{"report_id":"c08293fe-b9bd-415d-a13e-320c3faf625f","version":0,"status":"done","tags":[],"date":"2026-09-19T06:44:38Z","url":{"schema":"http","addr":"trustedfunds-portal.com/","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":0,"asn":398101,"as":"GoDaddy.com, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trustedfunds-portal.com/","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"title":"SCIB client portal","dom":{"size":1351516,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"03deb3bc9c62c6013b1477b3f7429ab2","sha1":"439a973b045f324af349b764fdd19fd01691b4cb","sha256":"89d476834d83de92cb5f8b7abba53be48a76f38c5dae10915f4fb71296d74edf","sha512":"e4ebf679266eea96ef4a4b517f9984ca12df85c11fae1e7a64ac46905278322f2202fb292d0c5dd54127be932e95adb6a92292b7e0dcea00893b59945a90c19f","ssdeep":"3072:iIWp+0oTX8Ip82oO2q4PUZE5MYxsBfR7gh2s57BOVT+EqNtAEWlNM:iIWp+fTX8I22ofq4aZfneuINXWlO","tlshash":"71550c6aabf68195350ab69d86af377d783c8013d315dc203a4c37309f476e38a53ea5","dom_hash":"domhashc9ef02247205ce92a656c03c76aa784d","first_seen":"2026-09-19T06:44:50.495207Z","last_seen":"2026-09-19T06:44:50.495207Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trustedfunds-portal.com/","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":0,"asn":398101,"as":"GoDaddy.com, LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T06:44:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trustedfunds-portal.com","ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"domain_registered":"2026-09-14","domain_rank":0,"first_seen":"2026-09-18T07:43:43.033911Z","last_seen":"2026-09-18T07:43:43.033911Z","alert_count":70,"request_count":14,"received_data":15183366,"sent_data":16860,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"img1.wsimg.com","ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2008-03-17","domain_rank":58983,"first_seen":"2012-06-20T14:42:31Z","last_seen":"2026-09-14T13:54:33.773088Z","alert_count":0,"request_count":2,"received_data":107578,"sent_data":974,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"csp.secureserver.net","ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1998-03-30","domain_rank":62352,"first_seen":"2022-12-18T21:17:09Z","last_seen":"2026-09-14T12:35:28.619537Z","alert_count":0,"request_count":2,"received_data":1015,"sent_data":1106,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trustedfunds-portal.com/","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b73fbd94adc93411e24ea50d033611b5","sha1":"37de4cd60b92773f85e7a1cefd8833481298c2b5","sha256":"d51d60ceac6e9ec15950668e582957d96cbca8537b4cfeb7c7cf40614226f4ea","sha512":"0653c00def52fd17302858608d96ef693777bf01f9b0b07223182dde59d98a522ec0e355014229a0b34989236e88d6e973b2a696e647b2d606afc5fe60729c88","ssdeep":"","tlshash":"ace0675c28b1d26251ea789c2a1f120f3a23d627945c54c3ffdc8a046ff2babd6d21d0","size":297,"data":"","first_seen":"2026-07-22T14:44:14.99211Z","last_seen":"2026-09-19T06:44:50.508926Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f6977af71fa2502ca3ecc038a5befa9","sha1":"8a3a8ee1adb2f60ef39ee8b3973b9ef254a5c882","sha256":"8e94d9f1352b2a5d47624492b48ccf99b13cb979baa23f8e38d840c49a37f07b","sha512":"367304c712946ce1b02e141fae69abda20b80ad7b52c28b0b19895e5bb5fee7edaa117e5bba8a2eb844fdc46fddb934f924a14ee664d39d11b9dcb0862245673","ssdeep":"","tlshash":"ade0c00dc029008723168c447212196fb71ac6fac7481c9dc3048d3959cf00bfb9d194","size":361,"data":"","first_seen":"2026-07-22T14:44:14.993041Z","last_seen":"2026-09-19T06:44:50.509485Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"56ad8d8cdac1d0e48cbb1ecefc4e10b6","sha1":"82a17170f875858e419c6ca81f71f8cea9b619f7","sha256":"21f2f0620476936458d35bff8503ca60c9a9b7a163e9837d68f8e8221839fbaf","sha512":"781c99aad69e3b77a3618d8e7f8b80cce44390b1bbf659d469c04ff7e872df82c4b9c0bc4883b596ee30b10ba97adb43ad11aa96679dd82024fd075b03623734","ssdeep":"1536:azZq1lDuiRGSW/3TV4vlV7mDHaQfzOIDz2Gi9:eCPW/8lj","tlshash":"77a3a788f6a1f07142e76165413f010bf279a966b0aed0d4e725e8f4adf85ce8173f29","size":106613,"data":"","first_seen":"2026-08-25T19:47:01.786054Z","last_seen":"2026-09-19T12:25:27.773551Z","times_seen":2198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/js/polyfills.e86dea3d79146a3d779f.js","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"247b427ba16766e5a85a41071b0ccb36","sha1":"ec571a5eee7c01f7e2a823be2eb320e13de1535c","sha256":"019f90b3f92cc3d83636234a7e2a70017b71abd4ac8e64fe5662297ee789e545","sha512":"741919aa18b1f5b91fc8b6e6b85a5a17d40b3bcd6353e25b031c19a85bb20d36bbc4dd6065fc6de4d8d030ddc628b41e24e531b774a87810d5032e2fd792e82d","ssdeep":"12288:F9KMm8wua9YjzL4o6wHFPdaLts3Hm1Qa5VkjdjxhkZPkv:F9KMmVpLo6wyLtsXmhVkjLBv","tlshash":"7d052a8873a2f4a147e254e5407b044bf23a2845744e8468f768ecea7c7594db2bbf7c","size":863895,"data":"","first_seen":"2026-07-22T14:44:14.982612Z","last_seen":"2026-09-19T06:44:50.500339Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/js/scripts.b4d39235a4f286901120.js","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"474533151e5526cf79991d7d992e5424","sha1":"abc14015d86619d9765535187cb1652b78b8201c","sha256":"49a9734733a65c1f0954103c61c87815f1d75565410425b911bfacffcd5ca47c","sha512":"1150b91bce8f0e202f9de6c2b51091a563bb48c73b6ee98f2b6ccddab927ce29d95b1783b964e6006b23ba7c9586ed643af6ba6a09f294d190b722e85f6092d4","ssdeep":"3072:u6jzUnKaHq6625noinEY9S/iiSQAbHVhVSy4F:jz6Z625oi/9+i1DVSyK","tlshash":"c114c7ccb6d2b07613a770b4513f510bf27a6498b00e8590ea66e4d1bcb894e817bf7d","size":208272,"data":"","first_seen":"2026-07-22T14:44:14.977695Z","last_seen":"2026-09-19T06:44:50.500959Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-09-19T12:38:36.985565Z","times_seen":367565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trustedfunds-portal.com/","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T06:43:59.377Z","timestamp":1789800239377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.3.33\r\ncache-control: no-cache, private\r\ndate: Sat, 19 Sep 2026 06:43:59 GMT\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; expires=Sat, 19 Sep 2026 08:44:00 GMT; Max-Age=7200; path=/; secure; samesite=lax\ndashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D; expires=Sat, 19 Sep 2026 08:44:00 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-19T08:44:00Z","raw_expires":"Sat, 19 Sep 2026 08:44:00 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; expires=Sat, 19 Sep 2026 08:44:00 GMT; Max-Age=7200; path=/; secure; samesite=lax"},{"name":"dashboards-session","value":"eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-19T08:44:00Z","raw_expires":"Sat, 19 Sep 2026 08:44:00 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D; expires=Sat, 19 Sep 2026 08:44:00 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1351367,"size_decoded":156674,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"eaeac983221ab3f9245ce615bd6edf1b","sha1":"4f759318a3cb9f66c958a956f3b2273d0e15de22","sha256":"41ae3d7669467a704f143fa21f360203638a66ea513162c2a8aa78bb1f984cff","sha512":"f2ee84a4348520454bed91e54835bfa8fca0e51231947220ea57547af7f96f5d210e459d6867d57511b6c0b919daff213328a2f47d396bd431203c6c7d990b1c","ssdeep":"3072:zIWp+NoTX8Ip82oO2q4PUZE5MYxsBfR7gh2s57BOVT+EqNtAEWP:zIWp+OTX8I22ofq4aZfneuINXWP","tlshash":"4a25616a67f68195350abb9d8aaf3779793c8063d345dd203a4c36348f831e3ca17e94","first_seen":"2026-07-22T14:44:14.991076Z","last_seen":"2026-09-19T06:44:50.496591Z","times_seen":6,"resource_available":true,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":45,"connect":162,"send":0,"wait":384,"receive":0,"ssl":326},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/fonts/Santander-text-bold.woff","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.912Z","timestamp":1789800240912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /fonts/Santander-text-bold.woff HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/css/scib-ui-kit.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:28 GMT\r\netag: \"5fe03b9-11666-6520d215c1800\"\r\naccept-ranges: bytes\r\ncontent-length: 71270\r\ncontent-type: font/woff\r\ndate: Sat, 19 Sep 2026 06:44:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":71270,"size_decoded":71511,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 71270, version 0.0","md5":"05be61edf47d85eed650e66dc0888e28","sha1":"cadcd1fd7f0826a9d7810dc9f5996c2b2cf263c7","sha256":"b3e36283594a5c24cf9e9ba48a5bd484878a98cb1bc0a688dc41001cfc3eec3b","sha512":"be64b6f7a8ada4a287e400610b7b374fb4c9eeb1dc73d879cf500892e38da5bd529bf2ede0c217d50250c8fb871b24e0ca58bd80742fe778da507c1e394bc703","ssdeep":"1536:hcNsKYyPKRPo+vOgdIcUXph73BqpmMTGQQThhhhhhhhhhhhhhhhhhhhhhhhhhhhA:hcNsKHPNYZU773BqpmMAhhhhhhhhhhhi","tlshash":"ab63b07dd786a652d139f0aa6ce43c26ee0f938ce6422c904646e058b5d527cbf4f48f","first_seen":"2023-04-12T23:53:21Z","last_seen":"2026-09-19T06:44:50.497532Z","times_seen":35,"resource_available":false,"data":null}},"time_used":4509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4430,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/fonts/scib-icons.woff2","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.914Z","timestamp":1789800240914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /fonts/scib-icons.woff2 HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/css/scib-ui-kit.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:27 GMT\r\netag: \"5fe03cf-12ee8-6520d214cd5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 77544\r\ncontent-type: font/woff2\r\ndate: Sat, 19 Sep 2026 06:44:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":77544,"size_decoded":77786,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77544, version 1.0","md5":"de4bb5359f51f08f32a648a31efa3555","sha1":"bc775a721ffa5670d960d812a2151ffe8dcc0a79","sha256":"a1b21fe8ef499c1cdd76751cc943e5b674c4acdec7a1f36c4bdbd12ecdfb5877","sha512":"3f681621a5e1cc2197c7296203e63b64a1de98f8f0040523d84485dfac3ad0b37c98e70f1a698191a152d18277c1e13aecb0909f40a1e8d27a8b65affe9ed1d7","ssdeep":"1536:aKMRnZll2NRv05ZpxnLpbfCXa5QhJhpKI0kjbyLIfjgE:a99lWR85ZpFpczhJT30k/yLIfj/","tlshash":"8b730219f7c4648b8eabfc8a883936bc1f3f3d5622378c06c677e1c939d196d4948166","first_seen":"2026-07-22T14:44:14.989532Z","last_seen":"2026-09-19T06:44:50.498362Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4428,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.915Z","timestamp":1789800240915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trustedfunds-portal.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: 3aLZmsw7QvJ1e/TWb8uRxRj7iqZBtxjCXJuVFqpz9nJLtgkfsuCKFL1iWgx7tl1ja+KgdGY21+plqN+nF2RydgSSIpwXsqP5\r\nx-amz-request-id: 4YK1TBXF78EB9WBZ\r\nlast-modified: Tue, 25 Aug 2026 19:45:10 GMT\r\netag: \"56ad8d8cdac1d0e48cbb1ecefc4e10b6\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 1.3.3\r\nx-amz-version-id: MeEMI4pY1a0nmUjyvETUbje9mL.IsLTY\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=1800\r\nexpires: Sat, 19 Sep 2026 07:14:00 GMT\r\ndate: Sat, 19 Sep 2026 06:44:00 GMT\r\ncontent-length: 21697\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":106613,"size_decoded":22368,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"56ad8d8cdac1d0e48cbb1ecefc4e10b6","sha1":"82a17170f875858e419c6ca81f71f8cea9b619f7","sha256":"21f2f0620476936458d35bff8503ca60c9a9b7a163e9837d68f8e8221839fbaf","sha512":"781c99aad69e3b77a3618d8e7f8b80cce44390b1bbf659d469c04ff7e872df82c4b9c0bc4883b596ee30b10ba97adb43ad11aa96679dd82024fd075b03623734","ssdeep":"1536:azZq1lDuiRGSW/3TV4vlV7mDHaQfzOIDz2Gi9:eCPW/8lj","tlshash":"77a3a788f6a1f07142e76165413f010bf279a966b0aed0d4e725e8f4adf85ce8173f29","first_seen":"2026-08-25T19:47:01.786054Z","last_seen":"2026-09-19T12:25:27.773551Z","times_seen":2198,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/css/styles.bd4f98c755b34771ee1e.css","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.454Z","timestamp":1789800240454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /css/styles.bd4f98c755b34771ee1e.css HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:03 GMT\r\netag: \"5fe036c-55df2-6520d1fde9fc0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 38610\r\ncontent-type: text/css\r\ndate: Sat, 19 Sep 2026 06:44:00 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":351730,"size_decoded":38902,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e97e013f9a569b68ef168915f48a7389","sha1":"e1d28338fff1494de75ce4ac9f2d4e7a1f7fada7","sha256":"755841bd97ead970af3e12dc0fd94b9d04ed3432a419bac949945bbd74a744d5","sha512":"2d6aa5a160e0a2d9fa91ce35842669776e8733265c09a221e6fe51cc9c84e8fd3bcc8423f1cc243aafc6e8ce380783cf399b5ca099babe001ea9cfb5978b5777","ssdeep":"1536:bpnzgYP2nLq6nobfLiafBwm1D1loDIFPycRBXJA78dsgWgb0M2HYGqByeIc/ENTo:9D1loD+B24GqBLI9cXoUN","tlshash":"1574db5bf7d5608e5922ea1271a63bbc7c3f4011ef728de8e616773403a6cd3561288e","first_seen":"2026-07-22T14:44:14.976308Z","last_seen":"2026-09-19T06:44:50.499608Z","times_seen":6,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/js/polyfills.e86dea3d79146a3d779f.js","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.632Z","timestamp":1789800240632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /js/polyfills.e86dea3d79146a3d779f.js HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:04 GMT\r\netag: \"5fe03e1-d2e97-6520d1fede200-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sat, 19 Sep 2026 06:44:00 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":863895,"size_decoded":266187,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"247b427ba16766e5a85a41071b0ccb36","sha1":"ec571a5eee7c01f7e2a823be2eb320e13de1535c","sha256":"019f90b3f92cc3d83636234a7e2a70017b71abd4ac8e64fe5662297ee789e545","sha512":"741919aa18b1f5b91fc8b6e6b85a5a17d40b3bcd6353e25b031c19a85bb20d36bbc4dd6065fc6de4d8d030ddc628b41e24e531b774a87810d5032e2fd792e82d","ssdeep":"12288:F9KMm8wua9YjzL4o6wHFPdaLts3Hm1Qa5VkjdjxhkZPkv:F9KMmVpLo6wyLtsXmhVkjLBv","tlshash":"7d052a8873a2f4a147e254e5407b044bf23a2845744e8468f768ecea7c7594db2bbf7c","first_seen":"2026-07-22T14:44:14.982612Z","last_seen":"2026-09-19T06:44:50.500339Z","times_seen":5,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/js/scripts.b4d39235a4f286901120.js","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.634Z","timestamp":1789800240634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /js/scripts.b4d39235a4f286901120.js HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:04 GMT\r\netag: \"5fe03e4-32d90-6520d1fede200-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sat, 19 Sep 2026 06:44:00 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":208272,"size_decoded":65596,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64117)","md5":"474533151e5526cf79991d7d992e5424","sha1":"abc14015d86619d9765535187cb1652b78b8201c","sha256":"49a9734733a65c1f0954103c61c87815f1d75565410425b911bfacffcd5ca47c","sha512":"1150b91bce8f0e202f9de6c2b51091a563bb48c73b6ee98f2b6ccddab927ce29d95b1783b964e6006b23ba7c9586ed643af6ba6a09f294d190b722e85f6092d4","ssdeep":"3072:u6jzUnKaHq6625noinEY9S/iiSQAbHVhVSy4F:jz6Z625oi/9+i1DVSyK","tlshash":"c114c7ccb6d2b07613a770b4513f510bf27a6498b00e8590ea66e4d1bcb894e817bf7d","first_seen":"2026-07-22T14:44:14.977695Z","last_seen":"2026-09-19T06:44:50.500959Z","times_seen":6,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/css/scib.css","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.449Z","timestamp":1789800240449,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /css/scib.css HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:03 GMT\r\netag: \"5fe036b-726a-6520d1fde9fc0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4650\r\ncontent-type: text/css\r\ndate: Sat, 19 Sep 2026 06:44:00 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29290,"size_decoded":4940,"mime_type":"text/css","magic":"ASCII text, with very long lines (29290), with no line terminators","md5":"eeaeb5daddc8f2e169b2cca6755c45a5","sha1":"7056733c8c0f0b9d007ecd2532fdbe891a187bb7","sha256":"3262fce4f71f1774cdec8bd7a2bb1cfcc7836ecdb9e081329820bc86a37aa0ec","sha512":"83fc6c89f8b15b68ef8498f0427aed8dc072dcc9f358cdb0bf3a83b127afa93a84456bb03e3f33bc49297c48c70b6fb413b3a7bd291561020fcd3e108550c657","ssdeep":"384:IhyuZKBJaOdVnxy/fPjKVihGYWISR/8U7ED84:6y8KBJaObnxy/fPjKVihGYxSR8Q884","tlshash":"a5d25711c93286bbaf4b137d6195c949e7847ec0ee59bb8fb8ac14c074912bf29d2743","first_seen":"2026-07-22T14:44:14.981466Z","last_seen":"2026-09-19T06:44:50.5016Z","times_seen":6,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/css/scib-ui-kit.css","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.451Z","timestamp":1789800240451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /css/scib-ui-kit.css HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:03 GMT\r\netag: \"5fe036a-30350-6520d1fde9fc0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 23866\r\ncontent-type: text/css\r\ndate: Sat, 19 Sep 2026 06:44:00 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":197456,"size_decoded":24158,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63877)","md5":"92b33897e57c5dcd2eff7b0eda9cdbc6","sha1":"0a1770196db26fc6be338b3a04dcee571460e0bb","sha256":"a9e12ab5486f9d7e2517987920c6aabed73cf178ebc8f45ee666ae377e55a36f","sha512":"2294d70cd4f0c59b35f0cc09685fa8a222da97a368840db3fc8c54b6fcd40133b73f21e58005e748ff87f32eefed054d879b6c683e7e390790a86ba2dbc1d981","ssdeep":"1536:4D1OdDj566Hy0qWQYuyYjFiDB4kVyct48dDyIcvZF/DcEgLa:4DEu8EJ","tlshash":"3114ac92f7f150ab0b22e616b066777cbc3fa401af938e95e21d773403a34d3625295e","first_seen":"2026-07-22T14:44:14.987101Z","last_seen":"2026-09-19T06:44:50.502454Z","times_seen":6,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/images/logo_scib-white.svg","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.638Z","timestamp":1789800240638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /images/logo_scib-white.svg HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:04 GMT\r\netag: \"5fe03d8-3cd0-6520d1fede200\"\r\naccept-ranges: bytes\r\ncontent-length: 15568\r\ncontent-type: image/svg+xml\r\ndate: Sat, 19 Sep 2026 06:44:00 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15568,"size_decoded":15812,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bb4acb5ea858d13f96f4af05d19f1502","sha1":"3fbcafeb44f98cefcf71778b06c50e1e91c10f72","sha256":"8cde74ed9daa80c1ced1330a6c4b47a923db77985f0b16f9243010a695755761","sha512":"b46cc7c3ac7421446b6951601032e8d05ed8eab67d3f43595935ecb0119573d47ed961e0a40dd6f093f45440cc5081f4f6af446ed76d9ba04f49b3c9e9b413bf","ssdeep":"384:sMrpZgzDDSGvZesi4QColIrrGA48RfJXKWO3d:s6bgzenyXrKAfQd","tlshash":"e062d8a9d77101f883c90b6aa7b41a8d3aa85c913530fe40f35d0d609f62fdd74ace62","first_seen":"2026-07-22T14:44:14.983806Z","last_seen":"2026-09-19T06:44:50.50337Z","times_seen":6,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/traffic-assets/js/tccl.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"2.22.225.50","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.834Z","timestamp":1789800240834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /traffic-assets/js/tccl.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ncontent-length: 0\r\nlocation: https://img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js\r\ncache-control: max-age=31536000\r\nexpires: Sun, 19 Sep 2027 06:44:00 GMT\r\ndate: Sat, 19 Sep 2026 06:44:00 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T12:41:55.112535Z","times_seen":18548581,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":7,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/images/favicon/favicon-16x16.png","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:01.723Z","timestamp":1789800241723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /images/favicon/favicon-16x16.png HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D; _tccl_visitor=3babdd1c-67d6-463a-bbf8-029c718328bd; _tccl_visit=3babdd1c-67d6-463a-bbf8-029c718328bd; _scc_session=pc=1\u0026C_TOUCH=2026-09-19T06:44:00.977Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.3.33\r\ncache-control: no-cache, private\r\ndate: Sat, 19 Sep 2026 06:44:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":6791,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-09-19T09:05:20.322903Z","times_seen":9371,"resource_available":true,"data":null}},"time_used":3710,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3710,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:05.699Z","timestamp":1789800245699,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://trustedfunds-portal.com/\r\nContent-Length: 1858\r\nOrigin: https://trustedfunds-portal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1858,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"f935a8ef867741078c929390766cf61e\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.3\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"f935a8ef867741078c929390766cf61e\",\"host\":\"trustedfunds-portal.com\",\"path\":\"/\",\"location\":\"https://trustedfunds-portal.com/\",\"referrer\":\"\",\"sessionPageViewCount\":1},\"context\":{\"userType\":\"c2\",\"visitorId\":\"3babdd1c-67d6-463a-bbf8-029c718328bd\",\"sessionId\":\"3babdd1c-67d6-463a-bbf8-029c718328bd\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/rigor/page-navigation/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-09-19T06:44:05.445Z\",\"navigationType\":\"navigate\",\"timing\":{\"navigation\":{\"connectEnd\":1789800239914,\"connectStart\":1789800239425,\"domComplete\":1789800245441,\"domContentLoadedEventEnd\":1789800241192,\"domContentLoadedEventStart\":1789800241186,\"domInteractive\":1789800240979,\"domLoading\":1789800240399,\"domainLookupEnd\":1789800239425,\"domainLookupStart\":1789800239380,\"fetchStart\":1789800239369,\"navigationStart\":1789800239350,\"requestStart\":1789800239914,\"responseEnd\":1789800240297,\"responseStart\":1789800240297,\"loadEventStart\":1789800245441,\"loadEventEnd\":0,\"pageLoadTime\":6091,\"domContentLoadedTime\":1836,\"domInteractiveTime\":1629,\"domainLookupTime\":45,\"serverResponseTime\":383,\"serverConnectionTime\":489,\"redirectionTime\":19},\"paint\":{\"largestContentfulPaint\":6002}},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"cpsh-oh\",\"server\":\"p3plzcpnl509606\",\"dcenter\":\"p3\",\"cp_id\":\"10806285\",\"cp_cl\":\"8\"}},\"producerEventId\":\"64c5c95e-44f9-4487-91e3-81431b5cc4bc\",\"contentLoadType\":\"hard\",\"response\":{\"transferSize\":155834,\"encodedBodySize\":155534,\"decodedBodySize\":1351367}}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 267449754748577991238296458331854373270\r\nx-envoy-upstream-service-time: 83\r\nx-error-info: 0\r\nx-request-id: c29f0396-29fd-4a89-a0b6-ce4beac41f0d\r\nExpires: Sat, 19 Sep 2026 06:44:05 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sat, 19 Sep 2026 06:44:05 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":508,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-09-19T12:39:40.223784Z","times_seen":778601,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":180,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/main.jpg","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.873Z","timestamp":1789800240873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /main.jpg HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:03 GMT\r\netag: \"5fe03e5-b4f416-6520d1fde9fc0\"\r\naccept-ranges: bytes\r\ncontent-length: 11858966\r\ncontent-type: image/jpeg\r\ndate: Sat, 19 Sep 2026 06:44:00 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11858966,"size_decoded":11859212,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, description=Businesswoman on street looking at phone, at night. Businessman talking on phone in the background, manufacturer=Canon, model=Canon EOS-1D X Mark II, xresolution=264, yresolution=272, resolutionunit=2, software=Adobe Lightroom 7.3 (Macintosh), datetime=2024:06:06 11:25:15], baseline, precision 8, 6019x4013, components 3","md5":"cf5e8bba5f2a9fab44abada7b5cddff4","sha1":"df5d9747fbe56edf544a42a73369c0af74ecb3a5","sha256":"cee33f8855a4d5ef36cbda8d9bbb1c8a9d8df5fae69f5ec12e033a3ef85422b3","sha512":"a2d582da61c927bfb7db8c557cd1db73d5437e72ab52acb9c3198b2956340e34b1e91249bc8b71803258d6250c55b4bce75784cb953b2793ce9a0d9c5cd07b12","ssdeep":"24576:O9J9yOnjoqK5v6Qn1xAKh0DnI94eaj0I41QgFZsp0fZ/I:MtF8JeOMnI94eU0IEQospsI","tlshash":"8f252308b0b93cd2c040963f3d58aa875d777f4686123551f9ed2a2cef369cae385e16","first_seen":"2026-07-22T14:44:14.988167Z","last_seen":"2026-09-19T06:44:50.506148Z","times_seen":5,"resource_available":false,"data":null}},"time_used":4467,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":4295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/fonts/Santander-headline-bold.woff","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.910Z","timestamp":1789800240910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /fonts/Santander-headline-bold.woff HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/css/scib-ui-kit.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:28 GMT\r\netag: \"5fe0381-1158d-6520d215c1800\"\r\naccept-ranges: bytes\r\ncontent-length: 71053\r\ncontent-type: font/woff\r\ndate: Sat, 19 Sep 2026 06:44:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":71053,"size_decoded":71294,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 71053, version 0.0","md5":"1ff04868499fb12bde31413a62bdce28","sha1":"4cb0e837358c63f61edb7b65bf01d3be1b92b80c","sha256":"fb9959e108e4e451081311056d730119759da5ae0a4fe4b9e629cee4bd39a4d2","sha512":"87180789a5440857ca3ce608e223fd4fe35fa12e5ebf0616b0b72ca06482424afbc8cc1d4844091407d2b08b69cdd6f70f0746be20a8f9c8dc9bffc54b3d0561","ssdeep":"1536:4eEgLt4r7QbU6fnDUt0ICUS+j6VSMMMMRJJJJJJJJJJJJJJJBE3Pw:4vgLtSbMAt0IXS+j6V+JJJJJJJJJJJJn","tlshash":"f063b0e7c0a6b80b275fff7420835a2bce1ae5113f7ac0efd29a4e46c879125dc85605","first_seen":"2023-05-04T14:35:32Z","last_seen":"2026-09-19T06:44:50.506854Z","times_seen":35,"resource_available":false,"data":null}},"time_used":4494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4432,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/fonts/Santander-text-regular.woff","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:00.911Z","timestamp":1789800240911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /fonts/Santander-text-regular.woff HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/css/scib-ui-kit.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 18 May 2026 01:03:26 GMT\r\netag: \"5fe03c9-10ee8-6520d213d9380\"\r\naccept-ranges: bytes\r\ncontent-length: 69352\r\ncontent-type: font/woff\r\ndate: Sat, 19 Sep 2026 06:44:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":69352,"size_decoded":69593,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 69352, version 0.0","md5":"3007e13054b230e9ccd5e4f506ee64fe","sha1":"e9d048202f4ba5aac599d6d6189389fb1b992b70","sha256":"2d2d2cfd7a36307f8ca530948d454dcd9f706830b7c18ee0cc4fa3ec16d96091","sha512":"2bb7c20d6e519056b187d21abba465112ff821c359b9a4f5bfdfcd40d7049a1d54b0977fdbaf0ef52ae13ecb355be5bf01de943cdfea2dc2c92dd71ddf3a4ac7","ssdeep":"1536:3zyXiuGPgGtBENT+37PkwkbKDD5eoRlztr6Bbn:3m18gVNueqlztr2n","tlshash":"9f63c060d777c4d20bcf8232d2b0b76df72da228fa91807571bcd9b4b925688b4819cd","first_seen":"2023-04-12T23:53:21Z","last_seen":"2026-09-19T06:44:50.507512Z","times_seen":61,"resource_available":false,"data":null}},"time_used":4522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4513,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trustedfunds-portal.com/images/favicon/android-icon-36x36.png","fqdn":"trustedfunds-portal.com","domain":"trustedfunds-portal.com","tld":"com"},"ip":{"addr":"72.167.124.67","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:01.722Z","timestamp":1789800241722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cpanel.trustedfunds-portal.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Sep 2026 00:44:53 GMT","end":"Sun, 13 Dec 2026 00:44:52 GMT"},"fingerprint":{"sha1":"3A:59:5E:FA:35:77:67:C0:4E:72:DC:C7:FD:65:B9:DD:62:8F:A6:99","sha256":"EA:C9:BB:1C:9A:3F:C1:7B:24:A8:FF:A7:D3:17:DD:63:1C:70:51:C2:E1:BB:A3:73:1E:0C:D5:E3:A1:E8:79:59"}}},"request":{"raw":"GET /images/favicon/android-icon-36x36.png HTTP/1.1\r\nHost: trustedfunds-portal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trustedfunds-portal.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ikd5YlllN3JVeEFGZWVGV255bGRhYWc9PSIsInZhbHVlIjoiVE44cnNCSWNEcUk0bzc5dXQ4UU44Z3ZDc0k4dXFxRU1VSktuNUdMNWVnZE90V2hMcGdhTmlJTkkxVElxTk42THVqaXBoTmRkOHYrbHNjdzdHVTVJY1BRR2ZJdHdrNHJhaUt5TkxFQ3czWWFjMktZVTJibVp2Mi9jRXFnUVVUMVEiLCJtYWMiOiJjZjA0MmZiZDE4YWI5NDZhZWU0MTczM2ZiNmUxZGViZmU2YTZmNDVkMTljZmNhMDNhZTU1Nzk5MjlhOGZiMGQ3IiwidGFnIjoiIn0%3D; dashboards-session=eyJpdiI6IksvU1JuMjQ4LzdFQkxWbDliKzBySXc9PSIsInZhbHVlIjoiV0FpRlBoU09CQ1dHbXpkYXJHbGliUWw1MDB1aTlOSHU2VDgzTXZNOFpsZkdFS1FseEd2NVBDbFFaMTMxZHl5MXVRY29nbmhGWnNMUkdoV0RzQ1EzYXVyV1I2RDFLZm9ZemRXRGh2WlhXNE04a0lBc3BwdnhvNXBVUFVKWko2RXkiLCJtYWMiOiIxMjBhZDgxOTU5MjEzODZiM2JmYjIzMTkzZjFjZjEwZTUzN2JmYjcyOTA2MmU3ZTlhZjAxYzc3ZjIzOTE1YjhiIiwidGFnIjoiIn0%3D; _tccl_visitor=3babdd1c-67d6-463a-bbf8-029c718328bd; _tccl_visit=3babdd1c-67d6-463a-bbf8-029c718328bd; _scc_session=pc=1\u0026C_TOUCH=2026-09-19T06:44:00.977Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.3.33\r\ncache-control: no-cache, private\r\ndate: Sat, 19 Sep 2026 06:44:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6603,"size_decoded":6791,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5391)","md5":"543ac81966d87ac815e08eb0e436d719","sha1":"e35bb4e32ccf08c11a3935084b50660feb835350","sha256":"8cbc10ee9755ef972000f666711a5c4d0e025d3cedf53079ba3bfd8f2b19a968","sha512":"0c6a8f7948f93d4d00b5fbb98f487d7e2ee15d104acd83dfbc884ef9b77826dc7daa27b906640572977750a00cb7ef590ed5cd93e2f40ef4def88b9ff92f1dc3","ssdeep":"96:/J/SNi/FLQVTLKCGWz5NN5PXy0jRdoMCX4SZTdI5:/pV2RKCxnNByTMCX4SZT0","tlshash":"aed1871eeac5101e60d785b7e8d4e64c8916aac3de238bdfb54f7915cf8038719a321c","first_seen":"2023-04-06T17:05:03Z","last_seen":"2026-09-19T09:05:20.322903Z","times_seen":9371,"resource_available":true,"data":null}},"time_used":3711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"trustedfunds-portal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"trustedfunds-portal.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trustedfunds-portal.com/","date":"2026-09-19T06:44:05.697Z","timestamp":1789800245697,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3 HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: https://trustedfunds-portal.com/\r\nContent-Length: 1067\r\nOrigin: https://trustedfunds-portal.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 16808262068465572195092160000507289814\r\nx-envoy-upstream-service-time: 81\r\nx-error-info: 0\r\nx-request-id: 65607f81-f7e6-4733-beb3-335d06fcabcb\r\nExpires: Sat, 19 Sep 2026 06:44:06 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sat, 19 Sep 2026 06:44:06 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":507,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-09-19T12:39:40.223784Z","times_seen":778601,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":178,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}