{"report_id":"c08459f1-5dbb-48ac-8a2d-0d9569da1329","version":0,"status":"done","tags":[],"date":"2026-08-19T10:02:37Z","url":{"schema":"https","addr":"werdmountbank.com/","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"werdmountbank.com/","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"title":"Personal Banking","dom":{"size":215398,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2d3a6c8b733c161fdd244cacf6e14d27","sha1":"da96f97a3ffec67d51b4eff83a275d91f003bb66","sha256":"010dc9f65bd81ce83d440a92da23ab5305a9f08ba38a6fd1d1fcc30fddc779e4","sha512":"7e3214ad25af69c7ec11b0131ff4f0c8ab7c7a0edc8911de46ca0dc81cb9ba9d29d6564b6f57a20830faec738213a6a2ccabe1fcafa9a0cd0390580d428bcf80","ssdeep":"6144:FIwDf8OilTN51d+qJKuMO6nREa6u7rgAKQUJYEcJMO6ZpVl:FIwDf8OilTN51d+qJKuMfGa6u7rgAKQ6","tlshash":"5c24946a65e30029ac8b91e46bff6b456778e10bc14acc687fdd6384cf42e95dc63708","dom_hash":"domhash0d483d2eb592b053218ad21ec476579e","first_seen":"2026-08-19T10:02:43.450904Z","last_seen":"2026-08-19T10:02:43.450904Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"werdmountbank.com/","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":0,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T10:02:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"werdmountbank.com","ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-12-01","domain_rank":0,"first_seen":"2026-08-19T10:01:55.210804Z","last_seen":"2026-08-19T10:01:55.210804Z","alert_count":67,"request_count":67,"received_data":4818585,"sent_data":33386,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}]},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-08-14T05:13:46.02957Z","alert_count":0,"request_count":1,"received_data":1574,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/odometer.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"38f2e561eca6b23ab5fe56bb59ab9e06","sha1":"26d7c1f0ea89fc9fa722739ad49e572ec4ad01d3","sha256":"9ec82f4818eaaa73ef4a2276e91e5cef715e2f57f961a81f25479c0b526e5037","sha512":"becec20f804f4648fa6b52f02ee13a5355c5d519e63c415dda13e3775a1fdbdfbeb6133b78ca0191bd064b7e50ac8f893cf5fbf348348b333f54b27133e402b8","ssdeep":"384:WvZjCGRBQiJfp5UMeo1YuK+AXrmSQgXlb:WvzpPqJ+YZ","tlshash":"bc427450a7ed1a3f9313f0a19eae8dccb6bc983a9454845f7d1ce4d99820c358739e78","size":12767,"data":"","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.468566Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/contact-form-script.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cdee96d5b949926d55e0352ac62024e","sha1":"9bc0b3e838809ea4ded94f31b4675bf43a6306a2","sha256":"24f7473ee3f14b378369a68fd03eece19c812fb0386c89b5aa4f5274bcc12de7","sha512":"157d32a82abb5109994c24d78e88a565549df53da11d722f56b5573cde16b329e5e2424c7d87596273fde2cba3f9b2bee35c04ca070956b533ef64fdeec0731c","ssdeep":"","tlshash":"5a211e04fb2c26c4063336b9646c51c9c13c5372c8459c9f1cb4e8e4a9e8e7c3362b39","size":1428,"data":"","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.486243Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/app-assets/app-installer.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"898abd9ae965480afdf708decb8e0713","sha1":"b0ab2212d1bd5fe261600341c2e3a3e9aab7cc21","sha256":"f06c09d045e91e1fb49fd4f8fcbb3e108cfb3ed4645381d39a3f12c059cd025f","sha512":"2846450361c0922da2178d095a6a7a7442ab6f555d9363b321d6b371a8ab8b1b0153e884261e500f22a2263a7d88aef8c8f906541593677455cf365c7896a5c6","ssdeep":"","tlshash":"76e0204cdec9d8776a73743a4c4b5309293f03804095705057fc43a15bd7cad622b85a","size":364,"data":"","first_seen":"2025-12-02T15:46:46.975474Z","last_seen":"2026-08-19T10:02:43.456839Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"18f9561c6bebb7d8f56510e1357c0df5","sha1":"dfe87a9552ac755a4f89f223760b538cd5518de2","sha256":"0b0a09777069de6cf70295925a68cbd52edc02b950f648f923de5e74023dba7a","sha512":"5836be08063d809b56f69326d2a115047af4b645c1f188a8f9f06a36d929ce098ccdedc86c38d6a280bc2d3c2daff761f0783eba795cd236820d2fb393de72c0","ssdeep":"","tlshash":"08e0657af966cb0cc07b28661d5a88027ea6945b8167ea15380c5de08f5db70e90a005","size":436,"data":"","first_seen":"2026-08-19T10:02:03.364984Z","last_seen":"2026-08-19T10:02:43.493908Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"46a5637ca5f5fa9c75c70a7ab9bfc744","sha1":"7a597d0a11fb124a87270132546f9d6a3f156935","sha256":"92017706a72f8c63311e5cb18268311b2f16a9192a9e1d8b896525d79add602b","sha512":"504e25f6156a6836ffc288c25483ade0d717813074118b73e8ee153c9c3adf2496495370f96b0af34f20dcc6f6fff975fc56d6e3587bf317004fd19905de4182","ssdeep":"","tlshash":"4401af09f1b60e4458a2703e4e5ee9162cfa090b8c4ceb8078dc62588f91e2527dcaf9","size":723,"data":"","first_seen":"2026-08-19T10:02:03.366021Z","last_seen":"2026-08-19T10:02:43.494482Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"879cc29e481c0d22e92f2d14c5f843d5","sha1":"64984e5775cc2034e6477f08ad6e03db8d1d74e5","sha256":"7dede682d7eb7e105795f4b0f4c42bdbff966646951527ff2a83ce21de6c8c11","sha512":"39778370b12f59b8355a10b9e4f8b66800c1a2566662a39e545a7788d627990bab96f3e3da4935aa439a7897291ad46fb1cc99423d78e5d097eb918e0ea5ce40","ssdeep":"","tlshash":"e7018450f9d78a51207b1a2cbbafa0600d94040b8354cf86bfbd0af65f420598bdbd1d","size":749,"data":"","first_seen":"2026-08-19T10:02:03.367108Z","last_seen":"2026-08-19T10:02:43.495224Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"1055de7e70a0eacbaad24a5bd3a9f6e3","sha1":"1e4a0fee1ceadaddda0e59b1d3ac71d4542544be","sha256":"de5d48c5c0ba98bff910815ef2d0651128b5df2a4049e24af7a2b6911c5882fe","sha512":"71202146c299257b516eb8ede813b27a840efcdab9ff2f8fcb112ec28a07f0af0498c59ba0ff3f70208471afcc5b5cccb11f3ba1258cce01f139b49a7c39e83d","ssdeep":"","tlshash":"ed416d5af4e1251112b764ed8f4b72252972008f8989cf08bdbc47e44f586aec337b4e","size":2231,"data":"","first_seen":"2026-08-19T10:02:03.36815Z","last_seen":"2026-08-19T10:02:43.495856Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"137521a3f470a6ef92baf0ad6e4d8846","sha1":"a5dd1229024e95afb1e14bf76bd71893ae1334c9","sha256":"d8e8f30f48bb32fe46f5628bce52513e97bc542f62a796fa60c8a1aa830ffa00","sha512":"92fad3d47e473857143fd54ac2fc32718af3cbfd2faffaf149d38906d5a2f0bccb833fc49d685b0dc0ba1cd07932ec0c201c1876221506ac44376298b9d7b201","ssdeep":"","tlshash":"15b0120c9431b068000f201c9b9636d1712441eb4d263d28f3cc850b1f4640f035e3cc","size":119,"data":"","first_seen":"2026-07-04T10:27:54.046183Z","last_seen":"2026-08-19T10:02:43.496434Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecb91c7aabbc3a8baf7e94c02300c2ac","sha1":"e76853eb61f64586b85fae63e1392c6bb6282f92","sha256":"26ded0bbf2f7d234f7ea89b22b5fbba36d4d2a5dce7991eebb0fe9aeac622294","sha512":"dd0a36a1770414f9ba8a27a613a43ae774a3c01412f352b62e5772962a5a521f4a8cf265886ab110dee0e7f2ef94fa42893a2c5a812c28545fd284d279d25065","ssdeep":"","tlshash":"eed0a9007ca64063f2b334ac0e2f21380920032bb20cca487aac8cb68ec2888c03070b","size":219,"data":"","first_seen":"2026-08-19T10:02:03.370807Z","last_seen":"2026-08-19T10:02:43.497125Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/jquery.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"56811b52b3f4d8fb06ac66483123bc08","sha1":"56dd3990cd65b991de77dfede034d8f94ab824bb","sha256":"fb66236cf8875e804ffe2b588718e475cd9b75d874c4dbe12bca0a06d44b2d69","sha512":"76dd91fbb83812f0820d628158c47db7aa60f58b4e8006b14a7cc38ec13bb9bd3f22ec568502c5bb83c8534356fa02e54fc4f6b95db38a3d8ee9d430881719b4","ssdeep":"3072:u9AbmnMNn1Y0K+Mw2QPmtIZQL7S6VFMChtu3wf/NKacv:Rb5pMw2KmtIZQLm6VCCAO/u","tlshash":"fac385d4f3cd2a378216b05a4c2ecdcdb17c687a5ac488afbd4c915a685483e8776d3c","size":118763,"data":"","first_seen":"2023-03-07T12:04:01Z","last_seen":"2026-08-19T10:02:43.471524Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/bootstrap.bundle.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"accc68e90928427f24bd2d7dcf694fb4","sha1":"f21e6b4daca0beda81f44763ff2fd9f9a764d1dc","sha256":"7647872cb0d179bd0b15bbfba7451c72fb4677f45be2eb3490af6373ef1ef7a5","sha512":"2ed77eed7e0ca1c59e6bc801279107931c0f9d5dbd552b37932e34d451850ac572bbd22902231fa27554f1a18d3c73b8475851ebed15517f8bb9d9e2e6156935","ssdeep":"1536:/xzakJOcllrRew0myz99T0jybHMkI2IzexYDKdzI3fwHaUZk2KvKbTdkuZ6:Ak4cc6H3fwHaUZk2S0TdfZ6","tlshash":"49a39480f3dc6c77069a605a5c3dc6ceb23da4b26a8640af7d9c64dc252cc7693b5e34","size":99823,"data":"","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.485009Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/magnific-popup.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bace9bb9a2ce7c23452612247f44b189","sha1":"729145bed0347e07e4155f76421012bbac292037","sha256":"f9aa46780eec101d326195ebe83a421388aad293382b9b7800efe356bde20d41","sha512":"e9fe49eb67722cfc244173b784815da70b60e2fe36d8640d22739d1793d7b1da890bbad52dcc7d3c5b64242d007b8e5b200b2f6f24fb15c021de1a04de3c7774","ssdeep":"384:9eQgmICWqXUGKyfrnegGItCM/ICWIsoKgymsYiLlcRjy17v86LfR+iQZqZFnxqk:sAuA9smshwy1706cZcPqk","tlshash":"fec24390f3ed652b871570998d3faccc213c9533dd518ceb7d9ca0a8a89883986b5d3c","size":25728,"data":"","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.485623Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/owl.carousel.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"37cb00cbc2f85df02f2db2598dc7763c","sha1":"b9cec699db7dd17deee768961c421aa31a7853b2","sha256":"f869844f58fe3bdfff9e772bf8f85783527b696cc53ad7b28b62aeb3e473fd3d","sha512":"45a0b6605ee5e08a1145aef4391482e9bcc7833584172fdff0ec49040cd6f7d3333afbc17351cb86fb4b4fbe9a369b8ea43a81bba5dcbe2cffcad9bba7e98d86","ssdeep":"768:QGewMczbcvMkSUv/8/dNmBok47yBMo/NXdu2wHBAsZWaj3lxcK7x2X35QvY70Ncp:aMk7NX5KNZux6q","tlshash":"74337045f3fc1c2b862a20915d3f868b723c452ec95154ae7daca0dc586c439867efbe","size":52612,"data":"","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.486976Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/parallax.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"57804ca32f90aa05803c442c18e25c38","sha1":"a568d360fe827c34d48b172b133fbed857a7902a","sha256":"b7470057cdac3097f90f24f2d08fcdeca2b3e6c1d23e343a961d24c22356ec33","sha512":"fb779ddd0718332ac303e62a6059b430cfd6a084cf404eb49732df116c805daab477887edf8a6a9603ef1d779ceb7c46f7b74aa819558c157e6c51361b28b750","ssdeep":"384:TTKPkT9Lq4Q9fS5aFCQhy39zT++YL+Zg60ft:/iSxXZut","tlshash":"507275c5ebfd1512416a319d981e62cc352cd173891a8d6f7c7cd2dca880a7e43bab39","size":16166,"data":"","first_seen":"2025-12-02T15:46:46.952254Z","last_seen":"2026-08-19T10:02:43.467729Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/form-validator.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"59e2b93ee896af73058e335d254cacaa","sha1":"12d8595dc70179612e21b269fd3cda37821fbe73","sha256":"5a9710a5086e04bcb491c330c0d0d63f8bb819331543b1e2a5e5b971ced2d5b7","sha512":"07b753b86826209a7257d07650c9c7c16155ee6a7c9ea06ec31f4d1aa4e55120443d1d2334b7351db1327830b5322bdf155f87250ea2af9959048304581589ad","ssdeep":"192:CFMM3U8rF3aFiEIPKXxyCGdV4fohb6SOQvz2cyUH:C24raipSXhGziohb6SPvacyUH","tlshash":"96e14349b7eb05431f5530f5895f82ce727c6b28c58684896ced80e0a8f4ea697f6c3d","size":7056,"data":"","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.487564Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/main.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"46e2ef27808c97f8f7dc4292609460b0","sha1":"e5fa0e571663dc9b885385579e2aaa96c82bb596","sha256":"f5dd97aed6e0f76fb9a3e71b97a5ff556b59bf608c5b2597d2253858c40129b2","sha512":"6b7a8fd153455fdd26c038976ecdb635c2f5f5d1bdb935b579a781645dd81a62a6b6074449718a32907a1e03edfd3f44758b1a570c317afe0ce328ad1f9f9db0","ssdeep":"","tlshash":"4f815584f28c247581bf7098dd6da2da4b2d1200e807a5f7ecf9445c298d37e6afed58","size":3829,"data":"","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.45979Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/app-assets/custom-install-btn.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"905c1e0d67aa8735b9c0e387384d8313","sha1":"ecc3ac017ae7438e837a79fe69bba4e7eab3c12a","sha256":"9ca4d7623540a3d455bf0b802fe9beea552f7762dca4da48e0d6dbfcc314d662","sha512":"719e5e4dbb17629d56cb4843be4b9b7dba32eb677cec61ef6f72eea753ee1a76a6f8a1408e8506590692372e4391aa739f92e391b21e9f4e3f4fd470813c949d","ssdeep":"","tlshash":"7b3120b1947008374ebb1dee72ab8b0d39a240168b67804646bd00c08bd6d22e8567ee","size":1822,"data":"","first_seen":"2025-05-13T11:19:07.474357Z","last_seen":"2026-08-19T10:02:43.491293Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/widgets/latest/float.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb3a2ea81178836e3b20b18a8112f552","sha1":"e6b1964212a20dbb63bb5470684a5985ebd4f3b5","sha256":"dc712fd3cd4e832f6cc6629a5595b5ebe1f3d1257f5d2ac1bc9e5afcc2a4f9cf","sha512":"f1121f7259c801724b7103334e91115e843e687ba89a3d91e7152a812ed8316641f6da483b15cba5877fab10899aa918e41a1b0c5f70e118c6716c0c4ac2caa9","ssdeep":"384:qzCKMPZATN09S0mtC+Hbi5udeEDMcglTo22X:qVMhAh0M0sC+7iUdeEEv2X","tlshash":"0892e71521b5403b459303a2fdfe1b6c61bb43e6c0156c24ef6ecd82d999ad8db235ca","size":20433,"data":"","first_seen":"2025-12-02T15:46:46.965887Z","last_seen":"2026-08-19T10:02:43.454138Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/leaflet%401.6.0/dist/leaflet.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"21f4844183d578536e5cd3cd4ec844e1","sha1":"1c9a3ab56b953b7a3fbb8966f3e22bc70c48c8c9","sha256":"7cda11af090fd86b983db352266309382c9f441d8384f41ed2b19383346ccaca","sha512":"819c081bdc77c145e0da175717afab5642c5ff4562f54f03d8db60e066b9239059a55915c652566d242d5cf4a2513b42d138ed18e9b16b50093ee57408fb617b","ssdeep":"1536:FLZJjTMGJMvXJ0WLz+v4upJtHaVM2PlhUp8bi7Y61MYBy4ess0GMwPiUl:5b/MpZbzQx7ak8YByxz","tlshash":"1dd3948ab3d1ba2643c35174403f210bb6326595a40a452cb83dd9efedaca49713bf7d","size":142601,"data":"","first_seen":"2023-03-07T12:04:37Z","last_seen":"2026-08-19T10:02:43.453229Z","times_seen":650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/meanmenu.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"269c13ac70e7f1198cb9007930f5c8be","sha1":"e96bc76f91a03723b96898b1597f65f6990de259","sha256":"f3c546f8d85a3d4b96b38846321e3ec0d6d0838bffd8916bb353809cbbb9fb9d","sha512":"9b5162091a7b666cba028bda8a1f09855b821e7039da25083a216c261b617269b7b9498e7f089a9e5b332b5130b1e1875f3ad02265c1fab0e1513e378609e098","ssdeep":"96:aFRJtVLSMNnaToz99fBt8xMGAnGiE6nFSEyt:kRPVOGt9G434","tlshash":"96a143a6a3bc04fd907a2859b93ef3b034ff642ef542d54472eea8353414d311292eb8","size":4858,"data":"","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.479444Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/appear.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a89123932bd2d7e3e240260bfe96120c","sha1":"bcf9554cbabb9c0242884d3a200c63a99800bd35","sha256":"02eddf1f263202182c853b17d5fd475ffa2ebe6deb3e43ccc749b4f2e39a300a","sha512":"c494f876870312be810ba9435ba8be243ecca33190893aa7abd28d0b48ec0a5a48ff7f9eaed858c258e963002a12d54eee29dda6e61d50da79200f37238869ad","ssdeep":"","tlshash":"1341f045f3de2e6a8576606e9d2f62cd112c80376252c8a35cf8cd7c3cd1c6d6267d18","size":2313,"data":"","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.482005Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/wow.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6b21903d4f2b5644dbe7d4a6e197684","sha1":"9029c6eec84ffc18a882aa7aa5bdc4f5597b7035","sha256":"aad35f96d49ebe705c8abd1919af65a963b8d71a4b823c2fde7fca5d3c85dcb6","sha512":"bc34a1c056a862d9d6bee284d645d278f9f90ee99df3952e89b0e989ee57b028a86fe95da0f551ea94c3e7b5262a40f4d3261f943c135925176a74dada5fbac1","ssdeep":"192:UwBnkisleEl2z2u2UayFsXx4NiEW67759A0L59MLIJith:UyXXGcDraYsXx4NiT67759A0bMLqiH","tlshash":"03220290b7dd193b9706b1b6cd2f98c9b13c552f81a884ae7cac90d858244358b7ae3d","size":10080,"data":"","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.475483Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/slick.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc5321917d29e7825c245829c3613a3f","sha1":"a2f883cd41e6fd8702fbfa56c95b4c585e3213f2","sha256":"d9908c3a8ad6fa56af0fa36882a0ae5cb7d0c628b92ffa0f831ef7ae22a6d839","sha512":"4e0942e61d5fb14160884e87cc1179325d8acef7edaebe1e9ccdb739cb26806b6a7404a3d1b0ec3b1d7e41b99a0f80ff0d48c8797131d867c1cb6f5325913260","ssdeep":"768:Kfgw4L3CKqzUIerMuEwCvMMc7s1tDNEJZsJai/Vm0tn2GJ51b/41d+PAULJN2Zwl:Jha9DX9m1doAyb2SEG","tlshash":"ff536244e7ac174789a720ee682ac0cc73be91718d0198ff7cc9969464d463d8bdeaf4","size":61849,"data":"","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.465127Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"ServiceWorker registration failed: ServiceWorker script at https://werdmountbank.com/www.firstunioncorp.com/_service-worker.js for scope https://werdmountbank.com/www.firstunioncorp.com/ encountered an error during installation.","filename":"https://werdmountbank.com/app-assets/app-installer.js","line_number":6,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/odometer.min.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.171Z","timestamp":1787133727171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/odometer.min.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 471\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3524,"size_decoded":779,"mime_type":"text/css","magic":"ASCII text","md5":"f3a7f71953021ac43e744ce04efe7862","sha1":"29aee0660cf9b683679ef661c44ac26197f51ea4","sha256":"f85ab5150dcd671cb56ca8d734e5e820195c6a9cff78a3763d0bc5320ed7f4be","sha512":"f86e265a09b89c3ab35cc8a8f16afa34c47969f23c8a2ab75b3a6a5d1e2e1e419ae8411bd7c95677d30d53ce4e633f24b1819b5beb0bd8534da3afdd1dde8886","ssdeep":"","tlshash":"9471f2251f6017245336340abacd1b70beecb9522623dc9eb359644bce03db9d288f57","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.452438Z","times_seen":86,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/leaflet%401.6.0/dist/leaflet.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.184Z","timestamp":1787133727184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /leaflet%401.6.0/dist/leaflet.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:51:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 39876\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":142601,"size_decoded":40114,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65384)","md5":"21f4844183d578536e5cd3cd4ec844e1","sha1":"1c9a3ab56b953b7a3fbb8966f3e22bc70c48c8c9","sha256":"7cda11af090fd86b983db352266309382c9f441d8384f41ed2b19383346ccaca","sha512":"819c081bdc77c145e0da175717afab5642c5ff4562f54f03d8db60e066b9239059a55915c652566d242d5cf4a2513b42d138ed18e9b16b50093ee57408fb617b","ssdeep":"1536:FLZJjTMGJMvXJ0WLz+v4upJtHaVM2PlhUp8bi7Y61MYBy4ess0GMwPiUl:5b/MpZbzQx7ak8YByxz","tlshash":"1dd3948ab3d1ba2643c35174403f210bb6326595a40a452cb83dd9efedaca49713bf7d","first_seen":"2023-03-07T12:04:37Z","last_seen":"2026-08-19T10:02:43.453229Z","times_seen":650,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/widgets/latest/float.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.204Z","timestamp":1787133727204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:54:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5992\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20433,"size_decoded":6229,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6136)","md5":"fb3a2ea81178836e3b20b18a8112f552","sha1":"e6b1964212a20dbb63bb5470684a5985ebd4f3b5","sha256":"dc712fd3cd4e832f6cc6629a5595b5ebe1f3d1257f5d2ac1bc9e5afcc2a4f9cf","sha512":"f1121f7259c801724b7103334e91115e843e687ba89a3d91e7152a812ed8316641f6da483b15cba5877fab10899aa918e41a1b0c5f70e118c6716c0c4ac2caa9","ssdeep":"384:qzCKMPZATN09S0mtC+Hbi5udeEDMcglTo22X:qVMhAh0M0sC+7iUdeEEv2X","tlshash":"0892e71521b5403b459303a2fdfe1b6c61bb43e6c0156c24ef6ecd82d999ad8db235ca","first_seen":"2025-12-02T15:46:46.965887Z","last_seen":"2026-08-19T10:02:43.454138Z","times_seen":3,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/css-1.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.287Z","timestamp":1787133727287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /css-1.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:54:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/owl.theme.default.min.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.168Z","timestamp":1787133727168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/owl.theme.default.min.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 406\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1135,"size_decoded":714,"mime_type":"text/css","magic":"ASCII text","md5":"b5ec6473b82c88a99c1957555436e7fd","sha1":"8c0ce4641118836cff948fa419f7f3800566217c","sha256":"37a92b38ef6f901133ac3a77bda685c9b76866b63df99d33955990092a832daa","sha512":"5ef58314106050ef3fe20c6ce28bc86d876ce9bf1f3f42aa910d05d9dca35300dc6c7fa56580b27be6f006b0daedbfe2979718a326a7028768ffe7aace10f126","ssdeep":"","tlshash":"f621ddd5b155294d380b84981f6c0297af4f28ba6f4d4df0f0ab6079c22c9053a7ff28","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.455438Z","times_seen":86,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/app-style.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.178Z","timestamp":1787133727178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/app-style.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1424\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5988,"size_decoded":1733,"mime_type":"text/css","magic":"ASCII text","md5":"f45ef76baa7393e5e8a3b4ffe0396f6b","sha1":"5f40ea9e657b07470b601a28f784e76ef17c6051","sha256":"3071717765df8729f2ebce4a077bf4d3a81c728a3789cfb1a49b9005548c1fc8","sha512":"86c37f75f4b8e4e552770733f1b3c3056def7353b51ba246d22070288e5e8d175ee8e01585e23164c7e13780bb1225060e492a7fb335b250d19c52e066757df6","ssdeep":"96:1IYtCBVYKFIYJotPJvC/zjNwsQeHbVM2K/3ekyTDWS2yhsyQt5m5Gp:1IPBVYtYaPvcjNwsQ6VM2K/OkADx20sb","tlshash":"87c11f565e770c49f96de1992fea9b56225c6083924fcc39bfc0324c4fca1a194a2f8c","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.456168Z","times_seen":84,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/app-assets/app-installer.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.202Z","timestamp":1787133727202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /app-assets/app-installer.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 159\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":364,"size_decoded":395,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"898abd9ae965480afdf708decb8e0713","sha1":"b0ab2212d1bd5fe261600341c2e3a3e9aab7cc21","sha256":"f06c09d045e91e1fb49fd4f8fcbb3e108cfb3ed4645381d39a3f12c059cd025f","sha512":"2846450361c0922da2178d095a6a7a7442ab6f555d9363b321d6b371a8ab8b1b0153e884261e500f22a2263a7d88aef8c8f906541593677455cf365c7896a5c6","ssdeep":"","tlshash":"76e0204cdec9d8776a73743a4c4b5309293f03804095705057fc43a15bd7cad622b85a","first_seen":"2025-12-02T15:46:46.975474Z","last_seen":"2026-08-19T10:02:43.456839Z","times_seen":3,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/img/first-union-corp-logo.png","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.220Z","timestamp":1787133727220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/img/first-union-corp-logo.png HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26640\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26640,"size_decoded":26906,"mime_type":"image/png","magic":"PNG image data, 579 x 165, 8-bit/color RGBA, non-interlaced","md5":"7ebe3102ed35f338ceda3926d510cc3d","sha1":"aebff15acb42927cd099838b0b1a72c739e47c85","sha256":"78048e62c3989b07d80809fd176e74e486467268210904864243aa76433201ad","sha512":"eaef2630483db26d0df21ffc393e6e28fb6f205cc8f260ebceaaa6883b2a61c7005d0782afa581355e396e5ff7add62689cf70f001f9640439e5d92257fafa65","ssdeep":"768:w7/3JaxHayvK+6f4Kd5FqXNQnOmxm3PEq:GBax5q4WkXGOm8fP","tlshash":"78c2e16e392509490cfe8af5398b197d60950e584b38d3e7b38c8d90083bc6cdc59a7f","first_seen":"2025-12-02T15:46:46.939269Z","last_seen":"2026-08-19T10:02:43.45756Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711770121/bksvz6hsxbdvazf9dwvj.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.231Z","timestamp":1787133727231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711770121/bksvz6hsxbdvazf9dwvj.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65678\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65678,"size_decoded":65945,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 728x498, components 3","md5":"897843cf7f2ea896bbd4301ced84a38a","sha1":"4642199844de8ff7cdee71bc5ccc05e96043414f","sha256":"130059afc98fd046b5e3879e92837a6c0b7e4619ebe8a34fb66cc83b2ac6fce0","sha512":"90d1a2c5f9d9daf767d3629032ec2d9da3d993382429bf967663b930c67544f0f91710896507675f34ff10a3438afb3a76a3563bfd4963c87e9f544ebfed13c2","ssdeep":"1536:hyE5FkRuwTOWT5JDcPUr0ZG2uE8IRF7SO1MRusa5:hyI6RuOxT2siuB2F7TwLa5","tlshash":"4353021415b775cbe464ab38f9bf6bdc63da32df3c07b61d26026c2e65110b32a8d099","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.45832Z","times_seen":82,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/bootstrap.min.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.147Z","timestamp":1787133727147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21552\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":181423,"size_decoded":22040,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (559)","md5":"64e3cb626f2e0bb8c349a760cf460eca","sha1":"3e5529ccaefe2ca5c78ea9907a65d8dcca850b73","sha256":"91a277186c163f9fc8b7086ec2aaa5d0ddd64e7bce59c1b05c484a78f8ae2a62","sha512":"481672d181db5afc875f56ac71f50e950679f499c6169001b89b4159de4e9a779802581a5682e2a4a2e226e4ac579f12874f41b9b78e5bc538ce8c559f057ba6","ssdeep":"1536:7k6Qa0T9b9Bw+cVDsGa4dh9IVmXLUiywpMfa+r9NjULy62XDIlQ3ttB2zYTEh/Tx:7yaybU0ty/TAYci6G","tlshash":"f204449af681284dc06b84989d947fb9466d44d7ef2e9e6ff017366c83c42d108f3e98","first_seen":"2023-10-30T23:34:35Z","last_seen":"2026-08-19T10:02:43.459028Z","times_seen":46,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/main.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.201Z","timestamp":1787133727201,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1170\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3829,"size_decoded":1407,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"46e2ef27808c97f8f7dc4292609460b0","sha1":"e5fa0e571663dc9b885385579e2aaa96c82bb596","sha256":"f5dd97aed6e0f76fb9a3e71b97a5ff556b59bf608c5b2597d2253858c40129b2","sha512":"6b7a8fd153455fdd26c038976ecdb635c2f5f5d1bdb935b579a781645dd81a62a6b6074449718a32907a1e03edfd3f44758b1a570c317afe0ce328ad1f9f9db0","ssdeep":"","tlshash":"4f815584f28c247581bf7098dd6da2da4b2d1200e807a5f7ecf9445c298d37e6afed58","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.45979Z","times_seen":86,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711770138/cbczyeoofaqu9djmelw2.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.222Z","timestamp":1787133727222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711770138/cbczyeoofaqu9djmelw2.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 105226\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105226,"size_decoded":105494,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x780, components 3","md5":"17d609a4a26fc76ec8f03408b6edcd7f","sha1":"ed88c3952e98cf23f4d65467ed5378a27b7d362a","sha256":"7c4a9f29267c8c5ff58e63efc411be7a1c0b95b77082c0dce4274cd6596dd06d","sha512":"a97df5b0208e2aa9ab01fb6eddb154c075e8c7d3ebbcc8411806b4671e48444c308eddc20aab8c0b1b640e8877f7b1ab9c923ecdd9c61945b35a17ef610bd386","ssdeep":"1536:nUFVDYmapQv658R9AkzOoh6qpjJh39FmPi+qVuPYo+1msouQ:kVMm7OIpzhJ/sA07Mm1N","tlshash":"dea31365ec315ab3d17d482b91ce6531d39fe255be2d10252e3b3b0abb07d2095e3aa0","first_seen":"2023-11-01T17:06:30Z","last_seen":"2026-08-19T10:02:43.460508Z","times_seen":24,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711770144/aks0pcymfamzmwovwn7j.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.232Z","timestamp":1787133727232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711770144/aks0pcymfamzmwovwn7j.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 130476\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":130476,"size_decoded":130744,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 500x400, components 3","md5":"0f2a7fe804c7cae6c702a6ced3c51de1","sha1":"d5f0415d35278bf8844864cce7f589cf14da9620","sha256":"444f4e33de9d6cce9e52422324393fc3f4374425ffd9a49f00c681f568439c17","sha512":"bef57955f1af70ac5113a5c5fae529c954eb9c725e26611f62ffe130cd6d753ab6e037beb693be64f7238f57c249d4925ec772e0a21ec16331e7fb7cdabe1082","ssdeep":"3072:Q2/rTEqcH6GPQ6VcW4qdTlK4NdHeGgH6jYyTzgF9dWEeMn:R/vEqcaGPQ6uuT8CeGgajYyTzK0C","tlshash":"6dd3128b96433c8af43150ad3184e70aad04bb16e85a9362707c4b6c8d75deca375bdf","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.461258Z","times_seen":82,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711770045/egve21gyuerdca9tdeaf.png","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.235Z","timestamp":1787133727235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711770045/egve21gyuerdca9tdeaf.png HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 238801\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":238801,"size_decoded":239068,"mime_type":"image/png","magic":"PNG image data, 886 x 781, 8-bit colormap, non-interlaced","md5":"83e61334d23fbf9b08773d00470de54b","sha1":"8736228b5c6bf0c41cf947b49cfc0d5642d429c6","sha256":"b59558670988497380719b5dcef74e8a0a04b81270f390c45e4a3672614f3b46","sha512":"63be0be8c98fbe2ab6e90edf60c7b05cc15e57fceb9f0f48b7732b98bfc691467b3512055969db734c3859a5c4d37edea872c4a9306cd949a26d1baba4d809eb","ssdeep":"6144:BjXCu4GTSJRnL0WrYDI2iOlY6AmdxL+k1oCXwUjXnY:BGBZiDID9tmjakiCAUjXnY","tlshash":"0f342244f948f0665a9b9caa36184f4783b11b0ff901bcf4f999d952b249733d8331ea","first_seen":"2023-06-18T19:44:46Z","last_seen":"2026-08-19T10:02:43.46246Z","times_seen":114,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711770279/mkbfvkropftrrfczjymf.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.236Z","timestamp":1787133727236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711770279/mkbfvkropftrrfczjymf.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 103368\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":103368,"size_decoded":103636,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x900, components 3","md5":"71476abe9fb55b6113406db8ed272c54","sha1":"b397bc6f7f118a13d3efa503d0cda59a208d7406","sha256":"06b41f622aeae4c75a5fae5ec827a5276e6f985f7030d7f0247c7fe53b387dc2","sha512":"7b4e94ee5a3503b0326d4e8ded873a4c78abde4a0d4d7865d34e4b653cdfe7ad1e539db7d16a33fa0e74d6963bba3bba93f115c00f6597a1013d2131064638aa","ssdeep":"3072:x21yRQOYp2Efw4k17mof6EzSyIdNVLXWeq:x21yRQJc6i6Emx9WH","tlshash":"20a312ba239098ecc2dd53b09a5d270be3bd38b5cc68df4d08dcd6129e925dc0d952ac","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.463673Z","times_seen":82,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/responsive.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.175Z","timestamp":1787133727175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/responsive.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4606\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38267,"size_decoded":4915,"mime_type":"text/css","magic":"ASCII text","md5":"38cd15b1c7b897b55ccb1de5dcc23835","sha1":"c0c1da76d6907796ee12f5c3550a43d87b3b782f","sha256":"af4faece93742b2c6cd0d538eb3826051f0295a0161460c45e3f3b136bd4db07","sha512":"faad8dfddeb95d0a67debcc95b904136de06e1de30cb585a09e29d493856eac698e54503b025808ea73877b6424f42a479241c613edecfd453d358a82fcaecef","ssdeep":"768:KK1Rg3FrgkKZKMVqQwAnhuF9jRJvOPhdE+wOnTCjRnNvHB95aw9+:KK1RgVrgkKZKMzPhdEGnTCXvHB95awE","tlshash":"e2030e2beb05894d651e84fdbfb53fb19b0668439b8bc8fba490141cd6d466206dbb0c","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.464406Z","times_seen":86,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/slick.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.192Z","timestamp":1787133727192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/slick.min.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12119\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61849,"size_decoded":12357,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"bc5321917d29e7825c245829c3613a3f","sha1":"a2f883cd41e6fd8702fbfa56c95b4c585e3213f2","sha256":"d9908c3a8ad6fa56af0fa36882a0ae5cb7d0c628b92ffa0f831ef7ae22a6d839","sha512":"4e0942e61d5fb14160884e87cc1179325d8acef7edaebe1e9ccdb739cb26806b6a7404a3d1b0ec3b1d7e41b99a0f80ff0d48c8797131d867c1cb6f5325913260","ssdeep":"768:Kfgw4L3CKqzUIerMuEwCvMMc7s1tDNEJZsJai/Vm0tn2GJ51b/41d+PAULJN2Zwl:Jha9DX9m1doAyb2SEG","tlshash":"ff536244e7ac174789a720ee682ac0cc73be91718d0198ff7cc9969464d463d8bdeaf4","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.465127Z","times_seen":86,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/img/first-union-corp-logo.png","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.779Z","timestamp":1787133727779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/img/first-union-corp-logo.png HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26640\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26640,"size_decoded":26906,"mime_type":"image/png","magic":"PNG image data, 579 x 165, 8-bit/color RGBA, non-interlaced","md5":"7ebe3102ed35f338ceda3926d510cc3d","sha1":"aebff15acb42927cd099838b0b1a72c739e47c85","sha256":"78048e62c3989b07d80809fd176e74e486467268210904864243aa76433201ad","sha512":"eaef2630483db26d0df21ffc393e6e28fb6f205cc8f260ebceaaa6883b2a61c7005d0782afa581355e396e5ff7add62689cf70f001f9640439e5d92257fafa65","ssdeep":"768:w7/3JaxHayvK+6f4Kd5FqXNQnOmxm3PEq:GBax5q4WkXGOm8fP","tlshash":"78c2e16e392509490cfe8af5398b197d60950e584b38d3e7b38c8d90083bc6cdc59a7f","first_seen":"2025-12-02T15:46:46.939269Z","last_seen":"2026-08-19T10:02:43.45756Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711769997/xsbbwlshxy5ukq8xzgj6.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.405Z","timestamp":1787133727405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711769997/xsbbwlshxy5ukq8xzgj6.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 184564\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":184564,"size_decoded":184832,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x550, components 3","md5":"ec1fa71aca8946dae19495bf1921dbb7","sha1":"b42b8a6d72426626bfcb1098c7d14f72e187cc61","sha256":"6c8b45a75d0571ae36a24695ee8aa778d9ca68e51eefc3f7c975050a64e451ac","sha512":"7b75506d90fd261ee5faafd5e2182866b1e0ecfd8645a5c547a7063ed15a4ab0f630fa405b91b2da3e65ea028fe026ee97070486beafdb8cf137291641dc4029","ssdeep":"3072:+ygZayWGeGkLNjzQ4RvEK+JIHFdtL6og8hJr26QrVfBw2c2M4Nu:cl1ktzQyTvxGKzQ/Pk","tlshash":"d204234ed31d9660e931198341f28a2c25b2bbefd192f293e93a2e034dd55ad0737229","first_seen":"2023-05-15T18:21:00Z","last_seen":"2026-08-19T10:02:43.466345Z","times_seen":379,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/parallax.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.197Z","timestamp":1787133727197,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/parallax.min.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4170\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16166,"size_decoded":4407,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"57804ca32f90aa05803c442c18e25c38","sha1":"a568d360fe827c34d48b172b133fbed857a7902a","sha256":"b7470057cdac3097f90f24f2d08fcdeca2b3e6c1d23e343a961d24c22356ec33","sha512":"fb779ddd0718332ac303e62a6059b430cfd6a084cf404eb49732df116c805daab477887edf8a6a9603ef1d779ceb7c46f7b74aa819558c157e6c51361b28b750","ssdeep":"384:TTKPkT9Lq4Q9fS5aFCQhy39zT++YL+Zg60ft:/iSxXZut","tlshash":"507275c5ebfd1512416a319d981e62cc352cd173891a8d6f7c7cd2dca880a7e43bab39","first_seen":"2025-12-02T15:46:46.952254Z","last_seen":"2026-08-19T10:02:43.467729Z","times_seen":3,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/odometer.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.195Z","timestamp":1787133727195,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/odometer.min.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3834\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12767,"size_decoded":4071,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (940)","md5":"38f2e561eca6b23ab5fe56bb59ab9e06","sha1":"26d7c1f0ea89fc9fa722739ad49e572ec4ad01d3","sha256":"9ec82f4818eaaa73ef4a2276e91e5cef715e2f57f961a81f25479c0b526e5037","sha512":"becec20f804f4648fa6b52f02ee13a5355c5d519e63c415dda13e3775a1fdbdfbeb6133b78ca0191bd064b7e50ac8f893cf5fbf348348b333f54b27133e402b8","ssdeep":"384:WvZjCGRBQiJfp5UMeo1YuK+AXrmSQgXlb:WvzpPqJ+YZ","tlshash":"bc427450a7ed1a3f9313f0a19eae8dccb6bc983a9454845f7d1ce4d99820c358739e78","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.468566Z","times_seen":86,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/img/two.png","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.234Z","timestamp":1787133727234,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/img/two.png HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4118\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4118,"size_decoded":4383,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"1aa21aef0c24f62f2d55f96d8896d230","sha1":"e53f3a66394736dd853323c762c8da49c17a5aa2","sha256":"077ddbf85edd68eaa7b8e219d1dd0c0517e07df1f43bd93a495f022543fbddce","sha512":"0b97e1850f32180b9081408d1351f85c72fb0c80cf340c93e2a1af38dbb8344c47f8ec2402cd58cdd5828c50be4ad15c3776d7f28de6eff00b02badee70362af","ssdeep":"96:+GrmdliBjO627oI96xKKsAWA9Tacu5gVvwc+BJ4cRbbf9:s2IXKsAR92cd+D9","tlshash":"ad819f5a2f531788d6f21c1ded3cfa35a9350120c51e896db17631cad48ee1baca035f","first_seen":"2023-05-16T15:42:53Z","last_seen":"2026-08-19T10:02:43.469306Z","times_seen":90,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711770725/ga5dgkmimh6jjejqg2jl.png","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.237Z","timestamp":1787133727237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711770725/ga5dgkmimh6jjejqg2jl.png HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1613022\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1613022,"size_decoded":1613290,"mime_type":"image/png","magic":"PNG image data, 1200 x 900, 8-bit/color RGBA, non-interlaced","md5":"4710415ada4ed9fd352b5113a1c9f628","sha1":"a8582f2559a22bed634741707edfdf1dddc46162","sha256":"92d812beb6362a68e07b8b1b1c2604639a999734d6e8192379a3c053ac7cc5a7","sha512":"2c74f4f98c88028dc22252cfdc3c1fee7cd660a236e6066f9b225c3e61bfc3fecb2460730c22c235220b1c3919bd65edf40183d81dd52d399be9521773b8b78a","ssdeep":"24576:xfSqRILKjQdABJTBvjWhn+amvfNRykG4UDBf/mzQvS5:sqIxcTBL7Rvw4Cf/mkvw","tlshash":"612533e4d431890794f0a36acebc98ca7721901af2395f49c0acf169526fd87a7dc53b","first_seen":"2025-08-05T21:29:09.37549Z","last_seen":"2026-08-19T10:02:43.470031Z","times_seen":70,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/style.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.174Z","timestamp":1787133727174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14981\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":136750,"size_decoded":15291,"mime_type":"text/css","magic":"ASCII text","md5":"ac34787219be567008e2238491852385","sha1":"56dc997b7b8142f3ee986d8aeca9d2f1ecac700c","sha256":"5868595b8a1cccdc5057e0298b14aa195f5a6e412840b745e834dfca2868267f","sha512":"f0e649e524d545fd31f006c92a18c7ac1648a4352a05146e8cdd4edd8a8a756ce19866c3fd2f7b8812f2725fdca7c722381da2d697f7b5f10c6f447fa9aeece1","ssdeep":"3072:1N9ybl17+gSRzRqVqiu/Ewn4Os2U781gEKQJ26Of6tidaPJuSVWFhp:1N9yJ17+gSRzRqVqiu/Ewn4Os2U781gJ","tlshash":"02d3516666923c88664f849c6fc86f204f5e55d2af1e8efb7063345cd38528812bbf4d","first_seen":"2025-12-02T15:46:46.960461Z","last_seen":"2026-08-19T10:02:43.47079Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/jquery.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.188Z","timestamp":1787133727188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34231\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":118763,"size_decoded":34469,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (740)","md5":"56811b52b3f4d8fb06ac66483123bc08","sha1":"56dd3990cd65b991de77dfede034d8f94ab824bb","sha256":"fb66236cf8875e804ffe2b588718e475cd9b75d874c4dbe12bca0a06d44b2d69","sha512":"76dd91fbb83812f0820d628158c47db7aa60f58b4e8006b14a7cc38ec13bb9bd3f22ec568502c5bb83c8534356fa02e54fc4f6b95db38a3d8ee9d430881719b4","ssdeep":"3072:u9AbmnMNn1Y0K+Mw2QPmtIZQL7S6VFMChtu3wf/NKacv:Rb5pMw2KmtIZQLm6VCCAO/u","tlshash":"fac385d4f3cd2a378216b05a4c2ecdcdb17c687a5ac488afbd4c915a685483e8776d3c","first_seen":"2023-03-07T12:04:01Z","last_seen":"2026-08-19T10:02:43.471524Z","times_seen":85,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/img/oie_an86URhLGJTM.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.401Z","timestamp":1787133727401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/img/oie_an86URhLGJTM.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 144342\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":144342,"size_decoded":144610,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 321x420, components 3","md5":"6437ae94e49ae9cfd33b027281915ae5","sha1":"64eac3a2969c920ddb6147f82ed9aee8f350211e","sha256":"ee96c5c76f82b3ad2a87d495fb03cfb225ed65f4210a136519a9cac18d10993f","sha512":"bfe24a5705e1d6e0db2f5f946ca27b2bbab8c3829e34af6ec67788afc854344bd4489bffde8baa12db28c93783febb2e7bb9778fc2c32f57cce3bd8afc78e450","ssdeep":"3072:/tluL2pwAOAEwVqbO2/34Ecpn7ANOLRnxxl0tMkI55uXxE6NuyWKfP8TE40V:/PuLUJOAEwobt/yp76ONldkCkNuVO+EZ","tlshash":"74e3129f726b14813013c9c97c811937aece1776c1bb8bf8a5cd40d628519bb693e732","first_seen":"2023-11-01T17:06:30Z","last_seen":"2026-08-19T10:02:43.472315Z","times_seen":8,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711769964/cfkrppd75lurm30eebbr.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.404Z","timestamp":1787133727404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711769964/cfkrppd75lurm30eebbr.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94040\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94040,"size_decoded":94307,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left], baseline, precision 8, 1920x700, components 3","md5":"2537c5f0d424260a967bc2166925cf08","sha1":"bef8f7bea4b48f98353f7366a9e7235a21829f81","sha256":"79a89ef3150d659ee43474df1b01acd6a0d241babfb3f857d2b7a5d6809f922f","sha512":"821ecf86299a8c12611201f3f51497e8ee61dcc04f7352bd98e99c34ab1bb7ea2624d538f63aa5275903febc071534f5afb3f07445004906a81f511e6a1bdf59","ssdeep":"1536:Glpowuq+Uc95sbf+HU0sG53pJAPFN0oxs62D+Ih1:CYbI+v3pJAPFN3xs6u","tlshash":"1793be32f3d7db554b23a2ac40bcbebb039845d785c82a53992b8d161e40f7e91670bd","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.473254Z","times_seen":79,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/fonts/flaticon-7.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.728Z","timestamp":1787133727728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/fonts/flaticon-7.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/flaticon0421.css?7677.778\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2457\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":2643,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/fonts/flaticon-8.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.778Z","timestamp":1787133727778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/fonts/flaticon-8.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/flaticon0421.css?7677.778\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2457\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":2643,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/fonts/Flaticon-3.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.867Z","timestamp":1787133727867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/fonts/Flaticon-3.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/flaticon0421.css?7677.778\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2457\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":2643,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/fonts/Flaticon-4.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.901Z","timestamp":1787133727901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/fonts/Flaticon-4.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/flaticon0421.css?7677.778\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/flaticon0421.css?7677.778","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.153Z","timestamp":1787133727153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/flaticon0421.css?7677.778 HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1215\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6553,"size_decoded":1524,"mime_type":"text/css","magic":"ASCII text","md5":"e27ba47257dca1b66c27cf9411bae748","sha1":"1b8345437c500a5cd8ab08ae0d66de0b6f5b1067","sha256":"62515eee6d3c31b24132d9ca03b976893d5cea815eb685eae659f4f594fb6293","sha512":"911791d3000a425dacfa6281fb3b8da1a560ee8cb1029e8375b64c3ee28cfbce3e52d961065a6e8d3083f578a632e6a63c5a0853072563cc65a2b94466d46c64","ssdeep":"96:BE5ctEcc54OsHYMlIg5KL2eHPAPWXpFJOvJA4/uCw9+RKPDW6hp2KzTvUA87iYfP:BE5cti2egYN6OvcT","tlshash":"9bd155a4992f28c30799ee812fec6a509f04b0ad9dc09c59d1167e2df7f1e354381bd8","first_seen":"2025-12-02T15:46:46.973243Z","last_seen":"2026-08-19T10:02:43.474142Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/app-assets/app-style.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.180Z","timestamp":1787133727180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /app-assets/app-style.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 493\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1689,"size_decoded":801,"mime_type":"text/css","magic":"ASCII text","md5":"82c587f5a7d44078b83e0010a01d8752","sha1":"5f15637eaacad11290ed334f9b661893f3f1fa7a","sha256":"e21d8d7f99302ed92cd9cb8511419bd7173a81f55187472a6f5ecd917ea8af93","sha512":"6807356e01ad054fac872829dce04aa9feef4a9bcc33e30e1b67ccc9a1727fe06713fd9c27baefa0fa65cb03f2639a3aaacabba05df7ce45f3de621c331a2bf0","ssdeep":"","tlshash":"a631bc82ae770801f80bf49d3bf68755126d4547a91fc9393bc5735c8f8626815a2fcc","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.47481Z","times_seen":78,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/wow.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.198Z","timestamp":1787133727198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/wow.min.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2771\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10080,"size_decoded":3008,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (446)","md5":"f6b21903d4f2b5644dbe7d4a6e197684","sha1":"9029c6eec84ffc18a882aa7aa5bdc4f5597b7035","sha256":"aad35f96d49ebe705c8abd1919af65a963b8d71a4b823c2fde7fca5d3c85dcb6","sha512":"bc34a1c056a862d9d6bee284d645d278f9f90ee99df3952e89b0e989ee57b028a86fe95da0f551ea94c3e7b5262a40f4d3261f943c135925176a74dada5fbac1","ssdeep":"192:UwBnkisleEl2z2u2UayFsXx4NiEW67759A0L59MLIJith:UyXXGcDraYsXx4NiT67759A0bMLqiH","tlshash":"03220290b7dd193b9706b1b6cd2f98c9b13c552f81a884ae7cac90d858244358b7ae3d","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.475483Z","times_seen":87,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/img/icons/piggy-bank-small.png","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.223Z","timestamp":1787133727223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/img/icons/piggy-bank-small.png HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26160\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26160,"size_decoded":26426,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 16-bit gray+alpha, non-interlaced","md5":"ea971d82011071a820f37a3dd7decc55","sha1":"47d37773748583dfa9a2e0f2666cb81ac13cf3b3","sha256":"5430ec0adc9489b8a59b681189d4fecfac5461a5a34da882a998a69dd3d7c391","sha512":"ac802813bfee0589c2fd4f194a2da0a0b36d042a1e75bc25c4ee3ac077ed66ab158460d870477cfd90df521f3ea2d73892da8c67665addd8a767171c9b6f6f76","ssdeep":"768:LEqBY5AZGGrUiZU8b3Ldtqp2DWHzB+KgmN:AUE6VI8feplTBGo","tlshash":"2fc2e1d95218bd4251cf480e9d9fa58101c0bed14bb4bb405da382df1cea5d74e1aeae","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.476261Z","times_seen":90,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/img/icons/app-wallet.png","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.225Z","timestamp":1787133727225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/img/icons/app-wallet.png HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18480\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18480,"size_decoded":18746,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 16-bit gray+alpha, non-interlaced","md5":"3a54857920856c6dd34d0803e4df6472","sha1":"f6c17e3209a8c549f3b57c702ec034d03ad5668f","sha256":"3ecc1b9cc81964ba474b8c9e9d67e993f4da999d413350331e616667e2b9f47d","sha512":"f590e0d19c7ad7743bfd3e5f16e6235950008fa6a240185056994cce52144cccb9075e97c14a2cbabe60e725c57c6de9b47bd0210ff572320b361e8b16dc737a","ssdeep":"384:v/Ie4pwndkcJn4HBgfJE2aMQTBy7hbA7mjL8FavvPlHDgtXavvVETMKbdsBix:v/Ie4pikcx4HOfK2ay9cmL8FavvPlHDM","tlshash":"b882c0d262a3d0a7cf18143347baadeb5394a36aedd1a1015e0ddb4ddbde3581a483d0","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.476948Z","times_seen":90,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/img/icons/credit-card.png","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.226Z","timestamp":1787133727226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/img/icons/credit-card.png HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15984\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15984,"size_decoded":16250,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 16-bit gray+alpha, non-interlaced","md5":"800a20930a9955123a38ce1741b5ca11","sha1":"c9f6a0a5176dec9cfebfbdae25bc61f9008d9076","sha256":"17cbf11e1fde7e6306cccb936050953c6178cd21914f87687872bd72d2f8c0a9","sha512":"e6e59583dc89627031a2bca45fa369cc54f51fdcb379bca876f88e094a52a9628077699e705d310970b553262a300ddb1486fa990a20ce4a936a08e107900113","ssdeep":"384:bHEOHaJPTStVh2ZFyiuSkEZKPI063V1cL3i:bEOHoPyVQZFb5uI06fcDi","tlshash":"2672b0f9a4341a80c23861b65ac22d0eb7665dcc0e3b3f9b6c8f11b84686359d1f9327","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.477559Z","times_seen":91,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/img/one.png","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.233Z","timestamp":1787133727233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/img/one.png HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4481\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4481,"size_decoded":4746,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced","md5":"bded36f7d181b205d4119ba69e1eae64","sha1":"18d345f37bc3f8947a255adb817cdd2382ada2d3","sha256":"8b3d9331dcdf6bd5aeebd714b6ca07b555a1532468b9eb793620a97110a132da","sha512":"09e07e8e0ce20fce53aa5daa94c1de7176c7cc62bbc97fd34375969ed0c6a2e8c3fba98c6577ce8923725545e1b2c5732a47bb59f670c7e270748fb56963f3b0","ssdeep":"96:+e/NuNPRdFOFv7OdBzmOjlVY6SrkNFCtBOV:V6JdFkv7OXzza8","tlshash":"fd919f17ca621a1605f415f298e8ce07b1c70c3e276dccba4fabb380058bf515a738c4","first_seen":"2023-05-16T15:42:53Z","last_seen":"2026-08-19T10:02:43.478162Z","times_seen":90,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/css.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.286Z","timestamp":1787133727286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /css.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:54:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T10:02:06.680Z","timestamp":1787133726680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:54:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34527\r\ndate: Wed, 19 Aug 2026 10:02:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}],"data":{"size":210504,"size_decoded":34957,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"5031c4703734d501dbaa699d51ba3e6b","sha1":"b6934092c5aa3c3bcba2a8dfa5d503ef6ab6b5a4","sha256":"c6e74e33cd78d1baec31724aaffa1cda18bd7fd20636c644ce222218724ad4c3","sha512":"422ee9895d1060382fddc256fb0fe6223383e2e4daba33bb227963a9eebc69edfaab675e9c7ac4229dbc4bfeec0e4ecb3567ed551d1ced66dbbba3ef30d48b2d","ssdeep":"6144:BIwDf8OilTN51d+qJKuMO6nREa6u7rgAKQUJY6IOOgZpv:BIwDf8OilTN51d+qJKuMfGa6u7rgAKQu","tlshash":"4b24856aa5f310646c9b91a41ffb6b452778e00bc14adc687fdd63948f86ec5c863b0c","first_seen":"2026-08-19T10:02:03.332974Z","last_seen":"2026-08-19T10:02:43.478804Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":86,"connect":28,"send":0,"wait":66,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/meanmenu.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.191Z","timestamp":1787133727191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/meanmenu.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1441\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4858,"size_decoded":1678,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (388)","md5":"269c13ac70e7f1198cb9007930f5c8be","sha1":"e96bc76f91a03723b96898b1597f65f6990de259","sha256":"f3c546f8d85a3d4b96b38846321e3ec0d6d0838bffd8916bb353809cbbb9fb9d","sha512":"9b5162091a7b666cba028bda8a1f09855b821e7039da25083a216c261b617269b7b9498e7f089a9e5b332b5130b1e1875f3ad02265c1fab0e1513e378609e098","ssdeep":"96:aFRJtVLSMNnaToz99fBt8xMGAnGiE6nFSEyt:kRPVOGt9G434","tlshash":"96a143a6a3bc04fd907a2859b93ef3b034ff642ef542d54472eea8353414d311292eb8","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.479444Z","times_seen":86,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711770720/w1kkv2virazt9orhhlde.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.238Z","timestamp":1787133727238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711770720/w1kkv2virazt9orhhlde.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48235\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48235,"size_decoded":48502,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 35\", baseline, precision 8, 1200x900, components 3","md5":"c0337c3c389eeb059f6f28b4d891da4e","sha1":"a633a310fa31c4a465504b9f256b4c38b94174ad","sha256":"341b8d1a75cde9fac2eafb2fcdafe2e4d0256e3020ad596df105533e022525eb","sha512":"00690c545cb142ccedc488b55ba7826d1802a15ff1a513c00ef3495557e3ceaf4373ffa64825c583e02f3fe8a9da883cd071c7ea5ab32f4e7a35ea571a203b0f","ssdeep":"768:ss737QL52M0hdhvxrlkPlIazt1rjqf5xrpaiU4itXj2ZcjRRxl2e+y2iq8RGNWdE:Z73m0fhprolI+Fji5Dq4itkaxYyQ8ROF","tlshash":"2f23ae978e58cb839229c3e4be074f5d6a253bada44137eb21620edb3e311615dcf06d","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.480102Z","times_seen":82,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/fonts/fa-solid-903.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.781Z","timestamp":1787133727781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/fonts/fa-solid-903.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/fontawesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/fontawesome.min.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.151Z","timestamp":1787133727151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/fontawesome.min.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11840\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65178,"size_decoded":12150,"mime_type":"text/css","magic":"ASCII text","md5":"221cd25e6a44aaee1aa07edc0fc84ed3","sha1":"4b6de98c4e7a63b54659cd0536646acfa06c9cea","sha256":"f3aea27bb9510a49bee45b84a01be9b679febe828ecb4b4064f58fa7fe5825f2","sha512":"b028e0d7e951fdde24b86c0ab947689e53576b3224bf79c7deaef947e1cddffc51fac595f8dc19caccaf50cbd427d55ea0fd1dd786c27998cf579ee3cdd27ff2","ssdeep":"768:gaNPMWLYWeycZ+uOCHDPnwamTWfZrB0i01iQlXYJUo8ELG:gaNPMWLYWg+KHDvZmifZrB0icfIfvq","tlshash":"7c530dbce94f38974398e4c56f41bb846729bbadec904c99d0423d2ee3d06b911c4bd9","first_seen":"2025-12-02T15:46:46.948914Z","last_seen":"2026-08-19T10:02:43.480714Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/icomoon.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.155Z","timestamp":1787133727155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/icomoon.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2151\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14582,"size_decoded":2460,"mime_type":"text/css","magic":"ASCII text","md5":"1445b4ac4829f506d433f876c41d74cc","sha1":"ea160037f5243af87728fcde73c666c5d86b56c3","sha256":"01fbd78dda86c0d28cb4b07c141b5df7b18e3867127555d77bd9c0e9fbeff367","sha512":"45fdf9247268a754fb7dd3c82b511d57b13e0cafe87c7e3d52783e2ca54fe493fd8cf912678bd98fd3dc9da092706ff8381517e1534ebf10a7e3e56be2b9aff8","ssdeep":"192:Qv8JAAYBaPTmPpXC2oTD4WaBvV4t2qCrLk1R:WAYKyXa4WaBVDXWR","tlshash":"8062aae4ddbd18941711e1d162423621ff18a3699d8f6c1af6b3b98cbae3211c5d23ec","first_seen":"2025-12-02T15:46:46.967686Z","last_seen":"2026-08-19T10:02:43.481365Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/appear.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.194Z","timestamp":1787133727194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/appear.min.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 842\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2313,"size_decoded":1078,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a89123932bd2d7e3e240260bfe96120c","sha1":"bcf9554cbabb9c0242884d3a200c63a99800bd35","sha256":"02eddf1f263202182c853b17d5fd475ffa2ebe6deb3e43ccc749b4f2e39a300a","sha512":"c494f876870312be810ba9435ba8be243ecca33190893aa7abd28d0b48ec0a5a48ff7f9eaed858c258e963002a12d54eee29dda6e61d50da79200f37238869ad","ssdeep":"","tlshash":"1341f045f3de2e6a8576606e9d2f62cd112c80376252c8a35cf8cd7c3cd1c6d6267d18","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.482005Z","times_seen":85,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711770378/raqjtfjl6rzcna29b00t.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.229Z","timestamp":1787133727229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711770378/raqjtfjl6rzcna29b00t.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 64956\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64956,"size_decoded":65223,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 550x625, components 3","md5":"22cf75f62769dc0fe0f8624e7bb9c7ab","sha1":"58ac0b803efe0292a0c6410e4d529a974c1e0480","sha256":"2bc878b4cb98d55fc777220648bf1e494a6cda723ae9f7bceb60581548efec17","sha512":"412da005cc5ede94d640814d66fcdaca788dd33194991c89170d0e3d284c4eb7903f7eddc7993e21f37320e2f22535a3caab367529d989166a1ced4fd258e8b5","ssdeep":"1536:MJVXrW3YdhmPnmd/JWJEFFFtDcI0yWaUWCP3pEJUelsQGl:M7XiIdUPk0JE7AI0VXP3aJU2sQu","tlshash":"ec530266c70e0b12a89c8cb6085b55d7f8b6c8fb7b3008764ba84c5c476ee344e5f2d9","first_seen":"2023-07-13T06:19:36Z","last_seen":"2026-08-19T10:02:43.482624Z","times_seen":32,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/fonts/flaticon-6.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.449Z","timestamp":1787133727449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/fonts/flaticon-6.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/flaticon0421.css?7677.778\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":1144,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/nice-select.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.162Z","timestamp":1787133727162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/nice-select.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 967\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3679,"size_decoded":1275,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"198476016a67d558c3383e0a44b70056","sha1":"09e1001a931c3acb753a93c559f311d6cd4e6964","sha256":"cd4859d729bc4ad139a1cdef3816f3baba8005c2c88c04f41655b32900c6e6b3","sha512":"b9c2008dcff5333a29547352936634d495d961bba9333f48e4b7ff95c886646e87a84f9ef75bf3733e95ce9a04a40cfb2441ff75408a5a1dbaa75fbeacb98e80","ssdeep":"","tlshash":"717120399600214a566f877fbfc52f28163fc142793a8d9db1c1ad1f430d1889caab4b","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.483185Z","times_seen":86,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/meanmenu.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.170Z","timestamp":1787133727170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/meanmenu.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 695\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2741,"size_decoded":1003,"mime_type":"text/css","magic":"ASCII text","md5":"1740a0088bf59e6a67b0d2cd11a16d24","sha1":"9e5fddee61507f54093df8762f77c039b34f49ff","sha256":"2cacbe3a4406ee1e6fd52397de39b879aad09a4250b35e1f7cb2791062800414","sha512":"d7221cb4312b67afe49eeae4f49b81af7a8afe3295aa066e5d7333891a48e342ff0b6c66b577c76ad8c63d7560fa716b6d9f81f1e3ffffa56955d95788d88141","ssdeep":"","tlshash":"a1516e55ab771454efad80bce815d3687fe5a08baf0fcde9347cf124c24938510a2ac5","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.483848Z","times_seen":86,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/leaflet%401.6.0/dist/leaflet.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.182Z","timestamp":1787133727182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /leaflet%401.6.0/dist/leaflet.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:51:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3064\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14271,"size_decoded":3373,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"63631621d5048f6c49adb1252593531d","sha1":"a8c5ceb5c40b34a03bdcb45100b683000f7fa6fa","sha256":"89f7c9f3085f5041b80d2ec7c2ec7add9e2a49909f776a34ac523427fb7f14d7","sha512":"4a5e0b32ce5bd68413e831941d8a1e66ad5e5fe78b7e1ef51ad6f21551be51783a029db3b2915bef1d6b854ad72df4a97ada41ccd46108898913f855977c1705","ssdeep":"192:6zzo0Oh9SVx1lvqrC04i11mdsHnLtcOEAY0x4m8yT2O0LnVhRl4d+yEcBLDLatMF:CUjh9SVB2HLtcpAVnTWLnVhzmLDLUK","tlshash":"2c52d113b73a33a8d2257619f7b08a33bd2a506191a7c7fdb9cce714839885d2c531e9","first_seen":"2025-10-27T04:08:01.665047Z","last_seen":"2026-08-19T10:02:43.484337Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/bootstrap.bundle.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.189Z","timestamp":1787133727189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24343\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":99823,"size_decoded":24581,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (603)","md5":"accc68e90928427f24bd2d7dcf694fb4","sha1":"f21e6b4daca0beda81f44763ff2fd9f9a764d1dc","sha256":"7647872cb0d179bd0b15bbfba7451c72fb4677f45be2eb3490af6373ef1ef7a5","sha512":"2ed77eed7e0ca1c59e6bc801279107931c0f9d5dbd552b37932e34d451850ac572bbd22902231fa27554f1a18d3c73b8475851ebed15517f8bb9d9e2e6156935","ssdeep":"1536:/xzakJOcllrRew0myz99T0jybHMkI2IzexYDKdzI3fwHaUZk2KvKbTdkuZ6:Ak4cc6H3fwHaUZk2S0TdfZ6","tlshash":"49a39480f3dc6c77069a605a5c3dc6ceb23da4b26a8640af7d9c64dc252cc7693b5e34","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.485009Z","times_seen":85,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/magnific-popup.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.193Z","timestamp":1787133727193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/magnific-popup.min.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7829\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25728,"size_decoded":8066,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (554)","md5":"bace9bb9a2ce7c23452612247f44b189","sha1":"729145bed0347e07e4155f76421012bbac292037","sha256":"f9aa46780eec101d326195ebe83a421388aad293382b9b7800efe356bde20d41","sha512":"e9fe49eb67722cfc244173b784815da70b60e2fe36d8640d22739d1793d7b1da890bbad52dcc7d3c5b64242d007b8e5b200b2f6f24fb15c021de1a04de3c7774","ssdeep":"384:9eQgmICWqXUGKyfrnegGItCM/ICWIsoKgymsYiLlcRjy17v86LfR+iQZqZFnxqk:sAuA9smshwy1706cZcPqk","tlshash":"fec24390f3ed652b871570998d3faccc213c9533dd518ceb7d9ca0a8a89883986b5d3c","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.485623Z","times_seen":85,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/contact-form-script.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.200Z","timestamp":1787133727200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/contact-form-script.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 528\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1428,"size_decoded":764,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"3cdee96d5b949926d55e0352ac62024e","sha1":"9bc0b3e838809ea4ded94f31b4675bf43a6306a2","sha256":"24f7473ee3f14b378369a68fd03eece19c812fb0386c89b5aa4f5274bcc12de7","sha512":"157d32a82abb5109994c24d78e88a565549df53da11d722f56b5573cde16b329e5e2424c7d87596273fde2cba3f9b2bee35c04ca070956b533ef64fdeec0731c","ssdeep":"","tlshash":"5a211e04fb2c26c4063336b9646c51c9c13c5372c8459c9f1cb4e8e4a9e8e7c3362b39","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.486243Z","times_seen":81,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/fonts/Flaticon-2.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.828Z","timestamp":1787133727828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/fonts/Flaticon-2.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/flaticon0421.css?7677.778\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2457\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":2643,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/owl.carousel.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.196Z","timestamp":1787133727196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12065\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":52612,"size_decoded":12303,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (779)","md5":"37cb00cbc2f85df02f2db2598dc7763c","sha1":"b9cec699db7dd17deee768961c421aa31a7853b2","sha256":"f869844f58fe3bdfff9e772bf8f85783527b696cc53ad7b28b62aeb3e473fd3d","sha512":"45a0b6605ee5e08a1145aef4391482e9bcc7833584172fdff0ec49040cd6f7d3333afbc17351cb86fb4b4fbe9a369b8ea43a81bba5dcbe2cffcad9bba7e98d86","ssdeep":"768:QGewMczbcvMkSUv/8/dNmBok47yBMo/NXdu2wHBAsZWaj3lxcK7x2X35QvY70Ncp:aMk7NX5KNZux6q","tlshash":"74337045f3fc1c2b862a20915d3f868b723c452ec95154ae7daca0dc586c439867efbe","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.486976Z","times_seen":85,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/js/form-validator.min.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.199Z","timestamp":1787133727199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/js/form-validator.min.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2096\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7056,"size_decoded":2333,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (337)","md5":"59e2b93ee896af73058e335d254cacaa","sha1":"12d8595dc70179612e21b269fd3cda37821fbe73","sha256":"5a9710a5086e04bcb491c330c0d0d63f8bb819331543b1e2a5e5b971ced2d5b7","sha512":"07b753b86826209a7257d07650c9c7c16155ee6a7c9ea06ec31f4d1aa4e55120443d1d2334b7351db1327830b5322bdf155f87250ea2af9959048304581589ad","ssdeep":"192:CFMM3U8rF3aFiEIPKXxyCGdV4fohb6SOQvz2cyUH:C24raipSXhGziohb6SPvacyUH","tlshash":"96e14349b7eb05431f5530f5895f82ce727c6b28c58684896ced80e0a8f4ea697f6c3d","first_seen":"2023-10-29T18:26:07Z","last_seen":"2026-08-19T10:02:43.487564Z","times_seen":85,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711769950/kvg0tjo9uxxyjby5ypog.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.221Z","timestamp":1787133727221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711769950/kvg0tjo9uxxyjby5ypog.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 158025\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":158025,"size_decoded":158293,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"abe8b1995d947e534006839195a05a86","sha1":"b9e7f5228db5c20df9cddc1a4bac158e5e609833","sha256":"f12aa8a275c3399f002bd52f881410ee1b7c039792a9651f74737951fdee6219","sha512":"4c0ebc7c5f7d9bfc1346b64a83d031db4a6499badb4df345af43b3b8a3b7cfd70a8ad02967f4320f09a1bddd6b41aa85c7848499c82526f8c6b15a4835aeb5b3","ssdeep":"3072:QI+y38QzYpdx+LgNjC7vM6EiyXgvdRca5VTm24m2jrE7SaxBsrY7:l+y389r4kO0ydRfVD4m2YSUo4","tlshash":"8ef302afabd3c023f50b85709692a98e785f010595e321b0661e9e7ff62c51e0cdfc69","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.488123Z","times_seen":61,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/fonts/fa-solid-901.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.450Z","timestamp":1787133727450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/fonts/fa-solid-901.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/fontawesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2457\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2457,"size_decoded":2643,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.12.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.721Z","timestamp":1787133727721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 02:04:42 GMT","end":"Wed, 23 Sep 2026 03:04:28 GMT"},"fingerprint":{"sha1":"7E:41:C7:FB:AD:E5:FE:5D:B3:02:94:54:88:D4:EE:DD:EA:46:BC:9C","sha256":"0F:62:03:25:71:9E:01:C5:E5:A6:FD:62:89:4B:D6:28:CC:04:66:24:A5:08:2F:E1:17:68:AA:E7:51:AA:E9:A3"}}},"request":{"raw":"GET /flags/svg/en.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Fri, 30 Jul 2027 09:47:29 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDufDUQmHCl0EKNtX2s4HolqdKmW%2BmU1Hxpkm2A5tsFrJ1%2FE%2F2w2%2FtVRaEjbpYmm0Ilf%2FBBE6iI3ws7Bc6UpGjeeLNcO8DBmiiCWHmnpJXyK8cb3Zy8Rl5jkklATx%2FGvZ%2BpMjQ%3D%3D\"}]}\r\nage: 1728878\r\ncf-cache-status: HIT\r\netag: W/\"639d0089-35e\"\r\ncontent-encoding: br\r\ncf-ray: a2d852265e165695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":1182,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-08-19T13:23:31.199653Z","times_seen":14088,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":14,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/owl.carousel.min.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.166Z","timestamp":1787133727166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1001\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3811,"size_decoded":1310,"mime_type":"text/css","magic":"ASCII text","md5":"2520ca6d179533cd79c95c196e87d692","sha1":"1c9bafeef4ea702461a91173460866a1ced3eb62","sha256":"5c2448bc9346907e577afebe448018ceb68664a8ca0f7892c94ce06bb157427b","sha512":"89840709e8b50b9f774c1b43bcaa2e4c426721d52af462e657f7bb16a0064ea35ffb69a4ea9f3dbca341eb24933f8c4b3d753709b51cf3e539b73cfc7b7072d7","ssdeep":"","tlshash":"3171ace03429290e690e93551dad4f36683ec891dc1a0c5a91f75b2b53cdeac111ff5f","first_seen":"2023-10-30T23:34:35Z","last_seen":"2026-08-19T10:02:43.48944Z","times_seen":61,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/animate.min.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.149Z","timestamp":1787133727149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/animate.min.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5168\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84257,"size_decoded":5477,"mime_type":"text/css","magic":"ASCII text","md5":"5a953cbc66af62006fc0dcd02722fb3d","sha1":"11afc7ebce64a56e7dcb86fc2e19f385470d4589","sha256":"b5fddaa5155e11841008061d15635fb5f1ac3429e09ad3f84821c78b6c883cdd","sha512":"ebb7e365f6c8f55c21ddd3857e4d0bbe35ae34c33c7539140bff205adf1c33bab9e808426a833bd7d7d00090cc0001639768d00704a9dd5b22298218cd9eed27","ssdeep":"1536:/B9y7E8KaHvx86ukSdBzUtmuxJxNxyxdkDIjPpVxOx5xJx3q:0xJxNxyxJxOx5xJxa","tlshash":"ac8306999b90558857320d268bcd4f684a3cb9b358365cef73821c4fdf46b9823ca71b","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.490046Z","times_seen":86,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/magnific-popup.min.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.157Z","timestamp":1787133727157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/magnific-popup.min.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1517\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6299,"size_decoded":1826,"mime_type":"text/css","magic":"ASCII text","md5":"d12e7e0e3c3f1b6b074a8a0e6e3c38d4","sha1":"4618f248033b36629f85f50c0003b120e9fcfb39","sha256":"a639f402312c82206ed20cc453c06cceeeb127b1513c214ba1ae18960935e502","sha512":"5a2fb71bf5af7da9f9898bbfd64438d54a2dac851aa51502e299a4723f647073e314d119898bc9c3fc11ff9a6f6347f019cd9c6f0c121e9cd52d4f0b50024f43","ssdeep":"96:oR4nQ9lcMeAlOnLuondg1VvCblWjRsDxZtQ1gZIW+Du8cGqGJoW5T0:oteAlOnLtdqvm7VPYJcGqGJoW5T0","tlshash":"c8d111667b103b49c11dd599ee976b24870b1093ef0b8cababd2385cd3cd5c502b36c9","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.490674Z","times_seen":86,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/app-assets/custom-install-btn.js","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.203Z","timestamp":1787133727203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /app-assets/custom-install-btn.js HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nlast-modified: Tue, 04 Aug 2026 07:50:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 672\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1822,"size_decoded":908,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (437)","md5":"905c1e0d67aa8735b9c0e387384d8313","sha1":"ecc3ac017ae7438e837a79fe69bba4e7eab3c12a","sha256":"9ca4d7623540a3d455bf0b802fe9beea552f7762dca4da48e0d6dbfcc314d662","sha512":"719e5e4dbb17629d56cb4843be4b9b7dba32eb677cec61ef6f72eea753ee1a76a6f8a1408e8506590692372e4391aa739f92e391b21e9f4e3f4fd470813c949d","ssdeep":"","tlshash":"7b3120b1947008374ebb1dee72ab8b0d39a240168b67804646bd00c08bd6d22e8567ee","first_seen":"2025-05-13T11:19:07.474357Z","last_seen":"2026-08-19T10:02:43.491293Z","times_seen":14,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/css/slick.min.css","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.164Z","timestamp":1787133727164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/css/slick.min.css HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 744\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2028,"size_decoded":1052,"mime_type":"text/css","magic":"ASCII text","md5":"574dd3176bcebc3db2e22474e6b19352","sha1":"b0304a36f5ad2dc8945fbe0edf3c954ebf4822b5","sha256":"0a31f9976e1d1de4f02694468a08a9eb234dab486c62ba49d961f39da2b50f24","sha512":"d67c9c4b4094d0aed77a34245caa7aad956a1b76adca76dbcf99c167947ff0a8205a2801f719002372ff652b01e2406331e607c2af60c80967ab29b7f1ffbd60","ssdeep":"","tlshash":"1841208816119d49892bc0de6dd787546eebf0520e360ceb7a0d0b19e38fac839c6693","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.491954Z","times_seen":86,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/img/icons/security-now.png","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.227Z","timestamp":1787133727227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/img/icons/security-now.png HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16821\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16821,"size_decoded":17087,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 16-bit gray+alpha, non-interlaced","md5":"261872089afececec2d564e286696f4a","sha1":"3fb9cf1db8defe535ee826223b179949f08a710c","sha256":"8a831d42e66f5a3b02e86cd71eea7772a4a93579cd8368f20b0dd16edcd2e214","sha512":"16741d599f1b87f394e7de7d6593cc463f1533c7c3271b75a466039f13a16750306a9403689b6a0b6ce10ca36f6fa88206430c4b9423e2c42d817fb7ef715fc8","ssdeep":"384:mb9kOcyref4Lw3gqv8WLVms1coJjTLyHvWHbC:mqOJrefVn3v1coNCPW7C","tlshash":"af72af4ecc094595cc6c34abd17e11dbbbea17ebc00187c06914d87aea8aa74ef75c6c","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.492526Z","times_seen":90,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/dclkivjbm/image/upload/v1711769994/bblvkzl5uqt2dhdehg29.jpg","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.230Z","timestamp":1787133727230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /dclkivjbm/image/upload/v1711769994/bblvkzl5uqt2dhdehg29.jpg HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 26 Aug 2026 10:02:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 04 Aug 2026 07:51:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 318571\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":318571,"size_decoded":318839,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, description=Smiling businessman with paper talking to his colleague at meeting , manufacturer=Canon, model=Canon EOS 5D Mark III, orientation=upper-left], baseline, precision 8, 1732x1155, components 3","md5":"15849c1b631c332913cfa8aecd4dafa8","sha1":"50857498e69466fdaff5729da738d9768d661d95","sha256":"99ee7af2078e5acf2c0663c296f515299dff22fe5d1a89cd0f5c15a15e43a3fc","sha512":"58816f1d298ab292597eeb3d55dbb1c37f8c62dbddee6045143d75c34a2331968ca818d4960048d4a01617df226e9bb5cf066241525e9a64d1ffdeb2306c7876","ssdeep":"6144:OrULkbLMFxtYpWN4FegNgKbo3tbMz47hZrkZjnlFyEoMISMSc+Ye:KKkfM/CcN3fKkS0VpsnlFyELs7+f","tlshash":"78641380ec706a62d095d33a58d397ce47e321b5ed5f690bb8088e8b623d4358de725f","first_seen":"2023-10-29T18:26:08Z","last_seen":"2026-08-19T10:02:43.493236Z","times_seen":84,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"werdmountbank.com/assets/fonts/fa-solid-902.html","fqdn":"werdmountbank.com","domain":"werdmountbank.com","tld":"com"},"ip":{"addr":"51.68.225.90","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://werdmountbank.com/","date":"2026-08-19T10:02:07.734Z","timestamp":1787133727734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"werdmountbank.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 05:49:01 GMT","end":"Wed, 04 Nov 2026 05:49:00 GMT"},"fingerprint":{"sha1":"D2:5F:07:17:D7:DA:44:A3:22:63:27:0F:8B:00:8C:BF:40:C7:F7:12","sha256":"98:6E:39:AA:FE:14:0F:07:02:F0:46:B4:5E:DB:81:49:78:EF:17:2B:50:77:D6:A2:9F:6D:33:72:3E:C0:34:29"}}},"request":{"raw":"GET /assets/fonts/fa-solid-902.html HTTP/1.1\r\nHost: werdmountbank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://werdmountbank.com/assets/css/fontawesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Tue, 04 Aug 2026 07:50:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2457\r\ndate: Wed, 19 Aug 2026 10:02:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":2457,"size_decoded":2643,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (355)","md5":"e53fdf76753edcd8773ab17ae968bfd6","sha1":"4bea38cd83442080bdf51cd1db206715f9198955","sha256":"3d70ce95eb1eb78620cc57fe1a6a479e6f2d70508bf813238e573863df000d6e","sha512":"f168878f0d1047ce3775a511ee5cffed3afc7a47081304b4c884b6099dace99a17e473b727f5afcc87b0e0c1df461439f821b2dbcf341f94b9c206e8487c7888","ssdeep":"","tlshash":"7a51c79e54f641012713c3917af6b2089d91018bf7daad40b87e856c9fc8f56c8a3bdc","first_seen":"2023-03-07T12:06:23Z","last_seen":"2026-08-19T10:02:43.454876Z","times_seen":7061,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"werdmountbank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}