{"report_id":"b7e7be61-becb-4f93-8e98-7d178ee577ba","version":0,"status":"done","tags":[],"date":"2026-06-12T09:33:36Z","url":{"schema":"http","addr":"transfersecure-ca.com","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"title":"transfersecure-ca.com/","dom":{"size":5650,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"079826d260dcca9f8338b3e048e8981f","sha1":"1fc1780b74fff68814bd1fa91a2a1ba093d1f009","sha256":"43037dba7195932e61b4ef55706034a816e7869357cdbbfbd726dc5312aa186a","sha512":"7c95f3c96be0bc8432f59dae095ed725f8b0a720d4557331d35d4b9c93959652736e5fa8d7ca2624b9833e8852baf96d345dd0f6724ca6211c69f47564ce4d12","ssdeep":"96:nwl1v1/I2YpI6KjLKkCZhCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClq:wl1v1/I2YpI6KjLKkCZhC3WqECRMHv6w","tlshash":"86c1509b1df3502b293354a4afb7740e3462a10b5085ce9a7a5e93cc4f82798dc937f9","dom_hash":"domhash4d93d9861f074b69476d80f245ddf372","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"transfersecure-ca.com","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-17T09:33:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-07T22:44:32.204356Z","alert_count":0,"request_count":23,"received_data":195522,"sent_data":11017,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-07T22:40:26.930816Z","alert_count":0,"request_count":23,"received_data":934372,"sent_data":12006,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"transfersecure-ca.com","ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":92,"request_count":92,"received_data":293216,"sent_data":56313,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-07T23:49:17.429937Z","alert_count":0,"request_count":23,"received_data":2073312,"sent_data":11270,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/botd/v1","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"importedModule","is_inline":false,"md5":"e64d1c3dc6c702b31ea2ea24e9005e36","sha1":"b9e9e5dd982d282e71f086113dddfaf3f0ba20d1","sha256":"50f28f8b97f940a452183c8183b552ddb8b439130c8c06a8c12e791d21eaa599","sha512":"4d2ad56fd7c5e00f2c41fac1100854016c6c6d8f9690fc41414dec7f1240c35622079d15c83c86a0f3490158f620cd93c5464669516439c91cfbd3ade4d564aa","ssdeep":"","tlshash":"e5e068193180f3254245b518f30bdc46f2551c9918ad45a5d86ca998ae11839e0b2fdd","size":361,"data":"","first_seen":"2026-05-26T00:11:11.939772Z","last_seen":"2026-06-17T17:25:33.66705Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","size":7380,"data":"","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7049eb773c6a4ad66faa208e63de1370","sha1":"88c3fa6a1089fbdcb5e93bb4829c94ef94bb48e9","sha256":"19525311841e8edd9db413c3a664dc8d2ab4a180ad9ca49c346c44f5ed16ea49","sha512":"51b9485d5b7b6f4a38707da2a5f97dd8967fcddd767e4fc399d4a50d7ca290d683fdf0d9209f5984e7524865ac157372a624b50c752b5ede9a573b99e339f77f","ssdeep":"","tlshash":"2f710e6b1eb6117e253314a88b67340b3032610b6185ee9a790fd7d90f527689d23bef","size":3539,"data":"","first_seen":"2026-06-12T09:33:46.87102Z","last_seen":"2026-06-12T10:48:11.585948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","size":39585,"data":"","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj31 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj33 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj34 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj27 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj26 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj29 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj28 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj32 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj30 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj58 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj64 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj66 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj67 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj60 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj59 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj62 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj61 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj65 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj63 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj93 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj99 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj101 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj102 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj95 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj94 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj97 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj96 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj100 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj98 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj128 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj134 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj136 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj137 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj130 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj129 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj132 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj131 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj135 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj133 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj163 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj169 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj171 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj172 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj165 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj164 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj167 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj166 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj170 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj168 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj198 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj204 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj206 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj207 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj200 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj199 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj202 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj201 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj205 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj203 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj233 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj239 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj241 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj242 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj235 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj234 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj237 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj236 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj240 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj238 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj268 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj274 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj276 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj277 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj270 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj269 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj272 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj271 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj275 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj273 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj303 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj309 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj311 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj312 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj305 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj304 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj307 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj306 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj310 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj308 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj338 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj344 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj346 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj347 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj340 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj339 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj342 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj341 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj345 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj343 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj373 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj379 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj381 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj382 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj375 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj374 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj377 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj376 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj380 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj378 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj408 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj414 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj416 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj417 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj410 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj409 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj412 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj411 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj415 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj413 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj443 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj449 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj451 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj452 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj445 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj444 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj447 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj446 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj450 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj448 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj478 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj484 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj486 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj487 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj480 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj479 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj482 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj481 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj485 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj483 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj513 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj519 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj521 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj522 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj515 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj514 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj517 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj516 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj520 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj518 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj548 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj554 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj556 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj557 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj550 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj549 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj552 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj551 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj555 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj553 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj583 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj589 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj591 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj592 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj585 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj584 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj587 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj586 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj590 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj588 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj618 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj624 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj626 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj627 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj620 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj619 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj622 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj621 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj625 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj623 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj653 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj659 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj661 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj662 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj655 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj654 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj657 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj656 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj660 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj658 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj688 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj694 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj696 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj697 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj690 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj689 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj692 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj691 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj695 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj693 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj723 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj729 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj731 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj732 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj725 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj724 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj727 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj726 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj730 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj728 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj758 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj764 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj766 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj767 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj760 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj759 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj762 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj761 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj765 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj763 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0},{"level":"log","text":"User-Agent Checked \u0026\u0026 Approved \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"error","text":"Failed to fetch or post IP:map[actor:server1.conn0.watcher16.process7//obj793 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 preview:map[kind:Object ownProperties:map[abort:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj799 class:Function displayName:abort extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76518 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] always:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj801 class:Function displayName:always extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29512 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] catch:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj802 class:Function displayName:catch extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29578 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] getAllResponseHeaders:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj795 class:Function displayName:getAllResponseHeaders extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76206 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] getResponseHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj794 class:Function displayName:getResponseHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:75999 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] overrideMimeType:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj797 class:Function displayName:overrideMimeType extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76356 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true] readyState:map[configurable:true enumerable:true value:0 writable:true] setRequestHeader:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj796 class:Function displayName:setRequestHeader extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76251 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e t] sealed:false type:object] writable:true] state:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj800 class:Function displayName:state extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:29484 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[] sealed:false type:object] writable:true] statusCode:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process7//obj798 class:Function displayName:statusCode extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:76416 line:2 url:https://code.jquery.com/jquery-3.6.0.min.js] ownPropertyLength:3 parameterNames:[e] sealed:false type:object] writable:true]] ownPropertiesLength:19] sealed:false type:object]","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"This device is not considered mobile.","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"log","text":"Screen size: 721Checked \u0026\u0026 Posted Successfully","filename":"https://transfersecure-ca.com/","line_number":0,"column_number":0},{"level":"warn","text":"FingerprintJS Bot Detection is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1925995 for details.","filename":"sandbox eval code","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:20.718Z","timestamp":1781256800718,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:23.849Z","timestamp":1781256803849,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:24.781Z","timestamp":1781256804781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:24 GMT\r\nage: 1362816\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103411\r\nx-timer: S1781256805.786308,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:25.797Z","timestamp":1781256805797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lvepx4bdfo87jxsfFqAjBduOlUoCoWEt4wtQCVGiokw%2BDTtwjQRG4TUjl0jJ3ilj2dC2gyspPyv%2FeSJBrXAT%2Fo5ujjfV2d6fDXYLmkY0edp3PJ8L9TgVQpbkupWH7Dau9eQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da9c3de10b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:28.802Z","timestamp":1781256808802,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:28 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:32.057Z","timestamp":1781256812057,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:32 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:16.532Z","timestamp":1781256796532,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:21.641Z","timestamp":1781256801641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678041\r\nexpires: Wed, 02 Jun 2027 09:33:21 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=braDNyfm63G81GAJpEbXX80mB71k5xQ98U1kxY%2BqgRJG8H2oqQK1EL0rrT64izz3NHdmp7CEFPum6ipRWPepBEY77KRVK8X3JweaMHA0gHrFrkc8ukJnyYNoeSB5xCW0WN%2FJwebH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da824c6856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15040,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:33.032Z","timestamp":1781256813032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24691\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYAJJEfcAMsQkvA53KWprvOmu%2BALKSZhKmdzkx8qNQIT1lO3N1QLsUC0cYAqpJ8cQRQJspCON8wlMjp22OkC3gm0d4tkv5ZzCq%2B21yHUrd1DbT1eiDk1S7aWn0o3%2BckSG6M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7dac97ac50b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4477,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:23.726Z","timestamp":1781256803726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24682\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGMdB4V%2F4tek9pDvYT99CUac%2FlzPv402jfIp2fDwG9WBYcxwXtaz5m7LCvkj1SRFIk9p%2F1kq5OEiSPXEmNxkEjZ0nmaKOMMvWTdxfeOkXQgZ%2Beys2J6sUyPeas2MS%2B%2FR7vk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da8f49ef0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4481,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:10.218Z","timestamp":1781256790218,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:11.145Z","timestamp":1781256791145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:11 GMT\r\nage: 1362802\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103392\r\nx-timer: S1781256791.149719,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:12.183Z","timestamp":1781256792183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24670\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDswhVw14wKc2qFqAwA1JLGAXFLjoPIzUXGo5DwigS%2B4OWH3QnEVm4e8GhDNDzcurCsY54cQKEdOW8uRIXfM7x0PcZO6fVNnuufJtfMUWwqo1V%2FqlQNeJ2FUmzEjVapOiWY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da472f760b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4473,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:15.227Z","timestamp":1781256795227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:23.599Z","timestamp":1781256803599,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:23.719Z","timestamp":1781256803719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:23 GMT\r\nage: 1362815\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103409\r\nx-timer: S1781256804.724258,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:03.580Z","timestamp":1781256783580,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 09:33:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Im2WSYSHi1QT7Z4dMN1pdTVjBb8Nhc7MnQap4eYvJ6lL7vR0aa39RDFWptS5HD6JgI8%2BvfCzegl62SAaiB5cA%2FHhfvJznn88lY30cokvchgmMVJiJVCsz0KWkefhl%2B14K%2Fs%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0a7da397a6c5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4440,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6467,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":58,"receive":0,"ssl":6406},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:12.306Z","timestamp":1781256792306,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:13.251Z","timestamp":1781256793251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24671\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MtYhRR9cmHdtEMCFsYg7uXw69a6ZdwlAnJGpxQ%2BI%2Bz9DnwT2hbN8HydtVgZO%2BxWx8bqy%2BdtsICzH80pO6S4t1eFCRrgNyrYZNxxSCk8u00FmUYAHvFgkARizJksWkU41nQM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da4ddc5b0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4477,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:14.394Z","timestamp":1781256794394,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:21.527Z","timestamp":1781256801527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:32.920Z","timestamp":1781256812920,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:32 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:33.074Z","timestamp":1781256813074,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:10.102Z","timestamp":1781256790102,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:13.299Z","timestamp":1781256793299,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:15.343Z","timestamp":1781256795343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678035\r\nexpires: Wed, 02 Jun 2027 09:33:15 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5KWIlKsBeZBng%2Fs7jBDmktHNDYjzXutGqLocrUES1gcQCSz2Bwfhv0Ze7th62H4dqzAwwaYTLQDFyeCZWSvTD%2BS%2BnC6NdFKIfVFWo7RdonTTKR4fO2y2a%2F7zdpC59o9usR5t04AC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da5aef7356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:17.473Z","timestamp":1781256797473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:17 GMT\r\nage: 1362808\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103399\r\nx-timer: S1781256797.477667,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:19.644Z","timestamp":1781256799644,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:25.878Z","timestamp":1781256805878,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:12.277Z","timestamp":1781256792277,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:16.488Z","timestamp":1781256796488,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:18.514Z","timestamp":1781256798514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24677\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOkUoTFieESlwjUcjTJrsIbV2PXDTRo8NtJjRUbuT6cpk3WJ3RXKlKVKmgavD1QoZ%2FunGW9XhTlss2R1XVTu5UmX0AJqUc1QC0SBqiVleJdvL%2FWhOcEzD9X2oyGCp%2F2kg2k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da6eba7d0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:25.792Z","timestamp":1781256805792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:25 GMT\r\nage: 1362817\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103412\r\nx-timer: S1781256806.798422,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:33.107Z","timestamp":1781256813107,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:14.298Z","timestamp":1781256794298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24673\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOHyVl1%2FPt9%2Bg7D545hFuuppjPS6nIlhHSANhZiFD2NbBAP732i9hfLPG9N7Z%2BDFyGcKDXHHkYMIFNCypffnwwWYdxK2aplHLA0ThLvAzDLH8MNlJhVYh0iFsmvQK8mXr98%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da5459000b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:15.345Z","timestamp":1781256795345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24674\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zF32FGMyvDGeUGRU4H2WjqoYT71GULNhRTJsGtBp301FOE0peF0%2FsB0K9tDpk7o1wV%2BrvNKFQQRApDKS56kS%2F5AjL15xp2Qp%2BcF0CnO4mOyxhsv8b3zDYZLUZ8Y%2FPM%2FbmJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da5aed150b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4481,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:16.435Z","timestamp":1781256796435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678036\r\nexpires: Wed, 02 Jun 2027 09:33:16 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BB6MG%2B5aH6DHaviVkpwrsE1MuFAqwJoF021sblxxiSIHjwNGZptVY8%2F8I4End0opKnwQ4ofX7lFMyKjGM9lCbFSJJ1xtQoEm5ydgOGkarpF2q77x0saf2IDYV4EAnM6Fxgd2Bv5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da61bf3256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15040,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:32.008Z","timestamp":1781256812008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678052\r\nexpires: Wed, 02 Jun 2027 09:33:32 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g318%2Bh35pZqF2M76q2BQc20jgoEAHtWGM6fYhSd8wgopCu2oIohlmDrRhqb2Oap4Lt3sTANG3W%2F0l%2B%2FSeQE5vmc6F%2FRIdyv%2B3ksFsnrseof%2FR7dD%2FFeicj8sMoY3AdU6SQILjin%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7dac309ab56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15054,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:33.028Z","timestamp":1781256813028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:33 GMT\r\nage: 1362824\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103424\r\nx-timer: S1781256813.033220,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:23.785Z","timestamp":1781256803785,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:20.658Z","timestamp":1781256800658,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:23.722Z","timestamp":1781256803722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678043\r\nexpires: Wed, 02 Jun 2027 09:33:23 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RcjHJCyNRNZo2WhcidgEAMOCiL%2FzZONcP9FvRVp4iiH5VtYqEtmApcPSQdQewH9Sy1n%2Bav6erNbr8ShlorVCTftlea%2F9tHUwRK0ViQL6mM%2BN1a5ZJ8vggJVoOO9YZ4J1U%2BSLaKEN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da8f4a3556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15046,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:12.063Z","timestamp":1781256792063,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:16.551Z","timestamp":1781256796551,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:25.899Z","timestamp":1781256805899,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:21.639Z","timestamp":1781256801639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:21 GMT\r\nage: 1362812\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103405\r\nx-timer: S1781256802.644026,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:12.180Z","timestamp":1781256792180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:12 GMT\r\nage: 1362803\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103393\r\nx-timer: S1781256792.184411,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:13.342Z","timestamp":1781256793342,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:14.293Z","timestamp":1781256794293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:14 GMT\r\nage: 1362805\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103395\r\nx-timer: S1781256794.297917,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:19.659Z","timestamp":1781256799659,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:27.931Z","timestamp":1781256807931,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:03.578Z","timestamp":1781256783578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678023\r\nexpires: Wed, 02 Jun 2027 09:33:03 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9foCHHevIJvfBG1mqG%2FFRv8ixvh2MB5%2BsgbEZ%2By8QE%2FtrcwKGoaWeFcZljAWEzxxoSQNqB3TNKw4RQOSHDiEAH%2B3txmKm7xob%2BvnskP4Zh%2BXQl7Zffa2i7E6Iy67WjZeUzHBV%2BPO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da117ae656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15052,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":2,"connect":13,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:25.794Z","timestamp":1781256805794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678045\r\nexpires: Wed, 02 Jun 2027 09:33:25 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BRb1DnZBJVTR8peyuhjZl%2BPrhSlCP23tZcZRL9oAeBPosKpKlEZEUpK4Q2PcXMJSIeLbnOnKbIEJGcTEoIIjgTVb1MaP1z0qHTJL5qk71ZsiLNXKE0JYpIrs5O0RchaKbprvbk0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da9c381856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15040,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:32.111Z","timestamp":1781256812111,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:32 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:14.417Z","timestamp":1781256794417,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:16.303Z","timestamp":1781256796303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:20.596Z","timestamp":1781256800596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24679\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=otCArJGPBIdhqbSzcnysreO3B51G4yrxt8ByF%2FUR81DXDfqBAeOA5zEGrfaA8T3Q5R766K57uqYyxZ6Yh2So1QVRPTtvJ5MXlA40Hg%2Bq0dslST1Xr5MSxGVFkgMecJ%2FpZBk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da7bcc060b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:20.699Z","timestamp":1781256800699,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:22.784Z","timestamp":1781256802784,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:29.843Z","timestamp":1781256809843,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:29 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:11.150Z","timestamp":1781256791150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24669\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0LhFU%2FpYSVfbCeEg6knQPUzeHlt%2FrKMBPE1t6UHGvdjyHmd4uPGwQ%2FlwdGx%2B3Gf81r57zY8ZVBdWI1FDBE6HZpqoRcKfSzWr3pB08a9GOAww3905Uf9KNiXEnNDMqLlHc8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da40ba470b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4477,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:11.198Z","timestamp":1781256791198,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:19.613Z","timestamp":1781256799613,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:26.817Z","timestamp":1781256806817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678046\r\nexpires: Wed, 02 Jun 2027 09:33:26 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kZTz6%2BFxUzjUqnJchqqP3DFl23XXW5xRzusXX%2BZm9FqffGufrjgyMqVkQ%2FLub6dBjBSQhVztRzTd%2B5h5hBpx8cfuLabQmYAfmg2r33Ecpp93OtM64Di4sdsHqw4ukEdbIgFao24Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7daa29f5156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:32.096Z","timestamp":1781256812096,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:32 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:33.122Z","timestamp":1781256813122,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:02.631Z","timestamp":1781256782631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nSet-Cookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5660,"size_decoded":2152,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":244,"connect":70,"send":0,"wait":93,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:18.512Z","timestamp":1781256798512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678038\r\nexpires: Wed, 02 Jun 2027 09:33:18 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tn5tWlk8oFGGYRBYvajrZQnMbRk3PiCeV9qD3iq5V%2B%2BjM7m2Tq5bWlIEm69Ac0o2%2BYn1ebu2Xp5dEHYjNO8DzVNsQ32AvaX9i55ZJ3ENsPO%2B7%2ByPnR8Lc423yByc7%2FJ63OkEg29L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da6ebe1056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15048,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:22.763Z","timestamp":1781256802763,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:25.680Z","timestamp":1781256805680,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:28.920Z","timestamp":1781256808920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678048\r\nexpires: Wed, 02 Jun 2027 09:33:28 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lwu%2F6OA1Oh6yVsL6BHtkfmsMBGoIvGUnVG8%2BnjUfgJed2WwUE3Tl0zV39d3bQAg9a6RLn708kYB8BqMaQVq%2FYpA3eWXOyuUSEu%2FJmyXiN47c4f7E1MZwL0YhafZQpWItWxOxJ6h7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7daafcd2456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:28.973Z","timestamp":1781256808973,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:29 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:13.360Z","timestamp":1781256793360,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:19.567Z","timestamp":1781256799567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678039\r\nexpires: Wed, 02 Jun 2027 09:33:19 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9uSxQkLcczAU9w95Vv82ROuXQrVJWNxAOcgVcVzpUs7MoWvV1gfV09%2FKGUBENZNe8yScYlQ240BB8dLtEPKvOJ%2FcW2cxWuNG7xjdHAHxLzxTqQYciQUU6DvpZRZqBXsfKqZt5Wy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da754dfb56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15040,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:24.669Z","timestamp":1781256804669,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:28.918Z","timestamp":1781256808918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:28 GMT\r\nage: 1362820\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103418\r\nx-timer: S1781256809.922801,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:30.025Z","timestamp":1781256810025,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:30.999Z","timestamp":1781256810999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:31 GMT\r\nage: 1362822\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103421\r\nx-timer: S1781256811.003264,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:17.566Z","timestamp":1781256797566,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:18.510Z","timestamp":1781256798510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:18 GMT\r\nage: 1362809\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103400\r\nx-timer: S1781256799.515011,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:24.785Z","timestamp":1781256804785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24683\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lvgHvO1MKi4zqyQdcalrk%2F1tSD%2Bky4SvWihFiASVe2oqO4s1TOEk58TJpEyqMNDhvHpyl%2BPdAwhtmhGyByYut1rOZAAEF7206oZahUVAm7qEimP%2Fy%2F7DQe9%2FF%2BzaDAoc3Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da95effe0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4483,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:27.890Z","timestamp":1781256807890,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:29.034Z","timestamp":1781256809034,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:29 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:31.046Z","timestamp":1781256811046,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:31.093Z","timestamp":1781256811093,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:12.181Z","timestamp":1781256792181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678032\r\nexpires: Wed, 02 Jun 2027 09:33:12 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LxEEES8CUZG1EVqMOzdwzsk4ludhebM%2FUSrSYLZoSU8jGTPqhLH05r6HlkTOm7XQyDbx2Zdt7BX8EBeeXrwAQGRFTMfN4YV%2FdbGx9%2FR5tUv6kGGRYSAXlji4bacPSUGSRGC1L7YF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da472b8e56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15042,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:20.469Z","timestamp":1781256800469,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:26.820Z","timestamp":1781256806820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24685\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DUf5%2BrYENcx01bEEPnY3PT7zGTHDcsBXGfbcQaKiWE6XUmg%2Fy%2FH1EIhAm4o8TqUrPc9W7kYdgjNkVkfFt3MkIyQeYNYIeb4jSnEvua9btP8mLU1bMMHaFJL0JGOL9%2FU1DKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7daa2a9c80b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4477,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:26.862Z","timestamp":1781256806862,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:19.445Z","timestamp":1781256799445,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:19 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:19.565Z","timestamp":1781256799565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:19 GMT\r\nage: 1362810\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103402\r\nx-timer: S1781256800.569988,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:24.857Z","timestamp":1781256804857,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:27.727Z","timestamp":1781256807727,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:33.030Z","timestamp":1781256813030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678053\r\nexpires: Wed, 02 Jun 2027 09:33:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2%2BzT4a5s5TB03zJzFbcJ89GymZaUmSonoA1MVT1Zm0nIm4408Ie0piIo0JZczpqGyVq3zBrVANzY5V1CNxL2IMjyclYhavR0NP0cBjr4cIEBbnYc3WEt9UpuQ5RUCPKu0y2R43Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7dac97f7656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15038,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:13.117Z","timestamp":1781256793117,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:17.476Z","timestamp":1781256797476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678037\r\nexpires: Wed, 02 Jun 2027 09:33:17 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W7p8yQ7uOR%2FIFxyKXT2kygxyeRQb5hI5jJjIuLauYHhR%2BlJmE9FOUO1xJX8iRLAHTW%2BR3yv%2BGeA6uFzq1hmFLOyeLtx1kD3deTwjrlk1fQ%2BtwhnxJTZRrZ7xP6TiOhgCEF%2BzM7WC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da683e8656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15048,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:25.844Z","timestamp":1781256805844,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:27.839Z","timestamp":1781256807839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:27 GMT\r\nage: 1362819\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103417\r\nx-timer: S1781256808.844197,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:29.976Z","timestamp":1781256809976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:29 GMT\r\nage: 1362821\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103419\r\nx-timer: S1781256810.980919,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:12.229Z","timestamp":1781256792229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:13.246Z","timestamp":1781256793246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678033\r\nexpires: Wed, 02 Jun 2027 09:33:13 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14Ah%2F%2Bbd5P4U%2FwCzxmV92%2F95t4xRjZGuGRYyPzPArzQqLBijQ5J9IQa5iGsxtU76OuX5dfOAcn%2BMUYob%2FqYQPL3NE8A0CEhGpQaw8CKRALfnHTari9XjEfPiaTVaG%2FQfoyQkzThh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da4dc9fc56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15050,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:15.390Z","timestamp":1781256795390,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:15.445Z","timestamp":1781256795445,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:21.694Z","timestamp":1781256801694,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:31.000Z","timestamp":1781256811000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678051\r\nexpires: Wed, 02 Jun 2027 09:33:31 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FosoQRpJzXa%2FeJtPPPjQMe3mEnoTKgAvIa45p2Tk8axmHjfnui9Bu2qFRFKX7hRJ4OZTODH%2BKTUJX9Lp0e5X6hJ4%2ByBlskRUAbQ2K5ya0E%2FY%2Fn9SPCykzvUTkW9c9r4S3AQBlOny\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7dabcca9b56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15046,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:11.255Z","timestamp":1781256791255,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":71,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:16.438Z","timestamp":1781256796438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24675\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UDmKcoxaRTxnBN5qPt2Kz8ZLrwbr5ejrZDh0r5e3tdHOcST7jMr7osS38fdj%2B2QSQ%2FkBWoSCh3bfYdZxR1Mj3HZaFGmN5wTeixeW5mTJPoC8nnYJ7uN91b8cwQonnFRBX%2BU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da61b95d0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:22.725Z","timestamp":1781256802725,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:26.912Z","timestamp":1781256806912,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:10.164Z","timestamp":1781256790164,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":70,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:14.173Z","timestamp":1781256794173,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:18.393Z","timestamp":1781256798393,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:18.609Z","timestamp":1781256798609,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:17.359Z","timestamp":1781256797359,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:19.569Z","timestamp":1781256799569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24678\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7t8QuykvBjjOLusj7qZfTBwvRls6bhG9ahp2nkscA82rbng%2FUVukBivadd8%2BPPOIgu%2FJt7%2BSAUBS6UgqOEf9wUiNvikWOlPcu1TeUhfex5N8x%2BUvLkLYLfpYrlnF9ihO4E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da755f720b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:24.783Z","timestamp":1781256804783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678044\r\nexpires: Wed, 02 Jun 2027 09:33:24 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=liYvgTqTtctfWqCZwgSjDdd4qleXhi2YxCxUIZ1%2BjSBwCfvU1lm5saWGbKGNdSGIhao9i5LcEZZ%2B2SfXEJoY07qwrLtqvjnpXl%2F2ORzGeHEY9DW2wMhG85lLhi4auHUuzEB1TTED\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da95e92556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15042,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:11.029Z","timestamp":1781256791029,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:15.495Z","timestamp":1781256795495,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:16.433Z","timestamp":1781256796433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:16 GMT\r\nage: 1362807\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103398\r\nx-timer: S1781256796.438264,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:17.477Z","timestamp":1781256797477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24676\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SiD6x8U6hPaUSLCwuLBDPh5SAGbJFc6%2B8jn8vS%2F8GVRyrgTlhXES2oANtdyx0AEwc%2BKQbZFPYfVxIpG5HLdgfu1%2BRB2CMqaj5AYHWy6%2BOFjP0ridjIpGOc5TYPPFR8WNr5A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da683e170b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:21.754Z","timestamp":1781256801754,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:14.347Z","timestamp":1781256794347,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:18.566Z","timestamp":1781256798566,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:22.561Z","timestamp":1781256802561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:22 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:27.842Z","timestamp":1781256807842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24686\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NE9Sxbv%2F5rDojs%2BRqzeJQ7TOJ5%2FNNe50VAxXmkwjB%2F9qvqIbd2TRfp0JzMdzgQsY%2Bf5hpqy9lqt0k0oAI2k8mU3HsHv1ge4NEAh5rxrdldwKPMYPQipOZ4Swb6r5sdLrpmw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7daa90da80b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:32.007Z","timestamp":1781256812007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:32 GMT\r\nage: 1362823\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103422\r\nx-timer: S1781256812.011678,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:21.644Z","timestamp":1781256801644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24680\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mM2EWhqh5yIqcCKGjc%2FnnULa1%2BCbRiNKpe20pDccLiLUKbh3sgdHuPOBGnqexYgmwzgvzAW9HNxWl0ttmIT7jlZ6%2FpOOYxyRt5aHepR872cuVoS398f%2BIFBvOaXbIe49EOg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da8248730b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4477,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:22.675Z","timestamp":1781256802675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678042\r\nexpires: Wed, 02 Jun 2027 09:33:22 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rm0IMTGZAwdNpVueKmr7rwW89UgpeEV48rxJI8tASrorLMdqNcpCgPgQqvy9gJ82XukRVERxE%2F4Xty1XML5spBv%2FbREEssia82UTa7CQECDqKvsjwypGeVYdITJM6go70vWvv2vk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da88bb7056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15040,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:11.147Z","timestamp":1781256791147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678031\r\nexpires: Wed, 02 Jun 2027 09:33:11 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLZZmgixN%2Ba12T8hA6OMKlzpYwC6xOr60dIYtg1jtl1wR%2BuFkyxa8Qm%2F%2FEqFP40LPL5ICAAznGjYMraQD%2FqPRlIUugrRZ53%2Fxy4gSM2l%2B4bAG%2BgesFNb8%2FLrYcQG5m57gALbgHr8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da40acf256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15054,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:17.515Z","timestamp":1781256797515,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:17.584Z","timestamp":1781256797584,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:29.016Z","timestamp":1781256809016,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:29 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:32.010Z","timestamp":1781256812010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24690\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SyyRoOAU3sb7JHW38lYOHAZyl2TJjUMGTVhHm0QvFRXK5bp93QQkBH2nZ4pibfiS9tej9Ww%2F4dnnCl9C2f17upIHZ1y9FtgpWRnb20bq5wNVr6gTrVibPEzXatl0bxaDr%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7dac31eee0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4473,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:15.341Z","timestamp":1781256795341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:15 GMT\r\nage: 1362806\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103397\r\nx-timer: S1781256795.345438,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:22.677Z","timestamp":1781256802677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24681\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bw%2BAtzFL0Ljx8DysLTTdpuu8mjMp1hXFL0cmB9Ysl2Zo2sCPsz4IFJbQ0c6LnRpJNw6%2BzoRUN6PKIFMgQqiCWGgGLqIm01CdWKAj9SMxUFqVPTIhPZgw7N0MfJ60irr32qA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7da88bcee0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4473,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:27.956Z","timestamp":1781256807956,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:28 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:30.888Z","timestamp":1781256810888,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:31.002Z","timestamp":1781256811002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24689\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ADhGpYnmOxntEF4fHSUWiGtEaghjTcm9ZfY%2FWRox875FXYNRszeJfRw4Mk%2F5uPjGj0uElC0LOnxl6eh39R%2FL4ALX8nWANfyBN%2BQo8pm4PwgPeRfF%2FUDMQR0pSDMMuTNnKGs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7dabccae40b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4479,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:13.244Z","timestamp":1781256793244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:13 GMT\r\nage: 1362804\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103394\r\nx-timer: S1781256793.250893,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:14.295Z","timestamp":1781256794295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678034\r\nexpires: Wed, 02 Jun 2027 09:33:14 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8dAxoSW5%2BPzlBzFzmp1blCkduasjMjZc3dVJH%2FFbIyO1TsRskDTeqPjdwari8I4FwYVM%2BLLbkT%2BToAJPoPLqiCHQcWgCGWfQRlGW%2BpEcUjWyo1E2dfnP76sPgZJToDuQz%2FtFaWx7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da5458d156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15048,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:22.673Z","timestamp":1781256802673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:22 GMT\r\nage: 1362814\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103407\r\nx-timer: S1781256803.677367,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:24.874Z","timestamp":1781256804874,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:27.841Z","timestamp":1781256807841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678047\r\nexpires: Wed, 02 Jun 2027 09:33:27 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BkjhE%2B2FxQPLWaLJB9HcEAFzJPl4xNQKv0vrbivrEM%2FONjAo7SsFVaohfAOFs1AcnIyOpiKP328llrI%2BPrC6J9j928lB5mgQgQgskiNVgMyQd4sc%2FpyLFWNDfSQ0yq2qR15k3bH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7daa90e8d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:29.978Z","timestamp":1781256809978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678049\r\nexpires: Wed, 02 Jun 2027 09:33:29 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mmAtdB4o%2By4auKXqBbKnXoaLXnEERK%2FCGejIdmRh8uFgSwdf8xQBmyjk8Dgd3P78hgZSOJccWQqWo58U9cZ%2FFk4h6BTJ9XucfsZIG6kyzEmjWTvvmLd3g52ElHMGOZrBfJs%2F2DwY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7dab65bfd56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39585,"size_decoded":15044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:18.639Z","timestamp":1781256798639,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:18 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:20.592Z","timestamp":1781256800592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/mobile-detect/1.4.5/mobile-detect.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 14005\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"604cd4f0-9aa1\"\r\nlast-modified: Sat, 13 Mar 2021 15:06:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 4678040\r\nexpires: Wed, 02 Jun 2027 09:33:20 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ilyL1k1sKYx6rJYGOpNUUjUXWs8ktQXtbP0EKwiciOKi9ZpG5nrp%2B4OTkl%2FA6GVtD4cTuojQnlzQSR40gg1gvkJpHpDbNMnrk2L2WU9OLCwlhhGrZGzoGJ8ARbB7MQt%2FTH%2Fp8r1d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0a7da7bbd0656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39585,"size_decoded":15044,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32257)","md5":"0d5c9d67f73c8ad11b48dc039ddad0e7","sha1":"ce08af2691d41a2c5291751cb19e7e2fd6c90e42","sha256":"6aaaf41e7fbaca1be0bfc9e35cb4bda7c2340ef786b65f802b4d6bab476e7661","sha512":"d6f26da2eb8e6f6b4f9be261ec49d3d957a20a85afd1ded443c48697fd82a0e53e6e4c61c525f88038e676399b5f83a36ec6c204df86cad8f8446ae357704b91","ssdeep":"768:DZfO0UVJCK56p7/dNnag4LWZtFN22979Gxaw72158h1NEac4JXJ8XvjhHeme6oTE:DZfO0UVsC6pF34LWZtFN2297CKC1NEaG","tlshash":"f9031bd2af31ee065d2f8425f06f2183b6f7d223a7ed4473e019498a6f9550350dbea8","first_seen":"2023-03-07T01:36:13Z","last_seen":"2026-06-17T17:25:33.666448Z","times_seen":1732,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:26.707Z","timestamp":1781256806707,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:26.816Z","timestamp":1781256806816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:26 GMT\r\nage: 1362818\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103414\r\nx-timer: S1781256807.820443,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:26.896Z","timestamp":1781256806896,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:03.574Z","timestamp":1781256783574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:03 GMT\r\nage: 1362794\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103390\r\nx-timer: S1781256784.609492,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":10,"receive":3,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:11.235Z","timestamp":1781256791235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:20.590Z","timestamp":1781256800590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:33:20 GMT\r\nage: 1362811\r\nx-served-by: cache-lga21931-LGA, cache-bma-essb1270078-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 375947, 103404\r\nx-timer: S1781256801.601383,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":31518,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-17T21:31:06.252591Z","times_seen":482015,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:21.735Z","timestamp":1781256801735,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:23.830Z","timestamp":1781256803830,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:23 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:29.980Z","timestamp":1781256809980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24688\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=28OBnmzQppTIp3%2BvRL93mKBc0F54kbCe4LMW5kq3rrchsnOF5npvSZaM2aoQ7%2FxooiTum1gOzqifoVAX7o%2BTCth7ssCLe9DNNZVasPlRd5u44oqbg4GD6j8mG2FXJVuJxP0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7dab66e9f0b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7380,"size_decoded":4475,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/ETvtMMlN.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:30.080Z","timestamp":1781256810080,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/ETvtMMlN.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 12\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/favicon.ico","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:24.826Z","timestamp":1781256804826,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/isbot@3","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:28.922Z","timestamp":1781256808922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/isbot@3 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://transfersecure-ca.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:33:28 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3354\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 3.8.0\r\nx-jsd-version-type: version\r\netag: W/\"1cd4-SdxF8pi7j9zqXIUgBdb/EXnh/7U\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230071-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 24687\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2l1Q1MS03o7uRUoVDPWZb5QU6TzDnZO4Eu7cJYf4dbEcYFQC7TD4kK5Mo5i2d5HzaVnOZIfkCIerbyX2QP6OE0WeKFjVVRungbja63COTywDC84XFzinhB3CtOBqdcKSbY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0a7daafca240b4d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7380,"size_decoded":4469,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7056)","md5":"03323a05641ca2f75bddcfc3746c9918","sha1":"49dc45f298bb8fdcea5c852005d6ff1179e1ffb5","sha256":"cf20036493a731358dbdde5a39f2c22285339cd857b2c897e5b4881ed17ca8a4","sha512":"1220ff62bf273a9d629a4a299996dc8f005e99204ddb025c69c05098b4ffba768da253a47422780ba5c5dd0dda2c69f8626d839f2d2d4e6daf73d8481ee744e1","ssdeep":"192:E8RWN7CpOMMMhnAED9invrgIti9JQM1AMvKLoTemON:E8RICtNhAEarhUpBvtGN","tlshash":"78e10aac7286f4be97a37199007f650fe1b95912b848c060f129e9e06879ebe4177f18","first_seen":"2026-06-10T12:59:17.127641Z","last_seen":"2026-06-17T17:25:33.66405Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:30.062Z","timestamp":1781256810062,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:30 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/SRvE52gZ/NrLQrQWt.php","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://transfersecure-ca.com/","date":"2026-06-12T09:33:31.077Z","timestamp":1781256811077,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"POST /SRvE52gZ/NrLQrQWt.php HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://transfersecure-ca.com/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 9\r\nOrigin: https://transfersecure-ca.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":377,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-17T21:32:11.409467Z","times_seen":215795,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"transfersecure-ca.com/","fqdn":"transfersecure-ca.com","domain":"transfersecure-ca.com","tld":"com"},"ip":{"addr":"158.94.210.253","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:33:31.899Z","timestamp":1781256811899,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"transfersecure-ca.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 11 Jun 2026 15:20:27 GMT","end":"Wed, 09 Sep 2026 15:20:26 GMT"},"fingerprint":{"sha1":"1C:F2:30:A2:39:32:0E:D6:71:E9:DA:F8:C4:6E:E9:14:C1:F3:EF:2E","sha256":"C3:1D:AD:83:93:A1:64:C5:18:DD:E8:F8:04:2B:B9:60:40:F3:17:66:8A:E3:C0:CA:B1:88:8A:D3:69:E2:31:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: transfersecure-ca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=m1r5c1a9ncdsjmva1ksarlgv2o; js_enabled=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Fri, 12 Jun 2026 09:33:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nReferrer-Policy: origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"mobile-detect.js","description":"Mobile-detect.js is a compact JavaScript library designed to detect devices by comparing patterns against a given User-Agent string.","website":"https://hgoebl.github.io/mobile-detect.js/doc/MobileDetect.html","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5660,"size_decoded":2094,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4f65bfca3f8a34f83137a8d90f9293bf","sha1":"7b96d87688c79b1f2f181d20139f380275b50126","sha256":"81c93a755e265f6ab6981c30b6fe9a8ab444a38b3be0e0008b89a0f7cefd0f2e","sha512":"df9448e0e5877200dc4fca6451731c043681d9d951b2532675e3d7b394867f91eaa223df7ac46104c733cc36874f53bf2b870c44086d989578b6a7720d70cc86","ssdeep":"96:El1v1/I2YpI6KjLKkCZDCiR8shqECkeYu7GFHv6kg9Rz0Rf0JirkgClo:El1v1/I2YpI6KjLKkCZDC3WqECRMHv6e","tlshash":"70c16f9b1df3502b252354a4afb7740e3822a10b5085ce9a7a5e93cc4f82798dc937f9","first_seen":"2026-06-12T09:33:46.869326Z","last_seen":"2026-06-12T10:48:11.583306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-12","alert":"Phishing Block","trigger":"transfersecure-ca.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}