{"report_id":"d78aa262-0342-4e2d-aab6-128aded799b7","version":0,"status":"done","tags":["amazon","phishing"],"date":"2026-09-13T12:52:02Z","url":{"schema":"http","addr":"app.sellcordclient.com/","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"title":"Amazon","dom":{"size":181667,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (52139)","md5":"08f8f8ebcc0aeccbfa5a9584f38cc338","sha1":"219aedc77eb6e980f79ca56e579b459ff3469587","sha256":"2ea0f80790c47b13177ce8a51daa78d2dd4d6c10a876d5c74cee57e529cafb58","sha512":"c8751974b4cc9ab3953514dce37aa300c1013f151d9f8b0135136fd1d90c1f4c8296fa0b260d711fad4555ae738dd0314b191df36a9f79c0e4d9203669eb2a5b","ssdeep":"3072:w9eTykBuAi/0TCMaVIBwshBXrMOvd/qcKYgMr1G1CMgNkauKHFDK:wGtlrnNkauKHw","tlshash":"8f04e8e5163892ec48cb43bedf3db9d1322e70fdb56584c0766e5b585b43ba4f80a980","dom_hash":"domhash4130a35faddf738bfda109b277618fa2","first_seen":"2026-09-13T12:52:18.828605Z","last_seen":"2026-09-13T12:52:18.828605Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app.sellcordclient.com/","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T12:52:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"cdn-pacvue-public-doc.pacvue.com","ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-10-27","domain_rank":7154026,"first_seen":"2025-07-11T08:07:45.48016Z","last_seen":"2026-09-13T12:43:48.514192Z","alert_count":0,"request_count":11,"received_data":1919312,"sent_data":6326,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":2,"received_data":15826,"sent_data":1092,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fast.appcues.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-09-08","domain_rank":46741,"first_seen":"2015-02-20T11:31:09Z","last_seen":"2026-09-08T12:31:18.477306Z","alert_count":0,"request_count":1,"received_data":23414,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}]},{"fqdn":"api.pacvue.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-10-27","domain_rank":3911583,"first_seen":"2022-09-14T03:52:42Z","last_seen":"2022-09-14T03:52:42Z","alert_count":0,"request_count":3,"received_data":0,"sent_data":1950,"comment":"","tags":null,"fingerprints":null},{"fqdn":"apiuser.pacvue.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-10-27","domain_rank":0,"first_seen":"2026-09-13T12:52:13.416801Z","last_seen":"2026-09-13T12:52:13.416801Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":615,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":3,"received_data":148035,"sent_data":1743,"comment":"","tags":null,"fingerprints":null},{"fqdn":"app.sellcordclient.com","ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-13T12:43:47.861603Z","last_seen":"2026-09-13T12:43:47.861603Z","alert_count":285,"request_count":57,"received_data":10703601,"sent_data":27227,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"app.sellcordclient.com/","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a6c3ed569fb5024b2c71f9b3da48fae","sha1":"b1d8db2f1e07dc3b4fb9c58a46414d55849dc987","sha256":"d1b5ca853649c573c785dbac1ab205aa2dee8358c36f92b2348af3f26327b36c","sha512":"587b278c55c024b7c8080f11c950ed27c3e167da50d6cc044d54b04e0f0dac87ed5776c5bf9dec1d38cf25cc006f32e75e3408cf9003cd1d042c08ec9a6d19ad","ssdeep":"","tlshash":"bb8000a0e03338b022a222f0023b2ac03a230c0808c000023aafa20f3c3283b2282888","size":35,"data":"","first_seen":"2026-09-13T12:43:57.181127Z","last_seen":"2026-09-13T12:52:18.896299Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13b9dc9333b79cee81fc4d8cd1438735","sha1":"8902bf7ddefb07187dd00289e5c8e804fb040f27","sha256":"8a054b421964377d35cf7b01e3440f3c727a53ced4e32745aeff267bb48e0097","sha512":"2c58796d892292203e57ad62525f86da1b3defdb2bbbe1a904832613f2cdf965e5a7caecbb0d25d768cf5e6e7f1762be2166a2159762a3911fd6d8fdaef03e11","ssdeep":"192:1XpMp5pCyvEMKzSYHfs+uNoqXzABMa4uYCx5pUptpuq3oay2PUyoa1:bfWYIwW","tlshash":"3bd113096ab28111125790da6d272810b51590532a1afc497fefc31c6fb0fbf95e2fde","size":6685,"data":"","first_seen":"2026-09-13T12:43:57.186425Z","last_seen":"2026-09-13T12:52:18.896956Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"668993a1b7d3b731832a1d7e086fc923","sha1":"9d2678eb221bc111dabc991b4346eb7749bc4719","sha256":"9bd605879e0b41badc43d29cd93a4f39f1b6a9b997e8171644b79677cce2c117","sha512":"a5deeb9a4ca98e4788297c343dbc7f5a4e7d201cdea229ed3058b9bfbecd0e0208135bc6749613dbf039aa6f9a332817d04ce881e994448f0ddaf4bb43ad592c","ssdeep":"","tlshash":"82a0024bb160347850f79018423fb74170140d439a375470759f02352f60a8257d2ecd","size":84,"data":"","first_seen":"2026-09-13T12:43:57.189231Z","last_seen":"2026-09-13T12:52:18.898082Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa5a89e127e94bd0f79327383f876567","sha1":"986c9b21eae49cb8cc4b4d17e2efe7a2e461c51a","sha256":"1177037a8948694969ac4748cc6eb78a758c23dc47c3e972645baa29440dd0d3","sha512":"4c7e8709d1f151b9e29452bc75fc5c58515bbf7ebbcb9ee474d28938d713aea5119da885b291175183447754a80ddbc7f2f42248ce91641d75179bb3fc709190","ssdeep":"96:+oKzOfbmarTrdLnsOIBwC0oHoooQoTYRU0EEuEvE+dv1focY6RouNvg3Do6wDbug:+zCmarJnLKIpRTE+6QE62u5Pr2","tlshash":"4dc1cf917e65843a8ac6507b94b9c21da024217fcc68bb35b8bf43d48ffa69d44f316c","size":6085,"data":"","first_seen":"2026-09-13T12:43:57.190345Z","last_seen":"2026-09-13T12:52:18.898847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e5a3158f973f989e81057283f460a279","sha1":"4df26e339f3d9fcbfaf9ac7c7d7b118f21cdb9b2","sha256":"e5c461d53d9478cc2805aa3b90a1d98cee3bb1fa75ac593d398e66fe7010fb04","sha512":"518426854558dd535cadd0db6d14859a88fda458e321d0f65b85d51c3782f1e7d7f84d0800c1822d659bb201f1dba951ce8ff39b9a0f87194a11973bea3583c9","ssdeep":"","tlshash":"6ac08cd9a0c3ae002702641454bf38e4a0248027b0881b139ce4dc582e220b0a237ee8","size":153,"data":"","first_seen":"2026-09-13T12:43:57.195938Z","last_seen":"2026-09-13T12:52:18.899415Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/lokalise/AmazonSearch/en.js","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e704508819a0e0540e81d81adeb5d135","sha1":"f961d1654eab533f961a464e38dcf5916cc77220","sha256":"864d1ac3768ee098541f486153adf4a4b42755aaf81a0e9dbf00646153462f86","sha512":"a9de064e1f303fd902fb03db732218a2130a330346839bf1d4ec070d4ece81fac7cbd66cccfa2599cfab5fb95e98e213a7297c949d8ec49116e8210263ab836a","ssdeep":"24576:Cp/cnTLiFqzPKwuqm1H/q2cHLzWChrY0q0oDkDpkdMDutH5kSOsPjhQpsgYueG4g:Cp/cnoOuqm1H/q2cHLzWChrq0oDkDOMd","tlshash":"0f450736e1010fb701e601baa19e3693af1485ab4f4078497b1d811d2f5e56f22bbedf","size":1273452,"data":"","first_seen":"2026-09-13T12:43:57.199809Z","last_seen":"2026-09-13T12:52:18.900286Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-09-13T15:02:41.184006Z","times_seen":2758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3e11f5fe6b8feb7d18575abedd403e2c","sha1":"dabfa5f520e93cd712a086f7231ed039f12c8dd3","sha256":"c79e7e7f6c1adb44e103f1b49dfe429004b312cc341f48a52cc546458a22d82d","sha512":"5b3f8aa5ac3f11a254ffb98f646694825be5a68d739fd948d75dff0caa73952a4d8ffa944f13cd277eaf0cd7196838cfabc81feb49c0d4213cbae8c876953e59","ssdeep":"","tlshash":"80c08cc8e0c23d102602641020af3ae4a024842a70481b128c94d8482e220b08233e9c","size":140,"data":"","first_seen":"2026-09-13T12:43:57.191496Z","last_seen":"2026-09-13T12:52:18.901427Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ace8f4acccb92948ad273f2608428f46","sha1":"09245bc687d69b4ecb01e7f8c15c23a39af1b762","sha256":"7c321083ba9fcde741539ed0af2feba061eaa668d2b11ae2f03e3e4fef65e1a8","sha512":"9ef1708afc5f3ee4d846160b7a35d6e0ed97f503746e5f51db80625924bd8aeaec321c9af5d58d4ccf3df0c3b155bc540321d4adf697f92661ba65c3ffbb3eb3","ssdeep":"","tlshash":"e1c08cc4b0c22d001606645014ff24e890244026b0481b028ce4e8482e220b08233ed8","size":142,"data":"","first_seen":"2026-09-13T12:43:57.201938Z","last_seen":"2026-09-13T12:52:18.902Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a5aa1a532550f3ce2c3a5b2ac2d52917","sha1":"3b7b963253644b0961a5b982bd2af237db9f09ac","sha256":"43c394d4b7fa1bc4b361ae283c20aee30d7f96d2f64eb9ee01ddccb09447a68d","sha512":"7f03055e6afba0a27967054d8572bed42ca4c740bbe24ff214f1a736b723e827b13c8b12f27a8f0f2e8990aa5999d50bff3fbd3f36aea77f4e4ce3e1d4c515c0","ssdeep":"","tlshash":"19c08cc4a0c72e101a02651011bf29e4a024442774885b038c98d8683e220b08233e98","size":141,"data":"","first_seen":"2024-03-05T23:57:14Z","last_seen":"2026-09-13T12:52:18.902584Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fdf8e9bfb878a2c4dd151c74918df3b5","sha1":"516999914ab2ddca70e4067eada8cfda12e3276a","sha256":"42d80edd744e2ef1898e348e7ae7adfe7a34cf9a8b9ae726264a8f4d5b4ca5b0","sha512":"7ac58140095ac656704c4a8bc5056187d9bd42cb339c7a469b5ca782318a8e5d5aa5b1e910e0025848307f3b6d39bb5d4535c428a7e9bc9151d6c461d159fc7f","ssdeep":"","tlshash":"e6c08cd9a0d22d002a06a52898ef26e4a0244026f04c2b1acce4d8482e230f48337e98","size":157,"data":"","first_seen":"2026-09-13T12:43:57.227306Z","last_seen":"2026-09-13T12:52:18.90317Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fc8b9d1c58f8ad1d73e276edc786c761","sha1":"fcb53c8aed89231af21f9834fd79add05d17866e","sha256":"2fba35342acec91314fe71a1e541b0c1e2f51f980a74bdaae294d24e4fb10bed","sha512":"3162e041a95415da88b586c2a47b05b3a9f0115ea1417875c7588361331b079c7c7728a545ff17ebaa8f0bb5ecfaadfa45328e98c154453865d12b6efb4300d5","ssdeep":"","tlshash":"0ac08cc8a0c26d102a02a41010af38e4a024802b70481b068ca4dc482e220f08237e98","size":140,"data":"","first_seen":"2025-07-12T15:26:54.79116Z","last_seen":"2026-09-13T12:52:18.903714Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d57f8d7e63d6c13c41a8ef40725b086b","sha1":"9e92c4659ef77eac2d98abce37d4a30785d3fe6c","sha256":"b863a3ca5f9bfa16ee316a0949f62731090c0553cc65f34af048437289626122","sha512":"d11ccc3fd56aa0ca4d8fd90f059e6bfd863ed2785e403f815dea77f90d83933475deb1423f837f98fa4c6eb7ffa7df747342dc982b9097ddfaec6b6fe512150c","ssdeep":"","tlshash":"2bc08cc5a0cb2d003a12b89534bf34f8a024442674592b42ccd4e89c2e2b8b58237ee8","size":163,"data":"","first_seen":"2026-09-13T12:43:57.217233Z","last_seen":"2026-09-13T12:52:18.904267Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7a27c6f37bf2becd107e94ce3cc3a491","sha1":"32d6482a048c14e0172ffa80415542671bbe163c","sha256":"25b4550bbd42d680fce27fe7c40dc97866f2dd9830b5c27275683e65d1043100","sha512":"db6d4531bc27dfbc0933f860cba5f24fc07421591f9cf4b70e416b5a3f850a2e14684df2833b58361906151349b9c45a270fff0ef6e50fa30884712bb01b53a7","ssdeep":"","tlshash":"2ec08cd4a0c66d102a02a45150af74e4a034802b70481b068ce5d8882e230b09237e98","size":147,"data":"","first_seen":"2026-09-13T12:43:57.202941Z","last_seen":"2026-09-13T12:52:18.90489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5f13e98bb5868291eee9533fa14d052b","sha1":"dffd17c893b6a6e8abf75064caad17e9663a0310","sha256":"c72a6012ec0ecc873784e35eb7c7068f991092e1cfaf69312b3c660ac569ab64","sha512":"a731bbbea8004f8f6d1c4a34c541946558d28ab915133e0d4f3c4f5a3eb44613e1c27d52c8fcaef0bf1494780a7b2f9bf64868a908be189b6ba46e28babdc4eb","ssdeep":"","tlshash":"88c08cc5a0e33e002607a51110af24e490348426b4481b53cce8d8483e220b08333e9c","size":146,"data":"","first_seen":"2025-10-03T23:54:00.185753Z","last_seen":"2026-09-13T12:52:18.905435Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/upperFirst-CbGURndL.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75c322f4a73ce1804d773b7ce1bc9c6f","sha1":"7b1ec151ceed8f79c93e25341abf2811133d0ba9","sha256":"5bf487d70d8af4518bdeac0f8e10817d8099285b2ef1cd1e0d4c167057b3c11a","sha512":"75735c642f0b5f137f85fe3b2374618a9ba848a04886415e20d2b6f1f5e29509b7b01f7932cc37913629b3fbad0395e64d92dad2f2e5de46919bedef2059c3ca","ssdeep":"","tlshash":"56110e477559f844779090e6893e68e583fce71308d9c22cc2f79c843e34db95271ab2","size":1015,"data":"","first_seen":"2026-09-13T12:43:57.160105Z","last_seen":"2026-09-13T12:52:18.891016Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1dd0c14241a616bdaa42630c3310dde0","sha1":"f1870054481e95a0195fb767a4e7094bbbd8f575","sha256":"9a05dd7ff85c6f5b64db3ce584dc85bcc52100a5d7c111bcb48c45dc2ffac533","sha512":"204d4cd58a988dfa7d67ca77ff01594ddd5de875026b1c82b92d93a9891c8068888b733833801cbacca5b8ef547769d07827ebb494b8c8b77fa52e6fa07be3e3","ssdeep":"","tlshash":"77c08cc8e0c22e502602641060af35e4a024442ab04c1b128cd4d8492e230f08233ed8","size":143,"data":"","first_seen":"2026-09-13T12:43:57.221011Z","last_seen":"2026-09-13T12:52:18.905961Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29f10635ade6f6c51355ab886164b35f","sha1":"35010bff0c20037098c2ce55df2b3d69a3c1136e","sha256":"fc045861651ebc51bc806eaf8c14b972bbbbece277ce9e70d3851c1166cc2a38","sha512":"1d9b423d51adc6087f219601265d5ec63f237f1ba9ad921ba2ffdd0ba75c6654b2d7c5d16a4b2a937f9ee65e66df41cf79728f402bcf0ebc0fbb854244cd1ec2","ssdeep":"","tlshash":"96c08ce9b0c63d002603a55151af76e4a034402770585b239dd8d9882e670f48237eec","size":156,"data":"","first_seen":"2026-09-13T12:43:57.220001Z","last_seen":"2026-09-13T12:52:18.906586Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"98c174dafd2cffbd2de51c4f9c918ed0","sha1":"f7766ea236337caaab0f5b584a01acb271f23045","sha256":"c953ac3178dc30449cb54673970a93d1ea9e86a79ccf9747ed1acbdaf13dd667","sha512":"56ab625015f6ffdce88d3e4d8517421730687b44d31fa89f96f1cb4cf8c916f385cf4dc3ea6dfb3bf43d9a7330484570ebad74d65db695e6805355d18fa2f327","ssdeep":"","tlshash":"25c08cc9a0c62d001612781020af24e49024402670481b028d94e8482e230b48233e98","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-09-13T12:52:18.907178Z","times_seen":909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a6c3ed569fb5024b2c71f9b3da48fae","sha1":"b1d8db2f1e07dc3b4fb9c58a46414d55849dc987","sha256":"d1b5ca853649c573c785dbac1ab205aa2dee8358c36f92b2348af3f26327b36c","sha512":"587b278c55c024b7c8080f11c950ed27c3e167da50d6cc044d54b04e0f0dac87ed5776c5bf9dec1d38cf25cc006f32e75e3408cf9003cd1d042c08ec9a6d19ad","ssdeep":"","tlshash":"bb8000a0e03338b022a222f0023b2ac03a230c0808c000023aafa20f3c3283b2282888","size":35,"data":"","first_seen":"2026-09-13T12:43:57.181127Z","last_seen":"2026-09-13T12:52:18.896299Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"13b9dc9333b79cee81fc4d8cd1438735","sha1":"8902bf7ddefb07187dd00289e5c8e804fb040f27","sha256":"8a054b421964377d35cf7b01e3440f3c727a53ced4e32745aeff267bb48e0097","sha512":"2c58796d892292203e57ad62525f86da1b3defdb2bbbe1a904832613f2cdf965e5a7caecbb0d25d768cf5e6e7f1762be2166a2159762a3911fd6d8fdaef03e11","ssdeep":"192:1XpMp5pCyvEMKzSYHfs+uNoqXzABMa4uYCx5pUptpuq3oay2PUyoa1:bfWYIwW","tlshash":"3bd113096ab28111125790da6d272810b51590532a1afc497fefc31c6fb0fbf95e2fde","size":6685,"data":"","first_seen":"2026-09-13T12:43:57.186425Z","last_seen":"2026-09-13T12:52:18.896956Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"668993a1b7d3b731832a1d7e086fc923","sha1":"9d2678eb221bc111dabc991b4346eb7749bc4719","sha256":"9bd605879e0b41badc43d29cd93a4f39f1b6a9b997e8171644b79677cce2c117","sha512":"a5deeb9a4ca98e4788297c343dbc7f5a4e7d201cdea229ed3058b9bfbecd0e0208135bc6749613dbf039aa6f9a332817d04ce881e994448f0ddaf4bb43ad592c","ssdeep":"","tlshash":"82a0024bb160347850f79018423fb74170140d439a375470759f02352f60a8257d2ecd","size":84,"data":"","first_seen":"2026-09-13T12:43:57.189231Z","last_seen":"2026-09-13T12:52:18.898082Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fa5a89e127e94bd0f79327383f876567","sha1":"986c9b21eae49cb8cc4b4d17e2efe7a2e461c51a","sha256":"1177037a8948694969ac4748cc6eb78a758c23dc47c3e972645baa29440dd0d3","sha512":"4c7e8709d1f151b9e29452bc75fc5c58515bbf7ebbcb9ee474d28938d713aea5119da885b291175183447754a80ddbc7f2f42248ce91641d75179bb3fc709190","ssdeep":"96:+oKzOfbmarTrdLnsOIBwC0oHoooQoTYRU0EEuEvE+dv1focY6RouNvg3Do6wDbug:+zCmarJnLKIpRTE+6QE62u5Pr2","tlshash":"4dc1cf917e65843a8ac6507b94b9c21da024217fcc68bb35b8bf43d48ffa69d44f316c","size":6085,"data":"","first_seen":"2026-09-13T12:43:57.190345Z","last_seen":"2026-09-13T12:52:18.898847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"52117c67642ab94aca21db09dc4c42e7","sha1":"1a10571725d4e2b28bb389abe4678c9faef62935","sha256":"957a87774f1aabf33c22f9bb9d76746f9b1e832e8ba86a7dd77978aad4c9e4d5","sha512":"b4b11c20ab08155c8d2700de86902c8581ee97b55a19d0dfea46547c8b99511640600b5255ac5267ea22f4b62021fbd836322e923219d7a21a6e5a3cee5ca3f7","ssdeep":"","tlshash":"9ac08cc8f0c22d20260a681410af38e89024402674481b028c94d8592e230f08237e98","size":144,"data":"","first_seen":"2026-09-13T12:43:57.229239Z","last_seen":"2026-09-13T12:52:18.907661Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dbc16d63a4800b4e0136032654768e6f","sha1":"02305c9195fa7f4cfce1a7c28aca6caf1257bd26","sha256":"3bfe121221f43599a281e7a2ae19cc28e9a473ac201a2d7ffb9ba3a748c28b54","sha512":"0541567b112792e6398708652e931e977285a99b0f63473bfe18325233a1c9d44c7c2f75a96a4f3ff939af063536adbf3b4e705f4f3e95f164105f67943978bd","ssdeep":"","tlshash":"fdc08cc5a0ca2d005a06641010af25e4a024442670481b428c98d8582e220f08233e98","size":139,"data":"","first_seen":"2023-05-14T18:33:47Z","last_seen":"2026-09-13T12:52:18.908229Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6c9716d7cfefda4d901e561f5b49cc55","sha1":"5f5c90096b762264980bbe25375c38ff002adc67","sha256":"0c17031d442a4aeeb0fc9f8be4490938fd9d1f3f134b1d8612474b412ea4e1c7","sha512":"f82c41cd7e9d48bd6c63f23879b1e2bc1ac789264351e67311153d12408763068f411e075bde738d40e7817ad674ba53287f0a5fc3f61a7fd927e7b7579bf259","ssdeep":"","tlshash":"1cc08cc9a0cb2d002612785120af34e4a024402670481f028dd4d8882e630b48233ed8","size":147,"data":"","first_seen":"2026-09-13T12:43:57.179713Z","last_seen":"2026-09-13T12:52:18.908703Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bcfe6a21f87ca99ca332d85dd2abf570","sha1":"d8faa64b04b656594aa74ed1ec6e4b7e656c8e03","sha256":"a4b2fadb03cbd6f0483e307ff5f619a31ce35a45120f9f6244eee2358eebaff1","sha512":"b93bf9de3334ae91d6df1d1ee726bbba21ef020572cf275821b19bcd94ba199abf783f9fc0f36688dfb2474b71d72629e19ec8776449924ef708acbe36c9dbd4","ssdeep":"","tlshash":"a8c08cd5a0c72e002a02a45111bf38e4e024442774885b038dd8dda83e330b08233e98","size":148,"data":"","first_seen":"2026-09-13T12:43:57.218118Z","last_seen":"2026-09-13T12:52:18.90947Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"eac9a9e001d86007d8fb8d1644e01628","sha1":"895b91319bf76321e8d095fa009e00f633bcc97f","sha256":"9d3e634c071599cf945cf7c0aef3f6d58764033610f098d72522d00ab12c49af","sha512":"9cf9d0fe020c3b6f2b812a923b9080dd0742d2f1906a02ce701f81f0430e854168cf7f9af1f604a39f3111fee40c56ff7856daf005fd54bfbd7b14404f43bc34","ssdeep":"","tlshash":"92c08cc6b0d2ae182756641125bf74e49034813670481b02dca4e8492e220b8a233ed9","size":152,"data":"","first_seen":"2026-09-13T12:43:57.211207Z","last_seen":"2026-09-13T12:52:18.910071Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/lokalise/Common/en.js","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d02c8013537e9c3f366003fb165a06d7","sha1":"f3e336a7076afe1510550b3d2d4ebdf36fd480f6","sha256":"47d741cda86a5a7cee1b6a7b2445a25614075353fd92e9ec888ff7e9886688c0","sha512":"8769d383d881fff8ff1790195de77d5ae3f3cc32ebf7d088c692fd922f66a4fe52338edd595be42167dcc39bc46787ee14fc467a6776aa74dce0612cb709e239","ssdeep":"12288:jQhYWvTvA+eSpyMBDbvRR1DMIy2qhANUOQLxQppSCfo:MhYWvTvA+eS/BDbvRR1DMIy2qaNUOQLZ","tlshash":"41c4f82af2054ff7019640a2b79a18a3ba54427b4f50791d7b5c811c1f1ea7f02ff6ae","size":574516,"data":"","first_seen":"2026-09-13T12:43:57.151561Z","last_seen":"2026-09-13T12:52:18.872821Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fe886683cbbf2e8de1237debef305c3a","sha1":"1ccd5e75520792c6baa9a1a80987c4de74464b7a","sha256":"88839ca3fc6c56af7a470907d7137aa8025adc63f76c2e1804436e5bc7bf1203","sha512":"60bcb6e4c82934b753f72676214331e72f4db91078bd2b244bfdd2f5a41992ec65055e798c89419c0d595b8e9cf20b32693502241810e0d504fe12a5f1c4302a","ssdeep":"","tlshash":"34c08cc4a0c22d006612a85050af24e490244026704c1f128c94d8492e234b08233ea8","size":141,"data":"","first_seen":"2025-10-09T22:12:08.508438Z","last_seen":"2026-09-13T12:52:18.910647Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a615b2f9cc15b1245bb46574585c7692","sha1":"b86299950a4b911359b8488a0627806c47dc2746","sha256":"2babd2740a4e66015403eeefef7652094f4190817c637daed5ca4e272c697c5a","sha512":"cd357b212214552ee16fbd7923515e85d6ffaa45889d8bcfebac8157820a8103ef2865c56dd124e0254325397e6ec11c6e64bfc0375ae437b15f7ac3742c6b79","ssdeep":"","tlshash":"d0c08cd8a0c62d006602a89260af34e4a0284026705caf029ce4e8883e635b48233eac","size":156,"data":"","first_seen":"2026-09-13T12:43:57.231211Z","last_seen":"2026-09-13T12:52:18.911219Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8c19f51ee23a7853f6bfd3000892f642","sha1":"c7739cefa2b69ef363a57da1ff2a39435b456917","sha256":"9d1375d994736830a7660e34ea641396c2e36c8a3ca3a5d17c6ca44b7baac536","sha512":"f760485a14e2940a5f02b9ab2e9fba10186545e9742edcdc8161a2f14c331e655231b66952a15f07c04af3e76d48b5a05cc2f1b4d5183d2ce1b66fdd8a0ebcac","ssdeep":"","tlshash":"f0c08cc6b0c62d101a02682518af24e4a024442770881b028cd8e84c3e224b0c233eac","size":145,"data":"","first_seen":"2026-09-13T12:43:57.223027Z","last_seen":"2026-09-13T12:52:18.911778Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"88ea7e2eb273a7c0dcaf3ae00d99d69a","sha1":"2f09fd5a3ffc7cb020865dfbcfa1cc31718edbd7","sha256":"e15d65ad65888b3b469f4af062088f314e187b7e13fa2f4945b66ff97a326937","sha512":"2d6722a8c534ccd12b3fd57ed4a7cb703201b018cae5cbca38c578e31fe6f42fbf08ea95e937fa87ab5415cc46267ad83addeadd217d7594967f6e2e6453adff","ssdeep":"","tlshash":"68c08cc6b1c72d006a02646214ef39e8a034442674881f42dcd5ed893ea30f09233ed8","size":155,"data":"","first_seen":"2026-09-13T12:43:57.232362Z","last_seen":"2026-09-13T12:52:18.91263Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"acc9def74f77c05ec33c9e25b84f4c7e","sha1":"c3498adffc3717a90e3bd14b4faa7c47f4df12cb","sha256":"97c1aff3b3ac9dbee30b80198ff8dead796903e4572fc1ab075349fb60eca7c8","sha512":"69927d4fc5f8c25ec5e676d0862941b8ccdf393d43097d924eaa34616a09707038a9fa5929a6687c0abf195e39efc17a31bdc68e3f40ab5e27d7ff3b7163912b","ssdeep":"","tlshash":"42c012d4a0822d205612a51555bf25f4e034502a71485f528d98d8452d530b85337edc","size":175,"data":"","first_seen":"2026-09-13T12:43:57.206978Z","last_seen":"2026-09-13T12:52:18.913191Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aed57c91f8c121a7f50e5ace3ffcf3a7","sha1":"8aa4760026345475333512a9cfb6684916cc24dd","sha256":"ddaecf7b4d3486b70a412a9f1a4a9795a04ae5bd271fd7c6d59af32ff6122889","sha512":"358fbc2fe814fb4cc313970c3732a211e137028f7b304375356eb8f05ffa6c2794309db92b9eb9d22def2561be3d7f959b2d51212a941fc813ecc5c59cf135d3","ssdeep":"","tlshash":"a7c080c470d76d0026016511a0af74d490658017745817029cd4ec592e624f15233e99","size":159,"data":"","first_seen":"2026-09-13T12:43:57.210226Z","last_seen":"2026-09-13T12:52:18.913749Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aff3e0cd896c03c55b88d657233463ef","sha1":"4ba9ce427742f8dcdf067c0be068a2be0cc0f3a2","sha256":"f3db476ab58fdccb10e531d3fb178dce12d128f7f6060080ae260a0386cbb988","sha512":"2c25b70361e16d1fde46ed730c540a130128949473bf363874c2a54770bf2ca3d4daab4275e47de56efde476e7788388c286c9daf23425494d7bfd395c812cba","ssdeep":"","tlshash":"13c08cc4a0c62d002602655514af34e4a038802670481b028cd4d8892e230b08233e98","size":143,"data":"","first_seen":"2026-09-13T12:43:57.194876Z","last_seen":"2026-09-13T12:52:18.914291Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-CqgE98cB.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b7a5dd487934cac6d880d392bc24bf","sha1":"fcc8720bf2cb40c3f7615ed38f4ae8bc9b3c3504","sha256":"8a2dd44db9795a1feb9e6bab6f5f026baf07c28b5cef4cc0dd59a02ea613d25a","sha512":"5fd22d1ab793c1d2df6cad5ce20cbe3f75fa36479631f27f3087516f7bfa9f932ae702b76f6e7d53ac4282c4c850117e52c03219052fccbf4bec5d41be93a912","ssdeep":"49152:76xg1sPTpEXsxbnNqy2/senLKwkQW5RH6yT4nCNT5+uujDUCj0oHwfETLeXmh2mV:wr7JzR6N1ZivAEk2MAqHzpL","tlshash":"b6869ee87264747947eb45e9907f0001b33e3699b408c4e4f5aecde5292ac58e26ff78","size":8186111,"data":"","first_seen":"2026-09-13T12:43:57.193617Z","last_seen":"2026-09-13T12:52:18.915838Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"58ad1c8dc14587f7adb89a5f297fe379","sha1":"694a9769baa644cf8b006f9b24ec51ec4bb6020f","sha256":"15a8cc08343e23198d0e58697cd1c8f71dd5727396ba4338860a733fca455e18","sha512":"1ed955c3854ec9165c0ec8e990d8be9514c7239bac3b656e08ebaf9e2b1bd69b8a89da3041636c5badfac2489251e8e02d16872166a27a29988369f4b319a11f","ssdeep":"","tlshash":"3cc08cc8a0c22e501a02651221af35e8a024402b70881f028c94d8482e220b48237ee8","size":143,"data":"","first_seen":"2026-07-06T16:32:47.798071Z","last_seen":"2026-09-13T12:52:18.916451Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5431fe85074aaacc1d47063785e67865","sha1":"d934bc787109336d37ecb64473be8efb180d779a","sha256":"b203df14dcdacffc8184d73fb1ba26147dd4acc581428da8136e554c6cc44162","sha512":"68c4db47a1f66dd95f2149c9c133179480160d65502819408c805b1e83282aa1bd6881101facac123a8823fe0fa5b8b9d3130404f0524ad99caf7444c93df143","ssdeep":"","tlshash":"63c08cc4a0d22e002602642051af34e89024442670481b028c94e8682e220b08233e9c","size":137,"data":"","first_seen":"2026-09-13T12:43:57.224126Z","last_seen":"2026-09-13T12:52:18.916918Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7c5e7e9d2f1ba2d659e7b3933acebb82","sha1":"df9084bf638dd2b31dee5a7678c597cff7f8b6e2","sha256":"a7a21e01dd48d7dd9621f695322d3fb5893d0f28d3c41501a6f3d42a9c9ee428","sha512":"c965b7cd8135f7411e8e83170eefd30134c4d5eecb9b04488ab33e600629b373e24fcd1ed51024784be5112f3cbb89c72ab16c2709023876d86ab37c19960f78","ssdeep":"","tlshash":"41c080d560d72d0055565551517f74d49024451771585702cdd4dda83d131f04233ddc","size":164,"data":"","first_seen":"2026-09-13T12:43:57.233503Z","last_seen":"2026-09-13T12:52:18.917485Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f0db0125ed1e47583193927893cb133b","sha1":"0518bada0444c25fd98b0a47eaba18b3545c60b3","sha256":"ba75328dbc3325da2f98fa4ba0a309cca3790f739d6136fd3fde69946d54ec88","sha512":"fb75dacd64d0fa173800a11b2710b60a6126d0ad754f5ee97702e30f204cf0d1dd8ae2ccd2514852727adfb83c1d7268f6eea7e54804f184f77e0a922c3191b7","ssdeep":"","tlshash":"eec08cc4a0c23d002602a42050af38e8a0248426704c1b128cd4d8482e270b08233ea8","size":140,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-09-13T12:52:18.918023Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d0b1940bf884de6af8b661fecb6c89b2","sha1":"51cb30118e1ec67c1688882e0bc7e9b1b3f5024b","sha256":"2d0dbe5745fd4892a9df191e72bbc288ae2f6b7a8038ee5dc3dda2206185882c","sha512":"773744c833125d329c38718b6848920c77143a0d0d3757cf69182ab535e83ee5404d72742f982afa1bc20fa527cf991ad7cd6160a61131635236691df377ddfc","ssdeep":"","tlshash":"17c08cc8b0c62d002606646018af29e8a0244036b0481b028de4ea483e220b48333e9c","size":150,"data":"","first_seen":"2026-09-13T12:43:57.222018Z","last_seen":"2026-09-13T12:52:18.918542Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7853c8920c9d3b8d8a2e170c02fb9942","sha1":"c11efabfc8801bca21ccd7a4b57f842a1e1dccb6","sha256":"2ecd6edc15029636668b6a2db3e999ad31db8c704cd5c49b9acbf139c89274a3","sha512":"2c04374c72bc56fa0f43107ff911dd5f558d868baa0b5a09353c47285566b7c706d7b12965a8b0a28589eb90a9594210129016ed1fbab7ce1b3c698937fe4a7d","ssdeep":"","tlshash":"99c08cc4b0c23d002602641010bf38e49024402670481b038de4d8483e220f49237e98","size":139,"data":"","first_seen":"2024-11-08T17:56:15.201218Z","last_seen":"2026-09-13T12:52:18.919113Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e4c2fa528d4c72674ae528d244e54889","sha1":"40f1e35b3aa0d0d1a1332e15654ed793a07e0ed1","sha256":"98c2632f8115b81aaf8b62b893c61da148eb8fef49dbc6e79b7502faac50ab92","sha512":"b029dc1decc2ad6a61324445c69d94f673f49a5902a1b6dd56c329ed514366bb499cde6f2a27fa7d3d4673bc017ab96fca92c1f26476da226738b7cec7d71cf6","ssdeep":"","tlshash":"43c08ccaa0c36e0027026420a4bf38e4a024802770881b13cce8dc592e230f0e237eec","size":154,"data":"","first_seen":"2026-09-13T12:43:57.204102Z","last_seen":"2026-09-13T12:52:18.919612Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"27e6856c6231a07249536e31dbf44538","sha1":"dbdea9141e423b2f0552f5cfec2b5bafad4a79fc","sha256":"3c4616666db717045f7dd3d06e6acd9b828cc0b8a687b4c5b4f350c2bc4597f5","sha512":"9f2d9019871fcf2cbc4fa9f9b32b1cbaf53c5eb9be5b18081f07d3d029fc677dd0a620dc020daf8e53bbd99182843184fdf5f9561eb95c90d0811f9fabee4c81","ssdeep":"","tlshash":"e7c08cc4b0c22d102b12691028bf36f89024402670881b028cd4d8482e230b08233ee8","size":147,"data":"","first_seen":"2026-09-13T12:43:57.234686Z","last_seen":"2026-09-13T12:52:18.92013Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aeb8077297e2d1fedca7396e50660b1d","sha1":"0a1476a71417d3d2e58283d61430a8c19bdff992","sha256":"bac866076f30851ff9a1817a22d5084afc5e60d0ae1b726a841d704722164ff7","sha512":"25e83017adf3edcf975e1ac07d8d44143166f4e723e403585856a5fea7af416eaa33e41f1f7fc9c56569622a7a63167af3c02161bbeb7dc30ae0561f454ce797","ssdeep":"","tlshash":"4cc08cc4b0c22d002a02661410af24e4a0348026708c1b028c94dc592e230b08233ea8","size":142,"data":"","first_seen":"2024-04-23T05:29:02Z","last_seen":"2026-09-13T12:52:18.920662Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5b778c8d4dfcd1a705c2ec470057ca8b","sha1":"8e97ba011e60fa92a6d1322948b1bd6ff85139c6","sha256":"0482ceb63710b140e471c629081e9006777a1a6f33b74a83521ad79da22066ac","sha512":"6a1bac73cae8923a9fc222c38a440f8733a5946e0dac778da2fec2a1671bbfb7120aae0b846511db2c1e7402732a7973d244d147ac87608ebddb2e6d374f92e8","ssdeep":"","tlshash":"64c08cd8a0c72e102a42a46215bfb8e4a024542774889b038ce8d9e83e630b88233ed8","size":155,"data":"","first_seen":"2026-09-13T12:43:57.216206Z","last_seen":"2026-09-13T12:52:18.921152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/sign-1LG536qi.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3450617e7c78e24b1ad95aa0927ecd9","sha1":"fac3b21d779288c5c070bb6f6b3b3b5fa2c067e0","sha256":"ae3a70035346b2afb20fcdf1fb0b071db75b51a0938054cb1bccbad0fa03562b","sha512":"7cdf405de48ecb27950db22fb2b599986f78042576c4e7d78df45ca07e5d70987f914fc18eb1892cebe197237c7751289c23d57d25da067f4883f057a2ae9803","ssdeep":"768:JYuuVWM5SG+7oerwxAB+VX7YY+BHbXIc+/e4ZAnKR3haDTYnPRdP6:JtG+7oeJ+VX7Y1MEsaDTMPRdP6","tlshash":"67130a4cf52a89b8b373845970c60448f1993f66a019d8ed75faef063b52dea138d336","size":42780,"data":"","first_seen":"2026-09-13T12:43:57.165706Z","last_seen":"2026-09-13T12:52:18.857037Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8e2b84cdfc073ba24cc23d7b5fa95a94","sha1":"5df0dfed9cd7c4007defacb68db47bcf7a6ff88d","sha256":"f2d615d94eaa06a315503b6c423760d88f9ed24f56c0477153f608c161ae4560","sha512":"840df0f80a9e8648107e51f9f650d333de8688ea59b25fc2a77802047445e3293132ff7da3e4abaedc9ce09141c272544971a0b5714b27011042cdababcec4be","ssdeep":"","tlshash":"72c080c960c62d145611555164bf74e490245016754c2742dcd5fc592e130b08133e98","size":162,"data":"","first_seen":"2026-09-13T12:43:57.218994Z","last_seen":"2026-09-13T12:52:18.92196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d37c85411eaaa8afa6485915e5848089","sha1":"e1796da752cd649d308606ce3fd2d0c1b0612587","sha256":"2de83a4c328b6e842b34e9e0e87d132f7343cad404d4e00016d1d3ceca8bd841","sha512":"a38cba5da4692419714d9ff13d6ffd2a0c380481bfa236e8d95247299a31cdaddb6e312a61b817769cd828b6558c95be72d210978c733df702c12672a7959939","ssdeep":"","tlshash":"5ec08cc8a0ca2d002602646114af39e4a024402670482b028dd4d9882e230b48337e9c","size":147,"data":"","first_seen":"2026-09-13T12:43:57.178574Z","last_seen":"2026-09-13T12:52:18.922519Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"533a71fb7bc1f76f91594e3e01b69636","sha1":"1149cce0cd74e82c4a5e175b4817cde393012f6d","sha256":"decc4ecf4b95366e6d4b5d3e9ad43801e2f07225b14e241d628d683164fed750","sha512":"2c96cfc2effaa240d99b2f685c2ead672fdc766f2c1cc30ff2d434f49b45a349eb60c6e32b12436cc006aaecca6217d5b8c566c5c9231c7dfef84159384c9cab","ssdeep":"","tlshash":"25c08cc4b1ca2e002606641220bf34e49024806770889bd28d98d8583e630f48333ea8","size":153,"data":"","first_seen":"2026-09-13T12:43:57.208035Z","last_seen":"2026-09-13T12:52:18.923091Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b3d5c0a9ec20d3f4b2e2a6c85b8387f6","sha1":"9106d20bdfe5b3f9eeac1e8ae4eb091f19288405","sha256":"697fe83ee5f427e1840c7a5e76e00600699354e5febe65ff562ac51e356a6f28","sha512":"31773e91f7ac8478a6cf97d7b3fa07b1582d749059389cc471c190039f6cadd9d288ded2d9868667e9aa4e6c8152c8b6bdd9e0dcfca2523d06b8ed548eff2c76","ssdeep":"","tlshash":"ddc08cd5b1c72d142a02645254af38e4a038442770491b02ccd5da882e270f4823bea9","size":153,"data":"","first_seen":"2026-09-13T12:43:57.215077Z","last_seen":"2026-09-13T12:52:18.923628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-13T15:02:41.130277Z","times_seen":8827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6f0b39f49b0aecb70889f60996e6444a","sha1":"1f22c50d3df416346fa90df91e6cd3ff8e99e25e","sha256":"5d1a8755f39cc2e4bae615108a8f8d2315bc3383d34a3089a7eb82768a5b2308","sha512":"f0d7dd5d67c349326e82d2cf11adda9fd92a936e4431bd54eb89d19d1cb202889a9d35462eca90ca783d0cead1538a899ec7c84f7863ef3974769246b75677a0","ssdeep":"","tlshash":"8dc080d861c72d006517ac56206f34ec9064441a70482b039dd5dd5d3d630f49137d9c","size":173,"data":"","first_seen":"2026-09-13T12:43:57.225231Z","last_seen":"2026-09-13T12:52:18.924693Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"44a1677e0b141d58fcbba210d4ae062a","sha1":"a034fa8920d468e621bafbd165530aad763b5ba8","sha256":"66a8874561b32e710e745aca7fa78cf5a9bce9faa2477e431c8da44c833962d4","sha512":"a1be4ad8bd6a6797294df00ef58e3a23b14e77d31f2fd8d823ee2c75770b5e17f8bd784ea12c76baa25ee1b93eea26815c373113014f117be6c3dc31861525a9","ssdeep":"","tlshash":"cdc08cd8b0ca3d103602a46264af79e4a038842a70481b02cee4de8d2f630b48333e9c","size":159,"data":"","first_seen":"2026-09-13T12:43:57.177662Z","last_seen":"2026-09-13T12:52:18.925258Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-CqgE98cB.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:23.210Z","timestamp":1789303883210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/index-CqgE98cB.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\netag: W/\"6aa3cb40-7ce8ff\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: a6b6651b7decc10941c7bde8653a5550\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 518\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pI0qICOEiNLm%2B6ANwOtFb2VSshivo1CqXDhGMnxUD0sP52j3lsv1LJcnFn1UlkBsX802SS08DWduOoLBu4QCqnMV%2BEMRqhNy2sgtsHgNRWZaYs0IKpwdZb%2BzX%2BXZr4vJnWdb8ieSindg\"}]}\r\ncf-ray: a3a748761b4756cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T16:24:19.8643Z","times_seen":18445652,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-XFInKVtS.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.682Z","timestamp":1789303884682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/index-XFInKVtS.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-552\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: bf2f087044abb40dc6bb118dd8752483\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLWQUxqrIH6eiQB21vdfSysrFEt9irQTdQDjvWpCljRsR06VYisqVfC%2FeU7y0b%2Fr8m5%2F7%2F55umk0RG55PF%2BgAupYgzCMFYe%2BqrPfRLzDdWfLDdHw7m5o%2FHBl0yqkLI9bJoQYBQ7fboCg\"}]}\r\ncf-ray: a3a7487f4c1256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1362,"size_decoded":1721,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1359)","md5":"9087c3bc77d2bc8d51338d4942dd4350","sha1":"c25b3e7f7a79f13df1162acce6439c3823302364","sha256":"60513bcd0300dda426f327f8f5046b3c8228cf2c673003fdab0960b2e809b8fa","sha512":"c73b50611c740b5b2a11a1df3519aebbb0b9f01c6d6da0a26d756e8b358c6714bb85e97b49639a6fa33f32f8706e958ed7fb6555a3ea8e6372d1de426520bd1f","ssdeep":"","tlshash":"c7219edde2d425a9b378011096bd65124dcddd17900e80d6efb9d4013724079a2bfbf3","first_seen":"2026-09-13T12:43:57.138318Z","last_seen":"2026-09-13T12:52:18.83072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/use-CuBLv3J0.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.688Z","timestamp":1789303884688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/use-CuBLv3J0.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-55\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 05e77368cc5307f714b7660090e26d88\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 516\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8S1Et2Yjt%2F%2BwmTr7m4DzXN31vczfvziyPpuMUD%2FFN5SxjIb782DiBCMMT97qRY5OAxwmooYKWN847f6FwhU1CIXvW%2F9zTMZ8ZRkEUbYGWMIdkZXiK653Y0Gcn7d24e93GWsBet7gCQY\"}]}\r\ncf-ray: a3a7487f4c1556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85,"size_decoded":1090,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"ff6c6e1a95a814e909f5741e30a984bb","sha1":"5bda8d7183370361b582403efd8e59d9a620db75","sha256":"9ba7394b64f4d3a0b0d529d8c0386cd373ddfe8fe481f6a03bbadcc4afd03620","sha512":"81f545f5208e88808b05cd1a3fefff948f09cfe0b3753fbf345f68884f25da3e06bbcd00bbabb91aa322c4225ee0555a5167a392024170378ab518fe543a4950","ssdeep":"","tlshash":"d3a0240704d44ffc53000ccc5714d4d143114f1c3341774170040305311c0df034d401","first_seen":"2026-09-13T12:43:57.149012Z","last_seen":"2026-09-13T12:52:18.83161Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/WidgetSortPanel-BZEgHA7_.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.689Z","timestamp":1789303884689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/WidgetSortPanel-BZEgHA7_.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-292c\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 1c92a9fbc80b2897b24d6193a4fe0241\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 516\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pf1DJPo8jNl6vr9XnRWbJHNkwb5sbHM2p8HrIkxhO3Uh5BNtWsh6s1%2B%2FSCtiHs394i7X7XGue9G0oZIu2EeWIoASDiko9sjjrfuishEa%2BLnetHz8A7gM9dEc1A3AiKDXXA9ENMqTif3R\"}]}\r\ncf-ray: a3a7487f5c1656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10540,"size_decoded":4592,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10539)","md5":"e82c32d3d09df3f2891122329fde747d","sha1":"911c6306834ef0a7757fefb00c294518e1997077","sha256":"aebade5084925b5d82a676211f35e49915cc1d22723d63efb4b057bd0e73c1b4","sha512":"7064531312a4b67352828d7e2817030d6d867a3ee763f5f2d85c6e762015ebb8dd6d7a2c38d23b9b492e4ab165501d66dbc24b25ba474b03e015123ae8c1414a","ssdeep":"192:TAfXbeEStlTmT8RbBUKFQnh4BXwplydd4P8Wi1k8WUnYSAh:UfXyEwlW8RbqKFAS2LyduEW8tWT/","tlshash":"fc22d97870aeaa78e3ff541c00205514a5742f6ce2005dd269bf69261eb2cf593ffb29","first_seen":"2026-09-13T12:43:57.17478Z","last_seen":"2026-09-13T12:52:18.832307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/WidgetSortPanel-BHr1a8h_.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.695Z","timestamp":1789303884695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/WidgetSortPanel-BHr1a8h_.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-6a4\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 78bd76b31f80adca818cf5eed012ed0b\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 516\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYKu3JVcdqKoyqCLmKB6sbTsWHAAS1xZSWKkJ5eNfEmOCJxmK%2BE64UxDsMJJbrYwd%2FkPA37zVwFG%2FTDiftzvPbI0c%2BYmowa2SF2kZpp6YKDEBvG0aki1586nNX9O1OpG0XrDZhW%2FElw%2B\"}]}\r\ncf-ray: a3a7487f5c1b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1700,"size_decoded":1489,"mime_type":"text/css","magic":"ASCII text, with very long lines (1699)","md5":"f5210c4dac45ba9b04d901046c40728e","sha1":"e18abbdb61a8d47256d2e87adc2390a193d35792","sha256":"367472d2f2bc81b1e06d8567e2d4842c4afa9fbb0374bfa9aaab51602f814670","sha512":"25fd9086dc145b382785bd7cd5e239d45eddd5e28f1c5a0f63b3983c42f8f67b8781d02c9e2e80682f3024bf530f4dd1e289da910cd34c1dc4afd3442931c20d","ssdeep":"","tlshash":"f43126643b8a10e8b2f5f93c38006d8da789da63c4176eef66c06458c9c3fd73436218","first_seen":"2026-09-13T12:43:57.155161Z","last_seen":"2026-09-13T12:52:18.833086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-DW1koIt3.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.696Z","timestamp":1789303884696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/index-DW1koIt3.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-447\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: dccf99edba7eb780fe4e4577aab763fc\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yhx7cLxns7uUPtdG5vgpLF5deihDjtcZ4jurWtrvLk1wyg2E7L%2BY3YLHFMT7cQt%2FpBWMT%2FPsEQ%2BYn38DbMUtnSiXJhWE%2FQ9OOMC2cd5sVa8JBAVyX9Eead9FY3CnD0WqcgoVMDGVGLZF\"}]}\r\ncf-ray: a3a7487f5c1c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1095,"size_decoded":1534,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1094)","md5":"06f9c388574b62e42d3dcb0834de3904","sha1":"277e9dd2ebe41a7e84646bff8806ae352cbbeb89","sha256":"fb39b3d2da8a6325b6aa9c2691db3946ee19abad2e40580374a1a08d1ff6253c","sha512":"1019e772ca432691fe515c334d714f62e45938a48a16d7261b871a4b2d9bf74f4ca4e79c2e7d8b02aa4f19ca3d93c370182c3cdea10a86fb9ad983249c143ffb","ssdeep":"","tlshash":"78112ce87638094e9bb3e5dc21a7dcce246b563f12f4e5cab66801c30d1808ae70e847","first_seen":"2026-09-13T12:43:57.164385Z","last_seen":"2026-09-13T12:52:18.833798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/CreateTicketDialog-DTmJAYEN.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.916Z","timestamp":1789303884916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/CreateTicketDialog-DTmJAYEN.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:27 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\netag: W/\"6aa3cb40-41ebb\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: a0cb1d3e38a2c928185a15bf2b59a594\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2X0aQS%2FHTZC038tfyp1LFnqKty0AfIYPky0jdDDxqjNbQou7bJxmEbuOwb7J7XLEUGNul5xI4ESiru1Jgg6L1BoJK0JokygW4rkdpZIr8%2BymqYE6EBgswc7j%2B6MqK3WrhHQSYpTehhE\"}]}\r\ncf-ray: a3a74880bc3456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270011,"size_decoded":74207,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17878)","md5":"8d2c5c7a4f536fca8b345398735ec5e5","sha1":"a8c60ca1f4cfe72cb8fdb8618079799f7d8878a8","sha256":"3ff3ba7213c1a2f8c684709261fd3db4d2d006f6ea8f90e15451644fdae8d25a","sha512":"75cefc02ec158bc9462277fcbab7f92d45afa82f94da389799ab435b0ebf45e1bf30423be107f05ba06e56f77393386d952290eb6391154db217c88b75f9fbc9","ssdeep":"3072:53gxiQ6Qics8eWXuCxSG+zSfCsbma2kj48Ga7Zq5GknXtg+1:EZhXdb7j48Ga7Zq5Gkj","tlshash":"f744c8d872e1b4b103e360b4506f124bf27aac6dd048a094f2add8f42db994a15b7f3d","first_seen":"2026-09-13T12:52:18.834539Z","last_seen":"2026-09-13T12:52:18.834539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2142,"receive":1215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/filter-common-util-QWE0G7HA.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.675Z","timestamp":1789303884675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/filter-common-util-QWE0G7HA.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-1b84\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: f2403b345b2f00e152bfabe0241f689b\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 516\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svxFtBkRVCL0j%2FzGbU0i2Ej4vjX%2BVl96ATELiQxIh58hU01DQ7muf1uQoZPVlD%2FG9EvPktUVNUla0TxgCxlnaZHJLfva37WKTHc2pdiQaecsPYMLEJ7NUCub5wPXd2PLG%2FXMbtkxjQoD\"}]}\r\ncf-ray: a3a7487f3c0c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7044,"size_decoded":3979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7043)","md5":"03712dc933d6eb931cf5478bd324d857","sha1":"541a1ca494fefc714286677aeb9e2d67f91af772","sha256":"820e9c5c5f92b776618537dd33df16d333f9ab9c1862a0646db1c87abefcf7f0","sha512":"7b4a083b24eb61bbe5e35a6c25eb562f8fe4bdb3388781246ec46203328736cd3f67415a967faa48de3cbb1982b0ec8aba44cf3e6531bc38190f964bad03c2ca","ssdeep":"192:g7BEKu8fJ/QC9wDx+2JK/GEIywvnwwVUXxZb9:htDx+2JK/d6UB7","tlshash":"a9e1dad5fedc04368321c9f0f0fb0a7a9770b936d4008d96d37a5c6fa153d0aa59a66c","first_seen":"2026-09-13T12:43:57.13702Z","last_seen":"2026-09-13T12:52:18.835922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/vuedraggable.umd-Cf0Mgg7w.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.692Z","timestamp":1789303884692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/vuedraggable.umd-Cf0Mgg7w.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-178ba\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 53a390258e1c2be397847352b145c4b4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 516\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bcs3YxXFUYl0KoYjZhZBt9VNF%2FPGdjGFSBmymhPTQK0BpGvrBaJMCfPQnSAB5XWTDNLWX2gAGPo%2BJmHyBZh4BvwHemzaAAeRkTdQNLgX6Eq9qtZlbf2cqAwVvU4mx%2Bi3xyX8x%2BQJSCPY\"}]}\r\ncf-ray: a3a7487f5c1956cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96442,"size_decoded":37009,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61494)","md5":"74c2b5ae7505861d75f55fe0aa7a8477","sha1":"3b0b92d994d5b3963bf9b880fe4b334ffd7b25d0","sha256":"561ebf4cf4b2a11c00d9cdd67815eb7e19cea2cbc7685d8616257d50d2ae7588","sha512":"0e1eff7f31e25f5b5f2cfe129dfdc513b4a44de735a4d04106eac286168118e81a8b5d07e6ec477c80916271a192df2d62b9d99d008390d95e6e74d42a2b8be9","ssdeep":"1536:dTA6oWYh5xeS97iuIndiNd/9JQ6tJ08TZqyLib3DOq:WhvzIuInoNd/o4ZFCzOq","tlshash":"1b93e5ccb285b8a903e7b1b0413fa50bb1766890a80dc464f53bd5d47dbc64a826bf7d","first_seen":"2026-09-13T12:43:57.163232Z","last_seen":"2026-09-13T12:52:18.836654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/columns-Cu8zNNqE.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.980Z","timestamp":1789303884980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/columns-Cu8zNNqE.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-2a4e\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 60cf92ff5aea3c88142725adf566e83a\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9Yw11FzCkbpFPox7IskmOccKa23WJicOUI6HtjPcgk4Z2kRRbaR90QmElfyleB0aMsssp48ewobIZp5Hr5QdVV4OZsLPtxOlDedJtsJPgoOfl9HmDUm4EM4TjEqc1GQL352l4KbtffN\"}]}\r\ncf-ray: a3a748812c4256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10830,"size_decoded":3193,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (10829)","md5":"e24e166728c02a4aa71baf4eb312eab8","sha1":"1b0d7c02fa7e204d92aff0904aab5dd44753cd98","sha256":"5d5e54178e2d8f493f5d9cc0905c38778c110e5b8efac18bbff93b62339ec71a","sha512":"9040792874d2d8295b0a5368de06b5ae63ca0b453ab87e49932d3b2481d30b61add7a8fe82fda6a9047f0012f1ba9f72ca7330b229a8cdd8402f57b2c23994e9","ssdeep":"96:+1lSp5C6n5OLA7Spwf6YuKV3Zis+yVbk9Zpx7mynnjs9qnxed7e/9js+aew/UUK5:+1v3uumimbkzv7mCjMqxW7k9js+aLUT5","tlshash":"30229cc43941903c9a31a144b68f8f114eece27cfacf15710df8ea1aa2c0da9f3e6595","first_seen":"2026-09-13T12:52:18.837332Z","last_seen":"2026-09-13T12:52:18.837332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/common-B5SVu0gb.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.990Z","timestamp":1789303884990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/common-B5SVu0gb.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-24fa\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: bd9df1daa6755ef05c20ac1ab165ad33\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9OOUI7REWwxR1FLKnLMOZuNYEyz%2BxuG9Jpdf%2BhdBfbtQ%2FddmRkOpDjC2naIAUcgnrBWOuAGWED7k%2F%2F5D088ebB6sq%2FJ2KF19dU%2BF%2FZ8zNZIvxBihDw0GC8omywRHfdqAijIRGx%2FiMl%2Bf\"}]}\r\ncf-ray: a3a748813c4a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9466,"size_decoded":3880,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9465)","md5":"6b24fdb0ae473b21e56924c5c229e87c","sha1":"8d2c2aa95fb7a5710ba4fc53f5d77bdaf2f0e7db","sha256":"4c8088199491f7de49b476b5b2b74487c951361d844701d7c020978d01306d78","sha512":"d0349819aef2826f1866ad2b744d60f9a1d1264d21dfd32c097170a12ac336cf4fb5e6bf5cf84444e4e20bd4123def48238dd1e19141e46cb991db3983f1da17","ssdeep":"192:6Z2Z+2ZhVlbV5WNmIsyoR3YDTEU5N7peczB7KamcDZFETmp+:6Z2s27V1VENqYNK/clg","tlshash":"111255cbf4475c6c9639a55cb64e8b54ae8c7c14f2cfc06462bde12fb0009d9e2967e1","first_seen":"2026-09-13T12:52:18.838446Z","last_seen":"2026-09-13T12:52:18.838446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/oss/pacvue-cdn/country/US.png","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.077Z","timestamp":1789303885077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /oss/pacvue-cdn/country/US.png HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1093\r\nlast-modified: Thu, 08 Sep 2022 12:01:46 GMT\r\nx-amz-version-id: XZuv0.tzTawBNggxeP4_TzhBkBjlL6wu\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\netag: \"56ab33ce82e639c1aa7a6c8ed9fca2d6\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: todOy5GyZSDcgYA6SI3UyK6mco8WFBY6sPx7TA3WvKgOpyVqshvm-g==\r\nage: 84000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1093,"size_decoded":1614,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 36x22, components 3","md5":"56ab33ce82e639c1aa7a6c8ed9fca2d6","sha1":"a2781c3a16cd820c2dd0996374de45f018def339","sha256":"100622745a3eb574e35e1a587315fd7fb940b389d2f25a4e50426e9480ef8c72","sha512":"90d3ab3b29ccff59b6d07fe5be51022b6c9c89e6effa0db44f183524c8c924574c5733ab9540b3d305ab51facc8a9e88964381283e037711c20c97b1470c826e","ssdeep":"","tlshash":"951161639b008f03dc6552f92b380722ff08ad46b4122f6035f2b976f5a00d64dc0b68","first_seen":"2026-09-13T12:52:18.839861Z","last_seen":"2026-09-13T12:52:18.839861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/oss/pacvue-cdn/country/ZH.png","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.079Z","timestamp":1789303885079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /oss/pacvue-cdn/country/ZH.png HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 283\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nlast-modified: Wed, 01 Nov 2023 05:40:32 GMT\r\nx-amz-version-id: e72Usiqd3hCViR.2rL1COvcfNa417_fW\r\nx-amz-server-side-encryption: AES256\r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\netag: \"ab47aff470b3229476e3cfea90d1cc55\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: OlLJLfcktXrM5si2n9G0SPfmbHaWmQyeozWUiJQ0RwlA4Z4o4-8LRw==\r\nage: 294\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":839,"mime_type":"image/png","magic":"PNG image data, 24 x 17, 8-bit/color RGBA, non-interlaced","md5":"ab47aff470b3229476e3cfea90d1cc55","sha1":"c6c3aa14c4daf6233f6e08654616cff7bce2c7a2","sha256":"6cb4452af6d74630ab44a31b15e69a66a90c12ce3cef4a95362ed7085cd675e5","sha512":"37b589ed80e8dddf89bcb511a76444060c4bb42f2759b522ff2e36a1f2532b8f5fc5ed1aeeba1ec2f656a599aaa4b610ed46fa03b370161fc9dac3afb4c6762d","ssdeep":"","tlshash":"8bd0ebc3427d1835f02cc83ef20201689e2e1f228bab00838a0d78321a624460468302","first_seen":"2026-09-13T12:52:18.841023Z","last_seen":"2026-09-13T12:52:18.841023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:25.158Z","timestamp":1789303885158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 13 Sep 2026 12:51:25 GMT\r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":1504,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-09-13T12:52:18.842712Z","times_seen":6272,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/tranform-common-util-i55D9ipl.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.673Z","timestamp":1789303884673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/tranform-common-util-i55D9ipl.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-5f8\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 512acbcc3ada30768de066fe495f5a15\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgil8oQctA713YJw9meQzLkTFbRuw38AnUHQKfSd%2FugJnKyw7aKFa5v%2FBCSEnlWxWLX6rE4CB0lKBLn63vA14n4wR7uEZBN9CFfUImPJEmtumcsQDmQAA%2BbGGK2HahTbz0U5UOc0qstu\"}]}\r\ncf-ray: a3a7487f3c0b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1528,"size_decoded":1762,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1527)","md5":"d18e199816d16f5045f83f7a08fce95f","sha1":"dc0ed0b4249e6bd5eb428245f9c132573e9a5bef","sha256":"e0189e8f360be8578ab8ce467d92df792f4a6e3c0334c040760e18316998d9fa","sha512":"dcad95e30a0b717d90225c365b1d62d5e96b1a6df6987ad736435265af7e74a982800b2d4623beb8d0dd7a556ef65f481739422bc302e127d392cb9430f6afe4","ssdeep":"","tlshash":"1c31238930ea14611319cee0f0df1c2353346f83be260dd6ea6d8d1109d6c9aa4499ed","first_seen":"2026-09-13T12:43:57.167414Z","last_seen":"2026-09-13T12:52:18.843398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/api-D63etMec.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.906Z","timestamp":1789303884906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/api-D63etMec.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-9fb4\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 36dd50b76d4483ae2120bb65d98bf9df\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nEuOvGf7R0wZ9OaJbqQr4Yco9JUmsyfzCaVkzgRsdq6HbkqeWhgjC4tuGY8vpxNNldQgKA3gAWYZQezmG0BSAtoNT0uYfld%2FOV%2FNDOAcFRpqYGBD0ck2WYxirc4V3ZvwAIr3Wozu5JL\"}]}\r\ncf-ray: a3a74880ac3256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40884,"size_decoded":7849,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (40883)","md5":"7d61d5ce4f23cb4da4d6efd0351fbb8f","sha1":"7f90df4e1c281d1c5b3f9e5100e6221c2fbd8793","sha256":"9423809bbe439299941d656529ab81ce5ca123859d9e266d12a5b54bcddb2792","sha512":"6312d5e707af251d55e3753a6dd31803154dd4d5ba7ae9c01e50635b227f38b8cf27d651e22e1f9c75c082095fd10f4de5d5685e731b31679817879dbe06840c","ssdeep":"768:x+aHrHaHrwaHSnexITM1fUyg3qc20m1ZPg7Qv8mwcOgI:1UIbyg3qc20+u779","tlshash":"980377fb2bcde0e38f19c49f10ed920960afbe18edc49061d892e5676d714fd42a916c","first_seen":"2026-09-13T12:52:18.844151Z","last_seen":"2026-09-13T12:52:18.844151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":576,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/ContactUsDialog-Bnxd7xYA.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.073Z","timestamp":1789303885073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/ContactUsDialog-Bnxd7xYA.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/assets/index-CqgE98cB.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-d53\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: feb370597b6d787b010676bd34d81e84\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2%2BnZcJnT5Toz8gwDOpzbhszd3HUYL0sVGwPBCtbmov4oihxP7L6siLUUY5%2BhkSCIKwtCaKezkMZXmNb7L1dhX3%2B1eZhLfrYOeRf3EQWIc6Ye8wEhZod4tXEwydpzkjohIduv3FBS8YB\"}]}\r\ncf-ray: a3a74881bc6056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3411,"size_decoded":2160,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3403)","md5":"12de8333b53c3cb8456ecc26bd80c4f0","sha1":"e1e5c0b2cfd1810e520e1b1bbcd885bed6b40449","sha256":"de18f08e9e466bf649363e2ccebf476ca231b4c00b0ed963747d99d41b0d3da6","sha512":"523d4578b476a04fb4a4e995e9b50b1cf128101cc6f25427a3b79c521358d4023a001d2a25f514420fa1e3941b4085e3a779feb596a76215f89fa57c48a51ddd","ssdeep":"","tlshash":"8e61e35ce464ff74f9b310a17668f800740d3babd5109f5aa8ec8c152bc4db9be4a17a","first_seen":"2026-09-13T12:52:18.845344Z","last_seen":"2026-09-13T12:52:18.845344Z","times_seen":1,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/oss/pacvue-cdn/country/JP.png","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.078Z","timestamp":1789303885078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /oss/pacvue-cdn/country/JP.png HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 943\r\ndate: Sat, 12 Sep 2026 13:31:26 GMT\r\nlast-modified: Thu, 08 Sep 2022 12:01:38 GMT\r\netag: \"4383804ba05a6a54a1d27731b63e956a\"\r\nx-amz-version-id: .tHkvfBkHjGS9vlfzz.099oQrbMgqPQY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: JLgU1fT6eriLjuqdKrNNbk_-tOZW2eYknqt71nVGEOF8mn9BVLXaFw==\r\nage: 84000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":943,"size_decoded":1463,"mime_type":"image/png","magic":"PNG image data, 34 x 24, 8-bit/color RGBA, non-interlaced","md5":"4383804ba05a6a54a1d27731b63e956a","sha1":"05e06083dd9cba4167b11258ba5e6ccbd41fc9bb","sha256":"2ea1a7c0995857ea5954a8fe32e7a0faf877bffaa17556a4ba4657292cc0ecfc","sha512":"cf0fe59b825c9c109557b032cc7970d92050cc9d992b389a2c93a60aa9d3f19568c22e0f955ecf8c168bcbc1e3d1c0088f10a438f8b53f8e553b8ed377e15b0e","ssdeep":"","tlshash":"7e1188de1935a857c2005603183c644e87ac09088117814e733f96495c286d5c661a1b","first_seen":"2026-09-13T12:52:18.846694Z","last_seen":"2026-09-13T12:52:18.846694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-DxdrTKh6.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:25.160Z","timestamp":1789303885160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/index-DxdrTKh6.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/login?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-14ddf9\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: d5dde134264413faeb8150751e0bf9d7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 520\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCNTZbf0MjvNk6eMMEzyhqP8kO28Mlz67vWQoLoJrPsZt%2BwJjob36ONEJKUIhH0VRlTFUKxTpw6FwMwtSzRox9gIoitTU6q7LPqBy7aoQz7RcNruCgUozKnbuuibiLjtUZeFfZncuEmW\"}]}\r\ncf-ray: a3a748824c6a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1367545,"size_decoded":204462,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"254cb9f8fd12f51d9d3260d1de6e984a","sha1":"2ea836640074957ce62af86e465d2caacdb3e1b4","sha256":"97b21a4cee9e6f9f88d0e937e89677dd5c2df309140025254f23ded897aea78b","sha512":"9466dbe26458590935589ecad3d48f57805d31ac88b2c114670770c90f9415a4ade1e6b795cbd33303e3465dc5d30bb1ee2ea7496853d0808358d78c59020c71","ssdeep":"24576:ptI8SFy3n/7Y19VojrN5UEGGNABRRbVJLJTrC+Q4b:J3n/7Y19VojrN5UEGGNABRRbVJLJTrCS","tlshash":"1a25e918fb22207b2437d73f74d0e9495b16f653da234aadf94270048ac7be616a3d1b","first_seen":"2026-09-13T12:43:57.161168Z","last_seen":"2026-09-13T12:52:18.847995Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/oss/pacvue-cdn/vue3/app.sellcordclient.com.png","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:26.715Z","timestamp":1789303886715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /oss/pacvue-cdn/vue3/app.sellcordclient.com.png HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 5033\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nlast-modified: Thu, 23 May 2024 05:37:53 GMT\r\nx-amz-version-id: ifjZZql_J7E.W0yMKaPeYX.B1Fr1yMyO\r\nx-amz-server-side-encryption: AES256\r\ndate: Sun, 13 Sep 2026 12:42:50 GMT\r\netag: \"c4a7c1dd036f232fa5c1fb31818cb4c3\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: YnEPxci_bx6k2CFMrSmPbSGZeo-ZML-hOwnqokCaEhrCoNesRWUqGw==\r\nage: 22279\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5033,"size_decoded":5592,"mime_type":"image/png","magic":"PNG image data, 204 x 96, 8-bit/color RGBA, non-interlaced","md5":"c4a7c1dd036f232fa5c1fb31818cb4c3","sha1":"0617a43017fae87461902bc32799cbbe7dacbc45","sha256":"33a36c0f244a36914ecd90127df2dcfa252c51b62906060c813ae07e3a3a1f7b","sha512":"92a12f50394ec23e9f2d081936ea60c4db52bda067cc71ffc849ecf89fb71b342e462a0d9266919f57c1001407c64a8ca874d0c02ba7d34da092c5434f0244f9","ssdeep":"96:lMIsZj+ycHNLK4JQHpwTHnALApZP4rpSu//pa8I/kMTin4VZv:6IkiycHNLKUQ+TgyPoN//paCM2nU9","tlshash":"b1a17e9ba5709740d9b403f32cc465582f380973aa66883cce54b6c0663577a5b17ed3","first_seen":"2026-09-13T12:43:57.158916Z","last_seen":"2026-09-13T12:52:18.848689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/hooks-v5BX_MkD.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.686Z","timestamp":1789303884686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/hooks-v5BX_MkD.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-a20\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: f9b017d1984fac640050bd5544d03d53\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SypIHyLy2v4M1SkThlGhVNoYPFN6UvaW7G3OuxToSQlUtIhi9lB2%2FuGYnvOQ%2FzSFuuic0xeDScu4xRR4mH3z%2FpfVZjNYHcjmB3%2FLxuchk%2FuORZ5PJ2DnoCO%2FczRNmY449YdP2D3GOSFV\"}]}\r\ncf-ray: a3a7487f4c1456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2592,"size_decoded":1772,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2587)","md5":"e6fc5510c9428e6099cad02aad5938a6","sha1":"189801579ffe83fe4d2708bfa83ed6a1d0f4feb0","sha256":"90157b238123d78176ef43db9d7802ded2787e3de11f0adfe1e219449008153f","sha512":"6373ded6d6df80601529a8bb978517478a08607dd0690d46fa3acb0a003e64119d6d6884db72e0b21c7ed04c129f605b3e207bc0bc03c9b0dce8a0aeb134108b","ssdeep":"","tlshash":"5c51679af589bcef88314675f2894d018fbc0d90cc6c304a9038ad2f1755daa7d6eb65","first_seen":"2026-09-13T12:43:57.147896Z","last_seen":"2026-09-13T12:52:18.849353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fast.appcues.com/145456.js","fqdn":"fast.appcues.com","domain":"appcues.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.903Z","timestamp":1789303884903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fast.appcues.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q1","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 11 Feb 2026 20:00:15 GMT","end":"Mon, 15 Mar 2027 20:00:14 GMT"},"fingerprint":{"sha1":"1D:7D:45:61:9E:00:C6:8F:44:1D:75:9C:4A:F8:B8:87:D6:BA:DD:94","sha256":"13:F9:32:8C:F2:E0:3F:45:CD:66:5C:71:F5:88:DD:2B:B3:AF:9A:F1:7E:62:27:E3:C9:93:3A:6D:99:9E:35:25"}}},"request":{"raw":"GET /145456.js HTTP/1.1\r\nHost: fast.appcues.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=120,public\r\ncontent-encoding: gzip\r\nserver: Cowboy\r\nx-request-id: GNTiZz53L1xVgr_1fpLB\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789303885.937594,VS0,VE174\r\nvary: accept-encoding, Accept-Encoding\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With,Authorization\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,OPTIONS\r\ncontent-length: 5299\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":22714,"size_decoded":5999,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17699)","md5":"1accc88dd1aed0859a19806632a906db","sha1":"29903d0aee60a7992a1005bcfed989ab5d88f9ba","sha256":"ab123504043e08a83036bebb7dd19411d459b3724083ee67a6268e408b3c8e47","sha512":"737b61dfd91a0ea097dffe024cb7a48449580730983ca36113f9d47c1f37320f256f0fa1e3453cd80ba07d6181aa7193738c515404c4d15951678c68f6f3fd9e","ssdeep":"384:Xbi4S7rT21ROzGbFnjgDOI+mlL8YeJiccsWtkcjVu/:XBS7ri+GbFn0+KKfq+","tlshash":"b5a274ebf9932c3913638d8d251ffa606215e423a4836570b16ca0ee4fdda0552e5bce","first_seen":"2026-09-13T12:52:18.850166Z","last_seen":"2026-09-13T12:52:18.850166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":183,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/CreateTicketDialog-DZ-U0ttt.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.918Z","timestamp":1789303884918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/CreateTicketDialog-DZ-U0ttt.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-53c3\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: e65dd8513c5cf5df52f364feab168b54\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKpBAhqqr%2BTAzXglwUU6LuuXrZjhk%2FpHw5q5wqv8AUmvQu5%2BtSQU1xQuVgkcOQTml2kk%2BYCBCz%2BNQm3B%2BZmVbAY3XcIVwDQZf8A1tdUYLklV8lfj%2FytIdU3dqP%2F5RJ%2Bg6S0reR1La3FH\"}]}\r\ncf-ray: a3a74880bc3656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21443,"size_decoded":4845,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (21436)","md5":"450ce5162912a6746f29d57da38942c4","sha1":"c08d506b1c974899e042bf2dab124b8d3f87e11c","sha256":"0f1b3bddbdb2296a93c34ef68cc6667895d040ebe6803af3cbab12ba5bb7f278","sha512":"313896f9136c3eccb1d2359741bd4c1b532c053196da48d3c530fb2f47bbe71a230321b9b16d173261bc111909516f3b715208f7ad8391733301cc9640faaab1","ssdeep":"384:XnRRvYvIxCwugRBsYQKL3bmSvx86GOP7atkMkWv:Bg6BsbKL3bmSvx86GOutkMkU","tlshash":"1da2f21efd4728bf523b943ed14126d02fcaf763a0d35396f495e94916ee0680369b2c","first_seen":"2026-09-13T12:52:18.852126Z","last_seen":"2026-09-13T12:52:18.852126Z","times_seen":1,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":637,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/MessagePop-CO0sfcoo.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.988Z","timestamp":1789303884988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/MessagePop-CO0sfcoo.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-569\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 6cc6c4d02714e615a6d2ae0e1c253e4b\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mH7pLUkYRA0XAKCpjNOpC%2FJEtme3fUwgHWmAeSTPRxrRUav0vf4yqfrzO%2BZzwp%2Bh6QKvW9LMNDQcrOVvYp2iLbDu0fjISuVRodiCl3eYaL1LwVXH00z8t4zrJQyddXJgocEh%2FeS3rwOn\"}]}\r\ncf-ray: a3a748812c4856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1385,"size_decoded":1506,"mime_type":"text/css","magic":"ASCII text, with very long lines (1384)","md5":"583b14d50e57c926528063c40f6b3942","sha1":"59a5b248cc456d4bdfbbd25b84413dd30f31cd2c","sha256":"7da3cf8a3d6d3c6ac82918362ed70d9fb20dd18e31d9a66c7cf78d91d37b6a94","sha512":"c2a080bd11064f063af191d6a0e012ffec7d0fdcfb8a2afa8134695d6f3bfc731b84758a9b2a79c59a56463661c23d9f94abb3d2b95b038529069061e87ee92f","ssdeep":"","tlshash":"2d21103962ac790af633e63bfe04795d301913b380020a65eec76779c9c2056760a349","first_seen":"2026-09-13T12:52:18.853474Z","last_seen":"2026-09-13T12:52:18.853474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-CqgE98cB.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:25.159Z","timestamp":1789303885159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/index-CqgE98cB.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/login?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\netag: W/\"6aa3cb40-7ce8ff\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: a6b6651b7decc10941c7bde8653a5550\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 520\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e2vDC9imQI%2BVlsAG0V42mrPl2C8ufqBwy%2FMMde93JRQopAq3OVB0D5yqlkIUI4K3iSGIWk2uTVXZjY%2B0bpLqwtBJoQAdtvPFYPLeDKq2cErnibFBBOKC7%2FDNq7n2wdtDG042GDYsonFW\"}]}\r\ncf-ray: a3a748824c6956cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8186111,"size_decoded":2450893,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (52331)","md5":"7ec674b51a146f337f7308ca789b60ba","sha1":"084058b29d40d5d1fca05a9001c3a5fc2224a92d","sha256":"05909506e91f09ade4de20b15a10e8ba2180e006a181816a724a9e956164443a","sha512":"8e4bcaa993548c8b4abc489882fd30d94e34cb072bf1e33816003090828daaa7f82d355a2780a4c74f5da5667cfb324378e09a7d364c7cf3488407c27121deb9","ssdeep":"24576:76xg1sPTpEXsxbnNqy2/senLnYaCx1Yx/:76xg1sPTpEXsxbnNqy2/senLD","tlshash":"be2509e8632cb68c558b9a6ddf7fdc80532e70b97059c4d09aaece786057884f60bd70","first_seen":"2026-09-13T12:43:57.156192Z","last_seen":"2026-09-13T12:52:18.85454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/sign-DKjVIj73.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:26.652Z","timestamp":1789303886652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/sign-DKjVIj73.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/login\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:26 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-104b\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 687aece53559217d36a5aebe5c85848e\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sByN1CcZqmqik%2BUO4D%2Be%2Bf%2FvcjTVVCxVqRMP%2Bl3eEy3%2BSbM%2B3MkqXGfvHc0P8Rt%2FY3NQajoh0GHqcR%2FOPhJrCHBDdzUNGzsUEtdrq%2B5hI%2F1bDHsbQyN7BvjNPOPh47Ww09L59mzycwt5\"}]}\r\ncf-ray: a3a7488b9d5456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4171,"size_decoded":1732,"mime_type":"text/css","magic":"ASCII text, with very long lines (4170)","md5":"6822be96ac274a011d2bba092cb810c5","sha1":"df0b96135ba3f018c8a3bc7e34c847e5fd379fed","sha256":"15e5d952de1dca64b941958abbfa4f115adde4409e2c804862bc4f1adbd8a0f6","sha512":"670c90241f806a3ca86097a9613901992ac8cd8575bcafebe05f8006f5c8d591681bc923d4d344a94f897e62560d334dd38c4d4ba9e5685a5baebef5ddf77940","ssdeep":"96:WuK0KGwCDTBH7p5NbIo4izpof+EwEMXPLFFlHTrLNPX3dq+O:WuRKGwCDTBH7p5NbIo4izpof+EwEMXPs","tlshash":"f4814c17324bbfb32527ddbc10d562ac5a1897238799c7ed9860f40c8f96161633fca5","first_seen":"2026-09-13T12:43:57.139363Z","last_seen":"2026-09-13T12:52:18.855139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/constant-CCy0K6oI.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.997Z","timestamp":1789303884997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/constant-CCy0K6oI.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-4b7e\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 2899447bdf7e46fca93663d0342de495\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpa3zCILUvlp96pcloSHISKKLpSbM2MeCN9i9%2FJo8BUrEslsV9w0ndaxqv25%2Bkud94lV0sDmtOqhdCQ%2BtSQprC5e9krFwVx5fnV%2BfU3T0efIK8XSCB8uJzvgVdA5dajaDs%2Bd%2BmgIyFUu\"}]}\r\ncf-ray: a3a748813c4e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19326,"size_decoded":6220,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (19325)","md5":"13a86680ab175a74221a83635fce6718","sha1":"6b62993c55b1e715c8532a5e7abc4ff2f511fb74","sha256":"8429a3cb5dd4137da806ff9ef98f6adc4ddef36d5b9bef3cd20d09be712cbdac","sha512":"d7566541dd9db889d898c79f080fdf92747237a6541605c4160f0a58a76f0cb389ba0deac7d9552d9aff92dd6a391b7f7b12569dd0dc8a421eef3c0b8f0c8e23","ssdeep":"384:NwkmxmV0WV0VV0pV0JwyfuFBgnRX0OlwG5T+tLtFktL2vxmCbm6rgnhjDfq3H3zX:Nwk8DluFBgnRX0OlwIwaWX4aLxzQfS5","tlshash":"1292649efa0f283dd263e3506c56a58ba788307570dd44d58a799d0e2604efe22f1f36","first_seen":"2026-09-13T12:52:18.855728Z","last_seen":"2026-09-13T12:52:18.855728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/sign-1LG536qi.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:26.648Z","timestamp":1789303886648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/sign-1LG536qi.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\netag: W/\"6aa3cb40-a71c\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: ab169cc461f09f54279ee6682b755079\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7tCYBsTeRnXJnMKchuHpmv5bZXPJpc%2Ftg1Awgtp8d4srzvEOENgsoZfQCs2NpEXT%2FwEStEvGaiUXNmyojnCTq%2Fooearfs13cqOznu6WgR2LLdZBNGDB8uGLfGHW%2BmA2ovoGH6hmFB47\"}]}\r\ncf-ray: a3a7488b8d5056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42780,"size_decoded":13447,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (42777)","md5":"c3450617e7c78e24b1ad95aa0927ecd9","sha1":"fac3b21d779288c5c070bb6f6b3b3b5fa2c067e0","sha256":"ae3a70035346b2afb20fcdf1fb0b071db75b51a0938054cb1bccbad0fa03562b","sha512":"7cdf405de48ecb27950db22fb2b599986f78042576c4e7d78df45ca07e5d70987f914fc18eb1892cebe197237c7751289c23d57d25da067f4883f057a2ae9803","ssdeep":"768:JYuuVWM5SG+7oerwxAB+VX7YY+BHbXIc+/e4ZAnKR3haDTYnPRdP6:JtG+7oeJ+VX7Y1MEsaDTMPRdP6","tlshash":"67130a4cf52a89b8b373845970c60448f1993f66a019d8ed75faef063b52dea138d336","first_seen":"2026-09-13T12:43:57.165706Z","last_seen":"2026-09-13T12:52:18.857037Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/filter-CGcW1fqJ.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.677Z","timestamp":1789303884677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/filter-CGcW1fqJ.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-aa20\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: cef382c56f303296a025ab730d860221\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TTjCNp66CBrIVlSekkmrdvr%2FmoscrlGKDqt%2BsiqfPdhOb2CXop6JEMcMMqzSS%2FTlKTFeTcqCBoB31%2FHM7xCPfsN7f9rbmRC5T%2BdYDTxz6V8BaHSvce2qwFT7PyHc1tjqIzv%2Bep3xkHoR\"}]}\r\ncf-ray: a3a7487f3c0e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43552,"size_decoded":12181,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (43541)","md5":"a3529507e2edecec9f094fc5955b2b2c","sha1":"1a172860822efad60d9d96874a574cd0bbbe79e1","sha256":"c9344836772accb37c7dceec616f1360835c5e995a8d02ad22be1ec66f680a41","sha512":"3d0f21d3842b89ac341bfde3b308c08461f56a05da64a96f6a798cd5e1bcb93efb124a4c9b0e6fd297867a6053807e1289c3765b7a34efdfb156632e6781ce92","ssdeep":"768:AITB2LTJTCTK5JBDX3qc201W+VyB+u5N1WNb26U+3xakruOaWYkv3ufAfPl6rj8T:DTmTJTCT+X3qc201W+Y8sO3RYg+4p9","tlshash":"5413a1ceaac122ec1bbd55a4915c90156cccac6781878193fdb4ec5a37241b8e23f3f6","first_seen":"2026-09-13T12:43:57.168583Z","last_seen":"2026-09-13T12:52:18.857622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/CustomDownloadMyTask-Cn7QZBaX.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.971Z","timestamp":1789303884971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/CustomDownloadMyTask-Cn7QZBaX.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\netag: W/\"6aa3cb40-54e5\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 7230cf57d7f9ab536485949ec7b0d4c4\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Av4DkxTPv3sgHuJzvQR%2FvIhurN7ryDBoo7XA1TffYpfyqba0e6JtT%2B8IE8BkeQMZd1j4BqI5UK9V88ShfZRj3gmKxvoZb3QvrMi3YBWxYh3ELx%2FkL0%2BRSUlviWqMLVTmhnuOY9BMazEP\"}]}\r\ncf-ray: a3a748811c3d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21733,"size_decoded":9893,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (21660)","md5":"d6fb97880be608cc9efa1ba55d0556a2","sha1":"353aff801a47946e97a108e4ab3cdde512dd46bf","sha256":"73f334e4c61c5cc97a6f3a77183f478a078762b7f054af1f899f1ed0444eb48a","sha512":"cb7a8393d0a4f804842ec2f6bc150bade3c91f4c3936aead385dcc1afb0a14158c5886705bf43c2869bb151c60bb99798751511593b69c1e91b5615b1d1b8280","ssdeep":"384:sTPN2WmhHCwNKMOXniLMKQqdk/UfcCB/nVqGRB/4dPcnvo663h5tVs9I0ffVWsqV:KPN2WmhzNoXniDbfcw/0GD/4dPcng66n","tlshash":"86a23c447432d07db3b72c8860ac4080b3192f5ac029d1c1e4be8e5577bbe7099b9bbb","first_seen":"2026-09-13T12:52:18.858174Z","last_seen":"2026-09-13T12:52:18.858174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/myTaskEntry-CrV-M33a.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.983Z","timestamp":1789303884983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/myTaskEntry-CrV-M33a.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-2bf\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 9d5d292b6d7595a8c871d897d878edde\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HWxaNda2n6z3EVLuXnntqsVfJX5kurRvzqe3FVdQYSrCf1MuMWBpAiqva9j2NhPdIqcyv7JlqRZPBAem7l9%2Bfa2MvRtWQ1LXOvz0LTs8PT33vyV8Edw0insRQ%2FtVu1uR5lIoEtRZUOSh\"}]}\r\ncf-ray: a3a748812c4456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":703,"size_decoded":1359,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (702)","md5":"b59065864a2592196093a7a45a18171e","sha1":"d2af1a7aab5079a694d7cccf401be1b8119d2fa9","sha256":"3d2baac19cb462af0598cd528651867ae069b17668bd6dda1be1ae2beb61c7e2","sha512":"a7c54ad2ea6e11e64be7be1b6743d9b32668ca01e1148f4a5ba6eb163fb54fa397209ba09c39e05fe1afe66bcfbe9aa8b70354a980b1eb3dfd3c4819fcc77cef","ssdeep":"","tlshash":"6201d8cd70ee7061ba11456fd067762b6128bd53212c90e1904b59747f61c17c3a19ac","first_seen":"2026-09-13T12:52:18.859314Z","last_seen":"2026-09-13T12:52:18.859314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/oss/pacvue-cdn/vue3/amazon_white.svg","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.076Z","timestamp":1789303885076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /oss/pacvue-cdn/vue3/amazon_white.svg HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ndate: Sat, 12 Sep 2026 13:31:17 GMT\r\nlast-modified: Wed, 03 Apr 2024 01:16:12 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: cEN5BIVu2KO9Z1Wrc44wiKsgqyZnxJD1\r\ncontent-encoding: br\r\netag: W/\"19f9c176a6b3e369dba900382c836812\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: yQS4DjO4CbY82gXvcsljSHJyRZ2-AePvKTAGBATVreIFbluIc-NbNw==\r\nage: 84009\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6142,"size_decoded":2978,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"19f9c176a6b3e369dba900382c836812","sha1":"96979ee81c2bdf7b8fafcff373b2074c698420e6","sha256":"b36e0cafcbba949aeb19996511414df0817a07186ad8250ccb1b54ff1465da60","sha512":"960ab11d719c2d8c2107a5f4cba8ecd8e9e14b955b0b16d2081d1df3e4da49613c1db89928233d8ccfb46153206f452cb914ec7993e0dd3a9b504a6206d9130f","ssdeep":"96:hrt91iLNwD60m90f5xz1Oy5+SqaKvw0yaMjnwD9Px66yaiYRzXC0wfdDLJuH0GfT:P9UBwOZqfTx+SC1yxwiYZXwfDuUGfAw/","tlshash":"f3c163f563dae2f4b406e7f8d53a4465ba6b2cfb6705c795e3489c81bb1200cc949cca","first_seen":"2026-09-13T12:52:18.860397Z","last_seen":"2026-09-13T12:52:18.860397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.pacvue.com/meta-api-amazon/filter/profiles","fqdn":"api.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.094Z","timestamp":1789303885094,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /meta-api-amazon/filter/profiles HTTP/1.1\r\nHost: api.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,currency,dateformat,language,productline,timezone\r\nReferer: https://app.sellcordclient.com/\r\nOrigin: https://app.sellcordclient.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T16:24:19.8643Z","times_seen":18445652,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T12:51:22.128Z","timestamp":1789303882128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: ee9e59ca2c6802ac7ff0e1a2c8cebf30\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGQCnC3YE7fGoL2gPG0Up4bP8uQKQaqIdU%2Fve987hWHxShnZAw4jJXbEchZupDRRAZ72tPzPdCy%2FF3yAH4VtGKpHm2v5Ma4xOYKmtgUAC2BoxVix7MC9oQeFWFRuUq07geLmCEh7AQ5i\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3a7486f8ab556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14181,"size_decoded":5163,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c776614a5fb461bf62b5ff2c0928cd5a","sha1":"2e1bdd4b38a5ed8647200505f13665b08d6a1cd7","sha256":"cffe969153d5be86269d8c16c0ed9610fe931756a942e1e6e61238234010169d","sha512":"88357a6c3e73189ca141d95d4afcfdb4545cc8b69ec7c19efb8b3d95aaaf24468867c5a1fc21b48cd6070443c4af786957fbf4e9052b42a865452368247a54bc","ssdeep":"192:/aWXpMp5pCyvEMKzSYHfs+uNoqXzABMa4uYCx5pUptpuq3oay2PUyoapT4fX4YF8:/pfWYIwAT4v4wDO6tKIpRTJ2uC","tlshash":"4c5274556eb28436428740ab5c66e104b02490275e18fd647bffc3a85ff4bae85e3b9c","first_seen":"2026-09-13T12:43:57.141198Z","last_seen":"2026-09-13T12:52:18.861532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":-1,"dns":8,"connect":23,"send":0,"wait":662,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/vue.runtime.esm-bundler-Dbz8Lknw.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.694Z","timestamp":1789303884694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/vue.runtime.esm-bundler-Dbz8Lknw.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-111c\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: bb771a9539738d38f58d6aab9189050f\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 516\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t6qb7CjF2fU9CzROF7rTMf7dNO%2Bp2MU2d8BfVT7PKjudqOOeE2d1xIULxLPpXc9XcbbDHWFs13hbxrsFg9VGcRc7Zonc9GAXktLZQbW2seFuhZVao9RBQobed0vzqihI%2FlFhQ4pm5K0%2F\"}]}\r\ncf-ray: a3a7487f5c1a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4380,"size_decoded":3271,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2818)","md5":"f0af1a3e955404489ae5af801fbb7e19","sha1":"b589bde13bbd424639a105158f0c19f47a7e2e5c","sha256":"fd51a8e75f31bb2392f7adf9bf98e19ae5a0614eba71cc01f4b785f09f4fb431","sha512":"0362e35bdbeddc20931aab6a1efd08e7e96d20f2797ef9b7c975b6921977f1d7464c848627962b3fc78a35ecddc646c160f29112760f8491aca5ecf9c9159ce5","ssdeep":"96:n9J8afj9KFIjawijifDHNcgieCWRBiN9FINQBf:Fb9qIjWjibtcaCWR4H","tlshash":"9891b5948b017833268e641ea95cd88330ad4b5ec57970f0a58fdc1632de028b2dd9fb","first_seen":"2026-09-13T12:43:57.142419Z","last_seen":"2026-09-13T12:52:18.862067Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-Dg9IWGXj.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.699Z","timestamp":1789303884699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/index-Dg9IWGXj.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-2243\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: d1175d1af78727182e42c68d6f431254\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5emyca0qzdPvn7HdZ8U2RsQTWgtXVz7dagj2M7sAHACtFEWpy8Rb06x3w%2B6MLYt3221gPI4XotxjaUmjMXm5zq2%2FZMlzg2uPcVgi6ckhu1hNLmcB3w54MZdr4kEH2G3ARZonW%2BWyGHri\"}]}\r\ncf-ray: a3a7487f6c1e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8771,"size_decoded":2937,"mime_type":"text/css","magic":"ASCII text, with very long lines (8770)","md5":"03ab52f05f097e92a14a94a293e852f8","sha1":"63ada85280a0d9ec030692e16bfe1f596161f03e","sha256":"f51ce17d378b7115c289c39d217af2d921861ca04ee6935c1a8e56703db9d71a","sha512":"3b9c9967f07bb804ac1d482bef0bd64d4227bbf814696f25c3dc5e9512dea363e3922c1518819ebdad1bb0a0e9f5b77d20c5d8486ccf51b451176f13c688b0b4","ssdeep":"192:DSUex9/lUOF1aqJ2btct0lECPDIjn+kLqDILE:T4Pt2EII+hDZ","tlshash":"74026410f7ae3014f473d659f0d0395a3625730381a39470fd61fb2acfab6de2626a88","first_seen":"2026-09-13T12:43:57.170944Z","last_seen":"2026-09-13T12:52:18.86271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/option-DmjJSz7r.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.973Z","timestamp":1789303884973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/option-DmjJSz7r.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-28017\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: dac4bded06421902f401c73a0659aa10\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vb%2F42FbvVYdP4HFXS%2FbKNeybypHL37zQQVqJt4FmkhlvrZoikNL%2B%2FIC%2BTg8%2BXIloZlQz5WhKS0d34gnKZxPHx2qkyMcmzmUQ9M%2Bsa5A7WtyuBx88J5RYE%2F61MLOlD0cEGI5oA0xj0hbe\"}]}\r\ncf-ray: a3a748811c3e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163863,"size_decoded":12388,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d531f10998fa170ff67eca7a42fb3d01","sha1":"3d72c45fdd61a952de792fbdcd094bf1895c9a16","sha256":"c8c1db25ac0af5f6d967be18d5979062a055778be5399da275ef07a06797b161","sha512":"37d06b81b082308cdce871645af0858418bdba41031e554ba6d731c3bc5b4d56a9e8f8934e20c32bb3c2b5d775b78fd2a69abe5720bfae5c67d9aefe3c6f6eff","ssdeep":"768:jcLV/6pwP/iAEAZlRlwAEAWMlfj23sj6/QG2rAID/v4Y4S4MhuXdhidLjThrh1b0:dS6/QGmjOjij1jWqxCTqmaEoG","tlshash":"91f3d5c83007d03d4a2cb5047b8b4f561f2cead6fbda452144fdae16e5a1da1f8b93a1","first_seen":"2026-09-13T12:52:18.86355Z","last_seen":"2026-09-13T12:52:18.86355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/Detail-02s_RK9F.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.982Z","timestamp":1789303884982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/Detail-02s_RK9F.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-ba\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: b5e946dd76944484e17f51ef9d846943\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7oc%2F%2BmYWyvrmggXaProOwtqOyEU4g%2FNyKGrhjMOo%2BOQvPWA0Iq7VGCdTIxV%2BckPRPUwwzQEsQdW8W7XCweTXk18SpOHYcdBuu0%2BeHYuhEV2vI87W2hB1CPhZ81YS3um13SBb7ppmOMK\"}]}\r\ncf-ray: a3a748812c4356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":1084,"mime_type":"text/css","magic":"ASCII text","md5":"781375375fa1b4be8e028f25e8575c53","sha1":"87700a1261973dcb42a956a4001d15f38042aa9d","sha256":"5b0e7a245b8e57d7537ba2eb62a8a01f1d3236dcaa616ca32aea086bc402cb57","sha512":"0d7430b0590970a87fce76ded8e10f2cd6a17848fe0dc91a5e3de7ed363f39f9343c38c01f9a347a823830ad75f95eca101ad052574dc933aeed8f97c960cd5e","ssdeep":"","tlshash":"2ec0126027ac780e65b194ea712e5c95ab2a010b62abf196fc9851288903405b414548","first_seen":"2026-09-13T12:52:18.864907Z","last_seen":"2026-09-13T12:52:18.864907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/NotificationGuide-aZPPQOIF.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.987Z","timestamp":1789303884987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/NotificationGuide-aZPPQOIF.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-1e1\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 5748c7834c7e660753bbb272d59ba76e\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WOBANr9HF7n%2FubUELPL05lAN2e%2FxTpaltSN5TmSirDfVcydpp4O8%2Bg0U8jBZspkF78MH%2Fe%2Fe7G7ltjRCDEhP1feT8b5dNHtRnUMvzUWtg3N4WgSbWVyQTMKT4Gf8cdDBXjkARku6sfpw\"}]}\r\ncf-ray: a3a748812c4756cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":481,"size_decoded":1155,"mime_type":"text/css","magic":"ASCII text, with very long lines (480)","md5":"fc7879f9d6e9939efc34541a791d740f","sha1":"329898ba3c4a35f4c3ad64abcac78bf2e6103fe5","sha256":"d72fc1ded31f16d49da6640c1287fc8a09f7d35cc8966b5412c19feddbe1a00c","sha512":"70991dd1bd55002814e5fa682cfd6de92d0e13dba8c388abe451ff94a2b2bc756185409fd1f068e4ef3e18f3343aa974d836872e0252a4ae511d856c14869ce5","ssdeep":"","tlshash":"8cf027d7e20e559e7163a1f550831da5d667c44e8763e2e9a6bd21da8e003c0b3120e8","first_seen":"2026-09-13T12:52:18.866156Z","last_seen":"2026-09-13T12:52:18.866156Z","times_seen":1,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":633,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/AnomalyIcon-Cx4p2kiw.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.999Z","timestamp":1789303884999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/AnomalyIcon-Cx4p2kiw.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-82\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: edbe65c8af80d134551617b7d87b784a\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHtxbGMxlUh2csW7Y6Etv7b41jq6h6CDHtv3JzBVYADxTprPywlsuBWmZiw0xCNbybJwlsB49PTv1En4TsYG3gKnDJkbqm95O6QD9F3bTx91eY1fpWplmJd1D7ITSjakmbKI3wFK2HdE\"}]}\r\ncf-ray: a3a748814c5056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130,"size_decoded":1066,"mime_type":"text/css","magic":"ASCII text","md5":"172e740e24322c2645e1885637eac116","sha1":"2d7f82a88a99c85c2d1479bf80e0a3d4edc09f0f","sha256":"0791760b542294499b79dd51edb2100ddd90fd86ec74444392586c79089a6008","sha512":"ebefd88a5dd4e14fbdbc43910c22ca7184314ec156805d27afe52a7745a0420a925ef73967fd0960231908fcf813cdb799f3141d646a576f548c67f23abb0424","ssdeep":"","tlshash":"26c02b01210a049db03ed4d052b00fe0105c470b40070827a2193f3075030fb2af2310","first_seen":"2026-09-13T12:52:18.867088Z","last_seen":"2026-09-13T12:52:18.867088Z","times_seen":1,"resource_available":false,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/AssociateAccountsDialog-n-Jy9NeD.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.905Z","timestamp":1789303884905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/AssociateAccountsDialog-n-Jy9NeD.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-be4\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 2d871fbe7ab081a17af121b3500b5f97\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRSz%2BdfLPelGEWP%2BKNT%2BDlvQkVHFdTAhWWWFWPZ4ZVOmoqCPB95auSzxGjMCHLg6O%2BfYezrSX%2FIRYW85KTXYyaiExjBIOx6y6ymhkGud04zTtynFF9QZmiQYyRGWdCSyvTtJZiHkWpgX\"}]}\r\ncf-ray: a3a74880ac3156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3044,"size_decoded":2499,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3043)","md5":"10b3b581617b58ea5bec914bd2018e47","sha1":"289a03cd550e33c4e05ef9833ed2e16496ed790a","sha256":"03fbbd5b537eb4725a4e00a80d15a8effd6b25fb57ddbdfb3e77db25145bee4f","sha512":"1c60689b7431a2c2127cb9ac0b333e6b34fa48f03b66ff5d929041b826bc073cdb4a69fdf4e91a473fcd5db50322236e3cd7abac3c9eea9185f7d987f58a5e7c","ssdeep":"","tlshash":"8051b708b02afc7e9bb60570b1664450f188ab4ef139d09892bd5c6e7b6bec2c509e25","first_seen":"2026-09-13T12:52:18.868665Z","last_seen":"2026-09-13T12:52:18.868665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/NotificationGuide-3_U-P-pP.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.984Z","timestamp":1789303884984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/NotificationGuide-3_U-P-pP.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\netag: W/\"6aa3cb40-12be\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 4afb674def9902204f8403b7fb2cec9b\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhqH1lb%2F%2FZXcQg0TKUuVEPgioNy3mrkEe14k5CqWiXGj6%2F0abczFk70SUrMYWh12BpuDecwUXFpN67kd4qRDkNoVKNGh5GXTuVefdCwlva1MSpJGED1FRDW27pjBNpBewZqB%2F86DCFQu\"}]}\r\ncf-ray: a3a748812c4556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4798,"size_decoded":3113,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4791)","md5":"24117bd26c4436bb95187c78ace3d48b","sha1":"01607f48eed45d2a4dc3fc0daafe6cef357c06e4","sha256":"1dc463460bfbf34a6c4fe5374c8f23633d13a1c3e876189d8b946b9b433e9390","sha512":"f582d38121b0b1ed4f4f6af8c9d63f8f8f72bc2ca044e716f483c861c17dc075c69eddc06ed391b2a900b98730c984392c5d89af0af01d5164d1be862ed6f165","ssdeep":"96:xGtL4ziLqW4nayIHCaiG3XHVQlR41k2suzJh4rUaQO45KzBi:8t8ziLqnIHCaiG3XHVt19MlQ55Kti","tlshash":"f9a1d949b83ac27cb19bb5c371a17880a18f2d6de17009d0d0fd8967335b9b6236e7a4","first_seen":"2026-09-13T12:52:18.870426Z","last_seen":"2026-09-13T12:52:18.870426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/AssociationReminderDialog-C-W8KBoc.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.068Z","timestamp":1789303885068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/AssociationReminderDialog-C-W8KBoc.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/assets/index-CqgE98cB.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-54c\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: f34cd36aeb6eeb3e8ec6df8fce3c1ab3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsTANvS9L3Gv7jHFYiaDcyK%2BhsR4px0fzZ2lN2vnyFYFRqRslZLF0CYEZ1x0iAfUhVSCei4TER4v%2F4mL4pKB8qIBBc3NKKfU3t8ovuPEWdNJOmNDlIyxcAJ4qc0xF%2FVzctbQb0shbmnc\"}]}\r\ncf-ray: a3a74881bc5e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1356,"size_decoded":1747,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1355)","md5":"b7bf42f3694c7aa9838b7a762fd2e7f1","sha1":"696ebe5f74b87747c8d247428a08fb254742ea95","sha256":"18810f6ce673cd8bdf667eeede3f6dc6b513b1640f87bed6c776bace0b264d83","sha512":"a0e044bea36905fd718b9e0c1624caa27ded3b4942042c0eb85e53c851f4dc0d372f46f2bba35e2e52ba60f7f96880dfc4cee55c50adf98c4a3f4fb7dd6ad613","ssdeep":"","tlshash":"7421784cf8dadff67bae055c256a5440a1527f6ce2242915917c1c0337dedf0538d309","first_seen":"2026-09-13T12:52:18.871697Z","last_seen":"2026-09-13T12:52:18.871697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/lokalise/Common/en.js","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:25.219Z","timestamp":1789303885219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /lokalise/Common/en.js HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Wed, 09 Sep 2026 09:10:50 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: D8qt4IghMe5qgEpEr6lfDYuaFmEEUJD1\r\ncontent-encoding: br\r\ndate: Sun, 13 Sep 2026 12:04:13 GMT\r\netag: W/\"3e2da21f84a669f594781a42f0e6c2ed\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: HaQEpQOK_wqtJgb3-Bk8WffR64aqH5nZ1AjxVs-XXhWznYMF2YGR4Q==\r\nage: 2833\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":574518,"size_decoded":128704,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (637)","md5":"d02c8013537e9c3f366003fb165a06d7","sha1":"f3e336a7076afe1510550b3d2d4ebdf36fd480f6","sha256":"47d741cda86a5a7cee1b6a7b2445a25614075353fd92e9ec888ff7e9886688c0","sha512":"8769d383d881fff8ff1790195de77d5ae3f3cc32ebf7d088c692fd922f66a4fe52338edd595be42167dcc39bc46787ee14fc467a6776aa74dce0612cb709e239","ssdeep":"12288:jQhYWvTvA+eSpyMBDbvRR1DMIy2qhANUOQLxQppSCfo:MhYWvTvA+eS/BDbvRR1DMIy2qaNUOQLZ","tlshash":"41c4f82af2054ff7019640a2b79a18a3ba54427b4f50791d7b5c811c1f1ea7f02ff6ae","first_seen":"2026-09-13T12:43:57.151561Z","last_seen":"2026-09-13T12:52:18.872821Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-Bzgh4vlM.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.690Z","timestamp":1789303884690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/index-Bzgh4vlM.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-e4d\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 3193317f6fdbd2c18bafabacfd1f032c\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8KJRXyeBgLnpVaQjAG0SbZSmmVFq4B3FT5%2FN2EyG%2BGGpexgKCrViilCS5ZUENU1gbqn4KClm2GCNhCKvr30OhJMCiBZeF7fkLjPknHzKgCX%2Bi6xNcpMy8Q175e41GQ9bNIp3jgUMTA%2B\"}]}\r\ncf-ray: a3a7487f5c1856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3661,"size_decoded":2654,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3660)","md5":"e505fbcee45d83cb62063ebca04a3a43","sha1":"b2c05e456c9db022d8294e71033846ade48ed8f0","sha256":"d78d0a029b905fbeb09ac0616249d0a7836bbd092e2968cd4755ea6c24c53773","sha512":"771001c9f18148d72e4e17220f580e4cdcba80a9194434da20ad950d5596e5ac32dfd09a38abb97b90f9dc926d330f7d499d8e6a09e10251a6f320548b8b2adc","ssdeep":"","tlshash":"e271639c76bd69b1f32e70a441ee805824197a10f05f4eb4f46f8e58b621893b1bff60","first_seen":"2026-09-13T12:43:57.169968Z","last_seen":"2026-09-13T12:52:18.873467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/purify.es-DocoOvj5.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.917Z","timestamp":1789303884917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/purify.es-DocoOvj5.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-5894\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 1ce369d01d9e7d5b6f54f316488a206f\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9A0GsFMjOi9dDzsUiksVjUtijWA0FIcRhLRE0mBs3bftOkiLWhS3yob62k7p62REr5XizIdoBdL5rtdU4qd00G%2FXutzDqlKxAIcEG%2BHDsbAYCipkzppJr9Zb%2FYn6OBr8nOhFq%2FujidYS\"}]}\r\ncf-ray: a3a74880bc3556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22676,"size_decoded":10144,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22113)","md5":"fbfff9ca75d9daa042f99a4f4d490102","sha1":"f052ecfb71f81c231b9afe1fee9639b1e0cdb878","sha256":"d9e9655190a05b6924f7fe65f8f092da602d40352216f1e457a85c05df4e4032","sha512":"1665fb2ca52cbd15a433b87b75ad5f01fea01d2cf7016b9b23fa18f910e2f4766459e8d422db4080b804be5b065e2436be1bc5f46df6d60640b84280637358e0","ssdeep":"384:AL1bjtoPvCrI8j8pjieMbOhYtQz8/iO5DE9fx3xVUgXsbpK8gVx68aFx49PNgzBT:i13toCrFj8zMboYtQz8/iaYNx3xVUmsD","tlshash":"7ca24badbd856df75fda41d860bb5a0c95bc000a700cc450e2cdecb518bab99606bf2f","first_seen":"2026-09-13T12:52:18.874147Z","last_seen":"2026-09-13T12:52:18.874147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":689,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/rule-CMCYKghe.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.995Z","timestamp":1789303884995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/rule-CMCYKghe.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-3c9f\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: f04ec32aa4d3aaf94c4cb9878ca54906\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFy4UmlgDI6RAdkixoKHJOwuh70UBJBGQajbq6MlaeLP4Kr7H0r%2F31nEp8G9BbGl2g6ljC4i4fz7Ui7OOlVZAQ%2Fv0PFrWaTdUMORb3ylJ%2FNt49vJ2FcNWcxghn7VQqE%2F1mwIyNMOgobM\"}]}\r\ncf-ray: a3a748813c4c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15519,"size_decoded":4999,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (15518)","md5":"2954f5dfc637b352d2db418450aa96c9","sha1":"8ae73b84c45cb5d5f8d043712a48f0f5b7afaf2b","sha256":"05073eaebf9a5497d067040b7c97ba69ee4c1482465b1b9c18e7d87b17990345","sha512":"9044f96a9755ee0f1febcc8e6818c43253f5fc719fc60d8e85a30e34381a1bf62ba30df7d2bd6daa558078d0a3e0c1386dfe70d7c6f982de99fb1bd1fb25bda7","ssdeep":"192:BfuXGa301Y9a7EjP2WY8VhFMF4FSF/geZVoOIuFhFfFRZ1F5VDETRCzFVADjtEPz:BfuX33qc20huK8pggVoOtD9TnXVz7ADG","tlshash":"1562dedb67b9e5720f0ac46a72ef810ee1affe58cda54040dc42690b3e715bda23160d","first_seen":"2026-09-13T12:52:18.875594Z","last_seen":"2026-09-13T12:52:18.875594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/oss/pacvue-cdn/vue3/login_illustrator_default.svg","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:26.713Z","timestamp":1789303886713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /oss/pacvue-cdn/vue3/login_illustrator_default.svg HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 22 Jul 2024 08:46:05 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: V2tHrtKz.cMv1tm1fJ.nSxf0qTQVrkLO\r\ncontent-encoding: br\r\ndate: Sun, 13 Sep 2026 12:42:50 GMT\r\netag: W/\"d50c00e72e06c2ceaf061b881695893c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: usJ12ZpytkQON49gmiOpKbizrA4-EMmVHZVTNcM5qAtI8ernTFBCLA==\r\nage: 50449\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":40257,"size_decoded":13305,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d50c00e72e06c2ceaf061b881695893c","sha1":"500e12d0fd015510f7a5b5b8d37a12f8dc416761","sha256":"5411fd4e85fb4692c190a7d52535108a02bda042493f4ada8c19a22dad64e7f6","sha512":"8a4cb39886675a6dabf2f72d4efd8a77bb6d26522d16526e196e474727bea84d56c84c7d5bd3e913f10fdcab3a22a14e5c5895fd8761e272614dc02e44e660ba","ssdeep":"768:MCL+kmcHqAoBcMJr1d9YpWxRkUTCCu5x/EDQ0uQ0b+O/u4N:wcOkN5x/EA","tlshash":"670383cc2f64ad8a05c047eebf0691d82d5bccb1db598949e09c3f9f58c786dac05983","first_seen":"2026-09-13T12:43:57.172219Z","last_seen":"2026-09-13T12:52:18.876842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/advertising-util-YiZbPKQG.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.678Z","timestamp":1789303884678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/advertising-util-YiZbPKQG.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-cc24\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 2689d2f1ee9f6d21b97db105b37f0518\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 516\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jdeCG6UhpQ%2BJbKFnS4%2B7AX%2F5a7UV0DFvJCl4cZdHH%2FnnO3C55RF0I7bXiYG%2BzWzcRcEY8S4yT6Ob%2F2QfdEpSNUEWP7UP9Rj5n6unGgPrtBG4cNnb3MbSAs2WoKqID4wLngyuEA9buhQI\"}]}\r\ncf-ray: a3a7487f4c0f56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52260,"size_decoded":15520,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (36720)","md5":"a096bf0f687aa01878f94afd69caca9e","sha1":"526dd2bb30f50bb6ead046a8687b65d1b17ffcbd","sha256":"13454bdbf94117e1330da27512024b88d28f4f20c3adbb56a726ee5183e2359c","sha512":"0337683130e4ebe073896c82a5f3e453749b84dc64219e74d9096933da1a496dcd56203b8500bf5cbc49150980d0a7246083525e6a96173b933c7781994a28a0","ssdeep":"768:2jxPqyH1rS4eWbYc2tpUttVczkANTOuZv2PBQDUptEutyA+zvKzCCs6T:2jx5H1rSTzTOuEQDUi54","tlshash":"3633c40956591cf896ed8e997aa2d8d4c4f0b7026304c4eefd315e7d3414c25837abfa","first_seen":"2026-09-13T12:43:57.143734Z","last_seen":"2026-09-13T12:52:18.877444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/Campaigns-Bu1OwYJ_.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.679Z","timestamp":1789303884679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/Campaigns-Bu1OwYJ_.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-60e4\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: dfdd2e93556758f05f310c893e41c792\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 516\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJL75vnAw9kfFXrpKs%2B5drucf5n4bfbHqq%2FFpFo%2FC9eEamyFpms%2BsGdaOsEUKTSk2PTleTIxKXTdLnEM1uPlEBMl2zY4gkh3tO5sk6b6RZrjdkk6KQ84u7RmkrJr0RjwvGoG2ATH%2FLgn\"}]}\r\ncf-ray: a3a7487f4c1056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24804,"size_decoded":6247,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (24803)","md5":"abe5e83679ea253bcc6e4e27a647ef7f","sha1":"8bfd9a47c85373c71b4d2901a0eb449b6a8a3637","sha256":"7d3a40aa41463cf7fad3828f5b216485d02e9791d2d76a92f296db738bf1c94f","sha512":"9a9ae9433e589f54dfc5138bdc00a15925d2b62c75a1977818a57dbdca9e1fcb57bedb2049d39e5d294489242c792ea2e35f3831f7d582797466ba1975841e6c","ssdeep":"192:BkQ301Y9a7EjP2WY8Vquduyw1v640r0imdaqMioftlAzdakpAvWZF5puA:BkQ3qc20quduyw1uq5MiofPAzAhW9uA","tlshash":"d0b28dd63643f4f24b8f881912ef811ff1acef96c954a6905c82d7e73ab167c6131609","first_seen":"2026-09-13T12:43:57.145231Z","last_seen":"2026-09-13T12:52:18.878558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/oss/pacvue-cdn/vue3/app.sellcordclient.comtitle.png","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.070Z","timestamp":1789303885070,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /oss/pacvue-cdn/vue3/app.sellcordclient.comtitle.png HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T16:24:19.8643Z","times_seen":18445652,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/CustomDownloadMyTask-Cco0RE2F.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.976Z","timestamp":1789303884976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/CustomDownloadMyTask-Cco0RE2F.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-10e5\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 7ee0665e69459389e26da87c83b8eae8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DaWh8E5m72n691hiLNZw75I5FQn5HShkwTXWCbFWnnn0V634vRSZMMfaA1bs1F9HEzC5mSk5q9gEw654IfboM6vChDoB%2BsLJnKDN60s73m33daARgQ5e%2BryAkxUPhL2y2vK4r76ZGdCr\"}]}\r\ncf-ray: a3a748811c3f56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4325,"size_decoded":2274,"mime_type":"text/css","magic":"ASCII text, with very long lines (4324)","md5":"0ce648b1750698548c79a72b354c17db","sha1":"71384d8d1eb0fb43ab627e57f305f6f621d3af04","sha256":"2a1a519cf7c73b36ca5a4d685b522ecbff9eac606dac8fe2d87f6c0df25e5d64","sha512":"2948c7ed176fb308e214b88cf03b0e5a0a63214b07e2ffd95caa19fbec5b5063756cde1ba3ec0ac670f9e11478901f470741ca2523671bc0ba3870a9091c9e08","ssdeep":"96:dBqMshFIts+G36jCmdPXRNVKvfIM3gHTAv5dNn:zBP5XRNVqqY","tlshash":"bc913de04e5d003d3123c94555d0f6891738cd82ea36ca6ea02d7a794fa21cd70fbe64","first_seen":"2026-09-13T12:52:18.879205Z","last_seen":"2026-09-13T12:52:18.879205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":619,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/apiNotification-ZB8bk4Wy.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.986Z","timestamp":1789303884986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/apiNotification-ZB8bk4Wy.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-1862\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 63617ad76d9b42fb018fc92f5e3baaef\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MPeA5RB63nq63Cpf4maUBSP3se47pP5qd3GBykh5359jzNuobSpszkysq7YKOVTbXCoPrjb9jQrdMwNHcz57bJWjI4Gi08riOM2hZNi9yDxyI61BVEKb45MxpZKGLTVHY7bEo9L7%2Fmhl\"}]}\r\ncf-ray: a3a748812c4656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6242,"size_decoded":2768,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (6241)","md5":"00e97f7d210b580329aad965d4d467a3","sha1":"f4c9780e3bd863d634cbaf40b33ea37bb5d4d164","sha256":"50718b3ab28cce7c7814da3f10efb0cc71a6ddda19d90b3a54ab2b748ce09236","sha512":"d90ce62ae852e1a4c5bea1a839e81fa57679b198c0c8483660a0ff1ba005b043e83d2e8056d344ae74e7ba38233c9bc3869d365f93f5ea29a197da357659ec0d","ssdeep":"192:BjM301Y9a7EjP2WY8VYrNw5+NeVlRQPH8:BjM3qc20Y5wpQPH8","tlshash":"90d147fb5f8560d39f1a889f42dda21ee55ff0689f44c081d482aa439f35af652f5208","first_seen":"2026-09-13T12:52:18.880527Z","last_seen":"2026-09-13T12:52:18.880527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":616,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/store-D1CD6KD7.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.992Z","timestamp":1789303884992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/store-D1CD6KD7.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-37a9\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 5c8c1557a0e9f0ada6f9aacb57b99e3a\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pGP8wAM5JVkStj2krBfebtzOiaCBC3d8DDLmtf8t9U2i1VpSLijd63bsR7%2F2UnqW3udiGTN6138s%2FWOhRlAOlWodHHkdPOMhlJ%2FUsh7wrANKdtnJ4z%2F7us3SEbVU6iZ%2FwYHfnlgXjeHB\"}]}\r\ncf-ray: a3a748813c4b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14249,"size_decoded":5158,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (14248)","md5":"99a3c416b8139554b9a3e49cf5746725","sha1":"740832400dafa960637b66b2dc3bbb1c027e7124","sha256":"5ab7c48dfdbc35a57f6648889862be56bb7345df103c30f7fde7e25ae4ef48a7","sha512":"5d42410de9f30d092fd6a770574eaf9ea5f2695f91f9fcc94c9f995bbc0f9818b3e4d5f6a58e293e869fe6d6ab6d00f3b005ac21a0128a1ca7f6e8f5b1e48328","ssdeep":"192:p/Eby2SCLFwGddZ301Y9a7EjP2WY8VnTZGvnvGx5ulEHSRsPFsMN:p8u2SCLFwGddZ3qc20ntGmylfRsPFsMN","tlshash":"bc5234d7b7b9e1b24f1f847960e9510ee12efd688e448041e881a987bf319bd43b971c","first_seen":"2026-09-13T12:52:18.882135Z","last_seen":"2026-09-13T12:52:18.882135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/devtools-k2vh7JaP.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.072Z","timestamp":1789303885072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/devtools-k2vh7JaP.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/assets/index-CqgE98cB.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-67f\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: a099ecf70679e23fc4dce72d1d439ae3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PsGyzxjVUzkx02BL8u4MHgceHv9UjxDrRTGceBUS278nP7nJHffZCegC3jwwKYh6U%2BeKrN3HUpDhz71NFXCMaKMRD90ZPLSwCWHnJzrFBDWOl6ifR2REIJIkoHBO1%2BY6rAYk5gCS5imY\"}]}\r\ncf-ray: a3a74881bc5f56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1663,"size_decoded":1981,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1468)","md5":"449aeddbacfb8a19bd756648751583ae","sha1":"c125d79940005ea94a8c22826da5dd26c78e1739","sha256":"a3cf2855686dce8c48388cedc2bf1315ca59ebb0aa7eecb47d0cc4921542dc94","sha512":"e6442c81bddac8752c6ccb8ac3aaba90256f90fe8c0b13ffe5f4ca2e9fc0e34db78be4b4759a37f434af40591a6309c889a0a1861afb0db75b85171749af288a","ssdeep":"","tlshash":"ee31a850c0954034613319e9332ae6982b704b1a3e7de0e0d6af284fae551eb17f2e7e","first_seen":"2026-09-13T12:52:18.883367Z","last_seen":"2026-09-13T12:52:18.883367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"apiuser.pacvue.com/api/User/userinfo","fqdn":"apiuser.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.102Z","timestamp":1789303885102,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/User/userinfo HTTP/1.1\r\nHost: apiuser.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: currency,dateformat,language,productline,timezone\r\nReferer: https://app.sellcordclient.com/\r\nOrigin: https://app.sellcordclient.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T16:24:19.8643Z","times_seen":18445652,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:26.722Z","timestamp":1789303886722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.sellcordclient.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353994\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-13T16:27:37.956269Z","times_seen":286476,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:23.208Z","timestamp":1789303883208,"http_version":"HTTP/2","security_state":"secure","security_info":null,"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T16:24:19.8643Z","times_seen":18445652,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/shared-select-config-DV8Chruf.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.685Z","timestamp":1789303884685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/shared-select-config-DV8Chruf.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-3e\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: eee1fe7a65ef3912b7a4f1a4ad55a6cc\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9jR3M0bZpV7dr1wYIijOkkOO0XN6ssSFAeGMFZ1edC8UoaME6B5Jk3LuIGg6bdYq6SjIVziDqsnoXW2co5RBQC44zipJULdmLtKJskelBrmoPhmaygMnHXMVX3DMMaLyOm5fKQv5bSn\"}]}\r\ncf-ray: a3a7487f4c1356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":1069,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"2f034a2808a8b13b8574c744cc052f89","sha1":"7964c1e43157b1e147392f76dec61caabca2c914","sha256":"4fd50cc7ee657d1adb9d1b82305e16513cc87c48f5b511c9672f96dd70b2659a","sha512":"3831034774300acefe5e4f0ae891bd46e356e267baa5b824c7a6e915159ca2af5b75a6109f6c44470e90cd7586895cfa04ad663580a2a1785235fa12fbfba6bf","ssdeep":"","tlshash":"c0a00255a85578f75174448616258ba2e449985d723147e51095031b4a2aa9e814dc30","first_seen":"2026-09-13T12:43:57.146581Z","last_seen":"2026-09-13T12:52:18.884921Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-DxdrTKh6.css","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:23.212Z","timestamp":1789303883212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/index-DxdrTKh6.css HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:23 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-14ddf9\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: d5dde134264413faeb8150751e0bf9d7\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 518\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pKOyG%2F%2BXu91pj83Vm3RSmwTsitvrmtbhY%2Fz3jVCvlgj7SK0govDxmoAhCucJHvSspgO8fFmfplAih7xNH%2BvPhoQtaD3muNxKIqX5IzHmKZCt6%2FiMsEnTuZZf0ogyC2EePdAlCqzZx0ex\"}]}\r\ncf-ray: a3a748761b4856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T16:24:19.8643Z","times_seen":18445652,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/login?","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T12:51:24.656Z","timestamp":1789303884656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /login? HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 8e5c1bc206a54c9ea19809a5d846627b\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzzI4%2FCrU5cVmGfCf5wwGPUDKOVRbfJ8w4oyyaI6JvDJnyaUJLcXUWAMTsKqyyOGlzvw%2FrgkeKPjaZb044o1u9e4G0MUz%2F18ARgOzc8k33k94yaC%2BeNf2mBadyUsWPwHaQeFHbwIGl9M\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3a7487f1c0656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14181,"size_decoded":5164,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c776614a5fb461bf62b5ff2c0928cd5a","sha1":"2e1bdd4b38a5ed8647200505f13665b08d6a1cd7","sha256":"cffe969153d5be86269d8c16c0ed9610fe931756a942e1e6e61238234010169d","sha512":"88357a6c3e73189ca141d95d4afcfdb4545cc8b69ec7c19efb8b3d95aaaf24468867c5a1fc21b48cd6070443c4af786957fbf4e9052b42a865452368247a54bc","ssdeep":"192:/aWXpMp5pCyvEMKzSYHfs+uNoqXzABMa4uYCx5pUptpuq3oay2PUyoapT4fX4YF8:/pfWYIwAT4v4wDO6tKIpRTJ2uC","tlshash":"4c5274556eb28436428740ab5c66e104b02490275e18fd647bffc3a85ff4bae85e3b9c","first_seen":"2026-09-13T12:43:57.141198Z","last_seen":"2026-09-13T12:52:18.861532Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/filter-common-contants-BZ-UiuBR.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.676Z","timestamp":1789303884676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/filter-common-contants-BZ-UiuBR.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-12e\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: d0c565d4ae871b27cfeaa5fc37288bc5\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwYVUQPfScnVd9oP99r9J5KDW0Yddbv0gMVdAstBBeitP6M0X0dpRwMRXMllAydoDY%2FqNqtF8%2BI0Q%2BMInwQBgt7xI8bWppVYd5mPx77M%2B23RkG5jL2sOa8g056aA5mUTkxQqLJU9eMdb\"}]}\r\ncf-ray: a3a7487f3c0d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302,"size_decoded":1228,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (301)","md5":"be5918fb3ce0c788bdadd85fddd6ac05","sha1":"05da47fb29338bbe7376eb6e7331d9f3667122b1","sha256":"2699bd8bee1565b70349a60ae85a76095028441c1cfb4ed005eaaeda167862fc","sha512":"f556366c5178865a0efd5f903a799294ac2286fda5453c1cae17c32a62e2e4b8fa5e224644c1feace07e5a29269b43359ab1563bcafe1e7f42a799beab66b849","ssdeep":"","tlshash":"57e0c27ae259a4ff9a6444a5801444e38f007358e070a5ebf3b7108b148bc0d21e5b9d","first_seen":"2026-09-13T12:43:57.173329Z","last_seen":"2026-09-13T12:52:18.885543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/PacvueIntersection-D_bEbO0A.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.697Z","timestamp":1789303884697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/PacvueIntersection-D_bEbO0A.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-56e\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: f38093047005c46404776c715daea015\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 516\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeHz7OGYUU%2BoJCxRGBOALlhM9O3Irv0J4jKZGGxV4reFryNgWNTJI6w7qx3w7AdA4SWIsvBiXb18h1malMiaYKpRT732NLno3xxG%2BVtv7v8BkQW06GuL4Ws0qweRSbvvrSe0xgl6upmA\"}]}\r\ncf-ray: a3a7487f5c1d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1390,"size_decoded":1745,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1389)","md5":"6f0330b9643fb2b2238c90a4e53683c3","sha1":"32670c548dbbcf44890703881cebd8897151c3f7","sha256":"632bba67e9b72b13283c34db04508cc5143cd99a1ef54134aeee549bc195c37e","sha512":"05ee32f3954a37d446e1eea721f6ecf5d245250d7fd6b4571bf12de7a9f98e1d6c5b4eff54f47dd282d5e1e8593019e789090d77ebd2f2f28f1cabfcc2cdf669","ssdeep":"","tlshash":"ef2174bd7a3d753f6b0a6596c43b2222424d2acce4e808526aa334af079fd44e445f1d","first_seen":"2026-09-13T12:43:57.150236Z","last_seen":"2026-09-13T12:52:18.88608Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/MessagePop-BD1RHdpb.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.977Z","timestamp":1789303884977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/MessagePop-BD1RHdpb.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\netag: W/\"6aa3cb40-3410\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 4281122275ac200e436ffc0796ba33d3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FmDt3NSPijvLjwFwzVaRF86rxOr8JysX4Db6rEH8F%2FLhpgiD%2BUtwtDdKf0in7YaYX%2FeNxP4tHwOKP23wF%2BcpQYjW48HveQFVLGCiE3OrM6xPHfPz9H94qdus%2BV6ADfUoWECvqY5B8HH\"}]}\r\ncf-ray: a3a748811c4056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13328,"size_decoded":5973,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (13327)","md5":"9210f2d38d9040875a0a92d19adfd56b","sha1":"182421e3d79e5201882bd5867c7338997ba3c1b1","sha256":"cc1fb7ecb141c830d4a6d4d9335c941eac30a1b936fa0597955d5ccb86f328a8","sha512":"44b0b734c3a7cefdbb901ce931274d1c3d15f80fcc9c23ccf6e1f5bbf4a68fae9fc834dfa88a7d97a9d57d5acfa0c8fa25dd3b68bf4b0f1633adfe5d5cc2ddee","ssdeep":"192:/pt301Y9a7EjP2WY8VBvSd9shZbvhvBtmD6rZDh4gXqdD1ULgBqP7/SqWVq0+ueM:Bt3qc20BrbvhJt66tOLegBqM40wqy5/I","tlshash":"075255bf7f6455e7af7a84da2188a54da00b766c0f40c0c2d0d6ae135f75ef14aa871c","first_seen":"2026-09-13T12:52:18.886658Z","last_seen":"2026-09-13T12:52:18.886658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":631,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:26.721Z","timestamp":1789303886721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.sellcordclient.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353994\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-13T16:27:37.956269Z","times_seen":286476,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/Detail-NefBDj0m.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.979Z","timestamp":1789303884979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/Detail-NefBDj0m.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\netag: W/\"6aa3cb40-154f\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 7e0abfdf7e3b1e2c0f7bcc95c1a5d73b\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1vWovtg0xBgSOoAvswlrn%2FNPFpW%2Fh%2BLFFl3E0LHZm70E2E47syahxC4tvgCjFScHFuhM6YYVzIpEIR2BKCPCKQzb1LkRa99aMZZTzFWstSJvNl1ihohTPmU3rH5Hbghlem4cHLIY%2FrV\"}]}\r\ncf-ray: a3a748812c4156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5455,"size_decoded":2945,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (5454)","md5":"0147951d77ce3c4ea524fd44b132fc65","sha1":"2cae8c7d3bbac0cf30968d535ac05badd1191018","sha256":"e2db3fd240cc2f8ec0b764eaf8f603450143a887d688e08c13c9d059aa6138f6","sha512":"ed103e52d3d3a62cac181332c9beeee182a4fa5eacf5ab8cc363277deabeba5e4aefc9370ff107cbfa4e507b26de53713b254e11b07beb01979f5254b14bb175","ssdeep":"96:pRtmDOw+cOvfQHwT/iiLy2fV+gT/GxJbgGbFdy8ZJFBCJoKh6/:pRtmSw+cOvfQHwT/iiLrf1T/GxJbgIeU","tlshash":"99b14e8f780eca653233909a20545080facd7fae737c58e27977ce5453a1cf2653967a","first_seen":"2026-09-13T12:52:18.887875Z","last_seen":"2026-09-13T12:52:18.887875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":675,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/AnomalyIcon-ZXovoIMq.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.989Z","timestamp":1789303884989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/AnomalyIcon-ZXovoIMq.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:56 GMT\r\netag: W/\"6aa3cb40-73a\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 8d66961605e8cf78221ea2e45c0eb314\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyCWcVmGKj5%2BqUgKBqkjTQPLTkUEKEPqENxLQl9oyW2RCUYl66TVYgSDsETqTMv%2BnGLA73fobUwjYCyxQ2uBIwzb2SYrXLt7ebEYRgxPK36Sf9VLBCFOM%2BnCEN5Dii7g99kovGgGpdCs\"}]}\r\ncf-ray: a3a748813c4956cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1850,"size_decoded":2033,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1849)","md5":"1f74c2ac0028d8f562949850edba2e36","sha1":"778d49f3e2710abe564bfb75f40ecb0fc4dc63e5","sha256":"9f4775be1559d90e74fcc5587377a5d9646bf8998e3045c26c96db5e08f3012d","sha512":"a3fc359e8526e0faa6c593d33fb4a7f8048dbc9db7ddca6319feb6ab85cf8f8ac34f6e898541d2bd78e44570e0773d801371999fb73553096ecc6ac66c423a96","ssdeep":"","tlshash":"ac31b74cbc28c27633158cc859608085b2137a9cbbb8a25111fc9f7637edcb48b5d732","first_seen":"2026-09-13T12:52:18.889001Z","last_seen":"2026-09-13T12:52:18.889001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":632,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.054Z","timestamp":1789303885054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.sellcordclient.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:32 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 353993\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-13T16:27:37.956269Z","times_seen":286476,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":30,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.pacvue.com/admin-meta-api-us/feedback/getCreateTicketPermission","fqdn":"api.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.098Z","timestamp":1789303885098,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /admin-meta-api-us/feedback/getCreateTicketPermission HTTP/1.1\r\nHost: api.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: currency,dateformat,language,productline,timezone\r\nReferer: https://app.sellcordclient.com/\r\nOrigin: https://app.sellcordclient.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T16:24:19.8643Z","times_seen":18445652,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.pacvue.com/admin-meta-api-us/userManager/listAssociatedActivatedUser","fqdn":"api.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:25.100Z","timestamp":1789303885100,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /admin-meta-api-us/userManager/listAssociatedActivatedUser HTTP/1.1\r\nHost: api.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,currency,dateformat,language,productline,timezone\r\nReferer: https://app.sellcordclient.com/\r\nOrigin: https://app.sellcordclient.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T16:24:19.8643Z","times_seen":18445652,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/oss/pacvue-cdn/vue3/loading1.svg","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:26.613Z","timestamp":1789303886613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /oss/pacvue-cdn/vue3/loading1.svg HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nserver: AmazonS3\r\nlast-modified: Mon, 17 Jun 2024 10:00:35 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: cRAvkkStwHEnrvZYF7fggyzF6uSnI211\r\ndate: Sun, 13 Sep 2026 12:42:47 GMT\r\netag: W/\"e6acc98e516bd553d7ef6fa457505036\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: cx94XTOCG0kib6BhnRf8VV1pyWBqbfS_7ZrXEOiwAVT-dj70Hvc0dg==\r\nage: 21647\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6199,"size_decoded":2428,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6acc98e516bd553d7ef6fa457505036","sha1":"07aca215f6e1c07c22c1ba844738ceca9ffbb7ca","sha256":"9454a5702a95738830d7433f21a16717705e73c5ccaeb613ed5e17c9520e2b08","sha512":"72a3eb19ea4e1083197863a6e4c77f3ad164bcf0c68dd4f9465a55222308d40a2690cdb35dadf6479515146cc036a6d77dd5bae95fc226537594c43f0e3d64a5","ssdeep":"96:I2M7fo2z9DMbiEgX5VE8DmzBzYfmLILACRE:hqZ/4PBznCO","tlshash":"02d1a6af7314bcbb97dac7eefb011400995141bba7804410f1696f264aa0dcb6a3f9c7","first_seen":"2026-09-13T12:43:57.157345Z","last_seen":"2026-09-13T12:52:18.890328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/upperFirst-CbGURndL.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:26.650Z","timestamp":1789303886650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/upperFirst-CbGURndL.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-3f7\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 55982c17dd5afdd5d131d9c9d7dfab91\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jgt8mjKYPyGH1VtdIdQOfGesJ7U06YXT%2FWxDiX%2F6Qt7b013QQsjl55qwAEE5IYTRXJwIUUv8vpNG9YyLi10PQy6rCok5SLp7QRW8Nvib%2F%2F06g5VX5lwye%2Fwj9Hjo8wvjpVuFpkJaFeof\"}]}\r\ncf-ray: a3a7488b9d5356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":1556,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1014)","md5":"75c322f4a73ce1804d773b7ce1bc9c6f","sha1":"7b1ec151ceed8f79c93e25341abf2811133d0ba9","sha256":"5bf487d70d8af4518bdeac0f8e10817d8099285b2ef1cd1e0d4c167057b3c11a","sha512":"75735c642f0b5f137f85fe3b2374618a9ba848a04886415e20d2b6f1f5e29509b7b01f7932cc37913629b3fbad0395e64d92dad2f2e5de46919bedef2059c3ca","ssdeep":"","tlshash":"56110e477559f844779090e6893e68e583fce71308d9c22cc2f79c843e34db95271ab2","first_seen":"2026-09-13T12:43:57.160105Z","last_seen":"2026-09-13T12:52:18.891016Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/Ad-common-contants-Cr3S8BQz.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.681Z","timestamp":1789303884681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/Ad-common-contants-Cr3S8BQz.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-7c2\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: e5535a403374b48cbab6c579bc5abe48\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 515\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdujNeUw%2B5z%2Fo66M989yBOs793ibCU5RPscH%2BzKjU1dpbPL63ZNxDBgE978N6cuP9NQcMzhmf6a2qGLYZaZ4sKVqTdKOK1NSq7LLHempdWkE2OFoAyxOq%2B%2BUAzgHMcd4Je6XMT%2F49HU5\"}]}\r\ncf-ray: a3a7487f4c1156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1986,"size_decoded":2130,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1983)","md5":"270e75be286be2190ab687d9e15b6533","sha1":"d2d7e8932e9cc94a6837276bcaee3876a4d45e65","sha256":"6ec9a74aa1fbd77d1bd966149b95f4455744cf0f09b862ab5222899170677df4","sha512":"fea959064e9add7def60a791dfcd5e29822e40c0b011fe5e3b52c757f468f1d452b5f7583e94000d6730eecbd20a2742f997b9b1bb03244d10bc0683825bacc1","ssdeep":"","tlshash":"914156d976c7263576ff1bb0506e425674fc6da720c98050d479feb92624430e193778","first_seen":"2026-09-13T12:43:57.162235Z","last_seen":"2026-09-13T12:52:18.891699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-DVDZrpaP.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.996Z","timestamp":1789303884996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/index-DVDZrpaP.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/Home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-1901\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 1fc1825aa1e62a8631804852fcb1d158\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BulUYp74NWRAQ8G5kRrKPJoha8F3oUvjvdE6kC81yJnpcZ6WjKrBVPN58WPe17cN3C4%2B97LqiVV1sCOE2caWfNkZp2vInpNB4cHpWuby31gkfbTvf6qLdW655PtrRwcgZuwOMpA20RaQ\"}]}\r\ncf-ray: a3a748813c4d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6401,"size_decoded":2332,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6400)","md5":"22ec4234972abb6db7f0ea26bc4fb8a1","sha1":"1c9daa24be27f74a3847748510246b9527f62fcc","sha256":"bbd0a2c8897bbb0b36e3e686d7763f3738516270fb9dd1add20f808bbc59a8df","sha512":"4c4b6463b6d9dcbb2cd2e4abad278800b3f290775af59506066170a595daf24294c9599905d4a51f560c9f4969580ce5f5020304361ad9f59616a9b63fce4bae","ssdeep":"192:+YZo0Mgi7PHJFHImHFHIwOHLa7VSpPqQs0qMqIwdSul6qLYoe:9Zo0MgiLHTTku7VSpUM","tlshash":"cfd137fb8a45a4d09f0b84f714a5b659f03faa2b3f81c08af493e4531c690f225dc69c","first_seen":"2026-09-13T12:52:18.892284Z","last_seen":"2026-09-13T12:52:18.892284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/lokalise/AmazonSearch/en.js","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:25.245Z","timestamp":1789303885245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /lokalise/AmazonSearch/en.js HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nlast-modified: Fri, 11 Sep 2026 09:36:07 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: jrpgQ1v2kzVvZv1uvk4.8cIVgQPOz6VY\r\ndate: Sun, 13 Sep 2026 12:04:13 GMT\r\netag: W/\"19229460160f42c5b15d1756c3342029\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 4mqh1BkT19uIMI_bmLYN4KXfQhznKJgQ5QJPCTpZHxS5RmKc9Qs3VQ==\r\nage: 2833\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1273460,"size_decoded":295028,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (945)","md5":"057ffefeb239326753e11796fcfc790b","sha1":"4a0e92d24fa16b80d0b24c89a7dd16591a7e955d","sha256":"537a5724a27e1b759d286830fc883e8cd60cbd9120ae849ee9d349dbd88a6a56","sha512":"d10bd526e043431f7bb0a1239b6bce672e69cb30b122362d7446f5cdd6dee2b52c42e291ea447228208bb638b40486930fd03b3516d4f551193954c94282125d","ssdeep":"24576:Cp/cnTLiFqzPKwuqm1H/q2cHLzWChrY0q0oDkDpkdMDutH5kSOsPjhQpsgYuef:Cp/cnoOuqm1H/q2cHLzWChrq0oDkDOM0","tlshash":"57250936e1010fb701a201aaa58f37a3af104aab9f4078497b1d811d5f5e57f12bfd9e","first_seen":"2026-09-13T12:43:57.134255Z","last_seen":"2026-09-13T12:52:18.893418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/index-DGJkrUuV.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.670Z","timestamp":1789303884670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/index-DGJkrUuV.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-dac6\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: 6c9ad7b2d84ede893ce55e90c4914fa9\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 516\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXsL88%2BBr%2FpjzdmiXgPBgOC9oWMhBBFZ%2Fhi1cQf%2FidfnCcMAg0x9j1MKubktEGvQyFDwu7kOiqP2i1fis7WjXD%2Fy8gkR1wzYy8opq2C5WJ0B3aUCR2hET8fBm%2B5qmedAOR7X%2FYEjE9Bq\"}]}\r\ncf-ray: a3a7487f3c0856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56006,"size_decoded":17936,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (51476)","md5":"158bb2af49180f640e5b9a4cbf3c3f93","sha1":"f48a10eea31e95c4ef022d5dc24ab3483fd98c45","sha256":"6d5c3c64ca9fa7bceb2a227b1f002a461db8080e69a07cec06223a1ce1eef706","sha512":"7313f7a51da2711ac330f3a70947741f48faa2c5df6cd969d0920d8a64540c62e64bc44d95ba7be9a4f28863076099535ebf2cab03627e304919023b3017bf87","ssdeep":"768:CjhhGqFpA4lSqWfpjivAPND6V+FgARsqW1mcl3mUpTY/9e7To3lA8RhtSmUPgzS:CzTTaNeIeIUh","tlshash":"ed434b0a7a2c1bb5937e0dac5555208055e01b2b9469e8fd7af3bfe7303cc58529cbb2","first_seen":"2026-09-13T12:43:57.135638Z","last_seen":"2026-09-13T12:52:18.894274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.sellcordclient.com/assets/home-DsJb9yS7.js","fqdn":"app.sellcordclient.com","domain":"sellcordclient.com","tld":"com"},"ip":{"addr":"104.21.65.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.sellcordclient.com/","date":"2026-09-13T12:51:24.672Z","timestamp":1789303884672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sellcordclient.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 12:06:16 GMT","end":"Tue, 24 Nov 2026 13:02:19 GMT"},"fingerprint":{"sha1":"46:EE:F8:37:4A:18:F0:CF:F6:4B:90:AA:49:0F:E8:F9:08:CC:39:29","sha256":"BC:E4:69:55:05:20:53:B0:B6:A1:60:DC:02:7A:D7:0F:B3:3E:3B:4E:D2:33:B4:37:04:26:CD:2A:1B:B3:68:32"}}},"request":{"raw":"GET /assets/home-DsJb9yS7.js HTTP/1.1\r\nHost: app.sellcordclient.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 13 Sep 2026 12:51:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 11 Sep 2026 09:34:53 GMT\r\netag: W/\"6aa3cb3d-7eb4\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\nrequest-id: a44da4345881c2be00b1eacc6fabf370\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nage: 514\r\npriority: u=1,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jkYZQwXCM0XpqgNT3E8iLaxCA1RzVMXRGAsgpvoqHFrMIbyB1oAVGGQNpc1fwZZMmL0rz6A6GCd5a1HHgmQC9NQnaX9focQbXfPb%2FPRRai8eQMwo7plJb7VHpFkived8K7%2FgPuzMCGdz\"}]}\r\ncf-ray: a3a7487f3c0956cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32436,"size_decoded":7916,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32435)","md5":"361ef0d9c7c518b97dbc8027ba788cbe","sha1":"7b6c98a908de4508c23a074e8910394234cc7092","sha256":"ee3ec44a0c80f5d26f1d4e6aea6a8f056aee92c5859eba9439efea37a594297a","sha512":"c4ae5128d946ceca7e8eb4f57fb946824bc67b7b70644e2dfcd6686e5d8a3c337c353dd8b0c74c8e6b365dd309ff9af11874ad75e9dc2cd6fdb09ac454181c0f","ssdeep":"768:UK3qc20BCPXyxysN9xO3qc20cMDlcrxRj4w:p3qc20bN9xO3qc20cMDitD","tlshash":"b2e222eb7b92a4e24f1e889d21db921fe619fe94dd0491d0cc839d833f7197942b521c","first_seen":"2026-09-13T12:43:57.153814Z","last_seen":"2026-09-13T12:52:18.894831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"app.sellcordclient.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"app.sellcordclient.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-pacvue-public-doc.pacvue.com/oss/pacvue-cdn/vue3/amazon.svg","fqdn":"cdn-pacvue-public-doc.pacvue.com","domain":"pacvue.com","tld":"com"},"ip":{"addr":"52.84.50.112","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.sellcordclient.com/login?","date":"2026-09-13T12:51:26.717Z","timestamp":1789303886717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.pacvue.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 01 Dec 2025 00:00:00 GMT","end":"Fri, 01 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"78:FC:26:80:12:19:E1:E1:CC:EB:BD:96:30:91:9E:BF:75:93:91:96","sha256":"D4:70:A5:92:53:70:F9:F1:66:22:F8:24:6D:ED:77:8C:44:22:0F:0A:BC:BE:F9:9D:04:9B:92:A5:A8:B2:38:C0"}}},"request":{"raw":"GET /oss/pacvue-cdn/vue3/amazon.svg HTTP/1.1\r\nHost: cdn-pacvue-public-doc.pacvue.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.sellcordclient.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nserver: AmazonS3\r\nlast-modified: Mon, 17 Jun 2024 10:00:56 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6SshR_cWI.y_ecWsBu30qGawAx8uGzha\r\ndate: Sun, 13 Sep 2026 02:31:33 GMT\r\netag: W/\"bc17aa9fded489a67edad6878a4d731e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a0228782537cf4c86245da194c3750e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: i1_H3YfO0ny2w0em4iNutsk2g5YIpNXEduWZwajgSCopSYkEiVJHwQ==\r\nage: 37194\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":5850,"size_decoded":2976,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc17aa9fded489a67edad6878a4d731e","sha1":"c30fca6cb2d7707f4e85439e4914e2965347b091","sha256":"db0f6d7b75d3a6270508d60b2c22c71e60f0af6f154a87ef8954c925c3157bd0","sha512":"b65c1ec21f5a6a26aa4cf77e9542e23f8591165314374ec356bd02832e029af8602d3e16f802dffb93d70cc69983692701584e832f0835e687d351582bca5870","ssdeep":"96:ohSm670OjrGNO7iKz/0oPsylNIrL0en5J2B43CRhNP/0:ohSUOvGyzrfyrb5sB43CRvPs","tlshash":"5bc175e7a7d5b3e0e806f778d002ac61b8973cfdb352d5a0c645aca5f61600d58dccaa","first_seen":"2026-09-13T12:43:57.152671Z","last_seen":"2026-09-13T12:52:18.895494Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}