash":"daa3d7957bf62032a723e03d6a4fd8087339904b26cdde443a9c5aa45f49a3857f2fc5","size":99891,"data":"","first_seen":"2025-11-12T19:33:14.799584Z","last_seen":"2026-09-09T10:40:44.178949Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d36a44f37f875a535eb8ffaaeaf3ba34","sha1":"2ee474a004a3703481b6aed6bd022205884a72ac","sha256":"f6782a2413739942ae703472e0fa4bfc5d19b1d3bd9b1335f3a480c97814a8b8","sha512":"d354adf5174fae987a962e8bc33a6d63f96a9baa747d4c665dd4f5340e92b2ab675d05d75507b050731871dd0f3c3e8a3da6b747f2b09fe7d20bee1d9062a597","ssdeep":"","tlshash":"55b0120c5034b4bc121e101c9f833981903d40e841202d18f2c405160f41406030c141","size":94,"data":"","first_seen":"2024-06-29T23:19:03Z","last_seen":"2026-09-09T14:06:41.979242Z","times_seen":899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ff568a557b34f17b804a0804b35e2f3","sha1":"72d487829311e4631f03442f7505f97b45cfb6bc","sha256":"136ee0180d1f30c829768c1b65a1d62d9efd3053521ab4d579404a49b97dcc07","sha512":"0fa07a6acfeedc050063b2b2b9162d0399c08e732685c18239ebe7ab93c53d906661baa9106241c9d8763809f1ee88b174d4085e2b40df7b3fa069593add3403","ssdeep":"","tlshash":"65e0ab3d3c3851a6079301f480b7e2283d1a30204048e803989a886958b0fda7d02485","size":416,"data":"","first_seen":"2026-09-09T10:40:44.199647Z","last_seen":"2026-09-09T10:42:34.565747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/bootstrap.bundle.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d7cb18be275bcc1f33324620dca9517","sha1":"cb71df7f175c1b3ee8d642a0efde2e742a142f46","sha256":"c938e1227260834371896291dd5d28e98b5743ec952b721bdf791744ab06810d","sha512":"032d8a984981de805b197e8377aacf6296fc33491b035015d892d13d5922b811dca07ad1eae87f185d28252f0c04a76bcc8acadd508db6f25e8fa0a3b38b886b","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU07P:HwORx3YCD45wZbDZTb0gP","tlshash":"3a73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80672,"data":"","first_seen":"2024-08-06T22:16:53Z","last_seen":"2026-09-09T10:42:34.475778Z","times_seen":1044,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/jquery.magnific-popup.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-09T14:17:33.429787Z","times_seen":75501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/dwf.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08bb3ee78f5b05c2369ff91fdd4e795d","sha1":"f8accd7867de3ea6009b6ebc4053e69bd1c0baab","sha256":"ea0c78a5d87e0fe9c13b22c15e82bc665f3b75ab10163d0d433d4f23eacfbe30","sha512":"08af1de1905af29c9f06406ff6947d4c8325f71abe73840a1b283391832a5d0f716e42e6b29cd4ad570b575fd7cbfb67b6b646860764c5260fbe8c1a17bba4cc","ssdeep":"384:UzCKMPZATN09o0mtYo8XNV8lvmFFi2hS4DMFf:UVMhAh060sYo8X38leRC","tlshash":"e992096905f7007e9913436aeebe4b1c50b902778004e920bfaeddc69fc55a8c773ad8","size":19511,"data":"","first_seen":"2026-09-07T18:28:06.742161Z","last_seen":"2026-09-09T10:42:34.507397Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec3b123e9657fee4c64b2b901aa154b0","sha1":"066b4938b3568e6b15264074d110d051d36702c1","sha256":"23227f2eaf11cb18d5f666640de9e6736b9ed7e7bf9091e4608c51143beabe59","sha512":"0ce28f52f06f36648dd70b25e2dc4033e80f4e35f87879ea08e7053ee7f63ab87e9ff89163af5c8f6c238c36d19b0bd4ef93ec5ea216486cf3ce6d19b7350100","ssdeep":"","tlshash":"adf0302b29b71470065b76bf56dfa34476b0608334009e063e2ccf608f68de9a5b7b9d","size":545,"data":"","first_seen":"2026-06-08T07:13:05.371403Z","last_seen":"2026-09-09T10:40:44.200907Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/89bee28b-d01b-4b07-b048-914f84b7bf96","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"d4d2e33d22f7a2dbd35e2dbd7bee2129","sha1":"cf245d12ae7abbe03b78bbd0017547825ca9664a","sha256":"4c2ee8c5f9e3275ec8697d7be4401dbde8534a095204c9b9fedb22d1e9acc3db","sha512":"0a76f0e5675d1438e210e6ff07a7854baeea5a958b431ebe0f4917e83e556a8f9f4af1d491a2dad37d3b4bc7232f36fc598fdfd4500f6c8bd8021e1effb8cb27","ssdeep":"","tlshash":"f14186f07a77e0b647c211f9f27dc0d691348a503ca54a30a76c2d0765f45b286a7f1a","size":1882,"data":"","first_seen":"2026-06-08T07:13:05.353966Z","last_seen":"2026-09-09T10:40:44.198379Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/f502b02c-67c7-4537-950d-2bcedbd8f361","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"d4d2e33d22f7a2dbd35e2dbd7bee2129","sha1":"cf245d12ae7abbe03b78bbd0017547825ca9664a","sha256":"4c2ee8c5f9e3275ec8697d7be4401dbde8534a095204c9b9fedb22d1e9acc3db","sha512":"0a76f0e5675d1438e210e6ff07a7854baeea5a958b431ebe0f4917e83e556a8f9f4af1d491a2dad37d3b4bc7232f36fc598fdfd4500f6c8bd8021e1effb8cb27","ssdeep":"","tlshash":"f14186f07a77e0b647c211f9f27dc0d691348a503ca54a30a76c2d0765f45b286a7f1a","size":1882,"data":"","first_seen":"2026-06-08T07:13:05.353966Z","last_seen":"2026-09-09T10:40:44.198379Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/357c78f7-3e42-4983-84ae-ff47f06c2384","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"d4d2e33d22f7a2dbd35e2dbd7bee2129","sha1":"cf245d12ae7abbe03b78bbd0017547825ca9664a","sha256":"4c2ee8c5f9e3275ec8697d7be4401dbde8534a095204c9b9fedb22d1e9acc3db","sha512":"0a76f0e5675d1438e210e6ff07a7854baeea5a958b431ebe0f4917e83e556a8f9f4af1d491a2dad37d3b4bc7232f36fc598fdfd4500f6c8bd8021e1effb8cb27","ssdeep":"","tlshash":"f14186f07a77e0b647c211f9f27dc0d691348a503ca54a30a76c2d0765f45b286a7f1a","size":1882,"data":"","first_seen":"2026-06-08T07:13:05.353966Z","last_seen":"2026-09-09T10:40:44.198379Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/a0a1dcba-e1c9-413a-8b6b-7fb6038b3265","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"d4d2e33d22f7a2dbd35e2dbd7bee2129","sha1":"cf245d12ae7abbe03b78bbd0017547825ca9664a","sha256":"4c2ee8c5f9e3275ec8697d7be4401dbde8534a095204c9b9fedb22d1e9acc3db","sha512":"0a76f0e5675d1438e210e6ff07a7854baeea5a958b431ebe0f4917e83e556a8f9f4af1d491a2dad37d3b4bc7232f36fc598fdfd4500f6c8bd8021e1effb8cb27","ssdeep":"","tlshash":"f14186f07a77e0b647c211f9f27dc0d691348a503ca54a30a76c2d0765f45b286a7f1a","size":1882,"data":"","first_seen":"2026-06-08T07:13:05.353966Z","last_seen":"2026-09-09T10:40:44.198379Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/jquery.ajaxchimp.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36d1b0e5a3a7397b267e704beb2f7272","sha1":"86df23e41520d19dd0c6928e4a5de89c1ae172a2","sha256":"2dcc9f6916671ee0ee4c5f7c7b6f13c519189b65d371a39309c0d95b79050c28","sha512":"e728f97a563dbba72519ef7ff7b6e3de3265c3cf8ef574affed6e67bc9bf2d1f1c2a79d3e7ead1f2a1d6fd4610fcca332e0ddcbd31de608a4ce64464b404926e","ssdeep":"","tlshash":"4741444025101bc2418b21f2e4c7bbe370e7d5958824f558e668e0e30ee4dcdae27a9e","size":2381,"data":"","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-09-09T10:42:34.489458Z","times_seen":5751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/contact-form-script.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22af99882c578949bb6abdcbc7d67e5b","sha1":"e998374d6d40c6cacbbd44c590539d71a170a887","sha256":"59055ab3625862277c51901b68700f01d38cb4d6298116921554dbef85255bb7","sha512":"0d3db87fae1d71612c13da5c7b8d4eca5d8df5b6a52f06f5ed80f0736ccd990e4100f2ec49f4141bb40544f614189e4b482461791e088381c0225cf8107f4234","ssdeep":"","tlshash":"77411008b57622c81a373e7da29f4104e67053239509ed113c5cb8c4af5cfa83aa23bd","size":2088,"data":"","first_seen":"2025-02-06T00:27:59.82608Z","last_seen":"2026-09-09T10:42:34.525775Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/jquery.meanmenu.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a22cba52317059d68888d7f39d71f9f","sha1":"a77b088ed0a2e068cdd8e0c848884265b4ab9356","sha256":"4b6b6999c12d6f2b0f80881e339d527532fe28b86c5cf23de710dfd3bc0dc6a3","sha512":"046f7ba576f72ecfd2e4e39e45fe3120419d3d605791791495cbd7ec831feec40775800c60b6bb3e579dd72be991fc4aca594e1197e47eba6e094dd083740a23","ssdeep":"96:nGSZSZSn71uMXsA2XNnaToz99t56txMsLcCMoGIh7b6eFSEvU:jIIn7QMXsTP6VQCMlIhKAvU","tlshash":"42c10f6bb1b104f8a0bb7855b93eb23030f3640bf94ae900326d65262f1997515b2ffd","size":5946,"data":"","first_seen":"2023-03-10T02:32:12Z","last_seen":"2026-09-09T10:42:34.510295Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/8b17b7fb-d30d-4d53-a3d7-039038f194ff","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"d4d2e33d22f7a2dbd35e2dbd7bee2129","sha1":"cf245d12ae7abbe03b78bbd0017547825ca9664a","sha256":"4c2ee8c5f9e3275ec8697d7be4401dbde8534a095204c9b9fedb22d1e9acc3db","sha512":"0a76f0e5675d1438e210e6ff07a7854baeea5a958b431ebe0f4917e83e556a8f9f4af1d491a2dad37d3b4bc7232f36fc598fdfd4500f6c8bd8021e1effb8cb27","ssdeep":"","tlshash":"f14186f07a77e0b647c211f9f27dc0d691348a503ca54a30a76c2d0765f45b286a7f1a","size":1882,"data":"","first_seen":"2026-06-08T07:13:05.353966Z","last_seen":"2026-09-09T10:40:44.198379Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Altcha verified:map[actor:server1.conn0.watcher17.process7//obj30 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[payload:map[configurable:true enumerable:true value:eyJhbGdvcml0aG0iOiJTSEEtMjU2IiwiY2hhbGxlbmdlIjoiNWE1OGM2NGQ0NWYwNzFkYTE1YWM4YjE2ZDAxMWUyNjVhYTYxNDYxMWI1MjI1MTRlZjk3OGRlMjM5ZjZkNWI5ZiIsIm51bWJlciI6NDUwMDAsInNhbHQiOiI4ZmU5ZWM0ZWNlZmQwODRlMDdlMjYyMTEmIiwic2lnbmF0dXJlIjoiM2U1MWE0MTQ4ZDYwYmFmZTU3ZDk4NzZjMjg3YjFlZDRhYTg5YTBiNzE2NzI0OGRlOTRiYjk0ZmY2NDVmNGFjNiIsInRvb2siOjI4Nn0= writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://xfinancebnk.com/","line_number":20,"column_number":29}]},"http":[{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/owl.theme.default.min.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.752Z","timestamp":1788950405752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/owl.theme.default.min.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 486\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1013,"size_decoded":796,"mime_type":"text/css","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-09-09T14:08:21.39063Z","times_seen":28337,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/form-validator.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.784Z","timestamp":1788950405784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/form-validator.min.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 May 2024 23:47:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 2609\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7729,"size_decoded":2848,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7535)","md5":"554a03f447998e9f33089be962f0c8ba","sha1":"8efcbd11492c0820b59e7ab1e882bbdda5ab101a","sha256":"d75c2fb5d02ad019032d5199295f9899dc91d7addcb966e4c3061d3ef863459d","sha512":"20110acf637fe0f3e94e72082b2a1844881ac26f2975a4134b7d62546a57fd053df5950d8fc2eaf558d8a7cb94691fae89e09d1e1ef18c67bd716366baeb1816","ssdeep":"192:CAGMLmHTNFuBv+Hr72dmDdY9clcNkfeL33tO8TRORIzrNMyVkJ:CAbyHTNOv+LKdmDaOlcafeL33tO8TROL","tlshash":"40f11349776220922f9220f4519b824b72793b79c50a409875ed85f1aaf8f84b7f7f3c","first_seen":"2023-03-07T01:11:37Z","last_seen":"2026-09-09T10:42:34.419828Z","times_seen":597,"resource_available":true,"data":null}},"time_used":1051,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-4.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.809Z","timestamp":1788950405809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-4.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2763\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2763,"size_decoded":3028,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit/color RGBA, non-interlaced","md5":"f042bac937103add2beabab8025303c2","sha1":"a960c764c9c78b6b84325cedcba09cfaf2cc8023","sha256":"1fe91c2933564dc4e0eb528feab7d86ba39c5ff033c80829523738c7ede4b0e6","sha512":"13b4f70eee7ee9924bad208318f2e69d2100f17efa031de7cf15b9c418b0122a43cc97f8097806a48e64ca1e0f423a8ff0cb257a9d31e0644cd5fd04c4731135","ssdeep":"","tlshash":"da513e92f6987062ac82287e6b155f4055e4763cc4f5d764185524dd0ddce425fe39c0","first_seen":"2026-04-04T11:41:42.676863Z","last_seen":"2026-09-09T10:42:34.530419Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2027,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2026,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/counter-bg.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.260Z","timestamp":1788950406260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/counter-bg.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 559270\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":559270,"size_decoded":559537,"mime_type":"image/png","magic":"PNG image data, 1427 x 746, 8-bit/color RGBA, non-interlaced","md5":"2733f097983af6e82a2fdafa56f0e647","sha1":"81f8df2bab2c12c394f063c3d57063ddba99ef48","sha256":"7e702f78fc98b15b96e2396fcc3cfc9d2389ddf331d8c93892e1530c44027208","sha512":"92e1f48f3f085ffef219fb3c5f1f9b0359d3f87e4a5bb1dd0069c40aa81b52d1303e686be496508855d83fe8ec892e56b4b21352dee5158dabd6f6b352d711b6","ssdeep":"12288:xpfZjRm6YEaR9zglpAwP8L/avxrSHQQf4cafVSDc4OmRU:xpfDZYEanzI7C/aJewQZ2SDc4hK","tlshash":"afc4235a01b5caa449dddbf724bb89e18aeb4b4d0d0d8c0ab25f94a932c5b0dc357cb4","first_seen":"2026-04-04T11:41:42.685353Z","last_seen":"2026-09-09T10:42:34.431735Z","times_seen":4,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v36/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.284Z","timestamp":1788950406284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/arimo/v36/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20132\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 21:53:34 GMT\r\nexpires: Tue, 07 Sep 2027 21:53:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 132392\r\nlast-modified: Mon, 18 May 2026 16:06:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20132,"size_decoded":20945,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20132, version 1.0","md5":"462df98ac3c165313a4901b2f7b19cdf","sha1":"ee8fae8053bdf30a0d22c568ce7185f76a0609c6","sha256":"6a22ce0b2709c7e856a8bd9bbf31b0f7695caeeeb03915b0212d6d959e9bc1b9","sha512":"3afda65991182994e13c52fd5ae338ecd947243f63fc98473cfa9fca0b84ae2986d758a21a78c1273e71b5ead0020a609a43437cea6f04be35fc47d6c89174da","ssdeep":"384:Ug+Z+rzZEsgriqj22AZDOBR+Og3wBXswEsAckaDwOswc0TcJaUbKkCVF2RsG:UgTGsaRVEDOSOg3wB6IkCwOsx0AJfbKo","tlshash":"bd92f104ef9d69e4c3af297260f42b789c1a0e36ad54cee57618b198bd1ad8a3649200","first_seen":"2026-05-18T22:29:36.878388Z","last_seen":"2026-09-09T13:46:03.11761Z","times_seen":2723,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":17,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v36/P5sMzZCDf9_T_10ZxCE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.288Z","timestamp":1788950406288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/arimo/v36/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20132\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 21:53:34 GMT\r\nexpires: Tue, 07 Sep 2027 21:53:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 132392\r\nlast-modified: Mon, 18 May 2026 16:06:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20132,"size_decoded":20945,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20132, version 1.0","md5":"462df98ac3c165313a4901b2f7b19cdf","sha1":"ee8fae8053bdf30a0d22c568ce7185f76a0609c6","sha256":"6a22ce0b2709c7e856a8bd9bbf31b0f7695caeeeb03915b0212d6d959e9bc1b9","sha512":"3afda65991182994e13c52fd5ae338ecd947243f63fc98473cfa9fca0b84ae2986d758a21a78c1273e71b5ead0020a609a43437cea6f04be35fc47d6c89174da","ssdeep":"384:Ug+Z+rzZEsgriqj22AZDOBR+Og3wBXswEsAckaDwOswc0TcJaUbKkCVF2RsG:UgTGsaRVEDOSOg3wB6IkCwOsx0AJfbKo","tlshash":"bd92f104ef9d69e4c3af297260f42b789c1a0e36ad54cee57618b198bd1ad8a3649200","first_seen":"2026-05-18T22:29:36.878388Z","last_seen":"2026-09-09T13:46:03.11761Z","times_seen":2723,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/tab.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:09.514Z","timestamp":1788950409514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/tab.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1801\r\ndate: Wed, 09 Sep 2026 10:40:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1801,"size_decoded":2066,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"beacad45fda6f56acfe02e577aae452b","sha1":"4fe25101bf46c3829272e70ae1f6f8d78038c48c","sha256":"574be08a07a23b7f1aeeaa694a3159b6a1910a0a434f9a7d35b523c0bf467b55","sha512":"bba8aa56c80c497c1536b383b897fb2b8588e551bb4d2be76d330d8f575d756e2e062b3a0fe0e1bb0a22c483c55b761ea5c4002ad5018510d092fc52375de927","ssdeep":"","tlshash":"e431e9adf9c6e532a9f2503270bc05f5c36145a205eaa57b990484bc0f9003f26e2dcf","first_seen":"2025-02-06T00:27:59.834839Z","last_seen":"2026-09-09T10:42:34.55388Z","times_seen":6,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/owl.carousel.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.782Z","timestamp":1788950405782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 11323\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44342,"size_decoded":11563,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-09-09T14:07:37.991381Z","times_seen":69270,"resource_available":true,"data":null}},"time_used":1055,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1054,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-white.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.799Z","timestamp":1788950405799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-white.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2155\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2155,"size_decoded":2420,"mime_type":"image/png","magic":"PNG image data, 157 x 53, 8-bit/color RGBA, non-interlaced","md5":"61caa9960e1b5be7216a7d07e3b2e79a","sha1":"3fa5de55ecc156956379ee25573634f31e70c75f","sha256":"ba46ab2f3c9755a08edcdd04ffc0879883e54180644a061f00b7984183daf1db","sha512":"0404cb5f90bffcd08acf1c079b396129a0d829525904344f927d30f944db348833fc8b866756d83878132abc6a3247d01a473b3e0f793e76df906cb2e8575372","ssdeep":"","tlshash":"084119e32e0583c7d7be8335a5837e1d41a52a5e2c94d4836cb05b148a94d8cdb260b5","first_seen":"2025-02-06T00:27:59.820222Z","last_seen":"2026-09-09T10:42:34.497338Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-3.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.808Z","timestamp":1788950405808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-3.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2675\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2675,"size_decoded":2940,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit/color RGBA, non-interlaced","md5":"e87539c63335d681b7575c223b0ea825","sha1":"c5605803a89126bf4ab4e905961cb952efa3deb6","sha256":"36c7066d8102d5dd888777575f58b491dd327747367673ad851c9b14c8cd2890","sha512":"fa707934c10b77f80dd92ca973fb3afefd9581fd6c4bcc48c57fe85a5b9ab8098934edf7961783501b73a7a6aeef814492fb19865e0249d66e7d4a496de17490","ssdeep":"","tlshash":"eb512b5e96139c11e06001f0496254f39b29c96d27ee8a5e550b84dc5a06de3c7f86a3","first_seen":"2026-04-04T11:41:42.680223Z","last_seen":"2026-09-09T10:42:34.43427Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2027,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-9.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.814Z","timestamp":1788950405814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-9.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2170\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2170,"size_decoded":2435,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit/color RGBA, non-interlaced","md5":"dd178d8d9c1a3d94cbc4805df51475c9","sha1":"6c116953f55839d7a0d1d1f6ac3b1f93e4a5d645","sha256":"d5123898339306ee69e3ec518788bc9956a9a156bc26763c22370c77a6bc7ea4","sha512":"25e22e55ffbdca154790622a0452abfcc10a1456b4c68efcb86b94c46278db13b757afa61ccb321534f66b45a2375de335e51301c6d751e3b1bf1cf17146314e","ssdeep":"","tlshash":"b4411c8fec4e9b50ec094bb96b165097a23a24864fd356574612fd3c13c04c70bba521","first_seen":"2026-04-04T11:41:42.683892Z","last_seen":"2026-09-09T10:42:34.477323Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2022,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/download.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.833Z","timestamp":1788950405833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/download.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 205275\r\ndate: Wed, 09 Sep 2026 10:40:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":205275,"size_decoded":205542,"mime_type":"image/png","magic":"PNG image data, 995 x 660, 8-bit/color RGBA, non-interlaced","md5":"2f6e1d30dd56a1ec5bbb1df34ef8dffc","sha1":"7c729a83e9dd651005b0b0f54a768b0b66fbd764","sha256":"af784b7e52a3900231b877dc77f48f5fca5fe85d900ad5b27350a77823076eea","sha512":"6a8d3315280456a732fc34500d0a1a1b8a73aaf35be1ecc0a38d9bcf359bba75807d2412fc2280e5207214c0f4196b6de8780f8ce96ccb7d821eee2131586dae","ssdeep":"6144:SHCP6FG963xu0zXATe9GcZOByQl/uAX7OPGqd:eEQk7ed2lWArfg","tlshash":"f21423b8ce04785831537975da13142c03d6344a6a1ccaa9ff6baf153e9e1f22077ea9","first_seen":"2026-04-04T11:41:42.710211Z","last_seen":"2026-09-09T10:42:34.439767Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4014,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4004,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-CliJwUTR.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:13.054Z","timestamp":1788950413054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/style-CliJwUTR.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 10:40:13 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a4cb803-8d68\"\r\nexpires: Wed, 07 Jul 2027 08:30:01 GMT\r\nlast-modified: Tue, 07 Jul 2026 08:25:39 GMT\r\nx-77-nzt: k7f4PdknmLxyt/nhPy3mqqRqKEXQIXDSSbUOlL0qqYrL4cwqWz/N8DpZMerGuZi/JmTa4PI\r\nx-77-nzt-ray: e2f7542018ceba4fb237a16adc697903\r\nx-77-cache: HIT\r\nx-77-age: 5537371\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":36200,"size_decoded":8208,"mime_type":"text/css","magic":"ASCII text, with very long lines (36187)","md5":"840dfdb09fc1a11a5c3a5b5f808e3160","sha1":"46140a50b100fa33b974027c13bb9f2de5c784b7","sha256":"b5b9a339413a55a0d828ab6be236e2a495594a19fb3283f846c607d7b6996ad7","sha512":"61e37700ee60ed584c8ae7b6313c5dddf6950c9664aa57f32bb4a70d775b1a1d5bfc249c6c1238495ef2cb7e12bae5f00c4ddb3df4dde44a01081117b74e2ba2","ssdeep":"384:F8fY2l091g7Tc6/WYtGLadKzSVX8Kj6+eZcrNSN56qB56YR9evZLLq51vZLLq5G:F8wM091gTcCWYtG4XqcrNSN56DwQ43","tlshash":"05f2966daad9093dac23c179e3f8e58c911af5d5df3226daf74239008ac17ff0986514","first_seen":"2026-07-07T11:50:17.712499Z","last_seen":"2026-09-09T14:06:41.817023Z","times_seen":4075,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:13.158Z","timestamp":1788950413158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 18:41:05 GMT","end":"Tue, 10 Nov 2026 18:41:04 GMT"},"fingerprint":{"sha1":"4C:F2:C9:AE:0A:0F:37:5A:43:AE:8B:25:45:7E:69:B8:F0:0B:25:F8","sha256":"74:06:C6:4E:FC:30:3B:58:27:F6:ED:89:28:89:31:20:1A:62:99:AF:A6:73:D6:1A:88:29:39:44:E3:B2:B1:6C"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xfinancebnk.com/\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 10:40:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 143765d349003193ebd3783518e376c4c54f428f\r\nx-77-nzt: kyoyyKqhwCdgoVEh+wZ23jLbshfFdclf+YzaMCeRazddah8X8Wvx7FsXYBDSvvmLVdoWsMU\r\nx-77-nzt-ray: fdb54123d771fb7ab237a16a2451490b\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 122\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7219,"size_decoded":3357,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0259a73d21d0110609c1b3d5cab20ebe","sha1":"f80fcc484290999d3c48fe3d75f434cb63a00b4a","sha256":"ff798ee596d00dfbc59c3916cde6ce6cc8fd9183e1cd673c45dc6be9b333e582","sha512":"fbb7720f87a9673084b909fc940d2861fb5b1a7ce80d7a60d469eabe47765e69bce287d2bece28eb226d2e75e1c8202283aeda38f34ff354c2466f567ee3535b","ssdeep":"192:Ccdft/hcRl6WKHSY8pZcqq+jT0UHAfoW/Ymz8:CgF/hcSWbYKZcF+jhqoWQmw","tlshash":"ede1b64f9a144ea987c643c276cfb84675bc807342509d7afd8cc9b842697cda3e3b94","first_seen":"2026-07-27T13:24:21.79927Z","last_seen":"2026-09-09T14:06:41.945925Z","times_seen":1426,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":3,"connect":8,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.182.175.1","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:13.216Z","timestamp":1788950413216,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 24 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"4F:1A:3B:79:00:E3:DC:1F:92:62:7C:DC:85:3A:BE:8C:D1:68:F2:57","sha256":"7F:93:E6:29:5D:CA:78:BD:30:0D:25:11:3B:E2:01:C9:DC:80:3C:80:90:3F:84:D2:72:1B:0D:42:F1:20:13:D9"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://xfinancebnk.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: mCA2j/QuKX18IGUXIJliFg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 09 Sep 2026 10:40:13 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: it1k2hsYjCut2n0r/dUa/jID7xQ=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-09T14:24:26.601766Z","times_seen":18365687,"resource_available":true,"data":null}},"time_used":771,"timings":{"blocked":0,"dns":346,"connect":367,"send":0,"wait":30,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/jquery.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.778Z","timestamp":1788950405778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 30199\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87532,"size_decoded":30439,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-09-09T12:47:40.401677Z","times_seen":31803,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/bootstrap.bundle.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.780Z","timestamp":1788950405780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 May 2024 23:45:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 23307\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80672,"size_decoded":23547,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"3d7cb18be275bcc1f33324620dca9517","sha1":"cb71df7f175c1b3ee8d642a0efde2e742a142f46","sha256":"c938e1227260834371896291dd5d28e98b5743ec952b721bdf791744ab06810d","sha512":"032d8a984981de805b197e8377aacf6296fc33491b035015d892d13d5922b811dca07ad1eae87f185d28252f0c04a76bcc8acadd508db6f25e8fa0a3b38b886b","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU07P:HwORx3YCD45wZbDZTb0gP","tlshash":"3a73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-08-06T22:16:53Z","last_seen":"2026-09-09T10:42:34.475778Z","times_seen":1044,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-2.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.807Z","timestamp":1788950405807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-2.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3331\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3331,"size_decoded":3596,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit/color RGBA, non-interlaced","md5":"c28ea611c2d5a784419e65a4303f970a","sha1":"daa8770ce017a60431ab0900afeb20d0f047b4aa","sha256":"81655b6da14cc0fcfb518af9e17e32c15ea80e6cab8d089bb2ae6821b6452558","sha512":"2f003c025080d2ed4112e18d10df1a6057110c0f86299ead78ccfdf928c4607c5da76325e36fe3e823e4ce39b0dec138694218c238bdef8deb41dca3f032f700","ssdeep":"","tlshash":"d8615e4b4063c06a7cad1c79069b5ad146d1f458330683de24bffaccbb904c8b475dc5","first_seen":"2026-04-04T11:41:42.715126Z","last_seen":"2026-09-09T10:42:34.463039Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2029,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-6.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.811Z","timestamp":1788950405811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-6.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2775\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2775,"size_decoded":3040,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit/color RGBA, non-interlaced","md5":"73d16cda0c541254195c46aae7101029","sha1":"325cc585fa47aaf13940f4e8444123f5ebec4afb","sha256":"1425acd87505428ed460ec4cbb8504b6242c69a36cf6bc25ff825ef18be1475d","sha512":"c4e12b1ba8207559bab359c69cbb730845b9f59d32cec2d1cab9a8400ce7c08369fde606c071ac58b566d724a60934cf98ccfa5fc36495ce463c351d42c4e996","ssdeep":"","tlshash":"1d515cee4437c0211a9b045f10af5c3acb23227ee54276551a24151e90a0f4bbcfbe67","first_seen":"2026-04-04T11:41:42.69906Z","last_seen":"2026-09-09T10:42:34.563452Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2026,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2025,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/curve-line.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.817Z","timestamp":1788950405817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/curve-line.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 427\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":427,"size_decoded":691,"mime_type":"image/png","magic":"PNG image data, 34 x 9, 8-bit/color RGBA, non-interlaced","md5":"60e37f849c6c2eebc9d3fb3c0b793a8b","sha1":"e51b26b80ce107cdb558e2d99912b414b3ebf907","sha256":"c8e7e5d097e34bc1d9b1db848e3524114da796f740c4b6adbfab7296ae520bc5","sha512":"430f1d5419c55ffcece91fcf39443b8532a0c62d97b80435e50c56fce798495c58a78d027827c5c93d18b80fa4b7f0d2a1eacf686ab6b158b7b9200796cfad4b","ssdeep":"","tlshash":"14e0a36137237d359f4ee952638706861c3421d7223b595c03dd5d651733b0d7fe5006","first_seen":"2026-04-04T11:41:42.734938Z","last_seen":"2026-09-09T10:42:34.564406Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3069,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/home-enterprise-2.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.819Z","timestamp":1788950405819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/home-enterprise-2.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 202079\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":202079,"size_decoded":202346,"mime_type":"image/png","magic":"PNG image data, 983 x 590, 8-bit colormap, non-interlaced","md5":"947bbb2d3bcb2f77263bc938bde18ca4","sha1":"d7418a4e3ef7ab65b046f14d76504da4f4b5ede4","sha256":"0fbc09ca093ab3564f9af0408b870ae12cb138fe38c0bdce7e5abf2fc7888b01","sha512":"21dd51483e5598302a574c30b7c0088de1b378151ca2e4af9ca0278a394e8822df8b509f7bf5a8e8bf19caf0dcd133f33547f9ef98f1dcb4b6e890283257c6e1","ssdeep":"6144:FuJlFtBjswBA/jR2+EpEJUW+B5YLL8hKNz:FCLtB9BA/U+ZzLL8EF","tlshash":"ad1412da0620c13bab21a9b5057f9f694deb3437ce3d0b5b91ab5d384cd6a104c2e4f4","first_seen":"2026-04-04T11:41:42.667414Z","last_seen":"2026-09-09T10:42:34.422097Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3067,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3021,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/home-download-2-shape.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.261Z","timestamp":1788950406261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/home-download-2-shape.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6156\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6156,"size_decoded":6421,"mime_type":"image/png","magic":"PNG image data, 856 x 708, 8-bit colormap, non-interlaced","md5":"1354e0974ce4b59d4e336ffc43eb101a","sha1":"a83adb03804d50b0af34c6c4fe3061b54190158f","sha256":"3de8d94699bc6baa454e91114a2f2457c914f55406b8a5674dad351e5f6ae676","sha512":"d8c00b96cc26f510f2c6512017f43d90e7f00e80cd7220e791747dac047a445327295d438736b7eee5f37841072a24b2ff02db7726d7baa09e2c24fa25d1e0cc","ssdeep":"192:fvnnns6kJtXs9s+YyBxX6PP+Urq0n39QyUmy07Nx:fk6089sFOPUrq0tQPA","tlshash":"a6c15c90bf96d720c67fb3fb5a9f90905ad2590f46c4407dabacd2f21e89096a417c3c","first_seen":"2026-04-04T11:41:42.695473Z","last_seen":"2026-09-09T10:42:34.455789Z","times_seen":4,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.866Z","timestamp":1788950406866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /flags/svg/en.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 26 Aug 2027 05:41:02 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHAPJpPyoYXqNvKcXfdyKyaXp61nhRQzb3T4XqDKv4nTdrgdEPLhyHq3y5ohbBwDheT%2BF%2BkmC8ili0QdCGBlIYjMz3mF5JyCmwFtGSJVqzozJPBjMM8obApScwVjV81ll0bRrQ%3D%3D\"}]}\r\nage: 1227544\r\ncf-cache-status: HIT\r\netag: W/\"639d0089-35e\"\r\ncontent-encoding: br\r\ncf-ray: a38592aaedc2783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":1174,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-09-09T14:06:41.85017Z","times_seen":14416,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/jquery.waypoints.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.788Z","timestamp":1788950405788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/jquery.waypoints.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 May 2024 23:50:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3094\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10283,"size_decoded":3333,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10117)","md5":"77b94c24f452f7f0c32f26a377d5d732","sha1":"6bcb5af99cf3166ccf867183b4f02239ddeae2af","sha256":"e08f3ca3b4b2564ace8f181fed1139c329c3a84829b905c95f2b41de6c8cb19d","sha512":"eade9a021839fdc3736dfaf274c18de5273a079c2df09b0c48a9c1a544aca0edd84661b42f7f7771c22bf5cb1380d9fa8c87aa32d50dadd5a220cc405a351103","ssdeep":"192:5BnaLNCKdJDm6hj8k6EErwvfgaekfkYlppEp47+oByc4VjB7Z:5BaEGJDmC83E8wvdekfkY9E7oBD4VjFZ","tlshash":"5722418976167832178f90faa91f474eb336152ca40640bdb0c8d4ee18f196c677bf7a","first_seen":"2023-04-08T03:22:34Z","last_seen":"2026-09-09T10:42:34.46072Z","times_seen":508,"resource_available":true,"data":null}},"time_used":1048,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1048,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/china.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.802Z","timestamp":1788950405802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/china.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 480\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":480,"size_decoded":744,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGB, non-interlaced","md5":"2b6be025f591a75c82973efec940161f","sha1":"11062fee8aabeac7113bc39fc20fa6e815b95139","sha256":"043d881e6cae91b95733aed63263d3477cd66ccdb44ebd8446a9427ab3055709","sha512":"207c1c80f737bf5127e3c2f4adaaf8dcdf21ce8020d1c3f201695a6be9d9485099bb30eb9f9435d64efcc14bd677e6a67b1c63d85f13f9381f4d90c9dadd6df2","ssdeep":"","tlshash":"ccf05443eb12b83fcc82a077e5f160537d94d3455d3d0080ef7f81c09705520b861972","first_seen":"2026-04-04T11:41:42.719755Z","last_seen":"2026-09-09T10:42:34.540068Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2035,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/header-2-shape.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.804Z","timestamp":1788950405804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/header-2-shape.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1907\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1907,"size_decoded":2172,"mime_type":"image/png","magic":"PNG image data, 77 x 315, 8-bit colormap, non-interlaced","md5":"7a64718925a9749d47e6df5562127cc7","sha1":"9406c9d9d1d7b2cf0fda41a962e0a6ba954b74ac","sha256":"f0608dbdcc2ed0dc981d230b7d5b2b73b58c3db4aa645373adbb385220b50a2f","sha512":"e00c13b1839e7c8d68b719d02db3fd230eaf8d7c8ab3b8558da08b373b158dad1a9493a1dde927b5f5f0c2324b0f7dbfcb4c2076a4a743aea5acda7010b21480","ssdeep":"","tlshash":"ad41a8e03a09ac20c0c777c72037ae52a4e8565a3567615ee46f04fd67c1e1e81a62a1","first_seen":"2026-04-04T11:41:42.674684Z","last_seen":"2026-09-09T10:42:34.424528Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2032,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2031,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/home-entreprenour-2.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.822Z","timestamp":1788950405822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/home-entreprenour-2.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 173381\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":173381,"size_decoded":173648,"mime_type":"image/png","magic":"PNG image data, 922 x 590, 8-bit colormap, non-interlaced","md5":"4a1b37b255c12d82cc6d61087b7ad685","sha1":"cb93e89b16a1a7839b08a30be645d8081ee6f1be","sha256":"90cd8f24487150199d2b0d2fca74c54cfd52e4d98536daa0ea60074ebf66f1a4","sha512":"18b304e42d570a5b510c461e5acd6a3108352ae2a601bd190bd9573ecd382a0fdd21c6531da016ff817665e696f3562f0f395f6cb42b62e214414f64f0e6edd4","ssdeep":"3072:cfwGdPyXisyTcJPpQxj6pxmW76lqR9Fr24EeibdQ3T+VkPoRcTQoUeVVX/I12:UdKXiswcJPp77mW7UqRy4eYckQCgeVVF","tlshash":"6b0412d9e09e7d060d590c269db8bdfa047fbb64bed400b8509bde247e5dabc7824231","first_seen":"2026-04-04T11:41:42.668449Z","last_seen":"2026-09-09T10:42:34.536531Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3065,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3047,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/client-thumb-5.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.830Z","timestamp":1788950405830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/client-thumb-5.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9833\r\ndate: Wed, 09 Sep 2026 10:40:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9833,"size_decoded":10098,"mime_type":"image/png","magic":"PNG image data, 85 x 85, 8-bit/color RGB, non-interlaced","md5":"4fa01e66bf59f4485739c7f503cb0756","sha1":"75c6e6ea10bc2dd9981d4284d439ddc7a8a0ed6a","sha256":"689577c3b73e79b363f5b00c23cbfc0b4c0d955abc6f7d5e44d5cdf66521c016","sha512":"8029085d80741c37b74a71471bdb691cc6569e06437c5183746959760cf4ae52c2280942a7ac31754bb3dd53ea4afee890a733cccfc5bfd6d034feeff4f0e30c","ssdeep":"192:e7kzwAW3gleFtUY8GX2DIkv3oUP2NM8u2W5VsPjC8nx:e7ywDetIChv4U7/5OPmYx","tlshash":"0412cf9884275822f941dfa9dd1ad9c8e221bd3dcd1f1e64cabe16f77706f0610d2a08","first_seen":"2026-04-04T11:41:42.681162Z","last_seen":"2026-09-09T10:42:34.464642Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4016,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4005,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/style.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.760Z","timestamp":1788950405760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 12847\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93365,"size_decoded":13159,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text","md5":"6fa31b3e0108389bab02b49c562822c8","sha1":"34589b016d1e4d35c894e7ef7c99b2c2a7a4969f","sha256":"3f2a83828033699c9904a8681078c0c86c8f9f5ad02d55a64e35283db513f72b","sha512":"61e339518edeac0b7f04c4a510983735561c2666b62843f80a77580085b166f9f3287fee2d1fb5e8d3aa3cbe2e687b9f73320c44e368cca55272533aeebb54a7","ssdeep":"1536:xtgUoo9Z8GcaIGoOi673uQlAQ9+8o54R49OpaUp9KWvRJ66zxoYJny+9FRe0gU8K:xtgUoo9ZAt69ph9kVf6t7Tidp6ojASK3","tlshash":"c09362d26bb50908701bd5a968a2ab68f77c5482d10fddbcb7f1208cdec52c4917bb8d","first_seen":"2025-11-19T10:57:33.217353Z","last_seen":"2026-09-09T10:42:34.416963Z","times_seen":6,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/uk.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.800Z","timestamp":1788950405800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/uk.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1890\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1890,"size_decoded":2155,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit colormap, non-interlaced","md5":"17c582d3571583ad2d3f463b2f53176b","sha1":"e5fa52cd2690619d0b885b56f369ba4a310a7927","sha256":"23d968946dbfebe85f8f1c2af0727474e26524edd3dd3d566084f59ea7995a2f","sha512":"f0fc3f18fe36d4a3f047aabe7194d75c6e030d064bf890bc6c3645993a6a935a54027def2a3998bc0127ca71f91ea870a5fe76e131c34d586504fae7d79038cb","ssdeep":"","tlshash":"97413ba153b31dc504f7846612771a6b9dc8cc41eb8c6478924674c6adb04f7304a715","first_seen":"2026-04-04T11:41:42.731972Z","last_seen":"2026-09-09T10:42:34.43358Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2035,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/home-business-2.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.820Z","timestamp":1788950405820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/home-business-2.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 191330\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":191330,"size_decoded":191597,"mime_type":"image/png","magic":"PNG image data, 932 x 590, 8-bit colormap, non-interlaced","md5":"99c5deefe74b545714d4b54b51d400bc","sha1":"396c4860f928ec9c9469d361b3380e7a5c924ce4","sha256":"8d71208f3db8e3b12d8d332a43569d083f0a3593a1b2f54e9860cf740557ee25","sha512":"1176fa0f87eb518cc8dc359e2375be061263d48b386d9bc459c93c8bb2cbfe8194dc2ce7796058c8eee51483efbafa8e2999aeed7c8fde45517c27ba682ddf18","ssdeep":"3072:vG1Tn9KZwYU03HtfsQIvKAowL2X8qfPYhQa03h3GC3q5/HzpyBiNfCRXl6VEFrli:sn9YMcfXIvK0L2sqfP/a23X35i5CWiji","tlshash":"4d1413d956b4f79be6056877e83dc53b361831c238f3c231fc29b39ee255099616a40b","first_seen":"2025-09-21T20:51:25.759257Z","last_seen":"2026-09-09T10:42:34.535386Z","times_seen":15,"resource_available":false,"data":null}},"time_used":3067,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3033,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/client-thumb-1.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.827Z","timestamp":1788950405827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/client-thumb-1.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16335\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16335,"size_decoded":16601,"mime_type":"image/png","magic":"PNG image data, 85 x 85, 8-bit/color RGB, non-interlaced","md5":"56d99295bf6dbef15d78ae97c3ae0b2a","sha1":"d226003c2afe68043bb5facd0a6a76d0423306de","sha256":"54ed403ef1b49d56079c9c5fcb2949ab68ae6f15c1bb49522d08869402b46f84","sha512":"c7ba4732b371056a186ba92b419fff0dd1b6dcf4fecb778b2cff2724ce7171e6ed3a384f87df0df6e82d4fefe2859104ad9da81a1467dce26e4fe936aeb95459","ssdeep":"384:Ywfe4H83tWyjvo3IUmIWY4ZdiMHfph1Yv5HXwgrxEV:Yge4cMyjvo3IUmI8RHlYv5gLV","tlshash":"4d72d09fb5b2799cc1fcbf93585f5f608a8d07128053d7729158caad88ec789380e71a","first_seen":"2026-04-04T11:41:42.723329Z","last_seen":"2026-09-09T10:42:34.538223Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3056,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Arimo:ital,wght@0,400;0,700;1,400;1,700\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.922Z","timestamp":1788950405922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Arimo:ital,wght@0,400;0,700;1,400;1,700\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 10:40:06 GMT\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9926,"size_decoded":1485,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c60fbb440f6eb62001b560a1f5ef1f8f","sha1":"aa4f0854fa4ad25f0e65f4b8ea199967659e3cd0","sha256":"c7adedfa2da9d451601078561be46c062db6cc8b43e89ec63b2c66cf9232f57a","sha512":"668c07cbe77c3e4881d832d3150418434bc6a50c3b4f06da8654664422dee82c1b1c9f4274e10762897dc9d1a67e0034630668c83b363c4ad06d70104884f5ef","ssdeep":"192:XkBnkdkzk+0khIkxk8VkLpBnpdpzp+0phIpxp8VprFXtJKPODyyVZx4FetEzPHD8:Xin2keOIMhEznbxdLIf2DLgx8","tlshash":"6d22b9a2042fe480aa871cd237cf7c368e4eb1597045d076abfe19dcad95c636364b1e","first_seen":"2026-05-19T03:12:01.587944Z","last_seen":"2026-09-09T10:42:34.517962Z","times_seen":185,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":38,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/line-awesome.min.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.757Z","timestamp":1788950405757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/line-awesome.min.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 14986\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89741,"size_decoded":15298,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a0812614daaacdcff616320eb972f40f","sha1":"639786eabdc0b39313b571ea46ac9e54466de4b2","sha256":"c6578bc26c0c45bed4e922c1168e0e1618e4014950efb0fb325d706bbdd8f52c","sha512":"dd87bc96a6c97351634c219bf53474b83bf02931b215be0070717e7a78cc49aa989f2b00909f37296a4c17502f471a8d9d574ffb862cd3acf99770b0a7455e9f","ssdeep":"768:1b+0d/C5eXnu2nnY8G3104xUse1LN9abc4VNRvTdgBngfy9IcjJv5IopdU6:1b+754u2nOW4xUse1exx7Ha9hU6","tlshash":"22938abbd52d69c4b321c847bf4133b92886f56daaa20d50f28f544cacc269612e4f7d","first_seen":"2023-05-18T15:17:18Z","last_seen":"2026-09-09T10:42:34.429893Z","times_seen":313,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/flaticon.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.759Z","timestamp":1788950405759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/flaticon.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 537\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1698,"size_decoded":847,"mime_type":"text/css","magic":"ASCII text","md5":"a002b3047fea1809210030b4b6d4ff8b","sha1":"219663d67d762d5a47bf6b48962a5398771b17a1","sha256":"4839956798a9f54c1323315153919da30f7a0fc9f280e29efae037d68b6db267","sha512":"008b9980b579aba65c4848ec426a40e27d5fca6a2a580b072484f69a070116cb727a4dd81eb8c37e28a470e42547178dd066584bdb249f5ca69b64fd70acbdb4","ssdeep":"","tlshash":"9731c8b9c12e10418702ae8526ef6350ef49b02dacd4bd2ae1291d9dfff5d38878179d","first_seen":"2025-10-07T05:08:24.264376Z","last_seen":"2026-09-09T10:42:34.505851Z","times_seen":10,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/smartphone1.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.821Z","timestamp":1788950405821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/smartphone1.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53972\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53972,"size_decoded":54238,"mime_type":"image/png","magic":"PNG image data, 275 x 521, 8-bit/color RGBA, non-interlaced","md5":"8d528a6b353d9cab6744dbf46a74daf9","sha1":"8e86fd298e34dab8492a14f635d686ddc00c4665","sha256":"c16aecebf373a49075a59758c319948d21dd340af907a05ff4f7b672d74b81ce","sha512":"171cb018a8b34068733a5d9e99b69e7f3aef30697cef998885f0e5859145ce15f270619917b1b2a52cd8c50e9751da585c6ad6db25b6c62a62e6c729876d78e3","ssdeep":"768:3n2mGFc4omZSAx63sp+6X93DaIcEcyxYBy8V1NP5RZNFf0RjhNh7XCB6U+MJUJ1:3n2mG6LYA/CgIcEcRbV1DRZUjABJZUJ1","tlshash":"9c33012eb31f544e3e99fa38b16107b964d9c9bf20b9d537fc51da8912f44a0103a60f","first_seen":"2026-04-04T11:41:42.753207Z","last_seen":"2026-09-09T10:42:34.490832Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3065,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3044,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/circle.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.825Z","timestamp":1788950405825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/circle.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 692\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":692,"size_decoded":956,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit colormap, non-interlaced","md5":"a8a6d70c88f18fc241af443ad4a8f77b","sha1":"9010818e16a449f8ccb8ac0203812631b58d6f6a","sha256":"ea40e56070681348f2fb99c2be9c8d24d73cb3569701116505504c9be6ef8eec","sha512":"fc698d857227fd9dd6fa6843672d6b2e1f3bc5f62c32fda774e52eb75c12bad89e3cf56af9aa0cf036d4fddfb325a523f83dd6a1b8bc7e57887a34cd5a18fe24","ssdeep":"","tlshash":"1601e1dbb9a5117e84247ea8b239d3766c3405df38576051bc550a64ee9936443640cb","first_seen":"2026-04-04T11:41:42.702086Z","last_seen":"2026-09-09T10:42:34.437792Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3062,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3062,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/arimo/v36/P5sCzZCDf9_T_10c9CNkiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.286Z","timestamp":1788950406286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/arimo/v36/P5sCzZCDf9_T_10c9CNkiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 22:38:11 GMT\r\nexpires: Tue, 07 Sep 2027 22:38:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 129715\r\nlast-modified: Mon, 18 May 2026 16:06:49 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22352,"size_decoded":23165,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22352, version 1.0","md5":"22a984ef204ba0f883c2b966fc276b10","sha1":"e760c18bcf61abcf7126179a404394ad5e74ce68","sha256":"bc7513e48d544c96200a2e9f4887c4d6f966cc4e40c3276018f8e32965fde6b8","sha512":"3b32c7fc15afbc55ef761605addeb9fdacd92a0ac2e553810c4b030a02fd2cc1a037f423a26d2f568543809392261cd82a410a4d28478e193d4169fa0ccb5dff","ssdeep":"384:MbPfylCPLOCGANEe5KGDx7aUwlVzs/Q2b8XCeO8hwun+UkwwR4IjNPtrml06Mbt:MjfGCCg7wQx7RwrYQ2wXTO8hP+UTnIdD","tlshash":"11a2e1d119c84be161f60478702aa8924f06fb5da029fde958cb861962f791739ce503","first_seen":"2026-05-19T05:26:51.408089Z","last_seen":"2026-09-09T10:42:34.519536Z","times_seen":309,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":29,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:09.741Z","timestamp":1788950409741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 10:40:13 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a8ffde6-891\"\r\nexpires: Thu, 27 Aug 2026 09:14:57 GMT\r\nlast-modified: Thu, 27 Aug 2026 09:05:42 GMT\r\nx-77-nzt: k16R8hIcNSRHaoWeBndn9llI8wL7kWo9WQjmUnMdcsJ4Y+587AnlUAqxJWIKzCIF2AKZJqI\r\nx-77-nzt-ray: e2f7542018ceba4fb237a16a7b7b7000\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 55\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2193,"size_decoded":1041,"mime_type":"application/json","magic":"JSON text data","md5":"3ded3abaf6c1a95ebff2e809b79b1f3f","sha1":"8bee79313cbd2343a5d8fe682c610dccfb4e7ce9","sha256":"dd0efbaaabb66b220cdb59495717217194b811a8628ac2320a7e01c0867fdda1","sha512":"9811f31ea8d46776ab6e53c1708dc2d82014654587c61be61c1bde347f9c30f83a7bc7cb647c7baae1d440885dc6182806faa17a2eede9c95a8c5ed53a840313","ssdeep":"","tlshash":"69412593c4b80d8317dc6627b89586415d908387a8893d0d36ae9a7f6f4cda910e77bc","first_seen":"2026-08-27T10:24:41.408958Z","last_seen":"2026-09-09T14:06:41.905125Z","times_seen":347,"resource_available":false,"data":null}},"time_used":3271,"timings":{"blocked":0,"dns":3,"connect":8,"send":0,"wait":11,"receive":0,"ssl":3249},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T10:40:04.241Z","timestamp":1788950404241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\ncontent-length: 1139\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 10:40:04 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache,no-store,private\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":1964,"size_decoded":1453,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"75763ad6a7d6d2e134e819333828da8e","sha1":"d3d4577fabb7e00df9141f519f7cd60085fcf74a","sha256":"e7517a388a8b2cb4c1638217a14f8bf7619eff63686483414f756949172a1bab","sha512":"4bdd84354aee2fd64cb7e20f16a627b0dd3892d8ce2511ba020a30299ca5ab52e8e8f96f3cc3848dd8d40b45d8eaf20ec018e7fd36b2e87db1821711998708a6","ssdeep":"","tlshash":"b9411e671cf200211863617aabeb7305baa18583f046d8513dace2a4cf59ed5c4f3f8c","first_seen":"2026-09-09T10:40:44.152705Z","last_seen":"2026-09-09T10:40:44.152705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":142,"connect":62,"send":0,"wait":60,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/.lsrecap/recaptcha","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.072Z","timestamp":1788950405072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /.lsrecap/recaptcha HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xfinancebnk.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json\r\ncontent-length: 187\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":240,"size_decoded":358,"mime_type":"application/json","magic":"JSON text data","md5":"bdd6d12c10987b781bad1d6ae06c62ac","sha1":"f1686202643f428a8e88d738ab5cbac15d70d5e8","sha256":"0d45ebaa2a86a4923453040dc58b940ac2791e010ef1f9c7c272b754cbcd4ff1","sha512":"ee9ad430bad8839e759ce0979a13364a24eed18f8f07f2b743aba0d7dc24eb513cb368c91c7643bfb02e418e2f57aa0fca53cbc49520401f800b51befcc3c0d2","ssdeep":"","tlshash":"54d097ac1784a8da02d10337cd4414a813813ca602a3caa886d0ee054abbe081a08f92","first_seen":"2026-09-09T10:40:44.153516Z","last_seen":"2026-09-09T10:40:44.153516Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/.lsrecap/recaptcha?","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T10:40:05.585Z","timestamp":1788950405585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"POST /.lsrecap/recaptcha? HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 334\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":334,"data":"payload=eyJhbGdvcml0aG0iOiJTSEEtMjU2IiwiY2hhbGxlbmdlIjoiNWE1OGM2NGQ0NWYwNzFkYTE1YWM4YjE2ZDAxMWUyNjVhYTYxNDYxMWI1MjI1MTRlZjk3OGRlMjM5ZjZkNWI5ZiIsIm51bWJlciI6NDUwMDAsInNhbHQiOiI4ZmU5ZWM0ZWNlZmQwODRlMDdlMjYyMTEmIiwic2lnbmF0dXJlIjoiM2U1MWE0MTQ4ZDYwYmFmZTU3ZDk4NzZjMjg3YjFlZDRhYTg5YTBiNzE2NzI0OGRlOTRiYjk0ZmY2NDVmNGFjNiIsInRvb2siOjI4Nn0%3D"}},"response":{"raw":"HTTP/3 301 \r\nlocation: /\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-09T14:24:26.601766Z","times_seen":18365687,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/animate.min.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.749Z","timestamp":1788950405749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/animate.min.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 4951\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71750,"size_decoded":5262,"mime_type":"text/css","magic":"ASCII text, with very long lines (65348)","md5":"c0be8e53226ac34833fd9b5dbc01ebc5","sha1":"b81ef1b22de26af8a7a4656f565fbc91a69d7518","sha256":"5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f","sha512":"738daa4d2c3fc0f677ff92c1cc3f81c397fb6d2176a31a2eeb011bf88fe5a9e68a57914321f32fbd1a7bef6cb88dc24b2ae1943a96c931d83f053979d1f25803","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"a66329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T05:17:37Z","last_seen":"2026-09-09T13:21:11.870983Z","times_seen":33223,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/owl.carousel.min.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.750Z","timestamp":1788950405750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1066\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3352,"size_decoded":1377,"mime_type":"text/css","magic":"ASCII text, with very long lines (3185)","md5":"d964cdd4d9e85b8c1185a92bae34b049","sha1":"a0e2d64bcbb108f0415f364df5b6fabb8a290365","sha256":"aa7e59e6ec8871088cfeb47bac59a6475c815357deef042c61a5c3c965390546","sha512":"acc8bae151fb7542dd53d2a3ecacc9cf09e18109958970dd56d8b1cd2643811f9d5dfdf8499b5cf74e8cfdc6ad85e6be6d9cddea68670a368280576e9c093a13","ssdeep":"","tlshash":"c061bbe5314a265f480f83221dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-06T17:45:15Z","last_seen":"2026-09-09T10:42:34.423158Z","times_seen":2617,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.798Z","timestamp":1788950405798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 07:23:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 171718\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":171718,"size_decoded":171985,"mime_type":"image/png","magic":"PNG image data, 1877 x 688, 8-bit/color RGBA, non-interlaced","md5":"23a248eacd9ca5bd50b56ae9f70b1271","sha1":"d95d1ac0bee2dadcd2130e421c736a9378127886","sha256":"0c9ca8dcb6d39a03a517726ee5b0d27ed95433bf06aa0b12e3ec0ceac3f00273","sha512":"1388a08443a119691c58aac81a10d231f130cea8939b05683565dd571f76937586ca3c60c1f071eec5ab4026baa9876d5ed49de9489efbcac5f4ef68720becc2","ssdeep":"3072:ju7Rz1+UjUmDwk3cHgLE9U3y1wa+fsPvBQRbjDxgoO9c4lNXnOsrP96G+cY8LA:qRz1+sUmDwks4+vlvBQljDFkc4llnDrg","tlshash":"a5f3ceaad33740f3ba95251e33a9812750129d7b7581ce8a96f33a1f27a7f702cb5d04","first_seen":"2026-09-09T10:40:44.156399Z","last_seen":"2026-09-09T10:42:34.486973Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1048,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/home-facility-bg-2.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.824Z","timestamp":1788950405824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/home-facility-bg-2.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 352297\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":352297,"size_decoded":352564,"mime_type":"image/png","magic":"PNG image data, 882 x 657, 8-bit/color RGBA, non-interlaced","md5":"b961f23db142e3a2c174c34a5cf5b141","sha1":"53fc4c33c5b39a388afee780f4b0cfa53c7da3ba","sha256":"4cc60c187fbe192acf955133c6d594b70f4d7fbb1fd7838c5940cb20e63ec929","sha512":"b888c701339533aa82c141d3bb27128841d5fef35bc0350117c9fc6e0a635367aa6327d128ea3ea5b6845ca8f67e7da5c3a0eece35fd277a5d616e29b2995e5a","ssdeep":"6144:BQMKD93ONagwiZv+Z/apfOL4ycF92+Klu6zHYELPSfDxeb3DoJkV0i40XXIb:mNq18O2L4PXAw6zHbUDQ3Okqi4wy","tlshash":"9a7423492c3c7f85c178883a29e3c468d62fdf2599e57851acc092c8f2931d8d3eae75","first_seen":"2026-04-04T11:41:42.721472Z","last_seen":"2026-09-09T10:42:34.480744Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3087,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3063,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/boxicons.min.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.756Z","timestamp":1788950405756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/boxicons.min.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 11203\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65762,"size_decoded":11515,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f3001075613ba9cd1f739f8a369b3aea","sha1":"6c4b17563ebd106ce70cc642d29ef41779145231","sha256":"cf910deeb3a3ba42d35004f9bd1da9201df4b0184897d30b525e97bd8f999861","sha512":"47bec1a35fc45b3b143b46a532d782a9860e03736fe307fb5b34d0af36a869c3382a49139d190ba07c68ed8de2dec380336b286ed43d63d5c491d5b9bea19b23","ssdeep":"1536:CKTLiBm3+JvY/Ys0ya9EtAAu92jneUa6pjAXdMm3CYlsTM9sknbU:3+siU","tlshash":"02533df5e59944c83b32e447c784f74c20aaf931ca421d62f26f941e6ed4a650bc6fb8","first_seen":"2023-05-18T22:53:55Z","last_seen":"2026-09-09T10:42:34.416335Z","times_seen":38,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/arab.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.803Z","timestamp":1788950405803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/arab.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 246\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":246,"size_decoded":510,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"316a9d8ff4c760f267f9a1ab693b6b81","sha1":"55e14d0554bb481746185077a68ceca3a8b0212f","sha256":"957991c8ef6a00232f7f1120e01499a03da445607f6d70a685ef189a0f5584e2","sha512":"b178dfe0e040fbb5fb5170110962e9daaacf9c44ee1a7492ec72ed0aacbd430795dc19fad4ca59db960aa8fc4511ec1f635ddae92e396452b0acd3378bc9a026","ssdeep":"","tlshash":"cbd0955c5f499d22dc5490331f0f10bad5721151410c4839100fc82dd70f55e7184707","first_seen":"2026-04-04T11:41:42.733578Z","last_seen":"2026-09-09T10:42:34.558052Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2034,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/triangle.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.818Z","timestamp":1788950405818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/triangle.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 370\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":370,"size_decoded":634,"mime_type":"image/png","magic":"PNG image data, 34 x 26, 8-bit/color RGBA, non-interlaced","md5":"65c4e835cd6ddbf3980453f7ecfd0cb2","sha1":"5022ef7f52873f45ab8bf2869b2dba898a7456ca","sha256":"1be8a099b6e7cf8da88701f1e03492af4ca33d1d7f27c9ea06ba89005f3f5cac","sha512":"a55b6a14d491aa61a830abe4b1360f5fdf097d516f2e8b36c11fd5ae41e7d4af0286be16ceb641642f4a60fe8c7e0e6b7bc4a44037d79cabf15dc818fdffc23e","ssdeep":"","tlshash":"fae06ad54281ed156785256b50c3e0736541cb0d1310700d2323dcb40522d1f80d74d4","first_seen":"2026-04-04T11:41:42.716286Z","last_seen":"2026-09-09T10:42:34.533653Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3068,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3068,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/fonts/Flaticon.woff2","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.285Z","timestamp":1788950406285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/fonts/Flaticon.woff2 HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/assets/css/flaticon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:06 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3096\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3096,"size_decoded":3362,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 3096, version 1.0","md5":"0a74777ca5f43ec97bbef958ffb0d5a6","sha1":"e14f2ea7ae61a0022f633fa88c5254777c00aaa3","sha256":"391c31e441e37a78d9f9ccfca462dfca7f4908ac253e20491098dbe63a0c791c","sha512":"f46a5016bb8fe42fdd113767ac442155cf472a4064f8c37dd9b93dc646e18594054f44840bcfc61099366ef6acdf7a62f121fa328d995e27481866aed34d1753","ssdeep":"","tlshash":"40514ba6f8d44a33d5840ab4e269c9184cfee1e73ef333845ab1018241b4cc67310a6a","first_seen":"2023-05-19T00:12:25Z","last_seen":"2026-09-09T10:42:34.562779Z","times_seen":52,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/dwf.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.772Z","timestamp":1788950405772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 03:29:44 GMT","end":"Sat, 21 Nov 2026 04:29:42 GMT"},"fingerprint":{"sha1":"AD:56:9A:7A:0D:59:51:B4:A7:48:82:60:B8:DB:1F:A1:A1:FD:51:F3","sha256":"BD:3C:C8:79:0A:A4:32:CB:65:88:4E:EB:BC:86:AF:40:EE:41:55:58:77:2D:F1:14:A0:79:98:26:E5:1B:17:AF"}}},"request":{"raw":"GET /widgets/latest/dwf.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 06 Sep 2026 03:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Tue, 07 Sep 2027 17:49:26 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B9yQwwN2qb73p28GA3BiQtipGJFNRH2Xxu4qtj4EcDksIh2CNBnJh2AV7M1TFvldTo2%2ByX3S6YqDhNAiWYEDUP3qTczjBF3XI2cjVCOa7XlhZ86tpCN6Z2ssLHoYQvQEIKplvw%3D%3D\"}]}\r\nage: 147039\r\ncf-cache-status: HIT\r\netag: W/\"6a9cda0f-4c37\"\r\ncontent-encoding: br\r\ncf-ray: a38592a43a54783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19511,"size_decoded":6692,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"08bb3ee78f5b05c2369ff91fdd4e795d","sha1":"f8accd7867de3ea6009b6ebc4053e69bd1c0baab","sha256":"ea0c78a5d87e0fe9c13b22c15e82bc665f3b75ab10163d0d433d4f23eacfbe30","sha512":"08af1de1905af29c9f06406ff6947d4c8325f71abe73840a1b283391832a5d0f716e42e6b29cd4ad570b575fd7cbfb67b6b646860764c5260fbe8c1a17bba4cc","ssdeep":"384:UzCKMPZATN09o0mtYo8XNV8lvmFFi2hS4DMFf:UVMhAh060sYo8X38leRC","tlshash":"e992096905f7007e9913436aeebe4b1c50b902778004e920bfaeddc69fc55a8c773ad8","first_seen":"2026-09-07T18:28:06.742161Z","last_seen":"2026-09-09T10:42:34.507397Z","times_seen":8,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":8,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/jquery.magnific-popup.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.781Z","timestamp":1788950405781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 7490\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":7729,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-09T14:17:33.429787Z","times_seen":75501,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-7.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.812Z","timestamp":1788950405812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-7.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1993\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1993,"size_decoded":2258,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit colormap, non-interlaced","md5":"05fb6c576d6ed23871adc79ea4758b67","sha1":"472c24e4bdc67324e1ea9f04ee44fa026d03896d","sha256":"daba7a3ae644918453fdbb0fb9d3e6e8e4412b2ef1f65165520150b0efbc4b36","sha512":"2eda680e91ddbb2e8305d677ecab8ce252e2d7863e90e002c526e23122877a130b6e7696f45d1f7d97ab2867e552c49ccc70907cb9e1de39c0816e23407eac3d","ssdeep":"","tlshash":"a341848a50f8e6a774614fa26ce3a9f685468cab128430c75353dc3c1d025d633c58a3","first_seen":"2026-04-04T11:41:42.705246Z","last_seen":"2026-09-09T10:42:34.420825Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2024,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/client-thumb-2.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.828Z","timestamp":1788950405828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/client-thumb-2.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14586\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14586,"size_decoded":14852,"mime_type":"image/png","magic":"PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced","md5":"6840361a93268a992d9e155e1a3acc52","sha1":"9625a092aedb2cde5d545018be7fddf89a13c9c0","sha256":"25afd2363ce94a7d1374fe201a74cb7fdc731f81105dc3c962195df8b344b9df","sha512":"07ce82a1793a85a8a0576a7a9f96228cfa60e117cb431ff9de3e8be4ce3d054ec7dfdc4128b91539dd848c887c5d03817006ddc435d47e7d481cf0aa2dad9d80","ssdeep":"384:N/DyN2OJkU+5z9LU92jSXqesW5qKO51Wy7sx/mbB8:NbyN2O45z9w92xTsxuN8","tlshash":"7162e15ca152da67e595b1bd6010de2aacf83cb17a54894f3cf403ef1d90b386cb8945","first_seen":"2026-04-04T11:41:42.68741Z","last_seen":"2026-09-09T10:42:34.494889Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3059,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3056,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/lg-circle-1.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.833Z","timestamp":1788950405833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/lg-circle-1.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3596\r\ndate: Wed, 09 Sep 2026 10:40:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3596,"size_decoded":3861,"mime_type":"image/png","magic":"PNG image data, 608 x 608, 4-bit colormap, non-interlaced","md5":"ffe14bfe93bc60dfc8cb735e77bdf8c4","sha1":"04f7956fa16c4ae7daf5bcdc87337eb4104740fa","sha256":"766adffb7407f919e328d471095641ed4a094e2f39fa7a5de1109e5cc21ed158","sha512":"e78ee20a16fc50f5a127c1ef39498f4ce1f701310f5d5215e4e577ab9784f9dc47957066f1abf276cad4bd25653823799244d48d0b56ac0d5c1affd539f38f5f","ssdeep":"","tlshash":"79716deffad7860b81859ed6622aa2094df51f260b707399414d7caa0f7d470a17d00f","first_seen":"2026-04-04T11:41:42.724699Z","last_seen":"2026-09-09T10:42:34.428135Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4013,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4013,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.292Z","timestamp":1788950406292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-09T14:25:00.730405Z","times_seen":154610,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DabC6aZO.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:13.050Z","timestamp":1788950413050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/main-DabC6aZO.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 10:40:13 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a8ffde6-3e9c\"\r\nexpires: Fri, 27 Aug 2027 09:09:57 GMT\r\nlast-modified: Thu, 27 Aug 2026 09:05:42 GMT\r\nx-77-nzt: k5HcEl90RQ8mHqDe5yLqz9nTvcFXL/WF0eO3GAA9Sto8F2uhJrKunP2ZEDFlNL9bUM5mX+Q\r\nx-77-nzt-ray: e2f7542018ceba4fb237a16addcc3e03\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 1128597\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":16028,"size_decoded":6764,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15620)","md5":"484b339ab8994cd2aa6196b02c94bf40","sha1":"4859d1218ce4eabd728109388b5e999e361399cf","sha256":"6f1773ddd0916b4b176d423ef1ac87883da34e76dd895250be5ccca462fbf0b6","sha512":"ed195878480c14d1a519189d01ea5f90e05ba387f64c7f6958515af3a5cb3375f3a73ff98cf9f9602eaf50f779fc32521c76640ae170c056a00d76ec42f0cf92","ssdeep":"384:a2NcFT88tMPdBgaw5O+mvRan7/AKsDoKVwA3Q+crsbUzgfTtQfQIeIa:ZNcFX+dBgaw5O+aanrkoK2A3Q+cwbUwZ","tlshash":"9672e8741210743f712fac492a6df497723ad298e597c5289a2fdd5c36c8cc0a873bb5","first_seen":"2026-08-27T10:24:41.410826Z","last_seen":"2026-09-09T14:06:41.940412Z","times_seen":355,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/meanmenu.min.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.753Z","timestamp":1788950405753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/meanmenu.min.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1654\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7224,"size_decoded":1965,"mime_type":"text/css","magic":"ASCII text","md5":"f20ca1fc72c12e87e8f502e84f876d96","sha1":"b566cce9e3b295d42c02bc7953c68638947020e3","sha256":"60252acf6ae35f2e65124aae4897cc07f8bd7028a5efedb4d740244bba7c2daa","sha512":"b096d5fe7840d6d04793bb11166d7ba309aa3ae66fd118eda1d16b80df794f96b6412d0f6b2140afcb17aa2a997b8450838b4ab3737d142a61cad679bd2afc2f","ssdeep":"192:aZfhB25aixv4m+dVMF7FAix8RhN7UMLDh4LvhNRPYSyeVSZtgesVRvL:aZ5qaixv4m5F7FA88XN7UMLDh4LvhNR7","tlshash":"5be10356dab72444788a806cab99d3342fd85047a72dde6a35afe254cfc338050a3fdc","first_seen":"2023-05-11T02:06:26Z","last_seen":"2026-09-09T10:42:34.539304Z","times_seen":91,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/responsive.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.761Z","timestamp":1788950405761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/responsive.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 3867\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24069,"size_decoded":4178,"mime_type":"text/css","magic":"ASCII text","md5":"a3f8ad6d4fe056d600c0256ac0edba66","sha1":"c6274844a341b9ea8c1cdbe2a629be70e988ef17","sha256":"b3375a82f3da7a97f3aad0834fe8ceede0d24340ec5f841eacf168da28521119","sha512":"be7c1d9536ed15f2b25322893bceed1968a94b48aae70d7ba5ed473dc064f5749cd17355533d3ace124621dce34b57092e247419b563cfe7f5ce26661c0928ae","ssdeep":"192:BiwLp0qdQ+jFeczFGe/yMfqL5tRw5jvlnb9hfcfrT1R0zqos5D5+5MFUfyAnJCBN:gwbdlFeczFeHOnJrcESFscoygm","tlshash":"cdb27a8f76b2100c78667739aabe6755b258d443d24edce379c062accfc52d18ae274c","first_seen":"2025-02-06T00:27:59.817645Z","last_seen":"2026-09-09T10:42:34.518806Z","times_seen":7,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/contact-form-script.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.785Z","timestamp":1788950405785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/contact-form-script.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 May 2024 23:46:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 739\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2088,"size_decoded":977,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"22af99882c578949bb6abdcbc7d67e5b","sha1":"e998374d6d40c6cacbbd44c590539d71a170a887","sha256":"59055ab3625862277c51901b68700f01d38cb4d6298116921554dbef85255bb7","sha512":"0d3db87fae1d71612c13da5c7b8d4eca5d8df5b6a52f06f5ed80f0736ccd990e4100f2ec49f4141bb40544f614189e4b482461791e088381c0225cf8107f4234","ssdeep":"","tlshash":"77411008b57622c81a373e7da29f4104e67053239509ed113c5cb8c4af5cfa83aa23bd","first_seen":"2025-02-06T00:27:59.82608Z","last_seen":"2026-09-09T10:42:34.525775Z","times_seen":18,"resource_available":true,"data":null}},"time_used":1051,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1051,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-5.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.810Z","timestamp":1788950405810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-5.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2294\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2294,"size_decoded":2559,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit/color RGBA, non-interlaced","md5":"2bc1f6e6f91d8c081e8e6deb9bc0f7c2","sha1":"8ccfe56bc303f7f85ec06acec0005b0aab44327f","sha256":"5c5203fc2609aefad6e58751e46274c1e890cca63d804b603b3fb505d155ca5f","sha512":"c53c0745e4914fca219dfc540f0d3d7d98c3c7af9a7fba0e2df19b29323a519f06557f0bb3750f2f93066645eb964c7dea9314354f71074b386fef34b48ecc9d","ssdeep":"","tlshash":"0e4139ad8504ef80ea142b2a5e3de481dc441fe86bf6e42c170ed614ad3b85e1e20842","first_seen":"2026-04-04T11:41:42.666342Z","last_seen":"2026-09-09T10:42:34.558769Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2027,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2026,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-8.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.813Z","timestamp":1788950405813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-8.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2350\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2350,"size_decoded":2615,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit/color RGBA, non-interlaced","md5":"755afbd6fe7938c4cdb75b4bfe403f71","sha1":"433e1757457b5a59e648e3474ee9e17ce8fa814e","sha256":"dc8edbe8e02277d85b187d06b18f32e07e8395a1a9450ad3bed068f2191555e7","sha512":"b0f3849b3bff50542f158dd191abdf7f99047c2b35ea51a2934186264809613047bd1965552f1415d7a85c2b864ae8eb232d6e9357a344f8c2f2da04261cf185","ssdeep":"","tlshash":"fa416e5880d1dc45c9d3a06cbb7e422ac9743fe15f02651d9976b053cd44d465ee1c7f","first_seen":"2026-04-04T11:41:42.690527Z","last_seen":"2026-09-09T10:42:34.430962Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2023,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/data-table.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.823Z","timestamp":1788950405823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/data-table.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17364\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17364,"size_decoded":17630,"mime_type":"image/png","magic":"PNG image data, 482 x 501, 8-bit/color RGBA, non-interlaced","md5":"d9487e5fd79d966ab8567d4af9cd1dfa","sha1":"06a0060dba47413784166fdc6f867af8f710a213","sha256":"ce9fb82e861bd909a800e63cbfb6469220e53f4f264d62d1e776985e48e90e4d","sha512":"35d33bfbbc76f86e4ed952cf8e94d0405c7b87cbbd82c222d030cc1d198c25e7806c6b762531d3076317d3480c1d91dcbba0f49521ea9b711cd95db7a83806c8","ssdeep":"384:0lvWwyp/97+Ncjy2iaaekUu0uRap6MnBrLsjM91vB:0VWZpl7+Nb2FkUupIp6MBrLsjM9JB","tlshash":"0372d06839840d67da375b3b5a89485fda804028c43a549ebae06f57b733c2710aa5cf","first_seen":"2026-04-04T11:41:42.73654Z","last_seen":"2026-09-09T10:42:34.446666Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3059,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/magnific-popup.min.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.755Z","timestamp":1788950405755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/magnific-popup.min.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1593\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5259,"size_decoded":1904,"mime_type":"text/css","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-09-09T10:58:42.237782Z","times_seen":5539,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/theme-dark.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.762Z","timestamp":1788950405762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/theme-dark.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1493\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7903,"size_decoded":1804,"mime_type":"text/css","magic":"ASCII text","md5":"ca3af6a31399daafd005f863848d3af7","sha1":"be9fef33232a20b53a2878e4a09f1b6e9c4acae4","sha256":"9a8dcd45d26e0499af9ad82f6dad0ad1c655973d33ff7d3d75feebef358e57db","sha512":"5eb431bfaf5ec543bd644cb623ec09bcd8be3a869bb515fd1883c794919ac92edb72746fa3bdb65512be4ff9efaa07c6acd4356eea1d10ee7eada1bda24953b7","ssdeep":"192:j1sUyqxfsuMOTOQn7q9RXgivLUYsKNpSLAeQMBZ2CjQ7fSgA75UPgIcza:a/g8RXgivLUYsKNpSLAeQMBgSgwa","tlshash":"9df17e41eafa5829b03b04acb855db702bbd6080491c7f3ca777b1f4d6c5589eb36b81","first_seen":"2025-02-06T00:27:59.818502Z","last_seen":"2026-09-09T10:42:34.557402Z","times_seen":7,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.773Z","timestamp":1788950405773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-09T14:25:00.730405Z","times_seen":154610,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/jquery.meanmenu.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.786Z","timestamp":1788950405786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/jquery.meanmenu.min.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 1646\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5946,"size_decoded":1885,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (397)","md5":"6a22cba52317059d68888d7f39d71f9f","sha1":"a77b088ed0a2e068cdd8e0c848884265b4ab9356","sha256":"4b6b6999c12d6f2b0f80881e339d527532fe28b86c5cf23de710dfd3bc0dc6a3","sha512":"046f7ba576f72ecfd2e4e39e45fe3120419d3d605791791495cbd7ec831feec40775800c60b6bb3e579dd72be991fc4aca594e1197e47eba6e094dd083740a23","ssdeep":"96:nGSZSZSn71uMXsA2XNnaToz99t56txMsLcCMoGIh7b6eFSEvU:jIIn7QMXsTP6VQCMlIhKAvU","tlshash":"42c10f6bb1b104f8a0bb7855b93eb23030f3640bf94ae900326d65262f1997515b2ffd","first_seen":"2023-03-10T02:32:12Z","last_seen":"2026-09-09T10:42:34.510295Z","times_seen":102,"resource_available":true,"data":null}},"time_used":1049,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1049,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/jquery.ajaxchimp.min.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.783Z","timestamp":1788950405783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/jquery.ajaxchimp.min.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 968\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2381,"size_decoded":1206,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2381), with no line terminators","md5":"36d1b0e5a3a7397b267e704beb2f7272","sha1":"86df23e41520d19dd0c6928e4a5de89c1ae172a2","sha256":"2dcc9f6916671ee0ee4c5f7c7b6f13c519189b65d371a39309c0d95b79050c28","sha512":"e728f97a563dbba72519ef7ff7b6e3de3265c3cf8ef574affed6e67bc9bf2d1f1c2a79d3e7ead1f2a1d6fd4610fcca332e0ddcbd31de608a4ce64464b404926e","ssdeep":"","tlshash":"4741444025101bc2418b21f2e4c7bbe370e7d5958824f558e668e0e30ee4dcdae27a9e","first_seen":"2023-03-07T01:41:09Z","last_seen":"2026-09-09T10:42:34.489458Z","times_seen":5751,"resource_available":true,"data":null}},"time_used":1052,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1052,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/client-thumb-3.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.829Z","timestamp":1788950405829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/client-thumb-3.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16658\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16658,"size_decoded":16924,"mime_type":"image/png","magic":"PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced","md5":"3714ac0ca573767bf838ba11111e2eb6","sha1":"5a9b331c636bfa7be32c0b555454b734aab3de90","sha256":"208e5d563110515fe7b2cf836d6e75508e84665ed0ca3bbee1e3a88c27b4b37d","sha512":"8952e8369c0d30bd48f15ed7b2cdae04e7e954cd3d9cf5411f8eaf33888d24937ef95d3075bd141e48f5d9d03fdeedef4fc8e1c89cfeb4a8242d793fa5202db5","ssdeep":"384:7521+M+mQBz5/iFe3HFHhoy62THlQ57RAAlWRDcW6T1s:7521L30b3lSynzl9Vgzps","tlshash":"4972c194e35244f75663972ef8e6588c9ccd6331e892803c6acbc795e3a9d8f2502369","first_seen":"2026-04-04T11:41:42.717746Z","last_seen":"2026-09-09T10:42:34.483677Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3058,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3057,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/altcha/dist/altcha.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:04.982Z","timestamp":1788950404982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/altcha/dist/altcha.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.3.0\r\nx-jsd-version-type: version\r\netag: W/\"18633-SMBKJir+p3FYV7lh9ssT981aylc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nage: 39585\r\nx-served-by: cache-fra-eddf8230087-FRA, cache-bma-essb1270061-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 30256\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99891,"size_decoded":31033,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5059)","md5":"bebac533191faa79be87ec5b34354f82","sha1":"48c04a262afea7715857b961f6cb13f7cd5aca57","sha256":"7baf50cdd57bd393582341ccb47bd82bc08a47cef8713d42362f1737a3bf2e66","sha512":"4b54bccb1cde504db3479f512a824a49f43170bbf937785ef021512d2c8648e48162f6c084526209956991b0a1f0b2dbf26c6ac0a14ec5afbe73df8e245e928e","ssdeep":"1536:kavBLFo4A0YsHOOVU4qHNQWum+TF++yn3ysqN2LeXJQgWd:7s0XyqN2LeXJW","tlshash":"daa3d7957bf62032a723e03d6a4fd8087339904b26cdde443a9c5aa45f49a3857f2fc5","first_seen":"2025-11-12T19:33:14.799584Z","last_seen":"2026-09-09T10:40:44.178949Z","times_seen":195,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":9,"receive":3,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/script.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.794Z","timestamp":1788950405794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/script.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 2511\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9696,"size_decoded":2750,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"5f71b610de16840379a77c45d8f4d3c6","sha1":"cc7f9f294b89eae0c4e6c4e8799f146256a081aa","sha256":"8d80b277b10eabb73503c192b330465f3f3c955d8df22a05650679c04b437f1b","sha512":"c80386eb39aadffce2b7a6c83bcb4b3d993f44f9b6d09dacf5d27dd7fe1a866c2c58fd0746d76e47b9bc60fdc715a652a443c5d38ec28205698b42ac990f2831","ssdeep":"192:7pLuXx2/v1i9FlywNFLZay2m1tr8Lk1i9FmeGaeoWru8rym1ibFLZayAZdcdS5ej:lyh231i9FJNFLZKm8Lk1i9nGL31ibFLx","tlshash":"5c122e0ab4f510625923327a5fef114476396507d408ed10b8bf6ba80f9626c63fafce","first_seen":"2025-11-19T10:57:33.208443Z","last_seen":"2026-09-09T10:42:34.5278Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/germany.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.801Z","timestamp":1788950405801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/germany.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 361\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":361,"size_decoded":625,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit colormap, non-interlaced","md5":"44910d5b12338e58bd66602097809391","sha1":"8f5fcea456a87c21b97f825bf5fbd3d259a78b83","sha256":"ada16fe3557eab21c6a0aa3510afc9b2a858d20c396162bd282d555a0497e506","sha512":"605fdf657e926513628f0ea8c93a3ba2f91ac0c9d031002c10a01f992260dab683073213d0397cbd0f46b552cf3f3b69705a466d36a6bc3e3c28075f1ef58e7c","ssdeep":"","tlshash":"66e0c0769dfd8ee0d1c010da9fe899a0ac792794733217ce05c0c72e76a378cc0c9146","first_seen":"2026-04-04T11:41:42.694451Z","last_seen":"2026-09-09T10:42:34.462398Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/imac.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.805Z","timestamp":1788950405805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/imac.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 339649\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":339649,"size_decoded":339916,"mime_type":"image/png","magic":"PNG image data, 1186 x 813, 8-bit/color RGBA, non-interlaced","md5":"f8fe58cf9d50e778f262080048f551a6","sha1":"3df6e8eb1800a1a09fe38fac2ba96fbd33075b32","sha256":"c83392a2c80b6755198b15adcf64714099355485a00d35ed1c485427bf258499","sha512":"f1ff6d1fa10e6d7f906d904d08506f29ed221755df6b37f0aa76ad1c6e30ce3aa8f73842924733f193eb351c405fbf2053a0830c2d7d1494fbb2a5bec45636bb","ssdeep":"6144:+Z5jP2cZdT1a+KiuMwTGe2stNk+WkP6CIew9WyJiPmRC2/S:+ZB+cDsBiuDGe2stNk1CO9nq","tlshash":"97742394a470d95f3698e4f349dcf7c8d24a72f367ba19f2a63982b8c52d1648050f2a","first_seen":"2026-04-04T11:41:42.664942Z","last_seen":"2026-09-09T10:42:34.511657Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2055,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2032,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Oswald:200,300,400,500,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.926Z","timestamp":1788950405926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Oswald:200,300,400,500,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 10:40:05 GMT\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10266,"size_decoded":1355,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a1cc133a90e2f42bb150b6ea0c9f97df","sha1":"912fafb9971d50766d230f50b12bfc0cbdced24b","sha256":"fafd26cfa100cec90090a795113bad5efa34c33aa87360e129683e9c307cf395","sha512":"dfa1107b195ec23d0f48a041f4df71263a5146946b7add9368fc9158b3e4ed3a4e9ea9599ab44c82c49f7c4da65f98227598558bd2e1be11cfc971498672648e","ssdeep":"192:3KHLcfh9mKcLH0habK9La1hHwKaL9yhcVKDL47hBSK4LDQhOt:6rWuc1So0HG6X","tlshash":"4322aea2042fa4806f471cc533cf3d329e8ea24574518975affd1ca8dca6e216369b4d","first_seen":"2025-09-14T23:19:29.11902Z","last_seen":"2026-09-09T10:42:34.485625Z","times_seen":1673,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":33,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/96f5885c627d85917a4116917c6bd712c0e69df2.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.193.178.22","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:09.610Z","timestamp":1788950409610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/96f5885c627d85917a4116917c6bd712c0e69df2.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 10:40:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4c7-B/6NfaaDpZne/g/uc5qfSnm44ZA\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1223,"size_decoded":879,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1623b3b9e850c9c1491c70aef8d248c2","sha1":"07fe8d7da683a599defe0fee739a9f4a79b8e190","sha256":"b5b4d35c58c664f860fdab342e28e4f7337c31f56e8da3582e65972af84deb9e","sha512":"bcfb7323cde3f50f57c38880ba4f962f1f35f106a93074f2f3da73256fe2b54698c6065b11f1bc93d6f74811f6d2543fc6f5aa7afea2e5df1ff45b4f25fcc6d2","ssdeep":"","tlshash":"5321766d4a6822fd5245c7d6c5047a036bacdcb371003e7eea0d0a0e70db2e6223646b","first_seen":"2026-06-06T06:44:39.646667Z","last_seen":"2026-09-09T14:06:41.801066Z","times_seen":2678,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":4,"connect":24,"send":0,"wait":28,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-10.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.815Z","timestamp":1788950405815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-10.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1812\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1812,"size_decoded":2077,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit colormap, non-interlaced","md5":"3c3bf28fb8550a685d6debe24162cab4","sha1":"5c829682195b0110ec3b5e21047a05cb320692d0","sha256":"468d83d92a6ba9524972938d2a9cae11e1dabf0f5e6c40fdbce1b7e4e56dd5ce","sha512":"d3d2ee1b512e99987ca676a0ec9831acf5e33a06454289b48e1d16fc02f93dc39ce0a0a2e302fe82eb3c4bd317de2d2cf208f07f7f514e5cc8d09a9497cced0e","ssdeep":"","tlshash":"47315d8678a12227180a0c9394d34cf01c1ceea170d82a8b4347fc3e8ca06dabbd584a","first_seen":"2026-04-04T11:41:42.67094Z","last_seen":"2026-09-09T10:42:34.56078Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3071,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3025,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/check.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.816Z","timestamp":1788950405816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/check.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 690\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":690,"size_decoded":954,"mime_type":"image/png","magic":"PNG image data, 23 x 20, 8-bit/color RGBA, non-interlaced","md5":"42c5ee06a11fd3400d5b63ba234714fd","sha1":"25c9cabd11f1163bf441a310d5f7f41e9502e4bf","sha256":"e704270090ac3c5c2be8801282b6bc4a1ed7197d8ac393e711085e440956ba62","sha512":"a1bb691b678217ec0c0b70681ca467ed20ddb0f61e162b8fecdb4e1698357a3382059ed48c05600f47d04c7e54e6b29e574ea8c7823bb0f5e7c3ac264da839cd","ssdeep":"","tlshash":"2a01d8909e709976c104b730a238d50d4ec9dc128b36e2408ba239b4884170bd6221d3","first_seen":"2026-04-04T11:41:42.728923Z","last_seen":"2026-09-09T10:42:34.445469Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3070,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3070,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/client-thumb-6.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.832Z","timestamp":1788950405832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/client-thumb-6.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13703\r\ndate: Wed, 09 Sep 2026 10:40:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13703,"size_decoded":13969,"mime_type":"image/png","magic":"PNG image data, 85 x 85, 8-bit/color RGB, non-interlaced","md5":"3ab8b855e4b9ed8840528c4e8f49ceb6","sha1":"3f17d3c88521d89f41f1006c7073c9140d8f3849","sha256":"4b5b1404694a2299591306b1cdf544f7364504014c17449111c15d7cbc5503aa","sha512":"603db402455a713f093e0196023c6b502644ccb20924168e2680163c0a49946981579eb7f027176751a65c75439c4f6e62a1b134cb1b966f7a8b6ddd96fa81b7","ssdeep":"384:FkSAB/otjfvSrs1W/RG3qJLHJfa6d5Lts:uoR+N4sfa6LLts","tlshash":"ae52cfb2e40315f6e4f70d8c0805ba91a9858649ed538ff18f43db813b19fab9f925d8","first_seen":"2026-04-04T11:41:42.700213Z","last_seen":"2026-09-09T10:42:34.454158Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4015,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4005,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/favicon.ico","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.050Z","timestamp":1788950405050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1517,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-09-09T14:25:00.730405Z","times_seen":154610,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/square.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.826Z","timestamp":1788950405826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/square.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4964\r\ndate: Wed, 09 Sep 2026 10:40:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4964,"size_decoded":5229,"mime_type":"image/png","magic":"PNG image data, 179 x 163, 8-bit/color RGBA, non-interlaced","md5":"6af90da9b7f7865f6424fbcc5ed05a54","sha1":"41d380ec6215dc0ecbc5e018e3bad0e90c45ec8c","sha256":"428168db0380b3b0444fafd99f1315a5d0b40f9d0a82bb8566ca6e064c7841e4","sha512":"bf35322026f901e08f337656c33ad23deb81459f32bd63022adf9c2e82686faa4d8d7175d3a36ee6a7a6a98b724ca4d82c11982ead9e2de79e007c7261c5109a","ssdeep":"96:ZxDvA64f4fI7IgZt2KtUWws2T5J5iS41YWby3Ujy6GTcZO6uzwktZ0Lf8a:ZxDvA64gfI7Igf32b8/Ty3Ay6GTcsDw1","tlshash":"3fa17d5705337b6f66bf4e3be3185e53cb6b62200d591114096edf1cc792f494248e94","first_seen":"2026-04-04T11:41:42.671821Z","last_seen":"2026-09-09T10:42:34.426659Z","times_seen":4,"resource_available":false,"data":null}},"time_used":3061,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3057,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/client-thumb-4.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.830Z","timestamp":1788950405830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/client-thumb-4.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14693\r\ndate: Wed, 09 Sep 2026 10:40:09 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14693,"size_decoded":14959,"mime_type":"image/png","magic":"PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced","md5":"3a5020e934137a8b122bc2cf6ceac3d4","sha1":"eeff36b29f9bbe727f452698f624dee228a8c6fe","sha256":"5cf7543d47425438ac21f49a8a61e836862304472faef6f88520be21b4b9d10e","sha512":"d7231205a1e4256b673a215f9703f7279cb6f987677939c0806a5785b1b1eee6c274067b4018045f717c38a7d3af42f91a83b4db7c180df1d569682fbb9faa35","ssdeep":"384:YQ0jw2fWWYKlj+UDeydBKuIji8pk+Xky3vWVQsGXxpeO:Yz0BWYoXDTIoQ3vWVQvXuO","tlshash":"2562c0c748f3b23bf6c2c325c8c2fedd9ab496e541539608bb0b4eb2194e840c3107a9","first_seen":"2026-04-04T11:41:42.709355Z","last_seen":"2026-09-09T10:42:34.46398Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4006,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/header-bg-2.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.257Z","timestamp":1788950406257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/header-bg-2.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36080\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36080,"size_decoded":36346,"mime_type":"image/png","magic":"PNG image data, 1194 x 1235, 8-bit/color RGBA, non-interlaced","md5":"676945c564191421b720d8f2a3fd8841","sha1":"222f4234397eeedd28f86f112e2e429552fbff16","sha256":"6e6ea06c2b6eca1db36b4cbc9ea9ee80611562c75c410faef0dd1979f8607e2b","sha512":"886947df675b4a54f3c79b0452806a1e65ec3e39a40a4b93a7ff9a0336e4799de676b8498ca4913dc8c32d359acb611769301189b8b0513f30c679b4aa56016e","ssdeep":"768:J8EOj2Sa8TzdWAMhuG0Gki8/TbaykqlI3iEa8bxjYsuWBQ0Qck1I:JbsrpWdNEi8/TbAqDEbVYXWBQ0q1I","tlshash":"f5f2e0d6bf1a09b59cb4b9f9c3134c2b1e4c40d517d1aa78e1d8069e3d1232d2d8dbab","first_seen":"2026-04-04T11:41:42.725935Z","last_seen":"2026-09-09T10:42:34.465271Z","times_seen":4,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/fonts/boxicons.woff2","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.289Z","timestamp":1788950406289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/fonts/boxicons.woff2 HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/assets/css/boxicons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:06 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 114992\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114992,"size_decoded":115260,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 114992, version 1.0","md5":"066ee59a3ade3e1e50c4d83055363d30","sha1":"890e01d5670c870421c32e20b9ad7ed05c1a045a","sha256":"dec58953a5ccd230fee770d8abb7d21efddeb723b08929a259551c4b17eaf05c","sha512":"661c285ef6ec2ceeb47766ef826ebbb89a357a41313852affff03eedbf592ddc9897ba233dd3cac045e69bc5d05ece557c059edf88733e2fb23577f8f8fb81d9","ssdeep":"1536:U83TeUhJzKiB2mN4eh9j/L7KhOIOlqiuoHV66sE0XDJ8FQQVnO2ZSA6JtsNhdzdM:vTeoBz/HfKOIOlDNH3shTEQQn2ifM","tlshash":"65b3124c936bcc98ce5a38f50aa513d9752d88b8f115ecb0e7397d664a8d39323921f3","first_seen":"2023-05-09T12:13:01Z","last_seen":"2026-09-09T14:49:18.623268Z","times_seen":492,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T10:40:05.649Z","timestamp":1788950405649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xfinancebnk.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7762\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":49385,"size_decoded":7942,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (519), with CRLF, LF line terminators","md5":"d18fd82fff455092a3ac9e2b5e9343af","sha1":"5ebe95611488d8ef794cf7f8798a9721f487d3a6","sha256":"df9e5496c54f94dc6488e383a59322e3d1a6205d641a1eb700acf326268dc61a","sha512":"faa89263b0e453d6caea1cb1a88fc013afacf678625097108ac9870adfaa888a56232c5f92f68a13fd4963a0a35f49b238e6f008647be8ceaa1f7f42782dbd31","ssdeep":"384:lLJp5DdsEZuuyuuEuuMOS9abSDZeWlas3puNJo:lLf3uuyuuEuuMOF2XP3pso","tlshash":"5423eb2558f1207b01a391c0a6366e5befa1d603ca1a961432fc0fde6ff3d86cd27959","first_seen":"2026-09-09T10:40:44.191175Z","last_seen":"2026-09-09T10:42:34.47197Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/css/bootstrap.min.css","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.747Z","timestamp":1788950405747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 May 2024 23:43:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 28073\r\ndate: Wed, 09 Sep 2026 10:40:05 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":232786,"size_decoded":28385,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65345)","md5":"683ef9bbd06da84c014825c5cd11ad06","sha1":"4434df045be57fdfa3c1950b6d673288f232eb8a","sha256":"aed9c458a05cd39e6e7037652f092be8363f5601e41a24b63c05c5bdd7c8ff24","sha512":"7acca72ca7f2509bc9043af3c5e580664c368cb1fc6c98df72df90369c523f757044096ffef1849be4c7b079315bd1d086d3bf8d4f424b79107bfadb6084a5ec","ssdeep":"1536:49onIWbn98fdRfvO5wlP7749P3EV98IsYRElV6V6pz600I41A:9nIw98f7V986I6V6pz600I41A","tlshash":"2e3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-10-24T20:27:21.398617Z","last_seen":"2026-09-09T10:42:34.502449Z","times_seen":11,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/js/counter-up.js","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.791Z","timestamp":1788950405791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/js/counter-up.js HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 08 May 2024 00:02:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ncontent-length: 576\r\ndate: Wed, 09 Sep 2026 10:40:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1054,"size_decoded":814,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (901)","md5":"3e883f8bb599d73be9989280e5de38dc","sha1":"3e5e0b26bc885084d7f3c5f54acd904773f8028d","sha256":"9ece7cb6ee0d1133eafd235a6bdb617695beab104093f94bee54d6a573357246","sha512":"3ad6cf6d68dacb0d6a287c86cbc6eb1d8dd4e61840a21b0afcf15e23f91b747f3028e992af9712cfb8158680256fcb0fdaf27da07407b0d26c67ce5458bff605","ssdeep":"","tlshash":"8f11afb97a0f69cd6a10f46db1bfb4589036bdbc8841584bb0c551802f92a7e3b53b70","first_seen":"2025-02-06T00:27:59.828674Z","last_seen":"2026-09-09T10:42:34.423761Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1044,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1044,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xfinancebnk.com/assets/images/logo-1.png","fqdn":"xfinancebnk.com","domain":"xfinancebnk.com","tld":"com"},"ip":{"addr":"23.153.104.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:05.806Z","timestamp":1788950405806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.com.primevestasset.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 07:41:04 GMT","end":"Tue, 08 Dec 2026 07:41:03 GMT"},"fingerprint":{"sha1":"8C:3F:55:3E:E9:8C:35:8A:DD:5B:DB:6F:93:A8:15:F0:D1:C6:76:B1","sha256":"B0:7E:18:EF:AA:32:15:BE:B9:E6:DC:C2:3E:38:23:98:AA:C8:75:20:AA:6B:F0:C2:B2:FC:FA:B0:11:B9:13:69"}}},"request":{"raw":"GET /assets/images/logo-1.png HTTP/1.1\r\nHost: xfinancebnk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 10:40:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 07 May 2024 23:24:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2703\r\ndate: Wed, 09 Sep 2026 10:40:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2703,"size_decoded":2968,"mime_type":"image/png","magic":"PNG image data, 210 x 70, 8-bit/color RGBA, non-interlaced","md5":"413e3f55c66aeebb63be627c244580c8","sha1":"2a06ddf9f2321b5cd7747ef2fbd389cb77643257","sha256":"29d5a5b4d8f818a1cd5ce35bb475c3168de725059d764c9426d2e53b88d44790","sha512":"d878f81c19bfd496a9bc5640249fcfa2b44c191246ce2e0a681716167a1218e58c36120fedaf28d956b805c0347617c151c9d400c7746e27957fa915dd5028b8","ssdeep":"","tlshash":"2a51296ccb865cf8e2690161d86da99c1588c27a2f984f2e0076a2b3b683d112759d3b","first_seen":"2026-04-04T11:41:42.752089Z","last_seen":"2026-09-09T10:42:34.425606Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2030,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"xfinancebnk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:06.291Z","timestamp":1788950406291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:43 GMT","end":"Wed, 11 Nov 2026 18:42:42 GMT"},"fingerprint":{"sha1":"4D:89:37:9F:84:1B:FF:C9:39:F5:29:BC:64:5C:81:B9:FC:B4:62:34","sha256":"19:44:D1:D4:0E:46:63:2F:1C:79:F2:43:C1:52:6B:F1:4B:C5:2B:F4:3D:04:55:0E:C7:74:B5:03:A3:6F:91:CA"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xfinancebnk.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 10:40:09 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: kzuUq1z38TOZCrclqX8gyhWt2fxrBuW4fmb/PX+vLG/5dtnojLqtT+ttAdixz1OgYGSDQMA\r\nx-77-nzt-ray: fdb54123474f17c0ae37a16a57c2ae22\r\nx-77-cache: HIT\r\nx-77-age: 28\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6042,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-09-09T14:17:33.386239Z","times_seen":9228,"resource_available":true,"data":null}},"time_used":3295,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3276},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/shared-DqnxneoL.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xfinancebnk.com/","date":"2026-09-09T10:40:13.053Z","timestamp":1788950413053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 18:42:46 GMT","end":"Wed, 11 Nov 2026 18:42:45 GMT"},"fingerprint":{"sha1":"02:15:23:9E:FB:D6:BA:70:A5:A0:F0:53:9D:F4:1F:AE:DD:A9:2E:44","sha256":"53:3C:17:3E:10:6F:4D:A3:B5:0D:11:42:7D:01:FA:29:0E:0C:8D:3A:BE:5C:F3:77:52:D7:EF:25:7E:8C:CA:DC"}}},"request":{"raw":"GET /assets/shared-DqnxneoL.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://xfinancebnk.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 10:40:13 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"6a8ffde6-42f31\"\r\nexpires: Fri, 27 Aug 2027 09:09:57 GMT\r\nlast-modified: Thu, 27 Aug 2026 09:05:42 GMT\r\nx-77-nzt: k9iXgKoBlX4kt6VNt1NcTP9AJA/4YHhdYU64OjZGq0OgxADnwLSSSdeRXb9aNLolHJUruiY\r\nx-77-nzt-ray: e2f7542018ceba4fb237a16a0cf95b03\r\nage: 0\r\nx-77-cache: HIT\r\nx-77-age: 1128597\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":274225,"size_decoded":93071,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44710)","md5":"00e2016c8eaa5d81104f61ec86462ef5","sha1":"16249d91aa367532b08f1dc494900a84520301c3","sha256":"d7da9bee8ad6397d1e6788b169f82b37f111b2628a998188e707329483ce5596","sha512":"caefb7d25ba6b24a5864f3ef23b2c5200246c88d0fe8e22095b3672597b729e0b3b99447d4c1458c2c5d74204846caee20095e727b273020593b4e12dc878952","ssdeep":"6144:FMAopqOWSr8ad2jJKaQqhJp9cuRgufObV:4qOW2Rd29d/DRJfObV","tlshash":"f9443ad53294b035439b51e6906f2106f33e5c19580d812cf269ece639baec4a2f7fb8","first_seen":"2026-08-27T10:24:41.327319Z","last_seen":"2026-09-09T14:06:41.848992Z","times_seen":351,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}