{"report_id":"c5684ec2-2977-4a4b-bc89-d0ba97666950","version":6,"status":"done","tags":[],"date":"2025-09-07T19:34:45Z","url":{"schema":"http","addr":"cblbnk.click","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cblbnk.click/","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"title":"cblbnk"},"submit":{"url":{"schema":"http","addr":"cblbnk.click","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-12T19:34:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":2,"received_data":97384,"sent_data":1044,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2025-09-04T16:21:55.189783Z","alert_count":0,"request_count":2,"received_data":20894,"sent_data":868,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cblbnk.click","ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":87,"request_count":87,"received_data":1747480,"sent_data":103141,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]},{"fqdn":"app.chaport.com","ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":87646,"first_seen":"2015-08-24T06:07:03Z","last_seen":"2025-09-06T14:09:24.666521Z","alert_count":0,"request_count":6,"received_data":8963,"sent_data":3014,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-03T15:11:16.573868Z","alert_count":0,"request_count":11,"received_data":477577,"sent_data":5948,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets.chaport.com","ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":504466,"first_seen":"2024-01-31T17:02:32Z","last_seen":"2025-09-05T05:40:31.865307Z","alert_count":0,"request_count":5,"received_data":640470,"sent_data":2325,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/wow.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed4b12ef0f7e4bf5d5ff3555d18718cb","sha1":"258fa26dec8fcf4769d49eaca6712ef56923673e","sha256":"3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461","sha512":"40d8f96697d393a5301d2960394cbea52ea64330a8b706a0982e9b17176bfc0d55394dd4f0fbea2cd1798c938e66ccccc671d803b2802f8b37c2c41f40c1200a","ssdeep":"96:xrZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:xry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"17f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","size":8183,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-08-07T18:26:19.048614Z","times_seen":2447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/main.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47bc986391ae43304be7544164cf022d","sha1":"e42afdb45a95bee3a021a79a24bb0357f84b62b8","sha256":"f7f7c12c779f4100a67c0a9c853a1f4a534183c36746df58d358bb5d02e548f8","sha512":"95d746af3aa95c33c01f8ad9e80ba17b7390bae9c4df4c0d2d85762bb84ac18604bfe07eab20d2106486a7a1b26e83c621d84b1d3b7fa0a064ce6d94be6f483b","ssdeep":"96:705I1XuiMlvMsW638DBpUtr+LIZDu7dQzqvcr8r:705I1Xx0tuIZDTA","tlshash":"15c17344714c143dc5fb32a4d139d5098f7d6111e203b2f5f8fe00ac1b686aeb6ba99e","size":5916,"data":"","first_seen":"2024-08-29T17:20:29.828451Z","last_seen":"2026-08-06T12:07:35.293826Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","size":998,"data":"","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-08-07T21:52:50.271434Z","times_seen":1846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/nice-select.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab62d8a15524602c06b356ae74eea55c","sha1":"ae602ab104a3f8008fbcfd7967cb302dd0681e20","sha256":"cd204d095086d67e207e13bae8ceb3de8759eb9eedcd4080809c929dc7af1065","sha512":"d4798aa79f38cf35ae416780c5d8daf9333ec29440c55d6d9c164aef67cbea21984ee309b756c09628bcf69c52ed29fe5b56ac44b31cccbb78b223ae06c43f95","ssdeep":"","tlshash":"60511114b10512f648ff24d37911b147a075493dc42ac14aa97e86b21dfec02aab6d5f","size":2937,"data":"","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-06T12:07:35.236692Z","times_seen":422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/meanmenu.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f92bd7e01c33f6a2bd73c5a2833b4874","sha1":"39533bc5c1e8128008023565e03830e00ce17808","sha256":"0927e12f94a642d9bbf07b4204102848162eeecadc02d002ace6fe334315b832","sha512":"e8a7d2768621e01fdf3e45eb187437f7c452f6fafd1d0a48add3844c7d16858ebadaa17f7b7272625f99b8a3f1f4426fab861d62cf1c0656bcca6617a12b344b","ssdeep":"96:cqHVT5bG+ESTXybNrNnaToz99MClbxXvY+CSoGZn7c6BFSEXT:zVT519XyJnl1BCSlZnl9XT","tlshash":"bfc1dd2bb5b044f8a0bb7a61b97af230f4f3660bf146d50131bd64262f31d6015a2fe9","size":6035,"data":"","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-06T12:07:35.257582Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78085,"data":"","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-08-07T22:17:15.786818Z","times_seen":3079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/slick.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cca96dece8c053d46dfa20101388d2d3","sha1":"2c14e299764bcea9dc875e1f2e1a86afc7bc3fcf","sha256":"db5a2153f69965283f3d434959ffbee8dc61514e524fb871c6faac56a1b6f742","sha512":"a2ef71e1187f1aced8be072976d59cd360a4015fabdb3a2bc55d56df4fa06eff59e24aff355dcbf1cea7efe8c49cd3cf760152c40283803f6f08e97c88307815","ssdeep":"768:MjL0ySLGPzYbHpJIkdSAeFr8qGAOxCt/QXlGLAcB68Kmb:UrPzYbVxCt/fB6ri","tlshash":"4033b409a210172658e725f5305bc54c73ffe6ba9a01c1d878e683ca24dd1059fdfbea","size":50674,"data":"","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-06T19:22:49.40983Z","times_seen":528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/magnific-popup.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-08T03:06:37.896971Z","times_seen":24729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-0a0112d5cc0c8f46d0a39a93cab10d6c.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89f95c5b7d8f622114ff322c607be339","sha1":"85c0a53e64ab04b25fbf4bbba628d720e010c2ea","sha256":"9377ca44c0f9d682dc27076dc631c0ccc72f8c7a1a09c88520bbafc2bbe2f0c1","sha512":"75faaaba6d137b37ac454e5bd107ec88b0b542fd9c76b25ef798110cba644f3b2d63003aa87b8937eb86be191ad35919d0041312616b4c8368a55ebf066a3266","ssdeep":"1536:a6Vmkhh1GDhO+otuzsk546w0NwOdCj/KZwwvHv46XkHBKC1vtw0:ZQcjBk5rnXuxtl","tlshash":"6c832a897040343b0aeb21b6357f310a223fd2696a495460b53ad7d07e7ae5f621bf7c","size":83450,"data":"","first_seen":"2025-08-29T01:35:44.67508Z","last_seen":"2025-10-03T04:18:37.528475Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=68aca082fe1c295f057c4d0e","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dacc565c9946b1eb6b5c2a7ec373b25a","sha1":"131cf1ed0d8326aea2ce827d16635706231dcd1f","sha256":"f3bfc7e7a286ac79de40d1f37133a98e7c1891e8b4d107e11b752a851047285d","sha512":"3161377489ec5c2b2d6c5cf81c297d89f8237bd4d147c9ddeb63af7abccdd7c04505da07a6447e421e0a847a49653838d951e4c3abae31e706f821fe66533572","ssdeep":"","tlshash":"07e02284d2654e190b3026b2380f0bca70bb83670b54d5b8b434db24607adc244298bb","size":383,"data":"","first_seen":"2025-09-07T19:34:52.164299Z","last_seen":"2025-09-07T19:34:52.164299Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/jquery.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-08-07T23:26:48.173306Z","times_seen":10782,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/form-validator.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5cae60d0a59205f9c82928fb16ca1a6","sha1":"c03a6517da694e1ba5aa6b9dc6a647bd119b819a","sha256":"60c23945490cba413f3d6cf2cc57d5c560faeb0cf68ab38daedc80939966b108","sha512":"c43f6e446c89df6fc82c5cecd3b5727bcc226c2826f9ec8e0ac88925ade0bffc212d92759b6c8117d31fa6b032feffe91cb2519318320a16bca2e07d9cd29043","ssdeep":"96:H1MWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:H1MW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c4c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","size":6063,"data":"","first_seen":"2023-03-08T00:47:54Z","last_seen":"2026-08-06T19:22:49.399864Z","times_seen":889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/contact-form-script.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dc6989850222aee1a68cc132426f035","sha1":"f6a762662c4df511e97df3f0dd730b64aa31cd9d","sha256":"bbe7b53d11fee22a044cff9a34d37fe623ad369becd7a442e3b4f268e5d603d3","sha512":"2d2152378e98221bdf87e05c0d5fb7a97a69a335f565e5ea260dbf893d3bdb4237740a3577b6b3061759c9870b96dd0c875303c8bdb39547b6ac4f7dadc33fd7","ssdeep":"","tlshash":"5741bd08651927c40a333b7de69a9104df611363c505eb553caca9d46fb8f9831a1fbd","size":2144,"data":"","first_seen":"2023-03-10T17:30:02Z","last_seen":"2026-08-06T12:07:35.293256Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/odometer.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","size":10264,"data":"","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-08-07T22:17:15.823239Z","times_seen":3295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/parallax.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a9a9442f70e0807475a21b835dce50b","sha1":"7b4755ab79dcfbe1aecb13823f78997061fd1b8f","sha256":"fde3fba1a1c3dbae530a58d3a542369cef2e0000685cb299a265e721056d4201","sha512":"20a1dd28d273d407d096be59beb4a92c260791d1cf16019cde84651f22fd69f9a62950dae7addb5f807452a32afaa02b406d72f5d79d43d8caa9716960919cb2","ssdeep":"192:t0PtdiPwbyxVZ8343NiOAZSUa89Fr15FZxY8wb84FxDco+W4+D:t0uPwGLsgNiOAZSIp15FZ68wbZWWl","tlshash":"3d52a8453ae6111502ff73ad609f57087528a232c52ace1f7c3dc2d8a580b8953bb779","size":13302,"data":"","first_seen":"2024-08-29T17:20:29.824917Z","last_seen":"2026-08-06T12:07:35.244493Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/owl.carousel.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efc01f2aded8e7b272ab9f9e1b3ecdb0","sha1":"eef21a57c46361f05c28d0d7b97fdc6530185c17","sha256":"668bfb67cff6b815ff9f9b82e070d4ad8721414bca6f3de21f10fb9f3e5dfa32","sha512":"20e04e83be2dbab7ec9972ac31ba5372fa53d62d046220f93e348c47f1840b636d54d8ca380eb36e7f7445123eec24e1d435fb61928eea259ccf912c5c3e8b08","ssdeep":"768:FCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSRc7UuHjRUQuFBt33:MITMFC4dbMVRSRcgRDV","tlshash":"cf137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7d88c213ffbc","size":44350,"data":"","first_seen":"2023-03-08T07:37:20Z","last_seen":"2026-08-06T12:07:35.237616Z","times_seen":832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d36a44f37f875a535eb8ffaaeaf3ba34","sha1":"2ee474a004a3703481b6aed6bd022205884a72ac","sha256":"f6782a2413739942ae703472e0fa4bfc5d19b1d3bd9b1335f3a480c97814a8b8","sha512":"d354adf5174fae987a962e8bc33a6d63f96a9baa747d4c665dd4f5340e92b2ab675d05d75507b050731871dd0f3c3e8a3da6b747f2b09fe7d20bee1d9062a597","ssdeep":"","tlshash":"55b0120c5034b4bc121e101c9f833981903d40e841202d18f2c405160f41406030c141","size":94,"data":"","first_seen":"2024-06-29T23:19:03Z","last_seen":"2026-08-07T05:09:44.611897Z","times_seen":815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13af5ac197318e8637b0cb8d8703f87e","sha1":"ab65a310d024cd3e1fe67c92b84ece978df8629f","sha256":"93815cff917db7649619204c1a23adfd89b81683765e222cbef1c0819c609ba8","sha512":"909eaf3dd709414af20f0b5ac732ed15d57f9a0893d0d4956ed6ef8320f48856f777d357073c7419afef8e40e6b411da8cb0066c7a0a089516eb24559b9f8a10","ssdeep":"","tlshash":"b8e08c0bb071114b0087f009d38a08883134810b01390d28368c608a3fb3f8c038e6ac","size":314,"data":"","first_seen":"2023-09-27T02:53:16Z","last_seen":"2026-05-30T15:42:11.14661Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"59e3a2b7021850a08901daea7b6da322","sha1":"5b2306325c4e83c4f57da1a13b5f49b1daff1e16","sha256":"1c260dc8c6f1a21bf50decd40662b1e0a855a20ca7597df36856c9dd3fb7ce45","sha512":"676c4f7fca968068c69b29de2778c341e9e62d4f0565cddd1d2c5c9b47c5d9c63367b2ab20517d396ed7af1a4ff5eaf717ad40479f6f7374e6ae0a587c0f8ced","ssdeep":"","tlshash":"13f05c9e7c01203729963038a3abca08766fe25812459704849ddd497d669ee8c1995d","size":460,"data":"","first_seen":"2025-09-07T19:34:52.221015Z","last_seen":"2025-09-07T19:34:52.221015Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/popup.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25a53a5f0b8958bcf0942c535cba547d","sha1":"28656ad320afc16783fb4a48ce915e6eebfa01c2","sha256":"c9e18491ace8de422d23023f38a03ca17ab1657d70a5e1a00d4412abdb032bbd","sha512":"6dd60607ec8c9e8792d0472c7c7b49d8d0b68e34748d006ce617be7d8d738994e958ae0c512976edf0aceb5ab2d9f633f1fbd24d16925736296a37908d28ebac","ssdeep":"384:AzCKMPZATN09o0mtEMDXYddj517IHVxBCZlXbt/dDscc:AVMhAh060sEMDXYbZvdq","tlshash":"5882f95a11b3103e5a171129efff2b0c60ba42978101fc21bf9ddd825fc1a9d96a7bd8","size":18677,"data":"","first_seen":"2024-12-19T06:49:00.441223Z","last_seen":"2026-05-08T05:39:26.295827Z","times_seen":1910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/javascripts/audio-player.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"076cf263c717d8b21206ec2c36531688","sha1":"92d703f27b95e1e05168048a8b4569855e6d1b18","sha256":"0b0147bc856235e57f9cebd05d4eea6536efdd423f062d22dc6455160f59f794","sha512":"2d612d9a000c33454a0ddb6961374557b6a64b260c4816cce509ee6ab638b01a8554ddbc2f850eb06b0989d38ef22b2313cb9389cd795f2ac3b7c185f39965ce","ssdeep":"384:hrt6nqLIf40nECIgPG8OrYleIoARnq0KaHvWvqTGDBnLbcfSXBg:swXkPGdg7HnqhSTGlnLbcqRg","tlshash":"ddc22c48b7e17d14435e34b3263f4a063bb51652545a3240f016c2f5bf78e8b91beead","size":27158,"data":"","first_seen":"2024-02-01T00:35:59Z","last_seen":"2025-09-08T10:53:42.292486Z","times_seen":331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/dark-style.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/dark-style.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2558\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38764,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1191)","md5":"8c1ac4fa64c95a86f75e12ed2d732159","sha1":"7ebcbde56a39fae94bb808f1fdae5c0fa6348539","sha256":"193fd9dfc7b3b076646a4efbf74285486c93cc56f7b1f48ab083ff11400ecee6","sha512":"c3931898c92663a481cb0dc0fa8f2386288bcdd96ce0fb96198c872a64c7c9baf576efe6594b2510c2a2a6fcfe2c4b08c50c09fa24c1e7de50d3767447643a81","ssdeep":"768:JHYmOwoL86Kn4GurcaqHYmOL86Kn4GurcaqI0oUIvkxvXpBANLbERP3gtr7kxvX7:JHYmOwoL86Kn4GurcaqHYmOL86Kn4GuU","tlshash":"0e03168599fbad5015d3041c79c8ce601ffa62d0572cf3bf793781acaa8660c12baf59","first_seen":"2025-03-07T12:16:50.258205Z","last_seen":"2026-08-06T12:07:35.274595Z","times_seen":150,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/mobile-app2.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/mobile-app2.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35393\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 315 x 507, 8-bit colormap, non-interlaced","md5":"e26bba463d260e078ac8629c81b0880d","sha1":"b1193b6a599af24e147823b8937032c7f58945aa","sha256":"00b9f3ded7bd55a409b41a1d92ee4cd67bf765a665442de53065675ca575e0fa","sha512":"4ed8eccac70c37f73e12010bda61dfed74d842e51c5c660648388ee085dc796e7768117c9049d1e076bfc913331ee2aaa29ae68422816e189a360121c00ce2d1","ssdeep":"768:lyvgW+RPOTm9mw/xJme5brdAK2v1TD6HnZ1CxYBaax+kV4RXXrWS:QKS6/GeJdC21CxYBVSV","tlshash":"bdf2f2c702291c89307d7eebb3e73760252a9a8c5de29de010b383d1ee155a834592e7","first_seen":"2024-08-29T11:46:34Z","last_seen":"2026-08-06T12:07:35.29537Z","times_seen":167,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/bg_lines.svg","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/bg_lines.svg HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/temp/custom/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:24 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2288\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90806,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"984e1e032dbd79fbee1b7f843baab104","sha1":"473e35355a71f5b4f108a42dbd6252b00c21aad8","sha256":"ac01c8673aa98f5073107c1767d90bda44e98fcfbe5991d9303b1179410cb291","sha512":"c929ad27ef7fc846fcf033cdf57f860c67000d07b3619f7b96e18ccaee4899d3f16d4aa11774161c198e3101ea2b5d137bcc4c032e592435518e90c5052c98e4","ssdeep":"96:Md9DJ55jYp3xCp7k655jQIU+vpeJj5TghCnuj5MjtmL6FfkEu4srm29noD7Oj55A:wEp3xCpgwU+tCnBmL6Fmnc72e2Bc","tlshash":"5293409fabd4df1815ca81f70c30a0fc19dd2eef84b3736d6a21cd1295442a94a58dbe","first_seen":"2023-06-04T22:57:06Z","last_seen":"2026-08-04T06:15:24.204144Z","times_seen":182,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/accounts/68aca082fe1c295f057c4d0e/init?id=369b8b8e-a993-4374-85b0-b4700e988441\u0026token=FGWw3rXIKKyLW4Tmeh9ouYVvZamsh9bRViCVtlplg","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:25.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"GET /api/public/v1/accounts/68aca082fe1c295f057c4d0e/init?id=369b8b8e-a993-4374-85b0-b4700e988441\u0026token=FGWw3rXIKKyLW4Tmeh9ouYVvZamsh9bRViCVtlplg HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cblbnk.click\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\netag: W/\"36c-+Ut6QUDweDPCsIYBybzNZ1EblWs\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIXGVioD%2BQTysjCEamG5ysIy%2F3ORk%2FbxcA4HzpZH9hU%2FC1eeWwM1%2FBR0673yAtLN7WdY6KZtfnTKjappJvb%2FDGNki2op2ZWd65dhtg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97b8a4babcd0b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":876,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0be5ce7de6e26622d0587a62869b1d5b","sha1":"f94b7a4140f07833c2b08601c9bccd67511b956b","sha256":"ec6bcb3c49904788eab9d6d0036930ef31e988c435d22338378ca1aa111a98a1","sha512":"6ff67569eac0e661f85bcecac6845e73923350015334d46aaaaadeba0a58ac5a861a5a54ec66962612e1560c1d1c3432968693bfe669f6b3a77f2aa87c1b058d","ssdeep":"","tlshash":"40111299b6195d3bafd162a660c37f835bad403283489c7ac0ecef38435f5c4150e9a3","first_seen":"2025-09-07T19:34:52.11356Z","last_seen":"2025-09-07T19:34:52.11356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/owl.carousel.min.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.carousel.min.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 912\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3186), with CRLF line terminators","md5":"f999392859d1b921f83a84adb77be572","sha1":"1cd09814267e2033eab27dac1a594e80e647c212","sha256":"4c04da57afb7c99fe3485be1e8a53273116dfd3043a504f94222a89aea345136","sha512":"ad5bf8feb977b794d2dc5d18f69e9d55ac84549b2ad3f0e71be46dd2e1f9b1b72c4b037acb7c311d41bb2a8d18ecc470c5f55e505cb6fc93d9336aea77b84dde","ssdeep":"","tlshash":"e761cbe5314a225f480f831219d81e86393dcc52d8660a8a92bbd31447dae6d213ffcf","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-07T12:02:15.542755Z","times_seen":572,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover11.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover11.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3006\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 101 x 30, 8-bit/color RGBA, non-interlaced","md5":"89e904570f279708e53ead0ae6fd4976","sha1":"855c14421ba86730032408c38b41907af959ce0c","sha256":"f8debbf96b4f64dd16dbd7bf7bba5076991fe7687d31d5c1e20fdcb0784e2b1a","sha512":"c4502d9fd80c428975c671ee84d5da95d8b9c77dd4ba27e4a4aa42000761162a3baf7e5014bddf53fe343690ea5af398bee91d6aa36617b5855624c19ab3021e","ssdeep":"","tlshash":"2c513ab5bb60a45e40aa2f22283d2a3b19c5ff8455d3ad9c60d79dba40c4808e6afc50","first_seen":"2024-08-29T17:20:29.865561Z","last_seen":"2026-08-04T06:15:24.145471Z","times_seen":103,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover13.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover13.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1977\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 26, 8-bit gray+alpha, non-interlaced","md5":"4e772b01a3f0d2b344fd926b83b14c1d","sha1":"a50bba25cdb370fb5292eef8ca1f42ef9f7f99a9","sha256":"8f1416e6aa9fac3a87b025f067ceaca881b036de7dc56fc69a95ce75a5c64333","sha512":"c6c1bf6d4ac73179d4cef49eb34c1c01b594a06df1540f7b497e747fbf7fc4fa57a2610d2b3e7973ded00cd086398f2dfc1c597b82d3d5abd98e91bfcae7f962","ssdeep":"","tlshash":"90414aa452ff0ba850081724993acf42fd30f4a390a29e2a68da90426e9f131f5c3908","first_seen":"2024-08-29T17:20:29.869786Z","last_seen":"2026-08-04T06:15:24.18824Z","times_seen":103,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v36/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/raleway/v36/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:58:59 GMT\r\nexpires: Fri, 04 Sep 2026 09:58:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 17:00:51 GMT\r\ncontent-type: font/woff2\r\nage: 293725\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-08T02:55:10.999396Z","times_seen":63198,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":151,"dns":1,"connect":23,"send":0,"wait":8,"receive":3,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-3.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-3.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1369\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 114 x 22, 8-bit gray+alpha, non-interlaced","md5":"e3dd3b08b94057617edc3eae067e1352","sha1":"228c71ddeeba354e2fb5d9e44c63b788efff400e","sha256":"8b8db48734cb98e99ae3c1267f3ca4c4570f50a0d6f1eb2ecad46fe6cd453c77","sha512":"08ce4a37d11292d8c6567928d0aaa7caeaf5e9477f262128d9bf5742639101942e270fd4eaeb231235b235b475469d904e6575fac8b6e18f7795f31f899debda","ssdeep":"","tlshash":"7321068f9a1aef81d152d037f06993b5c9900a8be132056dc47c2a0c22767c0c5dcb39","first_seen":"2024-08-29T17:20:29.843381Z","last_seen":"2026-08-06T12:07:35.251182Z","times_seen":125,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-2.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-2.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1236\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 29, 8-bit gray+alpha, non-interlaced","md5":"69b9119147b6f9dec48186e35d9ce627","sha1":"9374da481d2d8edcc050dc4161d91a33ff8788fb","sha256":"efb6c876499145626d0b61553231ac8a7a739d6f6f3858525d86b3fddd981a69","sha512":"19df4d5ffa9666e8f73a484686ad70128a2db63aa3cfbbfa7219b7d4db06a3bed5b8530f26c67c7314686afcea49bdb093ac869e8773b306719009d98efd0ba2","ssdeep":"","tlshash":"06211a8b71f548e9ac837685b135741abe81a0c1b812d79e036ec5f10fcd24c0f9e143","first_seen":"2024-08-29T17:20:29.841148Z","last_seen":"2026-08-06T12:07:35.262749Z","times_seen":125,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-17.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-17.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1586\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 106 x 27, 8-bit gray+alpha, non-interlaced","md5":"40150968b5a49ee6f5507443e2cdd3fc","sha1":"466ecbcbdbb574ad96a7fc3b12b2e91ec72e178e","sha256":"24c751c57d48f1387794f08643fcc00ca8f893429fc5b12f288bd4fe78b7eff8","sha512":"5d717f09876c22770fa2395238c129585c5702c968d963a38fab001eab81920b702edcfb562b9725f8f2cfe32ece187ce748065004ede4123758ced74145af2b","ssdeep":"","tlshash":"36312aa540291a8d0aafaf00d080c3d18bed7b3f224cb324c231b86ba587e2249a1718","first_seen":"2024-08-29T17:20:29.875445Z","last_seen":"2026-08-06T12:07:35.22972Z","times_seen":125,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-07T19:34:22.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; expires=Sun, 30-Nov-2025 03:34:23 GMT; Max-Age=7200000; path=/; samesite=lax; secure\nremedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D; expires=Sun, 30-Nov-2025 03:34:23 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 5530\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34138,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (378), with CRLF line terminators","md5":"159ef34d8cf111ba5c573b8149cb6549","sha1":"cfb2e84eba54145cb9cdbc44ac23fb3ea5103be9","sha256":"22bd2e819bcb53cb84550a6eaeab0d1232b4659d39c2171d3f513299f6a26fbc","sha512":"264dc3b14491aca0937564706a3e58fbf6b59e3e10d652968954d955c8b9fd94fdad0d3ad9eee907fde4c133c9d0cba588453584923400e79b6f271b5f66cb9b","ssdeep":"192:qx1QnsFzXZ7hUrTYetcai8QMUNIZizmMOQwhl4nldeTW9fAN2Vv7iLNZbvmuQa:cQnsFL4vBtcaQuMwwiW9fosDiJZbvmuX","tlshash":"70e2bb1554d3113705b394a0a9352b8dff928243dbae86593afc2b877ff6d08ce1b924","first_seen":"2025-09-07T19:34:52.129161Z","last_seen":"2025-09-07T19:34:52.129161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":358,"dns":153,"connect":97,"send":0,"wait":220,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/mobile-app1.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/mobile-app1.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 34784\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 379 x 516, 8-bit colormap, non-interlaced","md5":"699b168204a76ad1e27c5f4143ad1fba","sha1":"72c7b5eeb71c55ac41c695398869ad037d9973a9","sha256":"35e92b0810c69325db809fc3b87efe340a6701156e2c8ba28a7107b591b4204c","sha512":"40f01539416852d5ae43e6cb8f8f9b252deba45c7cfe3b1741780ddf8381b4beb571dd945df74ad6c5df92b2fa4c3ecb2350e9c994b352a82699c4b60babc2c6","ssdeep":"768:n9jREbqf7qd/qd07jKufx3++WK5ENO9bvwGc8C1tvNmeRrmI:9ji67J6nKu9++WY9boGVCXvNmeR9","tlshash":"6cf2f1e5c11d9d83912bc1ea33558ac9003a1bb505c68b26e447fbbee859f07cf9b611","first_seen":"2024-08-29T11:46:34Z","last_seen":"2026-08-06T12:07:35.230824Z","times_seen":176,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/magnific-popup.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/magnific-popup.min.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7046\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20219,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-08-08T03:06:37.896971Z","times_seen":24729,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/wow.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/wow.min.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2529\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8183,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8152), with CRLF line terminators","md5":"ed4b12ef0f7e4bf5d5ff3555d18718cb","sha1":"258fa26dec8fcf4769d49eaca6712ef56923673e","sha256":"3162b6468674133d7b6c903e4b8a06f7faf51216d1e7f8b3edc8f326b1bfe461","sha512":"40d8f96697d393a5301d2960394cbea52ea64330a8b706a0982e9b17176bfc0d55394dd4f0fbea2cd1798c938e66ccccc671d803b2802f8b37c2c41f40c1200a","ssdeep":"96:xrZgL1xvPV6GqKyR6TYdtHFMLzA4pOROVEE1fosvGeaMozHImBaokbl:xry9PVfSnAPAjROVEEdos+eatzHILoe","tlshash":"17f175c9ba967035c75792f2833f0106b23a5aeea028047cb5b98dd57d38c58523bf78","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-08-07T18:26:19.048614Z","times_seen":2447,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/main-banner2.jpg","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/main-banner2.jpg HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/temp/custom/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 176206\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":176206,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 333 x 500, 8-bit/color RGB, non-interlaced","md5":"9bd7f16a525c819fecf84b526735ca96","sha1":"909319e17fbd5d712149476dd62d36bf39d40880","sha256":"c9d463431eb53ff0cb84fe062468d1eb6c395758967007edba1b78b22bfd3daa","sha512":"e0d4115408c14d663c2cef76a02cf073b7880d42c89c8f67c7dc72e601fdf6f2c00b63ce1ba5309fee132cfe1fe208341436c08f007d897d8a8721c09d68e69d","ssdeep":"3072:1sUBiFs8cERrKxCPk8MiyvBxe8D6l9QbHZVH8gzIxL4lo7X+F:1sUBiFtvKIPlyUQbHzcgzIxLOo7Y","tlshash":"f50422afd15acd801334d71c2b2d2de981bcb4a4963ae9063c65cac755fe39a524f8f0","first_seen":"2025-09-07T19:34:52.134989Z","last_seen":"2026-08-06T12:07:35.215457Z","times_seen":60,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:45:21 GMT\r\nexpires: Fri, 04 Sep 2026 09:45:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 294543\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-08T03:20:34.696571Z","times_seen":958475,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-14.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-14.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1047\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1047,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 27, 8-bit gray+alpha, non-interlaced","md5":"852f192e4a07fae0a46b10b8d333d8f5","sha1":"2609146e56eb03744497975d0f32f4cf99953e14","sha256":"df15031b2c6d0a3035eb029ae139f226cc1026f9f677bb1fb4e74e631c299647","sha512":"33eed53fd48086d3be3bf1ded795ed93b61c5d7ebe0dc7641e87e2e5830d9ccec3f890c52a80e93fc31318a3d5d8e21c4f9c7dc45fe5162a6ebbbbbabb7f66c2","ssdeep":"","tlshash":"ba11b9f10f10f968f6b93026d59f0865be426a864e52e34c8b4ec7c166d17445cd7d14","first_seen":"2024-08-29T17:20:29.87077Z","last_seen":"2026-08-06T12:07:35.288355Z","times_seen":125,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-15.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-15.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1250\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1250,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 116 x 26, 8-bit gray+alpha, non-interlaced","md5":"cf90029b422da45a8ebc2783c6dc984d","sha1":"9d43ac70f2d5e06fa1f22db4401ec36511eea07f","sha256":"d3de99b2ecbc5fad5348a4a5cb3543ef0eb94e9538f87cb12d43c2171fc8d0c2","sha512":"e360bece78fa065c2aea710d940bcdb295aafa36d321084965dcc7f727256edb2a6339e28feb1eb8cdc83a308e09faa26483bb5667ba6ad047922395997c57a3","ssdeep":"","tlshash":"be210adcc5522f628e17663884d7ee91b514d4f70d7e7594d4047b0e5ee78980930356","first_seen":"2024-08-29T17:20:29.872998Z","last_seen":"2026-08-06T12:07:35.291892Z","times_seen":125,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/owl.theme.default.min.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/owl.theme.default.min.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 376\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1019,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (847), with CRLF line terminators","md5":"f13c9109b79ef93c06e22c3542625b72","sha1":"424a8746184ae7d2be69197cfd9b3c4032238837","sha256":"33dbcf6a027199fab7bca71ce31c80154051a658f69ef98e7ddad581fefae1aa","sha512":"7cd94029c79a246846c89dfa82244334fbe284d86863989d69dd96d54f9d9c33231d8048f647a7a9c94810ea8b618314dd579a528ae2f9461f290490434a10c4","ssdeep":"","tlshash":"5b11abc5b189221d3023c18046a842cb6b1e687e529d1af5f8ee9120c32dd053a6f7f9","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-08T03:40:45.316542Z","times_seen":850,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-6.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-6.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1294\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 33, 8-bit gray+alpha, non-interlaced","md5":"167e5679a7895c209a59d6163a850692","sha1":"6f66d2025a0fc11fbb1392868aeb8721872f06eb","sha256":"c6f8102bd42e059d387885a5ab3d2b98a9e89d911063651a199b8322a57c1763","sha512":"1cf5a7b9544fe42b798388ae30932461d3616c9ac3c501d014eeb40a161fe56653a704941c34c35d9c0ec7696f5d9036dd8be3ace976cf68f3980975f96c7746","ssdeep":"","tlshash":"05211a6001323c7aa1ed9b390d255872fbb696e5275397f50d39d03e340e6a18f8de2a","first_seen":"2024-08-29T17:20:29.848996Z","last_seen":"2026-08-06T12:07:35.277095Z","times_seen":125,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover7.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover7.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1637\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 95 x 33, 8-bit/color RGBA, non-interlaced","md5":"257e4fbb175d54271846d81ae60dc34e","sha1":"2af29eb232203d8484006c37b335d6cc73d0009b","sha256":"7b882cf21353c7bb685b1b8be948173a09d6ba1cde66f1f0a02f6241b8b22506","sha512":"acc200e972732641f5ca29db3e9895d2405f2d773b2cbbe256c73c9a1d85aafe7392d9a6ea6e2f15d607234eb7e6f601cd6edd71311912146f2ce3ebf8770570","ssdeep":"","tlshash":"6731eabbe3486c1e6c17e14c3602f0bf21f9a6d248f46a02992d95df8dac180f14d1d3","first_seen":"2024-08-29T17:20:29.852393Z","last_seen":"2026-08-04T06:15:24.176657Z","times_seen":103,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/storage/app/public/photos/QfkkkLGM2j9nFGX6miShem07xIIN3X4l6QHu8qAb.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:25.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /storage/app/public/photos/QfkkkLGM2j9nFGX6miShem07xIIN3X4l6QHu8qAb.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 396\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Sep 2025 19:34:25 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":905,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"df882a2bc6a9487f1ee4ab3e2e8a2907","sha1":"ac84a963f828c9155ebbb2099b2f2dfce2622e13","sha256":"86a47b00cba19c9226b26cec982869328495090cc725e9f13333a103a6944d25","sha512":"d239b3255e4750e59f78f61f26e42ec2d6a11733282d76b1066f999379e8eb0dc5d7bc606525e8cf59f0a5e12797134d57f7ab9cdbdff1bd33e11dc16676f718","ssdeep":"","tlshash":"e9112f7f48151afe121082b2b120322cc0dfef2b6e427800e07301a66ad8ac4c5bd498","first_seen":"2025-09-07T19:34:52.142939Z","last_seen":"2025-09-07T19:34:52.142939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/circle.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/circle.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20034\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20034,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 524 x 518, 8-bit/color RGBA, non-interlaced","md5":"8e2818145ab7c6ee51794f7dd8b04571","sha1":"8ebb84901bfd3f14211b294bb7667d655204ec14","sha256":"0b76fd0f9811d84c01404d74bb7097e9b908a06af22c37cc6e2973af4170760e","sha512":"3835d6a00544133a076cfbfdb93fae45413d32f26153ad260f5ac0b57d98d6e67bfc336a7b189710df639d366211933bad4b9a61d2cc024e1c421c79711fd834","ssdeep":"384:rUuqhYKe9wW7tacqD3dvFfBoXeQMAXdemlISxgNuyca:rUuquLacqRjoXeGekIegrv","tlshash":"3292d0aee5bc5f2bc7a4fb77b461a81848311b0c53167d71d93abae049db39c4185ec0","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-06T12:07:35.247741Z","times_seen":397,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-4.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-4.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1468\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 137 x 25, 8-bit gray+alpha, non-interlaced","md5":"89ee29b52733482f2b46ebc912ce5500","sha1":"4751c71c14d6f8d3d2bfa74cdb10296d1ae918a9","sha256":"0c6a43caf79eb9ac129df256c227492065d1744df5e9ad6b61f3c701059b2d7d","sha512":"3dd37a5d3066a949129c68e8b0a70edc6d9443b5eca96a7413c0cc49de23078533b29b892e38e89b8f681453412ed4baba9132a4d8d3f225dbc0b8b50e6c6cbf","ssdeep":"","tlshash":"fe31c494e2f886b4cae97528df3104da1b4134cb22b893328650a6c10ee2e1289e6013","first_seen":"2024-08-29T17:20:29.84554Z","last_seen":"2026-08-06T12:07:35.261807Z","times_seen":125,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover15.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover15.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1764\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 116 x 26, 8-bit/color RGBA, non-interlaced","md5":"6036aa052f803aebe83e0a8ce808128d","sha1":"1fb9b368249bce2b51a4cdc8edc66f7c78195dcb","sha256":"44cc28325a1273cca19c12b7a3611d5d78ccdc49434429f023b7014d7aaf280d","sha512":"fb8dcd8a7e2be10b8d222c34430d49111be69a21a85b1b24309507f80546a4b63b00fbc112feb206ca012255642120ab555b81d0062b14506ef12ca1340de8d3","ssdeep":"","tlshash":"7e3128e4511013d6de4b93436abb1ca02895e4b703e2a4cb2fe432a8f803c268048ec4","first_seen":"2024-08-29T17:20:29.874282Z","last_seen":"2026-08-04T06:15:24.211166Z","times_seen":103,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/jquery.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/jquery.min.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30260\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"3e4bb227fb55271bfe9c9d4a09147bd8","sha1":"156837f75f6600ccb602b4efcbd393636c33f35e","sha256":"ee11e902416a1d896f538103110337b39a0e2e2606bc1faf5cd0652914891127","sha512":"f7810ef9df875a7fdfa7228f7e2f95dd34e18b57f56a46383198ebcc591e32f633b0d73cc6b271fbc669347f7fdc114cce6a6b43681104b25084fe2a1e7bee49","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:eIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"589309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:21Z","last_seen":"2026-08-07T23:26:48.173306Z","times_seen":10782,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:45:21 GMT\r\nexpires: Fri, 04 Sep 2026 09:45:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 294543\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-08T03:20:34.696571Z","times_seen":958475,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":69,"dns":0,"connect":9,"send":0,"wait":9,"receive":9,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/1.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/1.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26015\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 643 x 549, 8-bit colormap, non-interlaced","md5":"ed658f5b5db3a2af058849799dc5d7fb","sha1":"9ebeab3076cd153296cf536941d817ef4bd347f1","sha256":"547a51b8e826dcfb618037d9ae63cd7dccc1b27a42931a60bb97ebd35f30557a","sha512":"f4e4ea1a7a5a932d1999bd9bc77c29a6a82a55518892363a1349ae1d8c865bc2533eb51753995303228f2db96ec7ad112562518a8bb939d8e210a79244e9ca58","ssdeep":"384:HjVdAf1VzD2WmCnGttPgZUEiCJG4pbP2Huu9P2qDBRlgLGble/OKYkRXm1:5e95C4ZUEiaG4FxqD/0Ale//ho","tlshash":"81c2f1833b93df03d53112e15fc0ae6b5783ee114e638848fb654509515c6fa5be0e27","first_seen":"2023-11-18T02:28:27Z","last_seen":"2026-08-06T12:07:35.238475Z","times_seen":157,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20408\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 10:06:16 GMT\r\nexpires: Fri, 04 Sep 2026 10:06:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 293288\r\nlast-modified: Thu, 29 May 2025 23:49:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20408,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20408, version 1.0","md5":"e8730678d4610fa908d3cba1ef0b4ddf","sha1":"1efcbee909ce74bf04878d74867f12a1e41ae7a4","sha256":"e921785496ed2d98c2257c88a6f838afa6acbee05cb8467048501bfe2a301461","sha512":"d7c3f81ad11ac5b3e6f454fbbb9be0940b3e8da93cde0b80f9a91a8259966be466b4d6a0fd5527fcc6c8f218aad8ffd0124bb29dfa08f6ca658ce49fe9e37e6c","ssdeep":"384:D+h1xN53scre+kLtT5+wpcR98ffVvdSMyNaHAUvLFNPBtn2aotFn9mTCAKDi055c:Ss/XRT5+wpM98ffxd6uZZRXnemWDj5WL","tlshash":"fa92d1cdfc0e5797a8e14ee93c0a7a4dd76f438af366a94b25e66122e67a55c040320c","first_seen":"2025-01-09T02:30:28.977279Z","last_seen":"2026-08-08T02:55:30.992984Z","times_seen":59980,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/sounds/beep.mp3","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:25.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"GET /sounds/beep.mp3 HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:25 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5466\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 04 Sep 2025 13:37:39 GMT\r\netag: \"68b99623-155a\"\r\nexpires: Tue, 07 Oct 2025 19:34:25 GMT\r\ncache-control: max-age=2592000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yW6myyCBnFS3R7jbcj%2Fg7JtlS9xW8ei3aUS3NuQCLme65HO%2BRs%2Bgg24K5Za27Rd62QGsjKrkasfPoot1FsB1QPPRfpa2evvhwA0Y1hlAkA%3D%3D\"}]}\r\ncf-ray: 97b8a4bb2d32b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5466,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"874dcd48ad642582b7e45aee9d9dda5f","sha1":"0dd4bc230c31bbfbdeecaa0be2e10012603175d7","sha256":"55f34e2987da2f0c358a95a191908c281f1755b6507c149dba284f0509694586","sha512":"1135ca9b97cf2b6ff939ac5d4be205c46371ce05b7cafab84afb76484a2db0d08bb7aa1bfb4bd2199582977a777ad796bc022e202d585c677eda2fff7a51f7b6","ssdeep":"48:MoX/qSWcwSL8U+eLHcyFgdp87Iu25qFP7RJFtdm0AH48rLDYwU//JaZd11Ty50b:MovOdeLZ68sqFDTFtdixXYF/QZd11e5O","tlshash":"13b13c2bb07a75ef510ff2363d21415404b19c8be5957de49004c3b352bab49a259aab","first_seen":"2023-04-13T07:14:16Z","last_seen":"2026-08-07T21:52:50.320162Z","times_seen":1420,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/main.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/main.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1962\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5916,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"47bc986391ae43304be7544164cf022d","sha1":"e42afdb45a95bee3a021a79a24bb0357f84b62b8","sha256":"f7f7c12c779f4100a67c0a9c853a1f4a534183c36746df58d358bb5d02e548f8","sha512":"95d746af3aa95c33c01f8ad9e80ba17b7390bae9c4df4c0d2d85762bb84ac18604bfe07eab20d2106486a7a1b26e83c621d84b1d3b7fa0a064ce6d94be6f483b","ssdeep":"96:705I1XuiMlvMsW638DBpUtr+LIZDu7dQzqvcr8r:705I1Xx0tuIZDTA","tlshash":"15c17344714c143dc5fb32a4d139d5098f7d6111e203b2f5f8fe00ac1b686aeb6ba99e","first_seen":"2024-08-29T17:20:29.828451Z","last_seen":"2026-08-06T12:07:35.293826Z","times_seen":151,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover8.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover8.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3166\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 91 x 56, 8-bit gray+alpha, non-interlaced","md5":"93d4c0903f22d7e997e51766b5c0b072","sha1":"95afa92f2c6d23cbd55f28eb0fee523a3a8d80bf","sha256":"00919005150eb41ac1492da3bfedd7a0062b447ef368892282d083bca5aad247","sha512":"b0f61ea99ef239bcba85ca59ea4815ae291a112f7a53d4569393566aeab6fad63cc9ccdad2ee97fdd7d137efce33bb2bc198e9870b24e8ec8cbd8960372ef5b2","ssdeep":"","tlshash":"2e515c976824d7bc9702c019c881d82b7e93fb5e52836914110450396fcae7ceaaf25e","first_seen":"2024-08-29T17:20:29.854698Z","last_seen":"2026-08-04T06:15:24.192654Z","times_seen":103,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-12.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-12.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2024\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2024,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 32, 8-bit gray+alpha, non-interlaced","md5":"1d03f49caa8ea7ca202782acf3c1a3b9","sha1":"eccdb16ccfcd151a1219156d3f388d3586f7d6ba","sha256":"3208ac21e6336ea2c5ae916e7e5d63b5dea3fa0a2a8290dff51b7bcac96976a3","sha512":"4874bc24df2ac2e437286abab87506d1e160ae98aef498d88bbfdfc6153d027413fa9b83bc01154cc9b7f70d3e3fdc2b1adbae098e42b7faae26065c91f5b60c","ssdeep":"","tlshash":"0e414af44a8aa3bbce3b3591c6064d36d333c092843f22724ced083007693aa60138ea","first_seen":"2024-08-29T17:20:29.866635Z","last_seen":"2026-08-06T12:07:35.271554Z","times_seen":125,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/sun.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/sun.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/temp/custom/assets/css/style.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 365\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":365,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit gray+alpha, interlaced","md5":"cc774c7ee8485c17c2261d563c9d807c","sha1":"e4e62c2cf616823af53af1ef1d5aba8afc7517be","sha256":"4ee62cd7666fddef47a95747e30b4b18013a751bf77706cae69d55adcc46ee71","sha512":"1b1714eeaa803a5303f60eaaae0fd9a3ed74e8e109c3b27919c1012fa3f75536f028ded53cb24dfc9d82e9aeef5457ef5377be7ce144bc69f7ac48383817da7e","ssdeep":"","tlshash":"03e06899b606ce27de7b7e21622e5710e1209ac13b021156222ce19777c6a469ad0aeb","first_seen":"2023-09-22T16:47:17Z","last_seen":"2026-08-04T06:15:24.171222Z","times_seen":106,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/widget-0468167d7618685b5c9aecdbeee81904.css","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:25.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"GET /assets/widget-0468167d7618685b5c9aecdbeee81904.css HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 40098\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 28 Aug 2025 09:47:43 GMT\r\netag: \"68b025bf-9ca2\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 898301\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DYOCNpg7WXY5uKCKRky7WSMig2qjnDpJLENBcCS2ezq8DrYN7owf%2Bpy5%2BFa83a%2BaxSJi2ERJpyFKxUcq6h%2BGthK4dryotCeugN09%2BvlZ5w%3D%3D\"}]}\r\ncf-ray: 97b8a4bb3d45b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":519364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b3da96803c5dbb185f400fbace5a6aef","sha1":"f406a17b028c14bd0970bfc3ac8a0077494e6328","sha256":"a867ceacdb2a704153a44d317b09f21458784ee23e370c8538e5f17ade2fb3e3","sha512":"4c3e324f6d5edb59d6837c2d47a197eef98827b5543909d8d99a6d0bd2fb68093083c8ab9253140e44f3a9d84620fd216869024990f4d391a196b70aaadfb549","ssdeep":"1536:rSnHvoOjr4YP+CQ/mOwT4FjFTa+02FJhMYncA7aN67+qrqUixyii/SYJM1aGV6oZ:FOxOwRd","tlshash":"59b4c9409495291b6cb3293f348772591d3fe022c79329ee7569e3ecc38bd635262f89","first_seen":"2025-08-29T01:35:44.661293Z","last_seen":"2025-11-24T08:50:16.628222Z","times_seen":396,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/invoicing-image/circle1.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/circle1.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1868\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 181, 8-bit colormap, non-interlaced","md5":"3dc7e9a6a12a32389eabe691980a5039","sha1":"755848207b7f9149b3c9959dfbdae59c2486a9f0","sha256":"c4be331bc355e304e8227874a23bce8eb923d34031d32649a364863fa49ac5f5","sha512":"9d1736bf5f51e3689e2f0d9bcdbaeee71b8051484832562ac7951a2a2511814e632669888508123416c2b3780d10d156b32038b5d59b2a75b866396b8a517db3","ssdeep":"","tlshash":"fa3108fbbb2cbfc19f700aa742909a94c1f0030827b0612b89b742f0a5e9af41167d15","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-06T12:07:35.239347Z","times_seen":387,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-16.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-16.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1236\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 29, 8-bit gray+alpha, non-interlaced","md5":"69b9119147b6f9dec48186e35d9ce627","sha1":"9374da481d2d8edcc050dc4161d91a33ff8788fb","sha256":"efb6c876499145626d0b61553231ac8a7a739d6f6f3858525d86b3fddd981a69","sha512":"19df4d5ffa9666e8f73a484686ad70128a2db63aa3cfbbfa7219b7d4db06a3bed5b8530f26c67c7314686afcea49bdb093ac869e8773b306719009d98efd0ba2","ssdeep":"","tlshash":"06211a8b71f548e9ac837685b135741abe81a0c1b812d79e036ec5f10fcd24c0f9e143","first_seen":"2024-08-29T17:20:29.841148Z","last_seen":"2026-08-06T12:07:35.262749Z","times_seen":125,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/nice-select.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/nice-select.min.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 931\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2937,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822), with CRLF line terminators","md5":"ab62d8a15524602c06b356ae74eea55c","sha1":"ae602ab104a3f8008fbcfd7967cb302dd0681e20","sha256":"cd204d095086d67e207e13bae8ceb3de8759eb9eedcd4080809c929dc7af1065","sha512":"d4798aa79f38cf35ae416780c5d8daf9333ec29440c55d6d9c164aef67cbea21984ee309b756c09628bcf69c52ed29fe5b56ac44b31cccbb78b223ae06c43f95","ssdeep":"","tlshash":"60511114b10512f648ff24d37911b147a075493dc42ac14aa97e86b21dfec02aab6d5f","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-06T12:07:35.236692Z","times_seen":422,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/fonts/Flaticon.woff2","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/fonts/Flaticon.woff2 HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/temp/custom/assets/css/flaticon.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:24 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4012\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4012,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 4012, version 1.0","md5":"59a3e44fffe01a82bd2c76e1b0b35e78","sha1":"058a144b3f6b5648c4dcf87f9be917be1ad97bb9","sha256":"8a0cdff6e76a8bbdeb9b412165ded677648e805fa58a39d5feedd20743f4c5fa","sha512":"337d05e3691e5c112af5d33573f349c66d60efaf5d83aff8c4a5b337b66be6dd7d7e25787462ab584e23b492c48d77161257ef20b8f5cf42663127c328f1e2ab","ssdeep":"","tlshash":"fb816d06b44db340cc16f131402742f7ba778699e81d152cdf4e564fe671b20b9abe46","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-06T12:07:35.231752Z","times_seen":448,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/invoicing-image/circle2.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/circle2.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2040\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 199 x 194, 8-bit colormap, non-interlaced","md5":"e8dbe3b7692b2ce535ef2b6ef2790a2c","sha1":"95a7b7aeb26abeb0a0e7ee14289af8a25bfe3c73","sha256":"652d894377d69fbf54715637a7dea271c3de099be2c422acd614493bd9656bde","sha512":"295ed174620b9454516a7e510ed475f3d4083fb74fc3163196a9ff60528b6ed8a973458b48f10172412a3ae59fdd28be40e5f5380c792232e75c90a05c4c20e7","ssdeep":"","tlshash":"6141fbd979889b7c976c967733a9e916eb7e143d7a1643efc3ac6453447d0103c01051","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-06T12:07:35.260577Z","times_seen":386,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/style.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/style.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16864\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":155715,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2f48d50b42acdcffe5d9e5fd20b7237c","sha1":"ba0cb591de881029a3a36f0630b5133dfd90ccac","sha256":"4655f9d69b73295f521d26f7339aa565b0d235304823c167efb7d624d22047c8","sha512":"32559c77b3f9d5104f47e9a7bca65845476d725951ef54c603ee8daa9ffbb5a444c5c0afd826b57e610d64f8c14bc3ef3ad5637e986207559af340b8d05da783","ssdeep":"3072:m2KQRe5PUk06PSEnZB8BcgSS3ZQhqLpDpViAnL2Moc2S0YWHZj5JOQ9ZBbqcVNyA:iIe5Pf06VWc+3ZztFL2MP2PlHZmQ9PFH","tlshash":"4ce385d55ba52144364f90a829e5eb142fad50c3ea4fcdb97af3604cbf843881167f1e","first_seen":"2025-03-07T12:16:50.182098Z","last_seen":"2026-08-06T12:07:35.281148Z","times_seen":143,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/invoicing-image/main-pic.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/main-pic.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43385\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43385,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 759 x 448, 8-bit colormap, non-interlaced","md5":"b506da360c46df01896073b735a5cfd4","sha1":"7ecf08e945d651a426001226de42030a59ddf94b","sha256":"4d70e9862aff6ac84d0732146c9afc39bc4f9f6f4226fe11541e326f1ca51852","sha512":"d66654b11ff53a0d35b0313877443b8acd02cb1649ec4edc694913c334aa4901d257899d616bd6b834bff3c0c97a10c074f66701f0dc362499b8cfaea9a08b24","ssdeep":"768:llcZk/3MZthb8PY9aOKX4pIdQfKE6riKWtG8eYPXFTQLkH21vKSCmKnlTXq:vcZLthb8KaLo47HrjWw8XeIKKSCblbq","tlshash":"5613f1fe387438f8de51f0f1db320835b48a1df07aa1a77849ad7985b22d5618ee2057","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-06T12:07:35.264414Z","times_seen":383,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover12.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover12.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3399\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3399,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 32, 8-bit/color RGBA, non-interlaced","md5":"59a2010ef7c8f47bcbd1d3b4eaaf3bab","sha1":"9b16faa5e444cf4df4d038bdf08c4f5ee9a3fa22","sha256":"9d876f86d2783475fca892c4858ecf7a217f8fcc10c06c9e162577d3faf12a6b","sha512":"e80fece315ad8b55b58e74d7f39a7709dff6a26dc7583b35ab10caa16082bc2a139e0d8382b0faab9fb32a299332b60c0b23dea088d593f99940cd5c6ab815f6","ssdeep":"","tlshash":"c1614b1ffa769d23d3fc683336e52248045f8280a94d1c9dafe14c42ba5ddc125d63ad","first_seen":"2024-08-29T17:20:29.867652Z","last_seen":"2026-08-04T06:15:24.215511Z","times_seen":103,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/form-validator.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/form-validator.min.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1913\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6063,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5862), with CRLF line terminators","md5":"a5cae60d0a59205f9c82928fb16ca1a6","sha1":"c03a6517da694e1ba5aa6b9dc6a647bd119b819a","sha256":"60c23945490cba413f3d6cf2cc57d5c560faeb0cf68ab38daedc80939966b108","sha512":"c43f6e446c89df6fc82c5cecd3b5727bcc226c2826f9ec8e0ac88925ade0bffc212d92759b6c8117d31fa6b032feffe91cb2519318320a16bca2e07d9cd29043","ssdeep":"96:H1MWGbU563CvldugvwYdfWA3oTa9+xcuS+5ijkunc9s5BeK7p8vmiIKpiyW:H1MW+U563CvzugvXdfZUopjkunosfR+W","tlshash":"c4c13449366321921f9234f5419b828b72b97b38c50a409435fa84f1aaf8fc167f7b39","first_seen":"2023-03-08T00:47:54Z","last_seen":"2026-08-06T19:22:49.399864Z","times_seen":889,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":526,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v36/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/raleway/v36/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:58:59 GMT\r\nexpires: Fri, 04 Sep 2026 09:58:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 17:00:51 GMT\r\ncontent-type: font/woff2\r\nage: 293725\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-08T02:55:10.999396Z","times_seen":63198,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/animate.min.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/animate.min.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4829\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71756,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65342), with CRLF line terminators","md5":"b3d5b75898f1ed885c7d2b538faa8b81","sha1":"bc96496831f4df311443b8e3d76cfc17db53a988","sha256":"a61e123314188bd0453320008e01b4bbb665bee09039f4cbd9bef44de410ce67","sha512":"be097927cb6f3c12ee4140a60f11dd56bcb1e8661b35848f25f1ae2417b65190924d73d2d01c04c6763fc2c50d3931cddbc2aa74cd945f84145d3f3fe451f433","ssdeep":"1536:X6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:ykZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"006329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-08-06T20:53:27.422513Z","times_seen":2665,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/images/chaport-launcher-chat-icon-new.png","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:25.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"GET /images/chaport-launcher-chat-icon-new.png HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://assets.chaport.com/assets/widget-0468167d7618685b5c9aecdbeee81904.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 468\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=762\r\netag: \"68b70644-2fa\"\r\nexpires: Fri, 03 Oct 2025 04:01:34 GMT\r\nlast-modified: Tue, 02 Sep 2025 14:59:16 GMT\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 401571\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7651pu%2FNX%2Bxstg%2B2fzIz6bI7QD4sfEdqo63hY%2FRuKW1Vd%2F8ecuvJ7elnKy82Vs98Y15dcmhq1XeH39ZPGbdna2OwoxXEuAJr6GVAePqKxw%3D%3D\"}]}\r\ncf-ray: 97b8a4bbce18b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 36, 8-bit gray+alpha, non-interlaced","md5":"c893cdbf01d4901c895649e653607876","sha1":"53f42045c25f8732c60fac3687e1d6c3c8a75331","sha256":"aa4cae387402003c90d9dce3355e6fcb43c1886a5a3d8f1006c62458a34954f1","sha512":"8b603e4019d23225c936f21e81f8a3519170a714f8d3107452de4561d7b61b3ba180c8c903ba56864e5932f7c21da2d2bce3e60e0d75d132a25acf809344c997","ssdeep":"","tlshash":"81f00ed70348121ed3c211212b1289b8845162b485d02f15f80e8604976926432cb7b3","first_seen":"2024-03-02T20:53:41Z","last_seen":"2026-08-07T21:52:50.477627Z","times_seen":1776,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=68aca082fe1c295f057c4d0e","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"GET /info/widget-assets?jsonpCallback=true\u0026id=68aca082fe1c295f057c4d0e HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\netag: W/\"17f-Exzx7Q2DJq6izoJ9FmNXBiMdzR8\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dx0ydYsAZbysPcI6iCqcJ0YO22RnsKylbdF60XPrLQBCucbKgOyirxLxtgt5IIgFh6hPrha9o1qMpOMxTn79gwnqHsFKSscMBhe1fw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97b8a4b618a6b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (383), with no line terminators","md5":"dacc565c9946b1eb6b5c2a7ec373b25a","sha1":"131cf1ed0d8326aea2ce827d16635706231dcd1f","sha256":"f3bfc7e7a286ac79de40d1f37133a98e7c1891e8b4d107e11b752a851047285d","sha512":"3161377489ec5c2b2d6c5cf81c297d89f8237bd4d147c9ddeb63af7abccdd7c04505da07a6447e421e0a847a49653838d951e4c3abae31e706f821fe66533572","ssdeep":"","tlshash":"07e02284d2654e190b3026b2380f0bca70bb83670b54d5b8b434db24607adc244298bb","first_seen":"2025-09-07T19:34:52.164299Z","last_seen":"2025-09-07T19:34:52.164299Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/fonts/fa-solid-900.woff2","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/temp/custom/assets/css/fontawesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:24 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 126828\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":126828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 126828, version 768.256","md5":"297973a488f688271dd223d542ba2697","sha1":"ed99d812e4c88826335f93acede3fad85c90fb54","sha256":"1b099f88c06ed0869872561c157f0ec9cbe133a0939d9ece4ee1e1f54bd4683d","sha512":"83c802972d9fee9dd7e3c0de42d8636c504e65ff20e43406bb446cc95a16acaa21789a03f0e2006148abfe47100bbd0c66aa4cf98f11e9b0220f1dcdb5204f46","ssdeep":"3072:caEaIjBfXHk79vCMuMZhQqmiutWxJfU52qiAx+SMfd:caEaIf3kxa5aaVMaHAScd","tlshash":"9dc3120ef3299411c6f0af104c63d6d627617389ffd548c767993e768aac9e70c28ea0","first_seen":"2023-04-10T14:50:44Z","last_seen":"2026-08-08T02:46:51.694416Z","times_seen":10880,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:45:21 GMT\r\nexpires: Fri, 04 Sep 2026 09:45:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 294543\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-08T03:20:34.696571Z","times_seen":958475,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover9.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover9.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1713\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 27, 8-bit/color RGBA, non-interlaced","md5":"dd6dfa5b4d63fb816e33fdffceb764ad","sha1":"938f85b8be835621039714984fef05bcd268faff","sha256":"0c83c4fa188c995d9f7c47660c3f88f4b18454ac927993bc0ea811d17942c8d8","sha512":"f33a7231bddb42680fcd93fa75b8bb2e04293ba6fa028975bb11077aee9b21b574d2bdf68503101a3c5e9ea98c70a083949df20f6a89b5ca28d8e03535e3342d","ssdeep":"","tlshash":"ad311dd20941af3b73b8e47977e98066dd6ac7ffb05d02e6e07c47521120c8c61da251","first_seen":"2024-08-29T17:20:29.856872Z","last_seen":"2026-08-04T06:15:24.177399Z","times_seen":103,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/storage/app/public/photos/IHK3yKeC6GMPP6BFJOYKvbwYhJAM2RrTtMLuE7lz.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /storage/app/public/photos/IHK3yKeC6GMPP6BFJOYKvbwYhJAM2RrTtMLuE7lz.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 396\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":905,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"df882a2bc6a9487f1ee4ab3e2e8a2907","sha1":"ac84a963f828c9155ebbb2099b2f2dfce2622e13","sha256":"86a47b00cba19c9226b26cec982869328495090cc725e9f13333a103a6944d25","sha512":"d239b3255e4750e59f78f61f26e42ec2d6a11733282d76b1066f999379e8eb0dc5d7bc606525e8cf59f0a5e12797134d57f7ab9cdbdff1bd33e11dc16676f718","ssdeep":"","tlshash":"e9112f7f48151afe121082b2b120322cc0dfef2b6e427800e07301a66ad8ac4c5bd498","first_seen":"2025-09-07T19:34:52.142939Z","last_seen":"2025-09-07T19:34:52.142939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 396\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":905,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"df882a2bc6a9487f1ee4ab3e2e8a2907","sha1":"ac84a963f828c9155ebbb2099b2f2dfce2622e13","sha256":"86a47b00cba19c9226b26cec982869328495090cc725e9f13333a103a6944d25","sha512":"d239b3255e4750e59f78f61f26e42ec2d6a11733282d76b1066f999379e8eb0dc5d7bc606525e8cf59f0a5e12797134d57f7ab9cdbdff1bd33e11dc16676f718","ssdeep":"","tlshash":"e9112f7f48151afe121082b2b120322cc0dfef2b6e427800e07301a66ad8ac4c5bd498","first_seen":"2025-09-07T19:34:52.142939Z","last_seen":"2025-09-07T19:34:52.142939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover6.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover6.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3169\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 33, 8-bit/color RGBA, non-interlaced","md5":"c8c23c3dc8bb7ca3784e7c9166f5142f","sha1":"5a36dcdd220757df5b025107ebcaef6a71ff7164","sha256":"291d81971cf05bd9970bd9598ade6779e299fab6f8be515f81101c80b740befe","sha512":"5f22b909540d67c657de31964d3960ab714a8d1d48ca8206706d0c6058e2545644810368e5bc78032f0aa2bf65fbd270072cb2f430fdabba9a1219bb26f58fff","ssdeep":"","tlshash":"2c515bd247b632fc3ca2ad004b2f374dde54a532962bb292ae49e869014d05234cdde2","first_seen":"2024-08-29T17:20:29.85012Z","last_seen":"2026-08-04T06:15:24.179705Z","times_seen":103,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/main-mobile.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/main-mobile.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55689\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 549 x 541, 8-bit colormap, non-interlaced","md5":"c59a7bff6b59e7c447efa275cee75f4c","sha1":"677b86ed85ef05bfe71d23ad2ad9f8b7cdb2e761","sha256":"b3fa0e45d454ad8b4f6efec14c2861d78948bc0319754e53148362f7ee5b66a2","sha512":"30c157ac5eeba634395ac39d29934196ffdf795614aefaa1b82d80008303a558da569ad6e010ac736c7187ea054cb5dee379ec515a76665cf578143396f27bd8","ssdeep":"1536:RtdyITWfgPk+OXmOz0Ya6PqM3i43qEfoQCadXz08nAC0F:RbWYPJqmo0j6Pxh6Efeahr8","tlshash":"ab4302a8c9f53da4e3188505001fde329759229bf1df7b10e1d9631a982e2aabc4f5c3","first_seen":"2024-08-29T11:46:34Z","last_seen":"2026-08-06T12:07:35.22501Z","times_seen":176,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/parallax.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/parallax.min.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3805\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13302,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (611), with CRLF line terminators","md5":"9a9a9442f70e0807475a21b835dce50b","sha1":"7b4755ab79dcfbe1aecb13823f78997061fd1b8f","sha256":"fde3fba1a1c3dbae530a58d3a542369cef2e0000685cb299a265e721056d4201","sha512":"20a1dd28d273d407d096be59beb4a92c260791d1cf16019cde84651f22fd69f9a62950dae7addb5f807452a32afaa02b406d72f5d79d43d8caa9716960919cb2","ssdeep":"192:t0PtdiPwbyxVZ8343NiOAZSUa89Fr15FZxY8wb84FxDco+W4+D:t0uPwGLsgNiOAZSIp15FZ68wbZWWl","tlshash":"3d52a8453ae6111502ff73ad609f57087528a232c52ace1f7c3dc2d8a580b8953bb779","first_seen":"2024-08-29T17:20:29.824917Z","last_seen":"2026-08-06T12:07:35.244493Z","times_seen":180,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-1.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-1.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1355\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 103 x 33, 8-bit gray+alpha, non-interlaced","md5":"452ce7124fd1072acb07c0f8fb903628","sha1":"4dcd4ed698a8e5cb1069016b696f6681b6e4e78d","sha256":"dd08691f8f21a611e73bec24c59e3b0f5dc5108a5ef5b264f6c33279da6b06c7","sha512":"6d8f1c37c59e9a81c0e8f715846ba0aac97c0681bf25c6f4171880566cf996500a9b01bacb9ca39284fcd43875a83782d2ceba7423b94fdcda38f76af1765834","ssdeep":"","tlshash":"3021db685f2cb95ced6da2774590a3d0ff98e0191150179b674c9e766450ac4820231c","first_seen":"2024-08-29T17:20:29.838877Z","last_seen":"2026-08-06T12:07:35.24031Z","times_seen":125,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-13.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-13.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1376\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 102 x 26, 8-bit gray+alpha, non-interlaced","md5":"975f743a88dc1bd813b8dd210514fddf","sha1":"6130b18ae827bcf85560d75e3faf985b30669da9","sha256":"3a47a82603c408a98be3a4ebdee4ab34f12f2cc14f8eb847eaf9b3d68577b9af","sha512":"bcc7c16839c4167bcb3cd8fdebd19299f427145868502323ee762080a934c9e51e8a2352124db7180e79f1d93ee6db68dbc30578aa7b25504202063f045a0e41","ssdeep":"","tlshash":"cd21d82860bd96ed80716627fad04853e2d15fd12615a377c91baff42c1391492f5a05","first_seen":"2024-08-29T17:20:29.86877Z","last_seen":"2026-08-06T12:07:35.254281Z","times_seen":125,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-5.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-5.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 830\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 24, 8-bit gray+alpha, non-interlaced","md5":"2237dabc3197d00e0ad5cfadc06b76ea","sha1":"6e1c127da23efd79be63c19fab37c486aa174fb9","sha256":"d25904d8c3bc764185137092649b23cc5942e5d0f40ed0a8f2a5a6c7fa572a57","sha512":"cca886c4b50c1752bd9e9c0652d89aa0dde8e96b8c0a8f549b5afc02038b041c9a5d11969b501e8ff36654ff6cd7b20aa92ff870efef44897dcd26226eb03111","ssdeep":"","tlshash":"f501569d93d16530e8b909a2bcb25583dd95055fc8629a4084a6630d29b462152f528b","first_seen":"2024-08-29T17:20:29.846635Z","last_seen":"2026-08-06T12:07:35.27578Z","times_seen":125,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/slick.min.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/slick.min.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 726\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1332), with CRLF line terminators","md5":"e1bb8aca0ada1361d15eac06412538b4","sha1":"51f8be05d8b482766bbe8550181ee66b95a1a10f","sha256":"6c3b07b65a2bae0d0b8430524dbcffac75c20125514b04dbe5ebb48faca4df64","sha512":"9a1120caca16be2f5e6bd422a569e1042b81948f15a36d85fa41508773ff93f938deb8594d1d02b922cf4292378e8a06255a3c3b3b36cbb8683a83154ca9a079","ssdeep":"","tlshash":"8a31eb990056118a4037e7136ae3eb8a39e7f1125c3206c9f75c8715cf8feda1dc25da","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-06T19:22:49.41638Z","times_seen":519,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/invoicing-image/3.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/3.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7911\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 263 x 241, 8-bit colormap, non-interlaced","md5":"b6c271674d0f2805e789c2e76520173c","sha1":"d886710c03e7abb3bab526215605bba07c22cb92","sha256":"b95df0cd387779894568be922e2ca845497f455e397bcc8c0c6bfc0d235d137b","sha512":"e5c840c290c1a71c61b41e554d7566a1586c35b2115f238ee779c04ea6e97175a40ee972389d436d3edaf325275cfaf227b11e0d3e45b396bfeeaf3b0305b820","ssdeep":"192:hiyzhvrKRoHLXlQJlsMb+7G/QzPdf7e1D+1MGn44ve0:hrtpL1gb+76QzJ7ep+1Pn/e0","tlshash":"d8f1af8bb45c8e6f95a8520d13f52a1676044112f3c5076c3a4afcbb2e183eaaf88003","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-06T12:07:35.221298Z","times_seen":381,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-18.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-18.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1586\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 119 x 27, 8-bit gray+alpha, non-interlaced","md5":"669f054a19689ec08666b44767d0aa4a","sha1":"64b6bb65791e6af6283ebe95baa3d716fa346646","sha256":"c45130bc4ccd1557536f26a7b352a3eaea8b86859cff70cf300beca940370f6c","sha512":"d0406474390a4c319c7f025148bb4ff29f3a00f632a016acedef9da63b25810548486b7ff991f4805ebc714eadb64fe5c0a010f89002cea2e8ce0d80d92d5df1","ssdeep":"","tlshash":"9c31eac37e09e91d095a07b7490028dbe5aa794c72e3b34d291079776cec13d11ca264","first_seen":"2024-08-29T17:20:29.877611Z","last_seen":"2026-08-06T12:07:35.296205Z","times_seen":125,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css?family=Raleway:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 07 Sep 2025 19:34:24 GMT\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31212,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"654df081c5c2469716a6a2bbbba351bb","sha1":"1e899c3fc1adc7b0bb3e18b93d88b67c19b51f20","sha256":"79248eadd526d15e8e9c130a171de51acf370c53685d08b8ce0abc898ee72545","sha512":"edb87b2d07724d19ea573f43cbf8f123ad1171e4592ebe6d4703c1822720e18a25762335681c0710e700815f4b2e83d59ddcdd3825e369136fe0c57e26d0dd15","ssdeep":"384:g3+w3DT3w3z3+1wqTFqzkwdTOdYzw0TLE1SwnTkXK5w+TpO/YwRTyx0XwIT/YBWi:Uv3ET/bvSqa","tlshash":"01e29ea1091bd040eb476dd663cf3e32ee4e62547047993a9bfd58ecbca6d3212a470d","first_seen":"2025-05-30T10:48:28.455827Z","last_seen":"2025-09-08T04:14:39.858514Z","times_seen":310,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":151,"dns":0,"connect":22,"send":0,"wait":35,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v36/1Ptsg8zYS_SKggPNyCg4TYFq.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/raleway/v36/1Ptsg8zYS_SKggPNyCg4TYFq.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:49:12 GMT\r\nexpires: Fri, 04 Sep 2026 09:49:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 17:02:06 GMT\r\ncontent-type: font/woff2\r\nage: 294312\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50244, version 1.0","md5":"0a76d379864dea2a3b063bfda4745358","sha1":"08f6b71e5139492cf493060c902d215738a41da5","sha256":"8c08eb8b1fdd16dcdd6270e42a8b24fcf7ddc7e63d4363a55c174d110f90005f","sha512":"f65eb2ef5d2c728b794c77b3e012f72c13cbf7b413ff499a921486a9448b3f86d27e601ba2852f7278a43ac67d66e97a6b9fcfedd58ecfcb7726cc0ead2952dc","ssdeep":"1536:DSX1JbG+3vxvLopVPLQ0JTApzdlVHtmBL:DSX/3hLopVPLHABdOL","tlshash":"b7330243c4f4294b2d8aceb7c2f143928bbcf9860bd446d651e4f11730da99b12d9364","first_seen":"2025-05-30T04:38:07.931144Z","last_seen":"2026-08-08T02:55:10.903228Z","times_seen":7178,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":68,"dns":0,"connect":24,"send":0,"wait":15,"receive":7,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-0a0112d5cc0c8f46d0a39a93cab10d6c.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:25.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"GET /assets/insert-main-0a0112d5cc0c8f46d0a39a93cab10d6c.js HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27323\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 28 Aug 2025 09:48:25 GMT\r\netag: \"68b025e9-6abb\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 898305\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcCEvMHhKlAYjNym2lIKaaUAM79Eyuj53u%2BExiyzXr8mwG7hXp0WWCY8TaC960FyYEhRpQfUM41AX7s%2BGh5mumAIAx8nzfssXh4NVz8jeg%3D%3D\"}]}\r\ncf-ray: 97b8a4b6c94fb518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83450,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"89f95c5b7d8f622114ff322c607be339","sha1":"85c0a53e64ab04b25fbf4bbba628d720e010c2ea","sha256":"9377ca44c0f9d682dc27076dc631c0ccc72f8c7a1a09c88520bbafc2bbe2f0c1","sha512":"75faaaba6d137b37ac454e5bd107ec88b0b542fd9c76b25ef798110cba644f3b2d63003aa87b8937eb86be191ad35919d0041312616b4c8368a55ebf066a3266","ssdeep":"1536:a6Vmkhh1GDhO+otuzsk546w0NwOdCj/KZwwvHv46XkHBKC1vtw0:ZQcjBk5rnXuxtl","tlshash":"6c832a897040343b0aeb21b6357f310a223fd2696a495460b53ad7d07e7ae5f621bf7c","first_seen":"2025-08-29T01:35:44.67508Z","last_seen":"2025-10-03T04:18:37.528475Z","times_seen":114,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/javascripts/audio-player.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:25.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"GET /javascripts/audio-player.js HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:25 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 22 Aug 2025 14:23:21 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 926378\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=10yJJAKk3ojSZNmAyZ1uKJVfs2tnRTUvG4u2wGfWIgpOE7QEO7Wp0EHm38E3HP3jI6clkOFwImQLZOtRlk9TkTp7xwz7j3kihB32kOCzFQ%3D%3D\"}]}\r\netag: W/\"68a87d59-6a16\"\r\ncontent-encoding: br\r\ncf-ray: 97b8a4ba9cbdb518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27158,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27158), with no line terminators","md5":"076cf263c717d8b21206ec2c36531688","sha1":"92d703f27b95e1e05168048a8b4569855e6d1b18","sha256":"0b0147bc856235e57f9cebd05d4eea6536efdd423f062d22dc6455160f59f794","sha512":"2d612d9a000c33454a0ddb6961374557b6a64b260c4816cce509ee6ab638b01a8554ddbc2f850eb06b0989d38ef22b2313cb9389cd795f2ac3b7c185f39965ce","ssdeep":"384:hrt6nqLIf40nECIgPG8OrYleIoARnq0KaHvWvqTGDBnLbcfSXBg:swXkPGdg7HnqhSTGlnLbcqRg","tlshash":"ddc22c48b7e17d14435e34b3263f4a063bb51652545a3240f016c2f5bf78e8b91beead","first_seen":"2024-02-01T00:35:59Z","last_seen":"2025-09-08T10:53:42.292486Z","times_seen":331,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/nice-select.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/nice-select.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 864\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3185,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (3070), with CRLF line terminators","md5":"573b75cc4e984f9fd2d7f0bfdef2eed4","sha1":"318d8e184c0b00ea15e324fd3b564ea7912cd7b8","sha256":"d8ba2f0d8e2516ee382a764e506ab91b4b1b02c8078bac475b10aa2d83494529","sha512":"47a28314bf50043971d2d62fadf7c1478cf2195b0c4dcee1e7417cd078bcb97b4bf9f125ffccbfd73cee763ecbdd0cc79281ff488a058b760b413e58fe052f5c","ssdeep":"","tlshash":"cd610f35d551216ff07fca3bbec53b68243dd20368324a9ef244ea07834a16998ce70b","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-06T12:07:35.292697Z","times_seen":397,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/invoicing-image/2.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/2.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8398\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8398,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 259 x 239, 8-bit colormap, non-interlaced","md5":"a4895cbd0983fabb03a129eab4b30405","sha1":"1e8179843b8666448f2c7fd1c640693eb1f0c0fa","sha256":"6951f5ddaff6906a34ea3d6ef126e2a4af0d668b2c4904f26146248349da0cb2","sha512":"4cd7650f694e5b977f44c35f919a3b8bac1b4bf7ad41b3199881913a2ed23712fdfdbb34c3f4d8c2dd4dc60cd2b4c8c0537d9f41b0a11cbe6030d2078b2f722c","ssdeep":"192:tpwi7UClIdQwUTCxtwyOAlydbVevkJtSM3t8Sci:zX1CQwYdwk3SMPci","tlshash":"9102c086de3d51536dccbe65493083413c3a170ed659ba58bb23b13c6df812e82867c0","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-06T12:07:35.291293Z","times_seen":393,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/meanmenu.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/meanmenu.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 808\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3151,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"93fae0ffb1b096b0233875f166557866","sha1":"f49ed4ded57ffc6bdef92496e2a6e35cc77a2c71","sha256":"3886b107ba24c98a804e32fc22b2751b84e0b40acdf33a32142902ce076fc045","sha512":"61174a758227ac8950578feacfbd6906b1dd1c8981585800b4b98cf27d08f8929461207428576479fbc445925b57baaff3fab18a92d86f493dcfc2969727de51","ssdeep":"","tlshash":"cb51ac54da7b1099fbab967ce671d3287ee4b05baf0fc1acb4fce520c28435824611c9","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-06T12:07:35.279697Z","times_seen":418,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/bootstrap.min.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/bootstrap.min.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21195\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163862,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65302), with CRLF line terminators","md5":"64bb2b5bc1d4ce1f2b73f49200e022d6","sha1":"4a25df2c842d0f4f038f29377b635184569e2313","sha256":"cb8e6f9631be048c0e0cac4d93fca3931f0aa2c4d6e5c83a2c22b667ed0f093b","sha512":"1660678a126d2b52787a138f99b667f0b6a4cde8de2711a7e11cebdab39956320afcf2a9a17d91c0096a37d43c9da864915cd6e422150a64f42367a695af6ed8","ssdeep":"1536:lt04T8if0W8DsEBpy0cuJBt2rIWE5e0VUpz600I4fT:lt04P0VUpz600I4fT","tlshash":"98f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-06T12:07:35.25619Z","times_seen":396,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover14.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover14.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1946\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1946,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 27, 8-bit/color RGBA, non-interlaced","md5":"419caf2cf943ab30bc8e725802794b6b","sha1":"9c5f58845ade7563dd2714bced409661ce1acd29","sha256":"02ac2cc211003d275ec5082804a0635ef83eab215f1c3a91278e1e3208c7539c","sha512":"bb50285a7ec0c86d1a32e3c1735874afef9345d6905b131a124b488c35ac6b96f9f590f8d6f33e1f47020b313274034eb32d135ed6ac587f3bd7d72c67b66b2d","ssdeep":"","tlshash":"3f41e87d99fa7f6a8825292e6e08b467916e73e908d2cd49810531687ca7ac2c151c1e","first_seen":"2024-08-29T17:20:29.871899Z","last_seen":"2026-08-04T06:15:24.22157Z","times_seen":103,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover18.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover18.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2077\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 119 x 27, 8-bit/color RGBA, non-interlaced","md5":"a8952f049cb43756831e3355f4ca98b7","sha1":"e41d24ad5c40d6822308095e33825e4152ad9d4f","sha256":"fdb2fd0cba46f3460059aac0a46898569da047b59fef15911ba73d43d9fec332","sha512":"4978f19cee01ab1ddd99b4fbe8a1ab1e250bfb94cd47740d15b126f29c70483a6658a1d7c03976c81b54dbebb104994d6d8ba2899fc24fcb3699d3e2b0481081","ssdeep":"","tlshash":"0341fa84178e6fdb0829871a39162196d6f8a457dd61c0c38674fcfbb3479286399215","first_seen":"2024-08-29T17:20:29.878831Z","last_seen":"2026-08-04T06:15:24.202683Z","times_seen":103,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/invoicing-image/4.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/4.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10230\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10230,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 265 x 253, 8-bit colormap, non-interlaced","md5":"104d3badf1ad26c48c6dd2979d8311e1","sha1":"914b2a40ec189e760998009d7f9c1925a62c3fbd","sha256":"60f9c169c73ace0533f2d8129220d72e650956ce2486fbaa37e81f2a5e10257b","sha512":"2dc2c8e8fdfb4977d9b7d6fcf2b4e45b5014eb0776c6bd9477b097fa6cbde9e1a555668bb8962484adbea629c077cecf3a4c117fc69972e004013ad93467a3ed","ssdeep":"192:v3AbHQbwHuu2QU3+9vAVi5+2ZZlgOpR/+iJcDK:fAbw0o6IVu+2ZwOX+Ccu","tlshash":"0122c0841dd5bd0b6f1da7b66f635badf3861e980f738fc3fba0193a005018068a75a4","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-06T12:07:35.29439Z","times_seen":393,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-9.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-9.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1356\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 112 x 27, 8-bit gray+alpha, non-interlaced","md5":"558f0c35aa541850af470e4683219364","sha1":"60cc6834e3ced57f2b849955e2d6bb204dbb362f","sha256":"af42372a144350be48e2d13d92df4b11a783e71137f81bcf172c7d142173960d","sha512":"d2684da77ddedae60e08b443c9f88c40d51bdd104a704b36f05d7f365c10c738367012b5ec0351511f4b641c441265d18f71edab5aa02d181a4671ff16e18cc8","ssdeep":"","tlshash":"9021d8c724a4fb3ccfec3db9ab4b0e5244202162fe6b18344d553266ed569416d6384a","first_seen":"2024-08-29T17:20:29.855803Z","last_seen":"2026-08-06T12:07:35.234775Z","times_seen":125,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/contact-form-script.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/contact-form-script.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 674\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2144,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"3dc6989850222aee1a68cc132426f035","sha1":"f6a762662c4df511e97df3f0dd730b64aa31cd9d","sha256":"bbe7b53d11fee22a044cff9a34d37fe623ad369becd7a442e3b4f268e5d603d3","sha512":"2d2152378e98221bdf87e05c0d5fb7a97a69a335f565e5ea260dbf893d3bdb4237740a3577b6b3061759c9870b96dd0c875303c8bdb39547b6ac4f7dadc33fd7","ssdeep":"","tlshash":"5741bd08651927c40a333b7de69a9104df611363c505eb553caca9d46fb8f9831a1fbd","first_seen":"2023-03-10T17:30:02Z","last_seen":"2026-08-06T12:07:35.293256Z","times_seen":164,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v36/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/raleway/v36/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:58:59 GMT\r\nexpires: Fri, 04 Sep 2026 09:58:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 17:00:51 GMT\r\ncontent-type: font/woff2\r\nage: 293725\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-08T02:55:10.999396Z","times_seen":63198,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":91,"dns":0,"connect":11,"send":0,"wait":11,"receive":2,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/operators","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:37.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"OPTIONS /api/public/v1/operators HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cp-app-id\r\nReferer: https://cblbnk.click/\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 07 Sep 2025 19:34:37 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://cblbnk.click\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6fG6g4iRUrD6Tg2Gvbgc0GtDuBUy0cHDnV4ldbL7%2FQtgenbFl0G6o%2Bdbki9BNxPSkT9%2F%2FonrM0eUBPDfeFvs6%2BpThMG6Yrxxhw%2B7RA%3D%3D\"}]}\r\ncf-ray: 97b8a5024c1bb518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T03:24:23.448288Z","times_seen":17772091,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover3.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover3.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1606\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1606,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 114 x 22, 8-bit/color RGBA, non-interlaced","md5":"c6c60eaeb566d85adb9886293b3fc11d","sha1":"2a834350204e9692f6450fe3c2f11702df829751","sha256":"ec630e42ed81343dc9b0a03483b07b72d46c6f41f3803e5b3c32088c570a879d","sha512":"de35b6321d47b290138dd3c636bef9c1f7347a7574b1cb073231a0d8de58b65d7520a3822780f1ab00a7a6bdf663d8d9e453ce79f7ece12ccdae35d2018a9dcf","ssdeep":"","tlshash":"a0312a8ff382997e34181a637558dc30e80dc52c40f3e59f6e352d9d0a9e4aba00eb1e","first_seen":"2024-08-29T17:20:29.844468Z","last_seen":"2026-08-04T06:15:24.180716Z","times_seen":103,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-7.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-7.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1149\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 95 x 33, 8-bit gray+alpha, non-interlaced","md5":"6759e6dddd6e292492c9ef91292d8c22","sha1":"ceab17fa5e625fbcfd22870a999641dcb4b27258","sha256":"268913d7271b6238b1ae3f570aae11f13a78d05d96a362d1a2387e5aa95ee997","sha512":"eb6ab572a9c1e223421933b3fe49d938849d9f8ea8e246cd421959c5310d564517934ccef196bccbddb61e134129db1a21e260671d21a33af853885d998bd2dd","ssdeep":"","tlshash":"2f21d3b1261801368892203732668cede2b4a0f89fd02793289147db9e0ae2438d58eb","first_seen":"2024-08-29T17:20:29.851196Z","last_seen":"2026-08-06T12:07:35.222302Z","times_seen":125,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/slick.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/slick.min.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10883\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50674,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2614), with CRLF line terminators","md5":"cca96dece8c053d46dfa20101388d2d3","sha1":"2c14e299764bcea9dc875e1f2e1a86afc7bc3fcf","sha256":"db5a2153f69965283f3d434959ffbee8dc61514e524fb871c6faac56a1b6f742","sha512":"a2ef71e1187f1aced8be072976d59cd360a4015fabdb3a2bc55d56df4fa06eff59e24aff355dcbf1cea7efe8c49cd3cf760152c40283803f6f08e97c88307815","ssdeep":"768:MjL0ySLGPzYbHpJIkdSAeFr8qGAOxCt/QXlGLAcB68Kmb:UrPzYbVxCt/fB6ri","tlshash":"4033b409a210172658e725f5305bc54c73ffe6ba9a01c1d878e683ca24dd1059fdfbea","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-06T19:22:49.40983Z","times_seen":528,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/odometer.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/odometer.min.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3453\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10264,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10241), with CRLF line terminators","md5":"cbbe383a299d4cd3c5afd850e23b93e2","sha1":"a57fab98eed3ee4da231031c823c0dfe71435e5d","sha256":"b98842a571aa1f32f8797a9d08186bb021f258925a8db4fe57d60129b858b1ec","sha512":"85b7267f38755128dff6d6435f050b949d6b99c72290c00d6813b16207c8e3e70ae01300f4269fe28df87960be5ef2211c3ce4929ea36ae866bb0e6ff7f849e4","ssdeep":"192:kABzlvQK8QecCHAOcu2a+OdI5s/GMb8XuulT:vBhv18QecCxVxz+7dlT","tlshash":"3b228580ba11a725835372e151bf0609b7bb99aea404401db67c9dd9be29c38e12bf74","first_seen":"2023-03-07T12:27:14Z","last_seen":"2026-08-07T22:17:15.823239Z","times_seen":3295,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/owl.carousel.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/owl.carousel.min.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11146\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44350,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31998), with CRLF line terminators","md5":"efc01f2aded8e7b272ab9f9e1b3ecdb0","sha1":"eef21a57c46361f05c28d0d7b97fdc6530185c17","sha256":"668bfb67cff6b815ff9f9b82e070d4ad8721414bca6f3de21f10fb9f3e5dfa32","sha512":"20e04e83be2dbab7ec9972ac31ba5372fa53d62d046220f93e348c47f1840b636d54d8ca380eb36e7f7445123eec24e1d435fb61928eea259ccf912c5c3e8b08","ssdeep":"768:FCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSRc7UuHjRUQuFBt33:MITMFC4dbMVRSRcgRDV","tlshash":"cf137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7d88c213ffbc","first_seen":"2023-03-08T07:37:20Z","last_seen":"2026-08-06T12:07:35.237616Z","times_seen":832,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover2.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover2.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2091\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 29, 8-bit/color RGBA, non-interlaced","md5":"1851e6ca9b5290ff490c5cea13c51951","sha1":"60f9e4afd109589678bd2c3376ff38b4cddb988b","sha256":"8c5330f09362b914ebe68d8fa3b4d01b74c5f152187d7fc3b7b90eda10d4a69f","sha512":"3c2ee87262ab0bd16a9114712dc1e0c16880ae805823e0cca55d9fa3d704c940bd6b6c9957690ae946e0d7a0832af0cd21c5a2af71da3b108a5ecac53f360c4d","ssdeep":"","tlshash":"854138e6e37462b4971f0ba64b7533b2403f858c2c0926818a5da9f3cb4968c18872fc","first_seen":"2024-08-29T17:20:29.842254Z","last_seen":"2026-08-04T06:15:24.216432Z","times_seen":103,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/responsive.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/responsive.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4725\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0c84a81a7dee675b6713af510b5725d8","sha1":"2ebb9bb229c01f940e0506c8d260947d9c48a996","sha256":"7b7658d6d943c42439e53284af5caef22a924806eba3501e6c0b11b88aa8a2fe","sha512":"c2c0b2cd39d3e338d5a56c5e5d9f26708341e44e6f7a7080db61814418971e4a0bbcf72ad786a7d1178aca1cd0443ee77207bf95f1120dde48b9106b5a397cfb","ssdeep":"768:88wvXFz1EdMOnP6FeVFMF530Cbms3LWg+6O2HFzR:88wvXF1EdlP6UVC7bms3Cg+6O2HVR","tlshash":"d713989f7aa3110c786aa6b96abd3a12b745d453d38edce379c4206ccfd46d00ad274c","first_seen":"2024-08-29T17:20:29.816202Z","last_seen":"2026-08-06T12:07:35.273511Z","times_seen":160,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/bootstrap.bundle.min.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22162\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78085,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"52a78545b39d3c5ceeabbac8cbe46cc0","sha1":"99e4421a2f4de040de5905bc15cd45d291ded586","sha256":"120666e01d671db172cecd87aaaed5cb0feb2da24d971c291fe1b8e0f64b18ac","sha512":"22cde83ff9ed88611b9307db3ec6604683d958c3d8caf879220f60146ff760d60dd5769cc5accb9655e269c21c2829fab47ad0d57963714ad435a3c4db28fc59","ssdeep":"1536:P+pbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:u36WJr9ixF","tlshash":"3273c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-08T09:18:43Z","last_seen":"2026-08-07T22:17:15.786818Z","times_seen":3079,"resource_available":true,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/magnific-popup.min.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/magnific-popup.min.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1410\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5259), with no line terminators","md5":"64912a79884a20761ab19de42f85218c","sha1":"8d29cea8f84afdcaa69c0594e37263f7374dc8a6","sha256":"3d92e113ac3031b838001ddddf965d045f470ff748ff2e116b30378910eeaecb","sha512":"f84a0fc3e162c21e9e49e44aef3c08286d8c03c8b7ad5fc319aded76db501a05b26ad1bf4a49dc4f9dca1d0692e4987d30d393ddd9852f41634d8d3c02777f0b","ssdeep":"96:VuKSCO7EWP9UrJjIjZQX8ZO9d5Zkxudls5/Dm5Mk9nCWh3:VSCO7EWP9UrpIjZQMZO9d5pd+qMk9CWB","tlshash":"43b175f3a941313ac633da16d5c39f9c3227a227f663569fcf82a419c6ce89c0525384","first_seen":"2023-04-05T08:30:27Z","last_seen":"2026-08-08T02:22:40.83997Z","times_seen":5184,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-11.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-11.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1251\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 101 x 30, 8-bit gray+alpha, non-interlaced","md5":"f4d3897cbabd300e0274b6ecf9845169","sha1":"36d77dbf7b56f2e9621f54f8e00cf5302875baeb","sha256":"406f5ae5c0766833fdf1d45c4db1dafdda7458150e7d553050fce004dda744a5","sha512":"34ecb02c05ea404994449877954108364216975f4ad460263cafdeedc1fc6841bc7d7605f1e135575c030f59b7a93aeb84e3b805c104b80e33908cdbf4f785a1","ssdeep":"","tlshash":"6e21e74167d0dbecd200715f8bbd0a7a39b053624be809ab85f780a12addfc06723c93","first_seen":"2024-08-29T17:20:29.863999Z","last_seen":"2026-08-06T12:07:35.263552Z","times_seen":125,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/storage/app/public/photos/IHK3yKeC6GMPP6BFJOYKvbwYhJAM2RrTtMLuE7lz.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /storage/app/public/photos/IHK3yKeC6GMPP6BFJOYKvbwYhJAM2RrTtMLuE7lz.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 396\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":905,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"df882a2bc6a9487f1ee4ab3e2e8a2907","sha1":"ac84a963f828c9155ebbb2099b2f2dfce2622e13","sha256":"86a47b00cba19c9226b26cec982869328495090cc725e9f13333a103a6944d25","sha512":"d239b3255e4750e59f78f61f26e42ec2d6a11733282d76b1066f999379e8eb0dc5d7bc606525e8cf59f0a5e12797134d57f7ab9cdbdff1bd33e11dc16676f718","ssdeep":"","tlshash":"e9112f7f48151afe121082b2b120322cc0dfef2b6e427800e07301a66ad8ac4c5bd498","first_seen":"2025-09-07T19:34:52.142939Z","last_seen":"2025-09-07T19:34:52.142939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/js/meanmenu.js","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/js/meanmenu.js HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1476\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6035,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (397), with CRLF line terminators","md5":"f92bd7e01c33f6a2bd73c5a2833b4874","sha1":"39533bc5c1e8128008023565e03830e00ce17808","sha256":"0927e12f94a642d9bbf07b4204102848162eeecadc02d002ace6fe334315b832","sha512":"e8a7d2768621e01fdf3e45eb187437f7c452f6fafd1d0a48add3844c7d16858ebadaa17f7b7272625f99b8a3f1f4426fab861d62cf1c0656bcca6617a12b344b","ssdeep":"96:cqHVT5bG+ESTXybNrNnaToz99MClbxXvY+CSoGZn7c6BFSEXT:zVT519XyJnl1BCSlZnl9XT","tlshash":"bfc1dd2bb5b044f8a0bb7a61b97af230f4f3660bf146d50131bd64262f31d6015a2fe9","first_seen":"2023-03-10T10:53:12Z","last_seen":"2026-08-06T12:07:35.257582Z","times_seen":430,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:45:21 GMT\r\nexpires: Fri, 04 Sep 2026 09:45:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 294543\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-08T03:20:34.696571Z","times_seen":958475,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":99,"dns":0,"connect":7,"send":0,"wait":8,"receive":4,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"GET /javascripts/insert.js HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 06 Aug 2025 14:03:34 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nage: 991740\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mEnaLG2JD9KFQoilz7z2wU%2BKn6cK0Fwsao1y3%2BFMuGjrkolJob%2F6z29pq3U0QyOg%2Frq6h5JlMgKUF5DcSQ5685xQ03IJQy0TjYl7Q%3D%3D\"}]}\r\netag: W/\"689360b6-3e6\"\r\ncontent-encoding: br\r\ncf-ray: 97b8a4b5a843b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":998,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (998), with no line terminators","md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-08-07T21:52:50.271434Z","times_seen":1846,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":16,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover5.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover5.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1314\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1314,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 89 x 24, 8-bit/color RGBA, non-interlaced","md5":"c301a2dc174312fc18bff84221545119","sha1":"235f48996b90661046282644e548565b7082dab6","sha256":"bc46733754cf4b988ed394ad65947191b0584af59bc545ffff91a2af797a06a4","sha512":"ebef33a0b648efc7fa6f28d8c4bd30c39f1d0f71e402884c63797db191c05f95785f7bd1602339ca8575e977d0f39078389224a91f3d84151ba4c2ac39c6a04e","ssdeep":"","tlshash":"092108d7fa4c186a67c82ac30dca098d3978be701681c71f508734321a8213b8cae916","first_seen":"2024-08-29T17:20:29.84775Z","last_seen":"2026-08-04T06:15:24.213567Z","times_seen":103,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css?family=Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 07 Sep 2025 19:34:24 GMT\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64800,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c38dbdd89841cd3464256b8ade904196","sha1":"359b43dd41b8c13300a38413fc1b2a0c6d3f0891","sha256":"15405f27dc4b968054480cc1c7c03d13bdf9f229237d7c03b47bec87c48763b3","sha512":"34a30ea8117a3ea1337a1cd34a78b301ab33255278a1ec8a6127368ae6733d389ec06990336bdcff5974f7a0f005d3514120faed014cc0900d3e7eed74abdc74","ssdeep":"768:yFDFjFKFjFaBFeKFpFNFW3XEXa9eEV57qK9KaEe9cowV1S1afeS3TaLrora5eoxL:aebqaQ1Z2pV7f","tlshash":"8d531f61041b5040ab835ce223ce7e34fe0f92547241d075abfc9b6beddbda6526836c","first_seen":"2025-06-02T17:26:11.322101Z","last_seen":"2025-09-08T22:49:36.475493Z","times_seen":1239,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":146,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover10.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover10.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3724\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 141 x 32, 8-bit/color RGBA, non-interlaced","md5":"9587563fb6e6a1e4da92f6342fac240f","sha1":"424ed7ec46237abf171e22003c2d8613c8e3a498","sha256":"75824ceb062c16974362f4fb55214e007d0c26de4d7b944c685c68294905e8c4","sha512":"b638ad165239b049fa0ba3709ab7971579700e1727cebb3c8f08dfebce6b607a582d7b3a9f4d375927d83ec5e4ab78716fbf13dedd57239415e500b56e683f18","ssdeep":"","tlshash":"d4718db1d13e0e1995910735c53618a8a730082e49612bda3947ceef60d472a577af8d","first_seen":"2024-08-29T17:20:29.862884Z","last_seen":"2026-08-04T06:15:24.219919Z","times_seen":103,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover16.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover16.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2091\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 29, 8-bit/color RGBA, non-interlaced","md5":"1851e6ca9b5290ff490c5cea13c51951","sha1":"60f9e4afd109589678bd2c3376ff38b4cddb988b","sha256":"8c5330f09362b914ebe68d8fa3b4d01b74c5f152187d7fc3b7b90eda10d4a69f","sha512":"3c2ee87262ab0bd16a9114712dc1e0c16880ae805823e0cca55d9fa3d704c940bd6b6c9957690ae946e0d7a0832af0cd21c5a2af71da3b108a5ecac53f360c4d","ssdeep":"","tlshash":"854138e6e37462b4971f0ba64b7533b2403f858c2c0926818a5da9f3cb4968c18872fc","first_seen":"2024-08-29T17:20:29.842254Z","last_seen":"2026-08-04T06:15:24.216432Z","times_seen":103,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /translate.google.com/translate_a/elementa0d8a0d8?cb=googleTranslateElementInit HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nx-powered-by: PHP/8.1.33\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 396\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":905,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"df882a2bc6a9487f1ee4ab3e2e8a2907","sha1":"ac84a963f828c9155ebbb2099b2f2dfce2622e13","sha256":"86a47b00cba19c9226b26cec982869328495090cc725e9f13333a103a6944d25","sha512":"d239b3255e4750e59f78f61f26e42ec2d6a11733282d76b1066f999379e8eb0dc5d7bc606525e8cf59f0a5e12797134d57f7ab9cdbdff1bd33e11dc16676f718","ssdeep":"","tlshash":"e9112f7f48151afe121082b2b120322cc0dfef2b6e427800e07301a66ad8ac4c5bd498","first_seen":"2025-09-07T19:34:52.142939Z","last_seen":"2025-09-07T19:34:52.142939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/accounts/68aca082fe1c295f057c4d0e-293fcd7a07de9357e020451d483b5dfa7f69903bb33de7fbccaedda432aebd1c","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:25.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"GET /api/public/v1/accounts/68aca082fe1c295f057c4d0e-293fcd7a07de9357e020451d483b5dfa7f69903bb33de7fbccaedda432aebd1c HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cblbnk.click\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\ncache-control: public, max-age=31536000, immutable, no-store\r\nvary: Origin, accept-encoding\r\netag: W/\"5f3-5AVV5DQSqIONPeTt/N5aMjLmeE8\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwzkhwPYL7Ig2lf87Eg5vL8pPpgnNyBMcUXVRPYx7cfsApJITSzmIzLDcwYWWB8427fF%2FX4%2FYkI%2B%2Fqnfr82bX49FSxTAr0ziYIBX%2Bw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97b8a4ba4c78b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1523,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"37423a82280ca3913e246ac357ca344f","sha1":"e40555e43412a8838d3de4edfcde5a3232e6784f","sha256":"293fcd7a07de9357e020451d483b5dfa7f69903bb33de7fbccaedda432aebd1c","sha512":"0527f32b12f4821f74f63319f33a5563b6a409bbc52aad6d97afc293ddc9913bba2c4d01af3b4321a7333142fc91ed86179e18d130556222f4c2c4cf81a1b016","ssdeep":"","tlshash":"2131de6924402cbdded6921ab8d33f930f7c617366842c19e08cce2c77eb5da5626403","first_seen":"2025-09-07T19:34:52.203274Z","last_seen":"2025-09-07T19:34:52.203274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/invoicing-image/1.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/invoicing-image/1.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25043\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 682 x 448, 8-bit colormap, non-interlaced","md5":"c393722b7042005b24b5124981fa52fb","sha1":"c4faa75b0358dc94de84fe1e152c1100a15794c1","sha256":"a2592be1c2009912e7b17b4d1a5022ded8c2237ec22d9fc381d307098808af9e","sha512":"1c62546d8d8bdfb9035ca3e8758e2c382dfdba79a7aad75775abd5a126d369f5943a07e72adb8738f6676986a388ae4add17e6c44104a795c28ae820cad5a808","ssdeep":"384:xmvay2u7wM9bFIPgNkV4BIzKqKRHArznOOC2sZ8K1uteVC4mN:xm/rUkkaB4zlf+CK1uJ4A","tlshash":"3eb2e16f8a62861cfad54caf103db256e4f4ed292cd4e42fa92d5445e3f62b080627d4","first_seen":"2023-05-23T06:22:12Z","last_seen":"2026-08-06T12:07:35.220128Z","times_seen":380,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/odometer.min.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/odometer.min.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 436\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3274,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3251), with CRLF line terminators","md5":"33857183503886a3ea32dd5f475ed489","sha1":"6a702c75c57ee5cd30c4fa6fd22a6e5ce19ee58a","sha256":"53c8d41573daafb7177733ea705128818a28503ddc9bfc261a9988199b6069c6","sha512":"5800187f2f7656cee966134f8c67c75004a533403f4ceef58b053be20e912765bd1f2b65f68b3c9c0ef303b5511c1ccc2d9ab12d399f1103d6fa0be716c7bea2","ssdeep":"","tlshash":"4e61f5154f90036863367506bac81760befce9515123e98eb35ea54bcf43db9e398b0b","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-06T19:22:49.405609Z","times_seen":578,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover1.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover1.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1999\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1999,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 103 x 33, 8-bit colormap, non-interlaced","md5":"9eb36cb2849657119342b6e05e447069","sha1":"13c573438af8fa4771529d4a0460eeb5c9ebb2ad","sha256":"248d0b89a91e9b4a96c544f7b09866012847c5bafaf55ff5dbf5815e008381c9","sha512":"60e9b55900fcc34754c2737ccdb37cb3b2cecd22c3e3ebdadca55e18d94e9a2aa4937eba9d9774da07bb60e88e235e32fdfbfcd991c6384e36e16d5c41fc0597","ssdeep":"","tlshash":"6641fb68d7d577364320045f8036d4be491e59e0c4b862ca4b37dd488c30c1993dcfc2","first_seen":"2024-08-29T17:20:29.839939Z","last_seen":"2026-08-04T06:15:24.191983Z","times_seen":103,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover17.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover17.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3194\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 106 x 27, 8-bit/color RGBA, non-interlaced","md5":"a71d832ce1d1b7c47ec023442a3f1af3","sha1":"44e03ad8676be0b7804139b496e5278b8ac309ac","sha256":"da41d151269b35269583061d447dca847b49e773a8089068d5b2cd3e746d3ba6","sha512":"ff8c25e1f23eca2e7c79942217e5d39e1a34465c6304a7918d978b568019f429b61a51302bdf33f1a42ecd864fbcf1c1a3d7183e3702133005ec566f53ac24d1","ssdeep":"","tlshash":"e6616ec8473638787943116366f8270d836c43c36a4d5d2e7255f6905538bb8eac727d","first_seen":"2024-08-29T17:20:29.876478Z","last_seen":"2026-08-04T06:15:24.140377Z","times_seen":103,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":428,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v36/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/raleway/v36/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:58:59 GMT\r\nexpires: Fri, 04 Sep 2026 09:58:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 17:00:51 GMT\r\ncontent-type: font/woff2\r\nage: 293725\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-08T02:55:10.999396Z","times_seen":63198,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":195,"dns":1,"connect":25,"send":0,"wait":8,"receive":2,"ssl":182},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/flaticon.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/flaticon.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 439\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1569,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b685b2dfd3cfb19626146177d1c95e5","sha1":"f195ad890dd1d507d2fab849448e9b737f9d6bbf","sha256":"909efd0a62bbc415e927346844061afdedd751683b6eba7142b1db3bb72ea18c","sha512":"621b491a8b01a066a23630a90ebb71fbaa89c6d10dc9581064a548f82f2c467c5b4a47237a829d4ac375ae049c47f571b96d494124d5fe314f7c565b39189ade","ssdeep":"","tlshash":"4e31e6e9c12e10818712af45e7abb6d0af48b02c99c09d1ae1751d9dfef1e35878279c","first_seen":"2025-04-09T11:54:58.551863Z","last_seen":"2026-08-06T12:07:35.210415Z","times_seen":146,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/operators","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:37.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 Aug 2025 02:32:46 GMT","end":"Sat, 15 Nov 2025 03:32:43 GMT"},"fingerprint":{"sha1":"01:36:3E:B6:0D:1B:20:C9:1C:FF:19:4C:6B:BE:31:37:63:75:69:48","sha256":"1C:6B:6B:6B:35:77:8D:C8:42:1C:73:A8:48:66:86:E0:94:D1:9E:6F:BE:9B:A0:CB:ED:34:2C:22:18:E0:A4:A6"}}},"request":{"raw":"GET /api/public/v1/operators HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nCP-App-Id: 68aca082fe1c295f057c4d0e\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://cblbnk.click\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\netag: W/\"12b-ue1zrBIFzY12djXWCstzWIfkmVc\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zf09vQwqT3wSK9gOOW7vPdOy7A5pj59bhBNB4P8ra%2Frjnar6kblOl3C2mDRFiWs%2FSRhzQoXF3SjsP7%2F5WWuufMXDqq2bdBy61KtlIg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97b8a5028c54b518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":299,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1dad076e559032f23a1175bb737380c","sha1":"b9ed73ac1205cd8d767635d60acb735887e49957","sha256":"03fbae89df2744543bdf5afa4eb9a87ef3cf2519d9913d88d4b483dd9a098436","sha512":"87aea6e11d72287cbc4c5f2846329e687f242a2c3c435b22403f4b8bf2b1f3d4238d7dc306f7214b508ddf1f48a730413e6d8bade24e9aae0ba19b023a5d72a1","ssdeep":"","tlshash":"05e02b40f0443d35ce21e61a8817ffca0f3c5c7b66743e98b00cc41873575c09426623","first_seen":"2025-09-07T19:34:52.20915Z","last_seen":"2025-09-07T19:34:52.20915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/map.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/map.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26716\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26716,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 910 x 443, 4-bit colormap, non-interlaced","md5":"84d3bcdd189d01880e685656aede0412","sha1":"22a1f1efc40b1ee1ff616e9da1d9a0e3efec8263","sha256":"ada5be5a95130a3615d8bbbc3ffb593c68cc36d50ae335d567b71ae95a6dbfea","sha512":"366c88a7add9a6c914aae9940b1ba1747949694da7193058c7efc741225bf498a67db626c7cd9793958031d737cc485fbe69ee6785961fbcccdef90b745d8070","ssdeep":"768:h9C/LmjrGCEQspqrxVnW2/MQd9dC37wTt:h9yYGP/pqzMsm3kTt","tlshash":"2ac2e1ad0c435ef6abf126ab03f3f3b5260a320a1264de955632d4747c8017df6a7854","first_seen":"2023-05-10T09:37:00Z","last_seen":"2026-08-06T12:07:35.249539Z","times_seen":166,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-hover4.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-hover4.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1468\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 137 x 25, 8-bit gray+alpha, non-interlaced","md5":"89ee29b52733482f2b46ebc912ce5500","sha1":"4751c71c14d6f8d3d2bfa74cdb10296d1ae918a9","sha256":"0c6a43caf79eb9ac129df256c227492065d1744df5e9ad6b61f3c701059b2d7d","sha512":"3dd37a5d3066a949129c68e8b0a70edc6d9443b5eca96a7413c0cc49de23078533b29b892e38e89b8f681453412ed4baba9132a4d8d3f225dbc0b8b50e6c6cbf","ssdeep":"","tlshash":"fe31c494e2f886b4cae97528df3104da1b4134cb22b893328650a6c10ee2e1289e6013","first_seen":"2024-08-29T17:20:29.84554Z","last_seen":"2026-08-06T12:07:35.261807Z","times_seen":125,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"92:56:50:82:E4:D4:6F:F6:7B:08:95:2A:7C:4B:F5:6F:25:84:83:94","sha256":"A3:71:9C:57:37:7B:05:4E:9A:BB:BF:7C:17:AC:AB:9F:F1:32:11:03:1E:97:2E:B5:1A:B6:60:D5:7D:87:FF:8E"}}},"request":{"raw":"GET /s/roboto/v48/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cblbnk.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 44192\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 10:27:33 GMT\r\nexpires: Fri, 04 Sep 2026 10:27:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 292011\r\nlast-modified: Thu, 29 May 2025 23:37:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":44192,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44192, version 1.0","md5":"1c278435b6738e80614efd67b0aa1d75","sha1":"553a407dccbf2e476e53a88b9bd5c625c48d8f99","sha256":"9ec9eb9108f1752c30ba316606858d685a112a609d8bef1fb3d5d32c8e0b6507","sha512":"7b05bc06e51a460927d557deb8deea554c692b6edd381ed2e1e98daebb026b3de471c56278114f48a31c075d2dea30200acee2f2a804246bdfde61be1487f9ee","ssdeep":"768:dji8cRMN2W5RiThDSklZ8iD/ZbANTt4V7NIPuezvbzstqP+l7rx4HDgcq:dteE2WriTsOhzVMfTEqPI7rxkDPq","tlshash":"d113e17ba74b08c0638388b867367bedf5e5c0218b5c5ef85221f481f20d759a6d92b7","first_seen":"2025-01-09T01:43:24.38206Z","last_seen":"2026-08-08T03:13:41.708523Z","times_seen":39607,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:24.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 00:58:13 GMT","end":"Tue, 02 Dec 2025 01:58:08 GMT"},"fingerprint":{"sha1":"7F:BD:69:96:67:8F:C1:80:B4:56:CA:2D:BF:6F:D7:53:85:AA:5F:49","sha256":"AA:9D:26:FB:CB:9A:0B:7E:9D:10:97:23:1E:00:BD:73:1D:C4:E3:24:4F:90:DD:89:36:30:85:35:4F:35:2A:EA"}}},"request":{"raw":"GET /flags/svg/en.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nvary: accept-encoding\r\nexpires: Mon, 31 Aug 2026 01:14:31 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 670793\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BSw5iZnKUsf4GRcZs4ILTdMoliiak5PNFIH%2FDkBDx1gX%2BtWdhKgXHkVv6wG0Lw6TzuyY66RjnpgfJbR%2FUom6QQccA37%2FGkCXddTO%2BU%3D\"}]}\r\netag: W/\"639d0089-35e\"\r\ncontent-encoding: br\r\ncf-ray: 97b8a4b56e28569b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-08-08T02:26:23.420035Z","times_seen":13818,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/popup.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 00:58:13 GMT","end":"Tue, 02 Dec 2025 01:58:08 GMT"},"fingerprint":{"sha1":"7F:BD:69:96:67:8F:C1:80:B4:56:CA:2D:BF:6F:D7:53:85:AA:5F:49","sha256":"AA:9D:26:FB:CB:9A:0B:7E:9D:10:97:23:1E:00:BD:73:1D:C4:E3:24:4F:90:DD:89:36:30:85:35:4F:35:2A:EA"}}},"request":{"raw":"GET /widgets/latest/popup.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 18 Dec 2024 23:02:20 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 27 Aug 2026 03:22:41 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 1008702\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9WNRDLdI7SoOkpq6NwsSgEUtvysva0SwVlZN0OlRrrrPqIOcIrL9Hh2EKgNP8bLuU8hKuTcJXmHZYdESRD8LX84%2BJkwcbe5pGerBKk%3D\"}]}\r\netag: W/\"6763547c-48f5\"\r\ncontent-encoding: br\r\ncf-ray: 97b8a4ae9e2f569b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18677,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"25a53a5f0b8958bcf0942c535cba547d","sha1":"28656ad320afc16783fb4a48ce915e6eebfa01c2","sha256":"c9e18491ace8de422d23023f38a03ca17ab1657d70a5e1a00d4412abdb032bbd","sha512":"6dd60607ec8c9e8792d0472c7c7b49d8d0b68e34748d006ce617be7d8d738994e958ae0c512976edf0aceb5ab2d9f633f1fbd24d16925736296a37908d28ebac","ssdeep":"384:AzCKMPZATN09o0mtEMDXYddj517IHVxBCZlXbt/dDscc:AVMhAh060sEMDXYbZvdq","tlshash":"5882f95a11b3103e5a171129efff2b0c60ba42978101fc21bf9ddd825fc1a9d96a7bd8","first_seen":"2024-12-19T06:49:00.441223Z","last_seen":"2026-05-08T05:39:26.295827Z","times_seen":1910,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":9,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-8.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-8.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2309\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 91 x 56, 8-bit gray+alpha, non-interlaced","md5":"50c9cf54409bebaed5eaa47dc354ed2f","sha1":"bcecf99571656410e7ba7aad2f5c206c0215b1c1","sha256":"77f31bbbbfc4d6d6979f8ea288f16650ad23091ce59696241ea258f7f0061447","sha512":"8e9087ee3970e78c19846a8e0e73b0766b299b1d5262706cb74f0ea03237ba975cd116c2e6e37c900b3f5e2c1631e5ad751793f614364849f63f31ad96853240","ssdeep":"","tlshash":"f4414bbbb1919c2eb380636b98efe9dc3a445183838f420a87259420d0901ae2d5ce2b","first_seen":"2024-08-29T17:20:29.853611Z","last_seen":"2026-08-06T12:07:35.243277Z","times_seen":125,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/img/partner-image/partner-10.png","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/img/partner-image/partner-10.png HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1750\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 141 x 32, 8-bit gray+alpha, non-interlaced","md5":"929ccccb0b047c31dc025c72ecc5525c","sha1":"249a2600a4ba4c31aeac4158cba7812951a2a421","sha256":"424f9421e18757e27fba8030ba3f419629eb8602818fe931581ee07566bb3809","sha512":"a2d57287a45145afc5e6d0ba6a10f4f108ce789cba14871ef7d55a84a4261bf68ec8508a6195f7c0bee91825b5d96605bd0b9bbb653ee8d8767425d3fc971705","ssdeep":"","tlshash":"77312bbf1724c9452de36757b7150cb26925175f498238a1cf7eb4878e6050da073eb3","first_seen":"2024-08-29T17:20:29.86118Z","last_seen":"2026-08-06T12:07:35.224118Z","times_seen":125,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cblbnk.click/temp/custom/assets/css/fontawesome.min.css","fqdn":"cblbnk.click","domain":"cblbnk.click","tld":"click"},"ip":{"addr":"163.61.188.92","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cblbnk.click/","date":"2025-09-07T19:34:23.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cblbnk.click","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 20 Aug 2025 16:43:28 GMT","end":"Tue, 18 Nov 2025 16:43:27 GMT"},"fingerprint":{"sha1":"31:6E:EE:6F:F2:C8:1A:EC:71:23:E9:D5:31:BE:9B:B3:99:52:64:A5","sha256":"3E:6B:3D:94:EF:CC:78:BD:06:59:4B:9A:0E:39:83:EF:E1:C7:07:2B:95:A9:03:24:60:40:4C:2C:30:3F:70:3E"}}},"request":{"raw":"GET /temp/custom/assets/css/fontawesome.min.css HTTP/1.1\r\nHost: cblbnk.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cblbnk.click/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjRJakxvMWZweTQ5a2EybmJGVFlqNGc9PSIsInZhbHVlIjoiYy9teWc2YUFQSmlXTUMwUDRtcHN1VkdFTXB6MGhvdjBWNGwxWVEwNVViUVAxd3ExaUREa1o5YXM2OUp2T1hzRW10dGVMQkdxaXkzQlMxVjVkNHRNMERpTnVneWxLRlJaQlJteGxSSEV2T1RrVGduZG5abUN1SnZsTG1JWEhxbkQiLCJtYWMiOiJmZDdiNTU5NWY0MzdlMWQ0OGY2YjNkMzM5MjhjMTlkNzc4ZDExZWUwNDM3NjhmNjYwNDllNjE5MDMyM2I4ZTY2IiwidGFnIjoiIn0%3D; remedyfinance_session=eyJpdiI6IlArWmUxMkRCWjd2czN1T2tENFZ4dkE9PSIsInZhbHVlIjoiUVVGUld0U2dTT3VqL1hyeER6MHRnMWFpbmZpTnYvbkxNWGs1Q1kyUU1OdnFRSk1aU2d2MTNkdktnY2gxbHZLUFFZR0ZCUkFER3laZU90bnlpK0xETHJLV2FXMXhzdmFpZGQvLzJ5TkhkZFFieG1yeURvaWd3WUZiUk84eWxGSjkiLCJtYWMiOiI4YThlYzFmMTE0NTRlN2M1YzY3ZGJiMGFkOGI5NjI1MGY0YWUwODQ2ODNiMzA0OGMzZWUzODExNjE2YjM3ZjJhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Sep 2025 19:34:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 26 Mar 2025 17:09:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17720\r\ndate: Sun, 07 Sep 2025 19:34:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65312), with CRLF line terminators","md5":"c858b27aa3346543c8a9fa0e8e48bf96","sha1":"682d2201ea724790a5216a74690362a32c201126","sha256":"51378e1e8afaf0d01dacb6da2997f918193e39ca0dfbf27b3d2bee66274403c9","sha512":"c28ffb3fc229404e589944c31aedbad4f453efc3e119531ace0eade726fc61460d68ac4272c717d81f18031d938a2688be7c8e15cc4ab77e42a00766a9682923","ssdeep":"1536:KbMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IVVUHsR+v:cd1NY95IVVUMR+v","tlshash":"5193a9e9e04c05d56732c44baf99b37c65b6f73cd5810da9f02f580c1ad26a822c6f7a","first_seen":"2023-04-07T03:58:23Z","last_seen":"2026-08-06T12:07:35.289075Z","times_seen":405,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-07","alert":"Sinkholed","trigger":"cblbnk.click","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}