{"report_id":"e79f4e05-e4d6-451d-95e7-095f4dd49e26","version":6,"status":"done","tags":["malicious","clickfix"],"date":"2026-02-23T01:11:40Z","url":{"schema":"https","addr":"hsbc.ratereset.net","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"title":"Rate Reset","dom":{"size":409055,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64776)","md5":"c5792cd7df42fa192cabc77f4080a066","sha1":"cb2443fa9a3e8eb2dfeff33cbd9759a11d3881d9","sha256":"84c7f068fa2dbcaedf0de757c0fe3e93d5bbdb6c4e75c47375b6ad4c1cd5c9d4","sha512":"eb1a74f36e4d17a8955927d3411a04616697434749922c050cdd0eb0e58cb51900ca0806acda18396bf0a7c14310c33612e23d9f829eb78bc3f3eb9a5385289f","ssdeep":"3072:G1E1IZ3/g2ln++1fbbqMAXHwHrC5o/P2Y0kTkwOHq18Lx:G1EQ3IOn+ib5F118t","tlshash":"6f94fea1d06a01c95791c52f7fd2f739ecb2f329ea605e4af01a4d1c0ee2b561085fe9","dom_hash":"domhash15aa1babed421ed2db1517c377f01c1d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hsbc.ratereset.net","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-30T01:11:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null},{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"summary":[{"fqdn":"hsbc.ratereset.net","ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2016-02-08","domain_rank":0,"first_seen":"2026-02-23T00:26:08.4897Z","last_seen":"2026-02-23T00:26:08.4897Z","alert_count":82,"request_count":40,"received_data":1853340,"sent_data":23660,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"kit.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":16651,"first_seen":"2019-03-29T02:12:52Z","last_seen":"2026-02-16T01:22:11.505703Z","alert_count":0,"request_count":1,"received_data":15957,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ka-p.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":22175,"first_seen":"2019-12-16T20:35:53Z","last_seen":"2026-02-16T05:30:00.240158Z","alert_count":0,"request_count":2,"received_data":343413,"sent_data":1044,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-02-22T23:01:24.734653Z","alert_count":0,"request_count":1,"received_data":89131,"sent_data":447,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=eE6V8nDbUVn0gtG6hKNX_BMxxHGH1Lp9Y56U9G0OoNwGR5Cv26GFO4A-_Ju0seMIIeyt9rmQl02ovXQeLnKCaUjxi_rMhGPbbn9ISEiX4H5A15asTO2-zVGMCMqCIIj10\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"58efa80b8e4394863517ec143f179619","sha1":"fb5e3741307f1fa9479c6904ebfa2850efbfc1ff","sha256":"351064c4585c86aa016649d1e4fde71419edc20a9b1d5c533679381aa0cde8d5","sha512":"c2327bef27182a8e21aea8dd6192a8c88e3cd30e59e99f2001e85d0eb7303c2e345cc17fe38d7cbfb74c081bf2b94346d5ba9a0d1f20fe3da07634723487a6e7","ssdeep":"192:cJqEvkYpJY2lY5GC4NRlkz5YrnuJJy+hJ54ZKGP8yee0R7uccH+e:EDD4sNnj+9SKGseGe","tlshash":"a032a9d2e2448d2f476f43be11ce22402986a083c6a478da6e96dd5860ddce593cb7f9","size":11463,"data":"","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T21:43:02.33186Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=hOeJu0xhC-uW6Gf8ooKdXnYJTXQAuzl2wzOP7FHSJkVTH17dMUExTpRQf5O36Fo6587nR2hWhQ6U9MmjEo39PhnytCKxS8ATCIZfZyt0fhZoniszfn45cjRgSH2x4ZW60\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"450a8a445e2a9c363bff367fc6ce5c8b","sha1":"2066615efdd33383f24c36afdd159f55f411b5c9","sha256":"f4800fd5a0865d1af7a7461c8fc1384b1de6bdd3308f29eb712e926dbdd0f0b2","sha512":"08527dbf1abefeedde77c98d4f70871eb25e1b496e769fa3fc95fa297d59f7181d25e0b8cf56c46d8a2a5918cc6c29e825fa91fcab352966a3786b2fbfa5e8b6","ssdeep":"96:cLDPU+pRtgkCZyiTxYpAMI77E8TOh3whuerQGGrkhUvAIN9wKWkOg:c8ouyAMI748TowhgOg","tlshash":"55e1bf2463e6ac7412498d7c50bb201b421f42854949f44cfee869ddf6dce8ca1bdb3d","size":7110,"data":"","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.46943Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ca7a36b4676a218012a6a37c6ed52b1d","sha1":"dfa42b6f06edc8c46882c5432990acf617b46d6a","sha256":"15a74e3c38e2c14cf0f46edc306ee64d7354e2961729096f12afc6ca7bb4ae86","sha512":"dcc6caa9076967532bbb2b3fa93fc01e1e406e3d7d54f63ee705e6f10743bf1370e34f4b69ce2d244996d58cd1b474c73743251db7db01e2ded85d813ba2597b","ssdeep":"","tlshash":"03a0026471507145447b66ec26176888017541e06100894545949d7428a7a750f5d45d","size":58,"data":"","first_seen":"2023-04-12T05:28:36Z","last_seen":"2026-05-24T12:13:19.30515Z","times_seen":6653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=HEFpVKbnoeQjkjHkFKu3MNZj9GbIOYVB47twLlui4MZI8LCm3ayib83gWSiIAhmV88inbO3TAN62xyNJ25wpti_wvO3_XbJu5_lRAQjFHVEJgrxYdyiDNGqUp7-59KZE0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc12ebc8ee11ccaf581af319b981836b","sha1":"88ceed177e6a9215f422325291ff0970a781f1c5","sha256":"c29095adeab0840f0495ebb337c8a5d4fc795750f8e8caf8fe59a30cefbb25f3","sha512":"7114ecfb0e5fd5badea1facd19d2a5f75131a8df9ff05b4e7d5b8b877c31ce1e8ace59626bbc6d068af3872c9f22c2f73bddef072d4667ae65e30b889e70f6c2","ssdeep":"96:cHMyFT2cOhvX3AlGVzKsm3De1RuRhZIR2pRyRWuidaaaZkE9UNYNkd02DmJjTN0Q:c0cOhP38uEDZIopk8uKbNYNk+26hRL","tlshash":"1c22933a57ea2234b26401724a7b34136d56118b388d608dbdd87fddaadcd0d93af734","size":10794,"data":"","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.448342Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"44560207b928cc8b5133b3ccb1db15d7","sha1":"d6fb5d7ed707f3500a695db8e6be7de085f9693c","sha256":"b98a00982ac114ce2dc7f5b0fba785b88271bb0677605453edf5944e58273ee1","sha512":"93d80a1c2408e468c4e6e5538057bcaf4bd5fd8d2432a64b69a3346628a03740a40f15b1a095e2b336c5a5fd76139538b28c6a70da0be988300814371df16104","ssdeep":"","tlshash":"cae0df085baf17f6e3079b2802bea2421a7492f9e0099507b81e7e904f22e380495b61","size":360,"data":"","first_seen":"2023-03-07T13:10:31Z","last_seen":"2026-05-23T23:31:33.072598Z","times_seen":640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/inc/bootstrap/js/bootstrap.min.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04c84852e9937b142ac73c285b895b85","sha1":"8fb8a9319055253d085edfc3bb72d20f614ec709","sha256":"36460e494e4c628443afded40b2743b5ede9a4a76fb4f7b9ef2345cc7e59fd64","sha512":"e27be06bc898dcf893f06cc49cafcbb6ba6e3a69106a89a500f6993e57600b3636392784811237a1a783967dbe05d57a0769c78f8074a0c3a59b16b655b1d350","ssdeep":"768:72rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfgx8Gf3Zq7Q:yg73zhq0GvgJ3ZKQ","tlshash":"eff28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37051,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-05-24T11:36:51.217726Z","times_seen":6199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=XlV9GqTk6b5uqDuL38kZ4L5WoqAJtWmGg7MHo_pHEIhbjqZN5qXoajAAXIzYczqKBTDU8MLSkBe-9p-uoIhuEZWDEuTmzORWfQ6vqdoOGmO8akuYRmbJWB43j_ityYhs0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"12b149a76dd1a298691f97c5e3889769","sha1":"f53cd87bee75a580b48dac734dca1e565a6a14c8","sha256":"4f201a9db257558e03914601b1fb3cd538a2b71bddfe58d889ef590fe9e117fe","sha512":"e8fb2f9ff0e5e770d532df7cc61ff873d769d593ab355bfb1ba70a398b7757ccc042e88d4b7a37429535c366c26f5b97c037fba6d3bd58e639b48e54a3565f89","ssdeep":"192:cK2yJig/2myQlybabzELjuJEXe1yUs1ieYAyIys2y4ZWoCMiKf5Wyn5ySZzueBE8:U+2myQlybhXe1yUs1ieYAyIys2yEWE","tlshash":"6aa29410b1d778a9528f983e36fa360f3a3251084506889c7e397dedf97cd4a616b63c","size":22292,"data":"","first_seen":"2023-03-12T14:24:59Z","last_seen":"2026-05-22T05:02:38.467319Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/js/ratereset.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41b6bac9ff43951825a04bf7dd3b2350","sha1":"e2e97054bb39fa359f2a4b33e8e82135dd523bab","sha256":"246749699694fb1ee4760697d66b27ffcfb28f12e0c62962e11c0909bfb1f1bb","sha512":"961609d90479f9c0320216bcde07579046f33d49eb6b6802c75e01dd7ad55a968c7702f2becafc26d0e88c9574465a25221e99b3b17ca5f9ed38d3f529aa4444","ssdeep":"768:VdHd8W2uEsMD2zfDr2z0xIkthlZNM16Lm2ZYFc:r9vPEsM21thlZNM16Lm21","tlshash":"aff2539eb80316961b7733395fab9209fb3962270542e201b89c95711ff6c3461edfe8","size":36785,"data":"","first_seen":"2026-02-23T00:21:24.813701Z","last_seen":"2026-05-19T00:16:53.645745Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvnIZHnIRIohun4hTgYRizCmuWWZZfw5EqD28ygmY8v9OB4ryvQgsjh7uMWnSE2W6dbeQa51dnmqHiC3qce2rMPPtBRlgtcXBcBMIsgIWhzp9kluf7JeIvw5Nah8AhovXhVXjT3dQlQC3NsPFRJyWo0g1\u0026t=5c0e0825","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c89eaa5b28df1e17376be71d71649173","sha1":"2b34df4c66bb57de5a24a2ef0896271dfca4f4cd","sha256":"66b804e7a96a87c11e1dd74ea04ac2285df5ad9043f48046c3e5000114d39b1c","sha512":"b73d56304986cd587da17bebf21341b450d41861824102cc53885d863b118f6fdf2456b20791b9a7ae56df91403f342550af9e46f7401429fba1d4a15a6bd3c0","ssdeep":"1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE","tlshash":"54a3094dba42353782eeb4b9013f01437e7b1492a88894aaf544dcc9aebcd85513bf7d","size":102801,"data":"","first_seen":"2023-03-07T01:16:14Z","last_seen":"2026-05-24T16:55:16.360301Z","times_seen":9292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=mcAASOSteirJeuV-3by3UVji1Em6wnuUD4kw5pe5Q-6ZxA6-GDLziW7vS0s4vJWOmVR2xQ302HReZ44tntLchGllI9ihmE2GVVpgkJLlkb01\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea10b180cdf36879347d232a950f6db8","sha1":"c04474e83aa024193b63095f2ab85be416f626bb","sha256":"4ff9de1d1e2d4e9c4ffab3ca34f8ad8519615ccee0365951a122bddb955b5f0f","sha512":"9bf5891ee56fb73d063f5c3c824396afcf0f18c7c530d4cf33e447ed6afdee504f3292eaab0944ae4b83e32af8088fbcec34ba1a7be46fded918baaddcd70b5e","ssdeep":"384:XlS9cEmhC6erAyQfVscsHEkVRAR/ABnhy7:1S9kev8EVRARn","tlshash":"c292e65435877037c3ab112a21bb360759b392ae5a1dd0d5e962cc9becb9e0cc10bf6d","size":19728,"data":"","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.432541Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=yDT7ulzE00Yqzs5zd38bJ7wEuu2_8vZM0eh1AszKZYIi-iNO0ZK7eAQ_iJxoosil6yCzDk3yTsuu_D9IXQluIs391-LYR_AonoObMjBWL4COSdmSTxemMtvuV5JkhUcR0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22ad0a008a944efa9fc02e1df914771b","sha1":"83b6e14fc262771bf414406888b3292b377aea2f","sha256":"cd439da677cfeb4ace5db3902e70c419d4d3e1cf9376127cffaf08748f778f0f","sha512":"2c4d28dc20d49c397dea83c700dd4f2d2f46dfb36f4a11b2a71306b91ed78c4cee60de50206b5ba4b233e9fe84394f944faeb1712b63cbbeeadcd844b0677925","ssdeep":"192:cyJ7Zn1f4S77y+frwC+4jm9Q1Bt9CnkN/mwMDOCel/V3izefvucjHvTR0SIkdTdy:uS7bBtYkN/mw/vukrR0SPdTdEBH","tlshash":"8d82940fb19869ab43a9215615b7bb07133620c7280d80ccf53e3edea69d95d321a77f","size":17665,"data":"","first_seen":"2023-03-12T14:24:59Z","last_seen":"2026-05-22T05:02:38.47425Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=LQ1q2RBSthBAZhliMjtG_2Ic_OgT4eXrAxWBhsjlW9GyIr2UT1XX3EdACh2Y1yvS-_WdK2PWK0woaYlXJRgMxL67gczaEqX-H1WQ0g3behbRbtmCCQwkbmyx8PR6SVf90\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c53769a9a6b937ac11f3031625427d58","sha1":"07915748372fdc6a4e129f4105cc657c1f2765cc","sha256":"6cdd41c07788c24ec2eea773b1467dfe65ce90a620106d29b2ea9d9a22b5bab7","sha512":"fa72e5e662c270613df052c5525f458c987f5c3696056cf1fa486369993601744ca91b13b2c606eaaed5b1bee996467b9ed327db8c35cc8e6cd0bcd8f78cb5b0","ssdeep":"768:zz32q/OJr8R38XfrHi4QEuAV1BpZ9awyFj9:zzGq/OJBQEPV1BpZ9awyFj9","tlshash":"45e210c9b3896813438f6673007f1583ac3650d0492aa46c7e7da9cdf97da096327b7b","size":32838,"data":"","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.511744Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/js/script.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e3d24f175e8ef90b9ce0b22607eb84c","sha1":"5ad591675e5b43ac3213084ca34f228594fdea44","sha256":"1eb32598b477edb7cb9ddce77cd378dfe2a87e3a5447987c53c2c9a0270a76d4","sha512":"c0dbc8bdb994d0b247ec5ee5699cdfc08bc8881dad3beb84885dddd28c3c7880d05ea7e7469f07a9579edd1a9ae035555a9ab0b4e6b7c101a0d6358334f68cec","ssdeep":"768:SSZgIsDKyFi28V/g0IK4Omdy2wno7MegaAixbcnbSNFi:LjsDKyc2khIKIdy2dMegaAixwnOi","tlshash":"19d2a4c1b74f2d2f86b36366107e9ac8da7ed47281020064f4ed716877edd48127baad","size":30281,"data":"","first_seen":"2026-02-23T00:21:24.80709Z","last_seen":"2026-05-19T00:16:53.649222Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"58ef21b4e22b3b1d9825895968682671","sha1":"318fc65e9f3be784afbc911a866ac35ae2697f94","sha256":"79950d3fbd577e33c9db1acc4d5e1f92ba01aaabf38b49c9e50289d7f757c037","sha512":"5e7785149f2010c79c18e89e42f32e6f086ce32c1db1355d7177a69a319a5ee3416da4ffd3397fbb07e0b80e68c6bff90e64f4806665795c70ea6d705156504a","ssdeep":"","tlshash":"32c0805ca5a314194521317d0047c089d46d5d105814011045d417887c289244315dca","size":155,"data":"","first_seen":"2023-03-07T01:31:06Z","last_seen":"2026-05-24T15:01:14.465447Z","times_seen":15287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=VOYD8Xe7kQA0lniBYXVpAkM5IO280bltIxvWI9CaPqbtv7cczJWLFqDggpDJdfPf-xpYdnEC15WMIrLKXNcHuMrNf63oKUeUhw2xZ0EGhMHbz0kb7TyBX9ec_wK1e5Fx0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e6cb6a0ecf8c6290928651ca582765f","sha1":"5b9571847cd049d484085bbbff0a689a86a2200e","sha256":"6b2afbeaebec8c306a47c14214c92d12dca51838721a4b6fbe4b39176d81213d","sha512":"e936714932a6fc2b987aaa03ba659ba839ea73da855958b4ad3b8a0eeb7319a68e3abb25de56f22426f3974315f0118267d7a36f8ca6f086ad11e879d4eb9d4e","ssdeep":"96:cgg+VPdbCRXbp6D7UfhCWbF4HI/87s2gCPt/+4vceEeeF54ZeBIELo6TafTctTtl:c3+VdWRrp6DDgvq8JBDGcNJyg","tlshash":"970247c570cd2c12939aab6a12ba110f676d0587781ec05c7d781dcebb7cd4ca36a63a","size":8403,"data":"","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.477324Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"82a67235bfc98fe238e3541f2486bc52","sha1":"9f3286dba2512c45c9db60ce23a174be0303cff2","sha256":"ec0a67a3787748f516560c9338b0e03fe3f166007b33edcef680e9d1cf5595b1","sha512":"f67f1659459b66bf32e723dabf77b57153d6594583cbbf61c60d97759f376c24156b67ea1ced3b5a7afb2b2209364a13ea8cc8a727c03a585d9f7503c448f991","ssdeep":"","tlshash":"b380045c1dd3c17503d1d05c4311c0f0f407751515044414d1f4050d3404744c530145","size":37,"data":"","first_seen":"2023-04-10T16:14:53Z","last_seen":"2026-05-24T15:01:14.461149Z","times_seen":16658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"eb9e685e178957c1f8a490d1db11ad06","sha1":"6be51af489f35d43446596aae76fb7d9e7658a1e","sha256":"928e2ac1c8aab201b95426d675baa335deb6cfd5809e82fbc8ac88886924714c","sha512":"ac59350f9cc1de4f273cd29ec7bc6fc9f318f88f15d760383f62f324636230ce6d212b4035f3c299afc8ec3db5faa803cb0d85c1637c028b60f264ac3fb74afd","ssdeep":"","tlshash":"19a002bd22b8a11c3c1311ee847782f80de9f8a0650850c593ebd4a128b59956707858","size":63,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-05-24T12:13:19.353651Z","times_seen":6451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/js/maskedinputoptions.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3cc13a2cbf192edcc07e83affc89404","sha1":"f32d6d4bac12d426f074fe7afd256dd7301feae2","sha256":"b55280782e37aae44a4a836d1e6114dc427f68ff77cad5b3da1ace5606e6c218","sha512":"abe0838fd3f7461d4c8a7b8ea978aed3e850999505731cb01a414239edb1fcdd40ca8b9f0b7c9a2a8630a00d7fa93a00bb6be1044931643c67f9c2f730d70603","ssdeep":"","tlshash":"d131af89a602259c5673e332a728d704ebc2232740849955bf3e59891f7439d57e8ffc","size":1671,"data":"","first_seen":"2026-02-23T00:21:24.805778Z","last_seen":"2026-05-19T00:16:53.678415Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/Scripts/jqwidgets/jqxmaskedinput.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"72d7d5e6f7540aa9e53b44ca4723adf9","sha1":"fc58e03a8edfdd85249d243b37f59b63a2f06ecf","sha256":"0b41ecb447d1c47e3e290d28625cca5ecc09a8a37f5944695d4b7e0736e49522","sha512":"b7d7f6ef6a31760a127e5e94cc5d450cb21c015493bae62e4ad011fbbdfd63c8cc274868c7a572c22ee6916ddb09a8f43b1694c2257fb51a12957a84dc41e9f9","ssdeep":"384:3j5XFo/Y+wwAk0/djDFJ8xlNcZdhIp8SPMhBC1zalfEN:zdFo/Y+wwA11jhJnH0XPMhBC1zaREN","tlshash":"4882876276ca303d45fd309a5d2f254df9b5ba09c7a9804cf134a8ce297cd4920b7e3a","size":18148,"data":"","first_seen":"2026-02-23T00:21:24.833904Z","last_seen":"2026-05-19T00:16:53.680577Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9c1237ba4fb461f22243a978c8e2f2ba","sha1":"63a101ac04ef764a6a9ce5ce5e2e4f622f975209","sha256":"a39384397faf608b01159001ff18e834423885468c439a914374ba5b09d4cd9c","sha512":"28996f3935c67deaa66df2d8bf82faf52ff779d1d2dbf4e3b23fd350dfc980300f97802b52956ad8d193315eb4536b7bf4984836afd9d15a1845af4b243b97b7","ssdeep":"","tlshash":"64b02bb3390158300b9f03ef103ec50d28391400303440306c5b0c2500008600fd3798","size":127,"data":"","first_seen":"2026-02-23T00:21:24.858797Z","last_seen":"2026-05-19T00:16:53.689719Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"f6fbf901768ef67b5c93586fbf011445","sha1":"7d89f4a9eadb0bf88e36f34c826e5bc65a6a66fd","sha256":"3fcde781890e9cdee1aac1c069dc767db8d772b1826938dbb01a987cc43825ae","sha512":"d7149d06fff4201de9e27a4027133a7e942910b75742c5a483bfa8db11a6c65350ed4db1191e887019aaad437bbb76d2e5a3346423c6eb25a63dc7dfda90b7f4","ssdeep":"","tlshash":"54f0000ac82300222b3083f880300c0002308280e2230080a88b00b0038c8803022222","size":496,"data":"","first_seen":"2026-02-23T00:21:24.853633Z","last_seen":"2026-05-19T00:16:53.691355Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"e374692e31af3d6a0cc91f4eacbf1e7a","sha1":"1bdb9b8be8bff445bb76f1c5501e4cd446e1d828","sha256":"c0ffbde95c2cc5b7178876b02d93f0f1bed3a196cce90f2060813bf325108ed8","sha512":"bef31903c2a24522ce7c28dcfbbab11d8e7dee71ba70255dd9040477b6dca6c7c621866077db47b1cc81c0c1f3fb6fbfafb9360bfbbfec92e5176e5ea3ce20f9","ssdeep":"","tlshash":"b0f0000ac82300222b3083f880300c0002308280e2230080a88b00b0038c8803022222","size":450,"data":"","first_seen":"2026-02-23T00:21:24.854898Z","last_seen":"2026-05-19T00:16:53.6858Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=5ib3lCcyinHeLQmkwMF7EtYSAanyAdPhysKupxF67T4e8L3TcodXgcfET1l-UKybCCo_Ja5Xo6MnkTqK2r0T-h-0K5c73rORwlK-NPkfsPQbIXCDt6MnWbwMcoORrkX90\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29bce318f793794539463a6ac7567bcd","sha1":"a5a0c1c7df1a74cc5a8ce8cec05d7ef3dfcf7e43","sha256":"0a3174020a8ed2f03872df7f5083f5cdbd782763a8022b01a88edcd0205c3857","sha512":"f9f9d3101b2a2eac8d07da0270353b065ef24acf37d597a42ff48cecd7c5e5f3f15f1ad261e29cc721713703575bde8480539bcd90150e5a754f26f51890ac4e","ssdeep":"","tlshash":"1651e04db1827b5642d7f97506ab300a91b756cf70da814cb921e8c69932c0f7227fba","size":2616,"data":"","first_seen":"2023-03-12T14:24:59Z","last_seen":"2026-05-22T05:02:38.493918Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-05-24T17:19:52.289313Z","times_seen":130660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/Scripts/jqwidgets/jqxcore.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b51d0e9ebe5af3618c2f65d80f8b238","sha1":"1949dad8eb8d66edaab1954f15142836a8acb3d9","sha256":"2bee4ba39a91e8cf8e10313d31f5a7296efe88a275118b4b7eb39a89580044c2","sha512":"3ef502b09e4dfcdb2cf2369f323b6b0d5d279d254054f512ec82699a047812e8123626ab3e5bf8e70e83da0a7be476a2ec36f7c4c179fb9ea31225583923752b","ssdeep":"1536:+nwVHfX7QkcUN7fuWV4GUklXk9ERibSf5tYq+uya/vi2Pu0700ALi+t0sYWRPAcF:+Gf7l/VBUkBuHxlo+9XCaG+2S","tlshash":"cbd3f8eb73eb713247ea3079326fa10fb576ac3658098094f165d8d478b498a417bf2c","size":140321,"data":"","first_seen":"2026-02-23T00:21:24.811409Z","last_seen":"2026-05-19T00:16:53.672977Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"e374692e31af3d6a0cc91f4eacbf1e7a","sha1":"1bdb9b8be8bff445bb76f1c5501e4cd446e1d828","sha256":"c0ffbde95c2cc5b7178876b02d93f0f1bed3a196cce90f2060813bf325108ed8","sha512":"bef31903c2a24522ce7c28dcfbbab11d8e7dee71ba70255dd9040477b6dca6c7c621866077db47b1cc81c0c1f3fb6fbfafb9360bfbbfec92e5176e5ea3ce20f9","ssdeep":"","tlshash":"b0f0000ac82300222b3083f880300c0002308280e2230080a88b00b0038c8803022222","size":450,"data":"","first_seen":"2026-02-23T00:21:24.854898Z","last_seen":"2026-05-19T00:16:53.6858Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/6e1e6b269d.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa1c87a2fbe254459e87e25aec7d213c","sha1":"24fd8a010e446f3bf97ece74f403a4c67fe45752","sha256":"0361d9d236541f20a22a6d3f4fcf11f88fc51cbd7f3bd4b3cfba39a9750e69ba","sha512":"a332d445791c25048584979452ac25ead6d0973e98627445a5a50e225c373707120b70e777af73f012527ad4aea8920ac40697cf008b32d8e9bbf29371339ad2","ssdeep":"192:ZkGliHAg8N/Cps9EyRDEbCpgeMfhhvlLoN6IQEZcJZuKwPXUxb/pfvh3CzYXyl8t:ZkKDC7CKhhtqVUMFqnh3CzYXyl8YGce","tlshash":"d262e81c7a81b43a86af7192843f670fb639353b34129461e25cdae49c7ce9da123f1c","size":15349,"data":"","first_seen":"2026-02-23T00:21:24.837384Z","last_seen":"2026-05-19T00:16:53.675849Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=xGmPTKfsNy0_1Sr5I58kO-ysDkn5zBYfgJM9YHYtGCr9UVg_fB1VUdoUAmb-n-gvvAvJSb4AcmWWzDuzX6Z_1gf46iXHdE5TDnlQfOckKIWF35ORpBfSMD5jHlREijG00\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5881b7f631acec5b8692557047e2ddc7","sha1":"683d79a5c9b17794b1a6ef977db357574ddb0c98","sha256":"f3c506031213cef52b137254e8ca19c84e46631ddd18fa38256491743d7958ae","sha512":"cb42be4d47c828de995a776b8b4e0d288dc69f959e4e3cb596c54b1ceaf4fe16da586e246b7420cdd0d4e82d23477973fc930d17f794ee21851bd9a21a0bbc7a","ssdeep":"192:ctN/0TJxwXC83RmeUrrj+a6JUmyh8ndLeg:w/exZeUvO","tlshash":"dbe1e04772d6244a3996e45d31b6504b653f00e88e5ac24cf62988eef53ee0834ffe78","size":7288,"data":"","first_seen":"2023-03-12T14:24:59Z","last_seen":"2026-05-22T05:02:38.454075Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9715a8037ff5d56632d03fdf0a19a74f","sha1":"47f784ccea278348577bdcb093eef67bbf52551b","sha256":"e3f1d76c5b111730aada08908860193a23fd3adb7fd2bca8a8ec231442981ea7","sha512":"8c5b3329bfb2deda4b190e023181a2d1749fde38f9992235ca9fe94695583f13642f0b1d4601976a806dd9297e3fb68c09ad2c6a6bc587077191c749346cea3b","ssdeep":"","tlshash":"f9d023576dcb003501474436537d5f878505fc934475b014ad3b551da4c718ec7225c4","size":219,"data":"","first_seen":"2026-02-23T00:21:24.847523Z","last_seen":"2026-05-19T00:16:53.687852Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/js/ratereset.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41b6bac9ff43951825a04bf7dd3b2350","sha1":"e2e97054bb39fa359f2a4b33e8e82135dd523bab","sha256":"246749699694fb1ee4760697d66b27ffcfb28f12e0c62962e11c0909bfb1f1bb","sha512":"961609d90479f9c0320216bcde07579046f33d49eb6b6802c75e01dd7ad55a968c7702f2becafc26d0e88c9574465a25221e99b3b17ca5f9ed38d3f529aa4444","ssdeep":"768:VdHd8W2uEsMD2zfDr2z0xIkthlZNM16Lm2ZYFc:r9vPEsM21thlZNM16Lm21","tlshash":"aff2539eb80316961b7733395fab9209fb3962270542e201b89c95711ff6c3461edfe8","size":36785,"data":"","first_seen":"2026-02-23T00:21:24.813701Z","last_seen":"2026-05-19T00:16:53.645745Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/inc/jflickrfeed.min.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"edddf66884fe1a84ed2bfadf5de6b61c","sha1":"cd8b2cdc1137045fd67fdd1cf3cad81e2752b717","sha256":"7331e568d44900f570f233a6cc0022a6a8f272f6fdabcae6ddc2092fe1c00c1a","sha512":"74b63994f53a8964cd48b520165d62679e5b1a88da17cd54e2db32c87f1edc3a6e7ee68f9f4ff5b2c29d7d75b38cdad2bc0af80cbee2f50ede9f41d91be3f17e","ssdeep":"","tlshash":"833152005d01a0be66b6b73aac9f57284f328300c869ea62a7e6c27158771cbf5b7d50","size":1731,"data":"","first_seen":"2023-03-07T01:10:13Z","last_seen":"2026-05-24T06:32:54.162876Z","times_seen":441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZDFSsSRS_cchJJEtrD50gIu3g2UyFdxLopYUXFF23kbAOcQjKjHasIYDSSy-sgRlOw2\u0026t=638901392248157332","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90ea7274f19755002360945d54c2a0d7","sha1":"647b5d8bf7d119a2c97895363a07a0c6eb8cd284","sha256":"40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db","sha512":"7474667800ff52a0031029cc338f81e1586f237eb07a49183008c8ec44a8f67b37e5e896573f089a50283df96a1c8f185e53d667741331b647894532669e2c07","ssdeep":"384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG","tlshash":"2ea2204c350622348a7bbb7ed76bc39cfd7a907729049071b85c99991fb0e6012e5fe8","size":23063,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-05-24T16:55:16.470428Z","times_seen":36624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OM5Id1fm23--Cv3Ojchx9Gf6NT0UXxby3e63hkEK3_vcEPLE1n0Ka_t0qFsztZcV9FF0aOtf57cwR51sW_rCNE5oXmPYnxSOVEEbfwhTqv9cPWl4j4tpJqZyccHFEbgOFs3UA_uOP6CLesR3MKw8Chs1\u0026t=5c0e0825","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da9dc1c32e89c02fc1e9eeb7e5aab91e","sha1":"3efb110efa6068ce6b586a67f87da5125310bc30","sha256":"398cdf1b27ef247e5bc77805f266bb441e60355463fc3d1776f41aae58b08cf1","sha512":"d4730ebc4ca62624b8300e292f27fd79d42a9277e409545df7dc916189ed9df13e46faa37e3924b85a7c7ea8c76bf65a05eca69b4029b550430536ec6df8552a","ssdeep":"384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE","tlshash":"a203eac9bb759135c1ddb52a513b86877b2ab023250480bf7910bede0a7cac3552eb39","size":40326,"data":"","first_seen":"2023-03-07T01:16:14Z","last_seen":"2026-05-24T16:55:16.456598Z","times_seen":9122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"0b72a6a037035b4eff3419e96077466f","sha1":"8c28a8c6e802ebaf366dae7ccd2a612950c5f3cd","sha256":"e4ffb4bc795417b1267da37f5a5d16f91e993a36f7eba9a9b508888f8ed218c3","sha512":"4ace834e01613e4e0ffba03592ad31d84a3aa93e1ddcc7376ed34e27255ce9bc9b748fcb3d9b1f9a1569a81ab2a7e09a42fb651ccaac2c89d79e0504dad93289","ssdeep":"","tlshash":"dcd022c0814234faa81e62ad07e239f9713401e01080661470c08f102592e3a46b1929","size":200,"data":"","first_seen":"2023-04-12T05:28:36Z","last_seen":"2026-05-24T12:13:19.294345Z","times_seen":6631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d104597f97eeef2d9118b41aa82a0e68","sha1":"f3eae53d5b4c521b32a1eed2a872f91059e54c43","sha256":"723dd867fdab72890d2b60359a9ab47857ec93b3182a2dfd16ebd4ac34a2bd5a","sha512":"3bf44cf62c6c5e109a5a3a4dbb1993868dde51f454ad654623143ed9628ec310ef27d51e20e814e3be78b4c7922db78735cb501da03ff983670812c9d6c46a05","ssdeep":"","tlshash":"09d0a93bb2824272cff7ebbe9007a19828ec0a611d24102c050c0e1c43e0be302f4ec8","size":245,"data":"","first_seen":"2026-02-23T00:21:24.850913Z","last_seen":"2026-05-19T00:16:53.688823Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/Scripts/jqwidgets/jqxcore.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b51d0e9ebe5af3618c2f65d80f8b238","sha1":"1949dad8eb8d66edaab1954f15142836a8acb3d9","sha256":"2bee4ba39a91e8cf8e10313d31f5a7296efe88a275118b4b7eb39a89580044c2","sha512":"3ef502b09e4dfcdb2cf2369f323b6b0d5d279d254054f512ec82699a047812e8123626ab3e5bf8e70e83da0a7be476a2ec36f7c4c179fb9ea31225583923752b","ssdeep":"1536:+nwVHfX7QkcUN7fuWV4GUklXk9ERibSf5tYq+uya/vi2Pu0700ALi+t0sYWRPAcF:+Gf7l/VBUkBuHxlo+9XCaG+2S","tlshash":"cbd3f8eb73eb713247ea3079326fa10fb576ac3658098094f165d8d478b498a417bf2c","size":140321,"data":"","first_seen":"2026-02-23T00:21:24.811409Z","last_seen":"2026-05-19T00:16:53.672977Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b39c529ee9bcadc5196b9b2302d62e7e","sha1":"13b777b6aa8b988b2e1671f08e47168073667371","sha256":"1aa281936b4565cd7098a44deb54bd3a564dc17d8164238add7cb38e7c7df85e","sha512":"52874d593da94fa4318ce6852b2b8f90a898313106dcd43bdc8c518851eb0e58e12f72d737953bb9bb3bbf4c9bdc8023d84def2655f6e3b6b219e28b7d9586dc","ssdeep":"","tlshash":"bf21a67df2822532cbb3c67ce497b14868ad5db22e79516e0a1c081e13c0bc782f1ec4","size":1125,"data":"","first_seen":"2026-02-23T00:21:24.852266Z","last_seen":"2026-05-19T00:16:53.690525Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=nai7mGcYyE2dix_TwveLDTE1LW3DINzDNZUDyPhkJEWtfgvLHV-HI-Ik636DX9FGgfxJ6s12QZmWAHVJqNXy_YROBQkGfeQ3mHC8wEj2YFylof5ex5TVNUMjJuh2XnvV0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d26a462d195a577c020dfdc2e2e139","sha1":"0fbaa527b11a32a042c8d3c4be6c25dea333a182","sha256":"1b3068f985b0c1d75fc9efbe162d26b35f5191118809a3aa8641c0829b469f54","sha512":"26d68840998fc5f77cf6070bd3cead0f048eeac4fe6c9e364b75b8879b0eee4a3735ce7ea193d78979300ad895d67c9f8678713d2b0fec0635e1ac4f671ddfa5","ssdeep":"","tlshash":"9221e00ff38b381208d194a4523f0203d6331bc18427563c76296bede8ad806a327e7c","size":1382,"data":"","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.506065Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1Ipg1U5IGRCjBNsj_gH3P9TwmmoSFOV8zTp8adMB-J66hrLNqrhS-EOvmVJW5JaISwwp3MK3DDnpBb24L1r9jf4FxM69Jhw7j0uiVV_eszPKD5gOWegq6CijPkg16SeKiw2\u0026t=ffffffff93d1c106","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3d7a123be5203a1a3f0f10233ed373f","sha1":"f4c61f321d8f79a805b356c6ec94090c0d96215c","sha256":"ef9453f74b2617d43dcef4242cf5845101fcfb57289c81bceb20042b0023a192","sha512":"a01bfe8546e59c8af83280a795b3f56dfa23d556b992813a4eb70089e80621686c7b51ee87b3109502667caf1f95cbca074bf607e543a0390bf6f8bb3ecd992b","ssdeep":"384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v","tlshash":"dec2ad5c692551714d3b73bdaba78099fdb9996302008016b9cc6ce42fb0ea453f7fe8","size":26951,"data":"","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-05-24T15:01:14.429273Z","times_seen":17331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=iON9Jxe8QCRam1nkdNLgkadvV0UIeCgIJ87cNkeUTdpz4DVHvYUOSXkZNXYBu9jA9FcgTyTo88hOqLvBS_TG2dR3UXusUaj7oevfvtxgOEht13DHC_Pzc1pZlQStYx4J0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3eadc3f7c801cb2df38c731c395fbe8","sha1":"d916b261ad505ddb16ee23d7ada1706b2579639e","sha256":"4414722890ed44d6ef1ad43a9e4740a72ae1549d35be2452df2df0dbb233d06e","sha512":"fd1091f16d80324701c822efc6b73e447f1e79ae3309230e0517f52a88dfe029c77681905663dfb337c48b070dab4a9b944bf6a23513f5cc15ff2eeb93a1cb46","ssdeep":"96:c7Vh1zfTPHTaHZ7V0DrgJwpRDA3kn8PIzwU2QmaNBIrXKZ+K9yePRj+SHKmg:chhZLr/rqeyKgwJKmg","tlshash":"9af19ff8b1a82529e1fad29815f22c86754b348d4f19c2e8bbb845fbe05cc9c707467d","size":7989,"data":"","first_seen":"2023-03-12T14:24:59Z","last_seen":"2026-05-22T05:02:38.426804Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/inc/jquery.appear.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3740fd1fbb99fde26971f56404c73579","sha1":"4411a49b11e1c6fa50fbd7d33f07174845847ca8","sha256":"17a41f4db8ecf65ed70c7acc1fdb463b0dcf8970f5a4df49b9300cfef7313645","sha512":"ce03aacd44a989d2056b30a7773287c38850f6dc7856bb5b2aec7cdd4c65b1a3957f91edfdc6b37aff39425cece57895e08699cbeb23c9a559f6d1321f95fbf3","ssdeep":"","tlshash":"8621cbda35d63ca587fb742c5a2f72426070913b86828453adedcc7939a3d423c03e18","size":1363,"data":"","first_seen":"2023-05-29T17:56:30Z","last_seen":"2026-05-19T22:50:51.453762Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"10a404fdfd8b9fb421afb9a982079a59","sha1":"50f3cb7146f6db4c2d266b42e22a87b695cdac3d","sha256":"4674d5387fe66d2d4c1c326ceacec3f185c54a75a7833413df7c99722083c86b","sha512":"3bfb96e2cab461aac7d7057a9cd67fe14d1bf2dc329f4be52aa55e4d1be0a08a34a381ab1cb5ea53802a4f38875ac53adacbec2cf1c7d6e2cc0f29cc370304e4","ssdeep":"","tlshash":"bf21cdbdb9e35031ca77f17e107fe19829bd4913281c5a0a344c0d588fe06ea46b2fd8","size":1287,"data":"","first_seen":"2026-02-23T00:21:24.856288Z","last_seen":"2026-05-19T00:16:53.692677Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/js/script2.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee4a2ad96d13d86c245a9783ce0b47b2","sha1":"9f2573d56a3badd3b1b34028b41116c7a7ce4acd","sha256":"7713a1095db8fcb4ff6ee969875c07f15c3993c6a240de8ffb7c61dcfe12fd05","sha512":"de128145a70e8c9ceca22cb019b68cd853ced54e25d731e9280d2820a656c272d2f71f13ce417fe66882bb8ced5315509ca68554c9f8217ccb6ed2b64189efec","ssdeep":"384:R5vRnMVAVCGQVrVEvXuiUUiT+WM+W3apDAOPI8RivMefbLqZ:nCW85q3+xK3a1Ak5EMNZ","tlshash":"517263dda40226769d77237eaba7d15efbb6116300018111788ca5a05fb4af403f6fee","size":17038,"data":"","first_seen":"2026-02-23T00:21:24.824638Z","last_seen":"2026-05-19T00:16:53.650332Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"66414b23fd87e70cb3e34e22a0a0df1e","sha1":"08907744ac176a4cf0d68396b4c6b1e4f9a60033","sha256":"dddeaa4919cbabb59e5e2c085c94fd312355d685b878c7efd2726922761b11d6","sha512":"b5e1c32ad6d9953da1a11c4967c6d77f82045afdd0af9629331572ef68dcd6f66d82efbd359530e07ba8fb86e32064e02af371f226bf28fdb7239aefe3d66fea","ssdeep":"","tlshash":"dc81105e38a711309e96e039877f96813735c303202ed6e23c4fa7514f48a5ae35a3e9","size":4093,"data":"","first_seen":"2026-02-23T00:21:24.85756Z","last_seen":"2026-05-19T00:16:53.69351Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=jwf4VSQi7LeShc44FJ-gAWzN72ByTx_MUHa4Yk8kQMAG7ooXApvr6oSc2f1iNYWRW9paViaYAP0LH5wNLUQrUlzwp5-ptr63aCsURECsIOEpH52gsUawV_oNn4zvvTqH0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5adbd881e161fe21fb054f89f8d38d6d","sha1":"4a0bdac3d84d841a88421c268972dda5bf5d0758","sha256":"d4d19f0fb634296b2d6238acd844a6c6365e9ab8a88144b44d4e48b17ba9a0a6","sha512":"0170525cdc27df6a3119a362611d2da6244403987043e5142fb82a6604f92b29432858ab8948266d1904e01f0d795dd38ebea821f580adccaab9d790adb77fcb","ssdeep":"","tlshash":"ea119ca9b6a67462029b3135023f340ba7f7604c984e4005f90694ed8e7a40c4717bbc","size":874,"data":"","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T21:43:02.206312Z","times_seen":289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=hOeJu0xhC-uW6Gf8ooKdXnYJTXQAuzl2wzOP7FHSJkVTH17dMUExTpRQf5O36Fo6587nR2hWhQ6U9MmjEo39PhnytCKxS8ATCIZfZyt0fhZoniszfn45cjRgSH2x4ZW60\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=hOeJu0xhC-uW6Gf8ooKdXnYJTXQAuzl2wzOP7FHSJkVTH17dMUExTpRQf5O36Fo6587nR2hWhQ6U9MmjEo39PhnytCKxS8ATCIZfZyt0fhZoniszfn45cjRgSH2x4ZW60\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 1553\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7113,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (7110), with no line terminators","md5":"450a8a445e2a9c363bff367fc6ce5c8b","sha1":"2066615efdd33383f24c36afdd159f55f411b5c9","sha256":"f4800fd5a0865d1af7a7461c8fc1384b1de6bdd3308f29eb712e926dbdd0f0b2","sha512":"08527dbf1abefeedde77c98d4f70871eb25e1b496e769fa3fc95fa297d59f7181d25e0b8cf56c46d8a2a5918cc6c29e825fa91fcab352966a3786b2fbfa5e8b6","ssdeep":"96:cLDPU+pRtgkCZyiTxYpAMI77E8TOh3whuerQGGrkhUvAIN9wKWkOg:c8ouyAMI748TowhgOg","tlshash":"55e1bf2463e6ac7412498d7c50bb201b421f42854949f44cfee869ddf6dce8ca1bdb3d","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.46943Z","times_seen":77,"resource_available":true,"data":null}},"time_used":629,"timings":{"blocked":533,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/customer/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-23T01:11:18.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /customer/ HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nSet-Cookie: rrs-customer-production=91; expires=Tue, 24-Feb-2026 01:11:18 GMT; path=/; secure; SameSite=None\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 16628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":31020,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6640), with CRLF, LF line terminators","md5":"d9b0c5e1257a0d15ad89f78d2ca15aec","sha1":"d4a0a3f9a3378c1588f1cda04987d041f802ffd3","sha256":"2019f8decd7f56ff55ffd4121120d5d5f6c1ac1fa5a5a2218c51987e16e88f65","sha512":"12cd6e6566c148e35ccb82ae3bbff1645d922d052ea7a24ce950f8684c6d58cbb451836c786481a8efbcdcfe97888857f823e4f200e0fe7b9f3e95dcb33c4b0d","ssdeep":"384:/goNT84Qh87y71ePwoHpuHQHJZxTct7Nwt/GFHT5+IrgnF2pFiYxcFFi2kcXGBO/:obTh87yA7pjZxTct/n+VjGcIBQl","tlshash":"0dd2f936bc8784308273c6b8d573e548eb2886239729c55975ec099b6ff1f858d23ec8","first_seen":"2026-02-23T01:11:44.119443Z","last_seen":"2026-02-23T01:11:44.119443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvnIZHnIRIohun4hTgYRizCmuWWZZfw5EqD28ygmY8v9OB4ryvQgsjh7uMWnSE2W6dbeQa51dnmqHiC3qce2rMPPtBRlgtcXBcBMIsgIWhzp9kluf7JeIvw5Nah8AhovXhVXjT3dQlQC3NsPFRJyWo0g1\u0026t=5c0e0825","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=NJmAwtEo3Ipnlaxl6CMhvnIZHnIRIohun4hTgYRizCmuWWZZfw5EqD28ygmY8v9OB4ryvQgsjh7uMWnSE2W6dbeQa51dnmqHiC3qce2rMPPtBRlgtcXBcBMIsgIWhzp9kluf7JeIvw5Nah8AhovXhVXjT3dQlQC3NsPFRJyWo0g1\u0026t=5c0e0825 HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: application/x-javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 22:59:40 GMT\r\nLast-Modified: Sun, 22 Feb 2026 22:59:40 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 25609\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":102804,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65329), with CRLF line terminators","md5":"c89eaa5b28df1e17376be71d71649173","sha1":"2b34df4c66bb57de5a24a2ef0896271dfca4f4cd","sha256":"66b804e7a96a87c11e1dd74ea04ac2285df5ad9043f48046c3e5000114d39b1c","sha512":"b73d56304986cd587da17bebf21341b450d41861824102cc53885d863b118f6fdf2456b20791b9a7ae56df91403f342550af9e46f7401429fba1d4a15a6bd3c0","ssdeep":"1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE","tlshash":"54a3094dba42353782eeb4b9013f01437e7b1492a88894aaf544dcc9aebcd85513bf7d","first_seen":"2023-03-07T01:16:14Z","last_seen":"2026-05-24T16:55:16.360301Z","times_seen":9292,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=mcAASOSteirJeuV-3by3UVji1Em6wnuUD4kw5pe5Q-6ZxA6-GDLziW7vS0s4vJWOmVR2xQ302HReZ44tntLchGllI9ihmE2GVVpgkJLlkb01\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=mcAASOSteirJeuV-3by3UVji1Em6wnuUD4kw5pe5Q-6ZxA6-GDLziW7vS0s4vJWOmVR2xQ302HReZ44tntLchGllI9ihmE2GVVpgkJLlkb01\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 4855\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":19731,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19728), with no line terminators","md5":"ea10b180cdf36879347d232a950f6db8","sha1":"c04474e83aa024193b63095f2ab85be416f626bb","sha256":"4ff9de1d1e2d4e9c4ffab3ca34f8ad8519615ccee0365951a122bddb955b5f0f","sha512":"9bf5891ee56fb73d063f5c3c824396afcf0f18c7c530d4cf33e447ed6afdee504f3292eaab0944ae4b83e32af8088fbcec34ba1a7be46fded918baaddcd70b5e","ssdeep":"384:XlS9cEmhC6erAyQfVscsHEkVRAR/ABnhy7:1S9kev8EVRARn","tlshash":"c292e65435877037c3ab112a21bb360759b392ae5a1dd0d5e962cc9becb9e0cc10bf6d","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.432541Z","times_seen":112,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":365,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=nai7mGcYyE2dix_TwveLDTE1LW3DINzDNZUDyPhkJEWtfgvLHV-HI-Ik636DX9FGgfxJ6s12QZmWAHVJqNXy_YROBQkGfeQ3mHC8wEj2YFylof5ex5TVNUMjJuh2XnvV0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=nai7mGcYyE2dix_TwveLDTE1LW3DINzDNZUDyPhkJEWtfgvLHV-HI-Ik636DX9FGgfxJ6s12QZmWAHVJqNXy_YROBQkGfeQ3mHC8wEj2YFylof5ex5TVNUMjJuh2XnvV0\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 540\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1385,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1382), with no line terminators","md5":"19d26a462d195a577c020dfdc2e2e139","sha1":"0fbaa527b11a32a042c8d3c4be6c25dea333a182","sha256":"1b3068f985b0c1d75fc9efbe162d26b35f5191118809a3aa8641c0829b469f54","sha512":"26d68840998fc5f77cf6070bd3cead0f048eeac4fe6c9e364b75b8879b0eee4a3735ce7ea193d78979300ad895d67c9f8678713d2b0fec0635e1ac4f671ddfa5","ssdeep":"","tlshash":"9221e00ff38b381208d194a4523f0203d6331bc18427563c76296bede8ad806a327e7c","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.506065Z","times_seen":128,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":429,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=yDT7ulzE00Yqzs5zd38bJ7wEuu2_8vZM0eh1AszKZYIi-iNO0ZK7eAQ_iJxoosil6yCzDk3yTsuu_D9IXQluIs391-LYR_AonoObMjBWL4COSdmSTxemMtvuV5JkhUcR0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=yDT7ulzE00Yqzs5zd38bJ7wEuu2_8vZM0eh1AszKZYIi-iNO0ZK7eAQ_iJxoosil6yCzDk3yTsuu_D9IXQluIs391-LYR_AonoObMjBWL4COSdmSTxemMtvuV5JkhUcR0\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 3450\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":17668,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (17665), with no line terminators","md5":"22ad0a008a944efa9fc02e1df914771b","sha1":"83b6e14fc262771bf414406888b3292b377aea2f","sha256":"cd439da677cfeb4ace5db3902e70c419d4d3e1cf9376127cffaf08748f778f0f","sha512":"2c4d28dc20d49c397dea83c700dd4f2d2f46dfb36f4a11b2a71306b91ed78c4cee60de50206b5ba4b233e9fe84394f944faeb1712b63cbbeeadcd844b0677925","ssdeep":"192:cyJ7Zn1f4S77y+frwC+4jm9Q1Bt9CnkN/mwMDOCel/V3izefvucjHvTR0SIkdTdy:uS7bBtYkN/mw/vukrR0SPdTdEBH","tlshash":"8d82940fb19869ab43a9215615b7bb07133620c7280d80ccf53e3edea69d95d321a77f","first_seen":"2023-03-12T14:24:59Z","last_seen":"2026-05-22T05:02:38.47425Z","times_seen":74,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":434,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=5ib3lCcyinHeLQmkwMF7EtYSAanyAdPhysKupxF67T4e8L3TcodXgcfET1l-UKybCCo_Ja5Xo6MnkTqK2r0T-h-0K5c73rORwlK-NPkfsPQbIXCDt6MnWbwMcoORrkX90\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=5ib3lCcyinHeLQmkwMF7EtYSAanyAdPhysKupxF67T4e8L3TcodXgcfET1l-UKybCCo_Ja5Xo6MnkTqK2r0T-h-0K5c73rORwlK-NPkfsPQbIXCDt6MnWbwMcoORrkX90\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 892\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2619,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2616), with no line terminators","md5":"29bce318f793794539463a6ac7567bcd","sha1":"a5a0c1c7df1a74cc5a8ce8cec05d7ef3dfcf7e43","sha256":"0a3174020a8ed2f03872df7f5083f5cdbd782763a8022b01a88edcd0205c3857","sha512":"f9f9d3101b2a2eac8d07da0270353b065ef24acf37d597a42ff48cecd7c5e5f3f15f1ad261e29cc721713703575bde8480539bcd90150e5a754f26f51890ac4e","ssdeep":"","tlshash":"1651e04db1827b5642d7f97506ab300a91b756cf70da814cb921e8c69932c0f7227fba","first_seen":"2023-03-12T14:24:59Z","last_seen":"2026-05-22T05:02:38.493918Z","times_seen":74,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":449,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/files/91/images/hsbc_masterbrand_logo_rgb_380x99.png","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /files/91/images/hsbc_masterbrand_logo_rgb_380x99.png HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Mon, 29 Apr 2019 21:44:20 GMT\r\nAccept-Ranges: bytes\r\nETag: \"01295b3d4fed41:0\"\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 6786\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":6786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 380 x 99, 8-bit/color RGBA, non-interlaced","md5":"2d4c4027adeaac116f6b4f6a5a9fbcef","sha1":"e8fe77f2340ae5cbd924c1f386889fb19181ee2f","sha256":"851e3062a4efdc70e80b40fa92ab9d253f2eb376b55cb424ac76b9bedb0544d0","sha512":"5f1844d065e85c46bcf7831c2eecb40ebf86b7f970ea6fed97f12919af51f03e030a37fd9c23c8b7891252b43247a72cd5beb1e7f226fe684c392e2e4d81d5f9","ssdeep":"192:5mSxgZO6Hdu8jT2s8teuiS2Kd45jwp2vmDrgt:/gZOodH2VtepU45jwpS","tlshash":"bbe19f2ad8f52cd29aac2a147871906044f39845bdfcb59395cae6db1a401653c33cff","first_seen":"2026-02-23T00:21:24.791954Z","last_seen":"2026-05-19T00:16:53.647487Z","times_seen":10,"resource_available":false,"data":null}},"time_used":796,"timings":{"blocked":702,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/js/script2.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/js/script2.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:22 GMT\r\nAccept-Ranges: bytes\r\nETag: \"f78ee71838adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 4886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":17041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (400), with CRLF line terminators","md5":"ee4a2ad96d13d86c245a9783ce0b47b2","sha1":"9f2573d56a3badd3b1b34028b41116c7a7ce4acd","sha256":"7713a1095db8fcb4ff6ee969875c07f15c3993c6a240de8ffb7c61dcfe12fd05","sha512":"de128145a70e8c9ceca22cb019b68cd853ced54e25d731e9280d2820a656c272d2f71f13ce417fe66882bb8ced5315509ca68554c9f8217ccb6ed2b64189efec","ssdeep":"384:R5vRnMVAVCGQVrVEvXuiUUiT+WM+W3apDAOPI8RivMefbLqZ:nCW85q3+xK3a1Ak5EMNZ","tlshash":"517263dda40226769d77237eaba7d15efbb6116300018111788ca5a05fb4af403f6fee","first_seen":"2026-02-23T00:21:24.824638Z","last_seen":"2026-05-19T00:16:53.650332Z","times_seen":11,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":632,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/6e1e6b269d.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /6e1e6b269d.js HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hsbc.ratereset.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Feb 2026 01:11:19 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: max-age=60, public, stale-while-revalidate=30\r\nvary: origin, accept-encoding, access-control-request-headers, access-control-request-method\r\nx-request-id: GJaC-ghcMrJba6vDV2zh\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9d22d938cce60daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15349,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14835)","md5":"aa1c87a2fbe254459e87e25aec7d213c","sha1":"24fd8a010e446f3bf97ece74f403a4c67fe45752","sha256":"0361d9d236541f20a22a6d3f4fcf11f88fc51cbd7f3bd4b3cfba39a9750e69ba","sha512":"a332d445791c25048584979452ac25ead6d0973e98627445a5a50e225c373707120b70e777af73f012527ad4aea8920ac40697cf008b32d8e9bbf29371339ad2","ssdeep":"192:ZkGliHAg8N/Cps9EyRDEbCpgeMfhhvlLoN6IQEZcJZuKwPXUxb/pfvh3CzYXyl8t:ZkKDC7CKhhtqVUMFqnh3CzYXyl8YGce","tlshash":"d262e81c7a81b43a86af7192843f670fb639353b34129461e25cdae49c7ce9da123f1c","first_seen":"2026-02-23T00:21:24.837384Z","last_seen":"2026-05-19T00:16:53.675849Z","times_seen":11,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":488,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=jwf4VSQi7LeShc44FJ-gAWzN72ByTx_MUHa4Yk8kQMAG7ooXApvr6oSc2f1iNYWRW9paViaYAP0LH5wNLUQrUlzwp5-ptr63aCsURECsIOEpH52gsUawV_oNn4zvvTqH0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=jwf4VSQi7LeShc44FJ-gAWzN72ByTx_MUHa4Yk8kQMAG7ooXApvr6oSc2f1iNYWRW9paViaYAP0LH5wNLUQrUlzwp5-ptr63aCsURECsIOEpH52gsUawV_oNn4zvvTqH0\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 441\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":877,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (874), with no line terminators","md5":"5adbd881e161fe21fb054f89f8d38d6d","sha1":"4a0bdac3d84d841a88421c268972dda5bf5d0758","sha256":"d4d19f0fb634296b2d6238acd844a6c6365e9ab8a88144b44d4e48b17ba9a0a6","sha512":"0170525cdc27df6a3119a362611d2da6244403987043e5142fb82a6604f92b29432858ab8948266d1904e01f0d795dd38ebea821f580adccaab9d790adb77fcb","ssdeep":"","tlshash":"ea119ca9b6a67462029b3135023f340ba7f7604c984e4005f90694ed8e7a40c4717bbc","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T21:43:02.206312Z","times_seen":289,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":370,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/inc/jflickrfeed.min.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/inc/jflickrfeed.min.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:21 GMT\r\nAccept-Ranges: bytes\r\nETag: \"d712551838adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 1023\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1731,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (425), with CRLF line terminators","md5":"edddf66884fe1a84ed2bfadf5de6b61c","sha1":"cd8b2cdc1137045fd67fdd1cf3cad81e2752b717","sha256":"7331e568d44900f570f233a6cc0022a6a8f272f6fdabcae6ddc2092fe1c00c1a","sha512":"74b63994f53a8964cd48b520165d62679e5b1a88da17cd54e2db32c87f1edc3a6e7ee68f9f4ff5b2c29d7d75b38cdad2bc0af80cbee2f50ede9f41d91be3f17e","ssdeep":"","tlshash":"833152005d01a0be66b6b73aac9f57284f328300c869ea62a7e6c27158771cbf5b7d50","first_seen":"2023-03-07T01:10:13Z","last_seen":"2026-05-24T06:32:54.162876Z","times_seen":441,"resource_available":true,"data":null}},"time_used":696,"timings":{"blocked":602,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/js/script.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/js/script.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:22 GMT\r\nAccept-Ranges: bytes\r\nETag: \"f78ee71838adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 10486\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":30281,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2701), with CRLF line terminators","md5":"2e3d24f175e8ef90b9ce0b22607eb84c","sha1":"5ad591675e5b43ac3213084ca34f228594fdea44","sha256":"1eb32598b477edb7cb9ddce77cd378dfe2a87e3a5447987c53c2c9a0270a76d4","sha512":"c0dbc8bdb994d0b247ec5ee5699cdfc08bc8881dad3beb84885dddd28c3c7880d05ea7e7469f07a9579edd1a9ae035555a9ab0b4e6b7c101a0d6358334f68cec","ssdeep":"768:SSZgIsDKyFi28V/g0IK4Omdy2wno7MegaAixbcnbSNFi:LjsDKyc2khIKIdy2dMegaAixwnOi","tlshash":"19d2a4c1b74f2d2f86b36366107e9ac8da7ed47281020064f4ed716877edd48127baad","first_seen":"2026-02-23T00:21:24.80709Z","last_seen":"2026-05-19T00:16:53.649222Z","times_seen":11,"resource_available":true,"data":null}},"time_used":722,"timings":{"blocked":627,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/js/ratereset.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:20.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/js/ratereset.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:22 GMT\r\nAccept-Ranges: bytes\r\nETag: \"099ce1838adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 8088\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":36788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"41b6bac9ff43951825a04bf7dd3b2350","sha1":"e2e97054bb39fa359f2a4b33e8e82135dd523bab","sha256":"246749699694fb1ee4760697d66b27ffcfb28f12e0c62962e11c0909bfb1f1bb","sha512":"961609d90479f9c0320216bcde07579046f33d49eb6b6802c75e01dd7ad55a968c7702f2becafc26d0e88c9574465a25221e99b3b17ca5f9ed38d3f529aa4444","ssdeep":"768:VdHd8W2uEsMD2zfDr2z0xIkthlZNM16Lm2ZYFc:r9vPEsM21thlZNM16Lm21","tlshash":"aff2539eb80316961b7733395fab9209fb3962270542e201b89c95711ff6c3461edfe8","first_seen":"2026-02-23T00:21:24.813701Z","last_seen":"2026-05-19T00:16:53.645745Z","times_seen":11,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/images/favicon.ico","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:20.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/x-icon\r\nLast-Modified: Tue, 20 Jan 2026 11:49:26 GMT\r\nAccept-Ranges: bytes\r\nETag: \"5c33d5d328adc1:0\"\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 370070\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":370070,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"2282240a44c5b167e44239932e2e26d3","sha1":"05c6e625026aff33cbbfd4551ef64598b56936b9","sha256":"6c952459ac4bb12cc4c5df8a25c7ed12b096f8f30ee8a4d5b6186f7fe7bb19a4","sha512":"580b0c240ef3a177f2f3931380bd661d86b229971d717767d1925d77b414cb4bdb1c82b43872404d474ac88828000466ac346c97ceda0fb9ab9b93572b7d5e47","ssdeep":"384:MekRESOJM/yX2/dxMARu85T790Qq5+Mz9QwkO8ROJSQ:WqSOJt2/dxMARu2pTqbdpnJS","tlshash":"027430390ebdd48fcad4f6f3180b91b1d665ede30ae8f489997934614af216bcc4912c","first_seen":"2026-02-23T00:21:24.830448Z","last_seen":"2026-05-19T00:16:53.651232Z","times_seen":11,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=HEFpVKbnoeQjkjHkFKu3MNZj9GbIOYVB47twLlui4MZI8LCm3ayib83gWSiIAhmV88inbO3TAN62xyNJ25wpti_wvO3_XbJu5_lRAQjFHVEJgrxYdyiDNGqUp7-59KZE0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=HEFpVKbnoeQjkjHkFKu3MNZj9GbIOYVB47twLlui4MZI8LCm3ayib83gWSiIAhmV88inbO3TAN62xyNJ25wpti_wvO3_XbJu5_lRAQjFHVEJgrxYdyiDNGqUp7-59KZE0\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 2025\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":10797,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (10794), with no line terminators","md5":"dc12ebc8ee11ccaf581af319b981836b","sha1":"88ceed177e6a9215f422325291ff0970a781f1c5","sha256":"c29095adeab0840f0495ebb337c8a5d4fc795750f8e8caf8fe59a30cefbb25f3","sha512":"7114ecfb0e5fd5badea1facd19d2a5f75131a8df9ff05b4e7d5b8b877c31ce1e8ace59626bbc6d068af3872c9f22c2f73bddef072d4667ae65e30b889e70f6c2","ssdeep":"96:cHMyFT2cOhvX3AlGVzKsm3De1RuRhZIR2pRyRWuidaaaZkE9UNYNkd02DmJjTN0Q:c0cOhP38uEDZIopk8uKbNYNk+26hRL","tlshash":"1c22933a57ea2234b26401724a7b34136d56118b388d608dbdd87fddaadcd0d93af734","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.448342Z","times_seen":114,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":444,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=6e1e6b269d","fqdn":"ka-p.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.15.4/css/pro.min.css?token=6e1e6b269d HTTP/1.1\r\nHost: ka-p.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hsbc.ratereset.net/\r\nOrigin: https://hsbc.ratereset.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Feb 2026 01:11:19 GMT\r\ncontent-type: text/css\r\ncontent-length: 54194\r\ncf-ray: 9d22d93c1c950daa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\netag: \"610ae215-d3b2\"\r\nlast-modified: Wed, 04 Aug 2021 18:53:09 GMT\r\nvary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method\r\ncf-cache-status: HIT\r\nage: 3033\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":322695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65397)","md5":"486b13730aafe2a39cdaf1666679fa5b","sha1":"aa0f52f048688ada20d921fef78cf15684a25f04","sha256":"37c65071f378cc9582aabdda3b52979ef901f2925e3f3c3dc597f41eac0f1b6d","sha512":"199235f814353717fe3ad7aa54ec9ac7cb021f86df794c6d3f17e30aa1ce5cd09d67d25e40affa6274b829293472f454ad3c38f5a14972fc20e1c3f52f6303ec","ssdeep":"1536:Xwv1E8SIZlJ/Zg9ADlnIZ+mqXf48HyFF3X6JJdWGFIibJbiC8IYiy6BFAXq6Y18r:S1E1IZ3/g2ln++1fDbqMAXHt","tlshash":"fd64a0a0c15d01c9a7a2ca2f7bd5bb3699f6f335ea501e4bd15a8c0c1cf5b4901c8fa9","first_seen":"2023-04-05T04:34:17Z","last_seen":"2026-05-24T16:25:21.066272Z","times_seen":5591,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/Scripts/jqwidgets/Styles/jqx.arctic.css","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /Scripts/jqwidgets/Styles/jqx.arctic.css HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:01 GMT\r\nAccept-Ranges: bytes\r\nETag: \"3a7d51c38adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 4131\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":20114,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (448), with CRLF line terminators","md5":"e22732f1d5385076e2a649499c6fa3aa","sha1":"1b73903a698b3db27ec7e912806bad6f5d9db507","sha256":"cacac35848c19c7154fb90c3beb425b3a532436244f0568c802c0eb26d22f7e0","sha512":"7ff06a35509489d7f74120029ef3105ec86ddf3faad324cc5f0e071748d216a7bbfad8c21080bc5e51d0d57f121062649ca7efcc2ceb616e0fa4c9b1b46e7e68","ssdeep":"192:2xHxlHxwpNHxV+Y108VbXWXv8v1cXvP1tAsHx+GOd8uihmh6DhzhFDhihnDhbh9U:T108VSXpfLx+4lt","tlshash":"4a922165c847294f3033887f1764f9cde375c293ca029a1d3296b760efbacca4665d92","first_seen":"2025-07-07T23:09:03.700563Z","last_seen":"2026-05-19T00:16:53.662265Z","times_seen":13,"resource_available":false,"data":null}},"time_used":676,"timings":{"blocked":275,"dns":1,"connect":97,"send":0,"wait":96,"receive":0,"ssl":203},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30774\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:24:30 GMT\r\nexpires: Sat, 20 Feb 2027 02:24:30 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 254809\r\nlast-modified: Mon, 13 May 2019 14:37:17 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88145,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-05-24T17:19:52.289313Z","times_seen":130660,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":273,"dns":1,"connect":20,"send":0,"wait":21,"receive":21,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/inc/jquery.appear.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/inc/jquery.appear.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:21 GMT\r\nAccept-Ranges: bytes\r\nETag: \"e447611838adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 810\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1363,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1363), with no line terminators","md5":"3740fd1fbb99fde26971f56404c73579","sha1":"4411a49b11e1c6fa50fbd7d33f07174845847ca8","sha256":"17a41f4db8ecf65ed70c7acc1fdb463b0dcf8970f5a4df49b9300cfef7313645","sha512":"ce03aacd44a989d2056b30a7773287c38850f6dc7856bb5b2aec7cdd4c65b1a3957f91edfdc6b37aff39425cece57895e08699cbeb23c9a559f6d1321f95fbf3","ssdeep":"","tlshash":"8621cbda35d63ca587fb742c5a2f72426070913b86828453adedcc7939a3d423c03e18","first_seen":"2023-05-29T17:56:30Z","last_seen":"2026-05-19T22:50:51.453762Z","times_seen":23,"resource_available":true,"data":null}},"time_used":637,"timings":{"blocked":542,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/Scripts/jqwidgets/jqxmaskedinput.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /Scripts/jqwidgets/jqxmaskedinput.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:50:58 GMT\r\nAccept-Ranges: bytes\r\nETag: \"d66adba38adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 6291\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":18148,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18006), with CRLF line terminators","md5":"72d7d5e6f7540aa9e53b44ca4723adf9","sha1":"fc58e03a8edfdd85249d243b37f59b63a2f06ecf","sha256":"0b41ecb447d1c47e3e290d28625cca5ecc09a8a37f5944695d4b7e0736e49522","sha512":"b7d7f6ef6a31760a127e5e94cc5d450cb21c015493bae62e4ad011fbbdfd63c8cc274868c7a572c22ee6916ddb09a8f43b1694c2257fb51a12957a84dc41e9f9","ssdeep":"384:3j5XFo/Y+wwAk0/djDFJ8xlNcZdhIp8SPMhBC1zalfEN:zdFo/Y+wwA11jhJnH0XPMhBC1zaREN","tlshash":"4882876276ca303d45fd309a5d2f254df9b5ba09c7a9804cf134a8ce297cd4920b7e3a","first_seen":"2026-02-23T00:21:24.833904Z","last_seen":"2026-05-19T00:16:53.680577Z","times_seen":10,"resource_available":true,"data":null}},"time_used":714,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/images/close.png","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /images/close.png HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Tue, 20 Jan 2026 11:49:25 GMT\r\nAccept-Ranges: bytes\r\nETag: \"23b199d328adc1:0\"\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 594\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGB, non-interlaced","md5":"0fdb90dd4aa6763e031eed0de793a5d5","sha1":"97c778bcc83c2cfab6f74b8630ca2d86aea2a3ca","sha256":"4eea9bd263b10e56170649a36ae3e9e881e66c8aee273047a09d62fe0348773c","sha512":"74ac20a1b50b58971de9cad1a2ca224221b4518a2615cd62d02d8b660ca51b6cf44f71ac9e680f9caee202117db29968781985f39b164b1b80e5786391583fa1","ssdeep":"","tlshash":"5ff041ccd2c80ce8d0a5ac2258e093338971ca5d144e4b0c7a39e010c4d608e493e363","first_seen":"2026-02-23T00:21:24.835414Z","last_seen":"2026-05-19T00:16:53.679963Z","times_seen":10,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/css/style.css","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/css/style.css HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:20 GMT\r\nAccept-Ranges: bytes\r\nETag: \"c3e0fd1738adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 40994\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":172494,"size_decoded":0,"mime_type":"text/css","magic":"Generic INItialization configuration [Colors]","md5":"07f1008e71a56479c0b084f1ce336702","sha1":"bed6ab2b266cd676de5565b3bdf3e4b5d32687ed","sha256":"75f1901dd19aba3567ff051313f402c2f7b911dff9b8adc400f9d4e64721b825","sha512":"e00fd9117af08bf741def9fe03b58551b122ad4b8824ada1fca31dd55f0676b9b8d272b3d82f6e8fff15780a4b69d4e7131b20d5a1a03f51e775808b79375beb","ssdeep":"1536:nUOiUGHKeoqdymHOFIQEEegD3R3lMWzN6pOHA//xqtKvE/nSoW/vDRX47cq:CNC","tlshash":"e3f3525deb02254761339b799bf34798fb650163cb0282bc7eed72508f781a88562f8d","first_seen":"2026-02-23T00:21:24.815663Z","last_seen":"2026-05-19T00:16:53.677265Z","times_seen":11,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":264,"dns":1,"connect":94,"send":0,"wait":96,"receive":93,"ssl":194},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/Scripts/jqwidgets/Styles/jqx.base.css","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /Scripts/jqwidgets/Styles/jqx.base.css HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:01 GMT\r\nAccept-Ranges: bytes\r\nETag: \"498261c38adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 38250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":192846,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1020bc79fe6009e695650a3f9dc785f1","sha1":"a472234d212d284b62f18c2038fd3a7cf85d42ee","sha256":"39e321b7cc1c06eaa49b02b2be24000577124c87c25ddaf79470cc2a77037adb","sha512":"9df4bada764bb3d70faa85f0befb938f12f693f63ab05b96016a3c7e7a994c199f6a59ec37680ca4364dcace96f885bd0d36ca91db4acb68fa8ccd549061ffa4","ssdeep":"1536:b3h+dZOM6lpXvDOZ1LLNY5glWgxJawCOZqnH9ZFOABUEvJXcoznlpDyQyW/n:cdZ4prOzq5YWgxJawCOZqnH5OASKJXX","tlshash":"8d1471e4e982101b2233d77767a6b2a9fb168253cf13c5287bdc73108fb95ac4462ed5","first_seen":"2025-06-20T03:28:17.112569Z","last_seen":"2026-05-19T00:16:53.654735Z","times_seen":12,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":269,"dns":1,"connect":98,"send":0,"wait":98,"receive":95,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/inc/bootstrap/js/bootstrap.min.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/inc/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:30 GMT\r\nAccept-Ranges: bytes\r\nETag: \"5ae761e38adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 13041\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":37051,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033), with CRLF line terminators","md5":"04c84852e9937b142ac73c285b895b85","sha1":"8fb8a9319055253d085edfc3bb72d20f614ec709","sha256":"36460e494e4c628443afded40b2743b5ede9a4a76fb4f7b9ef2345cc7e59fd64","sha512":"e27be06bc898dcf893f06cc49cafcbb6ba6e3a69106a89a500f6993e57600b3636392784811237a1a783967dbe05d57a0769c78f8074a0c3a59b16b655b1d350","ssdeep":"768:72rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfgx8Gf3Zq7Q:yg73zhq0GvgJ3ZKQ","tlshash":"eff28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-05-24T11:36:51.217726Z","times_seen":6199,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":536,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/Scripts/jqwidgets/jqxcore.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /Scripts/jqwidgets/jqxcore.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:50:56 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1f5d8938adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 57685\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":140321,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37548), with CRLF line terminators","md5":"0b51d0e9ebe5af3618c2f65d80f8b238","sha1":"1949dad8eb8d66edaab1954f15142836a8acb3d9","sha256":"2bee4ba39a91e8cf8e10313d31f5a7296efe88a275118b4b7eb39a89580044c2","sha512":"3ef502b09e4dfcdb2cf2369f323b6b0d5d279d254054f512ec82699a047812e8123626ab3e5bf8e70e83da0a7be476a2ec36f7c4c179fb9ea31225583923752b","ssdeep":"1536:+nwVHfX7QkcUN7fuWV4GUklXk9ERibSf5tYq+uya/vi2Pu0700ALi+t0sYWRPAcF:+Gf7l/VBUkBuHxlo+9XCaG+2S","tlshash":"cbd3f8eb73eb713247ea3079326fa10fb576ac3658098094f165d8d478b498a417bf2c","first_seen":"2026-02-23T00:21:24.811409Z","last_seen":"2026-05-19T00:16:53.672977Z","times_seen":10,"resource_available":true,"data":null}},"time_used":703,"timings":{"blocked":606,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/Scripts/jqwidgets/jqxcore.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /Scripts/jqwidgets/jqxcore.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:50:56 GMT\r\nAccept-Ranges: bytes\r\nETag: \"0504f938adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 45879\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":140321,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37548), with CRLF line terminators","md5":"0b51d0e9ebe5af3618c2f65d80f8b238","sha1":"1949dad8eb8d66edaab1954f15142836a8acb3d9","sha256":"2bee4ba39a91e8cf8e10313d31f5a7296efe88a275118b4b7eb39a89580044c2","sha512":"3ef502b09e4dfcdb2cf2369f323b6b0d5d279d254054f512ec82699a047812e8123626ab3e5bf8e70e83da0a7be476a2ec36f7c4c179fb9ea31225583923752b","ssdeep":"1536:+nwVHfX7QkcUN7fuWV4GUklXk9ERibSf5tYq+uya/vi2Pu0700ALi+t0sYWRPAcF:+Gf7l/VBUkBuHxlo+9XCaG+2S","tlshash":"cbd3f8eb73eb713247ea3079326fa10fb576ac3658098094f165d8d478b498a417bf2c","first_seen":"2026-02-23T00:21:24.811409Z","last_seen":"2026-05-19T00:16:53.672977Z","times_seen":10,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/inc/bootstrap/css/bootstrap.min.css","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/inc/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:30 GMT\r\nAccept-Ranges: bytes\r\nETag: \"e35dd81d38adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 27654\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":121205,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"5057f321f0dc85cd8da94a0c5f67a8f4","sha1":"224c9f9ad11b495358aa61dbd53e838e9b61015b","sha256":"5a3d8c05785485d36ee5c94d4681e5b1d9e4b94c5be8b5bd7b0f3168fff1bd9a","sha512":"4056508074c098e63356f88b53f8abdacae6bdd46e76e79028505be5d94ed6ec9cc6513ce2dbd1b398b23649a0e260f989b28669594df847daf3010fe296fe5d","ssdeep":"768:Xy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1Fx:Jw/a1fIuiHlq5mN8lDbNmPbU","tlshash":"1fc3c7a0f21031ea7333c55a75d0ed872219a153e66a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-06T18:35:09Z","last_seen":"2026-05-24T16:48:22.130628Z","times_seen":4597,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/js/ratereset.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/js/ratereset.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:22 GMT\r\nAccept-Ranges: bytes\r\nETag: \"db6ed11838adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 10381\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":36788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"41b6bac9ff43951825a04bf7dd3b2350","sha1":"e2e97054bb39fa359f2a4b33e8e82135dd523bab","sha256":"246749699694fb1ee4760697d66b27ffcfb28f12e0c62962e11c0909bfb1f1bb","sha512":"961609d90479f9c0320216bcde07579046f33d49eb6b6802c75e01dd7ad55a968c7702f2becafc26d0e88c9574465a25221e99b3b17ca5f9ed38d3f529aa4444","ssdeep":"768:VdHd8W2uEsMD2zfDr2z0xIkthlZNM16Lm2ZYFc:r9vPEsM21thlZNM16Lm21","tlshash":"aff2539eb80316961b7733395fab9209fb3962270542e201b89c95711ff6c3461edfe8","first_seen":"2026-02-23T00:21:24.813701Z","last_seen":"2026-05-19T00:16:53.645745Z","times_seen":11,"resource_available":true,"data":null}},"time_used":684,"timings":{"blocked":279,"dns":1,"connect":96,"send":0,"wait":95,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Malicious - Copy/Paste Social Engineering (ClickFix)","verdict":"malicious","severity":"medium","comment":"","tags":["malicious","clickfix"],"meta":null}]}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZDFSsSRS_cchJJEtrD50gIu3g2UyFdxLopYUXFF23kbAOcQjKjHasIYDSSy-sgRlOw2\u0026t=638901392248157332","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /WebResource.axd?d=pynGkmcFUV13He1Qd6_TZDFSsSRS_cchJJEtrD50gIu3g2UyFdxLopYUXFF23kbAOcQjKjHasIYDSSy-sgRlOw2\u0026t=638901392248157332 HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: application/x-javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Thu, 07 Aug 2025 08:53:44 GMT\r\nVary: Accept-Encoding\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 6007\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":23063,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"90ea7274f19755002360945d54c2a0d7","sha1":"647b5d8bf7d119a2c97895363a07a0c6eb8cd284","sha256":"40732e9dcfa704cf615e4691bb07aecfd1cc5e063220a46e4a7ff6560c77f5db","sha512":"7474667800ff52a0031029cc338f81e1586f237eb07a49183008c8ec44a8f67b37e5e896573f089a50283df96a1c8f185e53d667741331b647894532669e2c07","ssdeep":"384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG","tlshash":"2ea2204c350622348a7bbb7ed76bc39cfd7a907729049071b85c99991fb0e6012e5fe8","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-05-24T16:55:16.470428Z","times_seen":36624,"resource_available":true,"data":null}},"time_used":693,"timings":{"blocked":284,"dns":1,"connect":101,"send":0,"wait":95,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1Ipg1U5IGRCjBNsj_gH3P9TwmmoSFOV8zTp8adMB-J66hrLNqrhS-EOvmVJW5JaISwwp3MK3DDnpBb24L1r9jf4FxM69Jhw7j0uiVV_eszPKD5gOWegq6CijPkg16SeKiw2\u0026t=ffffffff93d1c106","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1Ipg1U5IGRCjBNsj_gH3P9TwmmoSFOV8zTp8adMB-J66hrLNqrhS-EOvmVJW5JaISwwp3MK3DDnpBb24L1r9jf4FxM69Jhw7j0uiVV_eszPKD5gOWegq6CijPkg16SeKiw2\u0026t=ffffffff93d1c106 HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: application/x-javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 22:59:40 GMT\r\nLast-Modified: Sun, 22 Feb 2026 22:59:40 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 5479\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":26954,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with CRLF line terminators","md5":"b3d7a123be5203a1a3f0f10233ed373f","sha1":"f4c61f321d8f79a805b356c6ec94090c0d96215c","sha256":"ef9453f74b2617d43dcef4242cf5845101fcfb57289c81bceb20042b0023a192","sha512":"a01bfe8546e59c8af83280a795b3f56dfa23d556b992813a4eb70089e80621686c7b51ee87b3109502667caf1f95cbca074bf607e543a0390bf6f8bb3ecd992b","ssdeep":"384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v","tlshash":"dec2ad5c692551714d3b73bdaba78099fdb9996302008016b9cc6ce42fb0ea453f7fe8","first_seen":"2023-03-07T01:28:18Z","last_seen":"2026-05-24T15:01:14.429273Z","times_seen":17331,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=iON9Jxe8QCRam1nkdNLgkadvV0UIeCgIJ87cNkeUTdpz4DVHvYUOSXkZNXYBu9jA9FcgTyTo88hOqLvBS_TG2dR3UXusUaj7oevfvtxgOEht13DHC_Pzc1pZlQStYx4J0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=iON9Jxe8QCRam1nkdNLgkadvV0UIeCgIJ87cNkeUTdpz4DVHvYUOSXkZNXYBu9jA9FcgTyTo88hOqLvBS_TG2dR3UXusUaj7oevfvtxgOEht13DHC_Pzc1pZlQStYx4J0\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 1840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7992,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (7989), with no line terminators","md5":"c3eadc3f7c801cb2df38c731c395fbe8","sha1":"d916b261ad505ddb16ee23d7ada1706b2579639e","sha256":"4414722890ed44d6ef1ad43a9e4740a72ae1549d35be2452df2df0dbb233d06e","sha512":"fd1091f16d80324701c822efc6b73e447f1e79ae3309230e0517f52a88dfe029c77681905663dfb337c48b070dab4a9b944bf6a23513f5cc15ff2eeb93a1cb46","ssdeep":"96:c7Vh1zfTPHTaHZ7V0DrgJwpRDA3kn8PIzwU2QmaNBIrXKZ+K9yePRj+SHKmg:chhZLr/rqeyKgwJKmg","tlshash":"9af19ff8b1a82529e1fad29815f22c86754b348d4f19c2e8bbb845fbe05cc9c707467d","first_seen":"2023-03-12T14:24:59Z","last_seen":"2026-05-22T05:02:38.426804Z","times_seen":76,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":452,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=xGmPTKfsNy0_1Sr5I58kO-ysDkn5zBYfgJM9YHYtGCr9UVg_fB1VUdoUAmb-n-gvvAvJSb4AcmWWzDuzX6Z_1gf46iXHdE5TDnlQfOckKIWF35ORpBfSMD5jHlREijG00\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=xGmPTKfsNy0_1Sr5I58kO-ysDkn5zBYfgJM9YHYtGCr9UVg_fB1VUdoUAmb-n-gvvAvJSb4AcmWWzDuzX6Z_1gf46iXHdE5TDnlQfOckKIWF35ORpBfSMD5jHlREijG00\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 1722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":7291,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (7288), with no line terminators","md5":"5881b7f631acec5b8692557047e2ddc7","sha1":"683d79a5c9b17794b1a6ef977db357574ddb0c98","sha256":"f3c506031213cef52b137254e8ca19c84e46631ddd18fa38256491743d7958ae","sha512":"cb42be4d47c828de995a776b8b4e0d288dc69f959e4e3cb596c54b1ceaf4fe16da586e246b7420cdd0d4e82d23477973fc930d17f794ee21851bd9a21a0bbc7a","ssdeep":"192:ctN/0TJxwXC83RmeUrrj+a6JUmyh8ndLeg:w/exZeUvO","tlshash":"dbe1e04772d6244a3996e45d31b6504b653f00e88e5ac24cf62988eef53ee0834ffe78","first_seen":"2023-03-12T14:24:59Z","last_seen":"2026-05-22T05:02:38.454075Z","times_seen":75,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":457,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=LQ1q2RBSthBAZhliMjtG_2Ic_OgT4eXrAxWBhsjlW9GyIr2UT1XX3EdACh2Y1yvS-_WdK2PWK0woaYlXJRgMxL67gczaEqX-H1WQ0g3behbRbtmCCQwkbmyx8PR6SVf90\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=LQ1q2RBSthBAZhliMjtG_2Ic_OgT4eXrAxWBhsjlW9GyIr2UT1XX3EdACh2Y1yvS-_WdK2PWK0woaYlXJRgMxL67gczaEqX-H1WQ0g3behbRbtmCCQwkbmyx8PR6SVf90\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 6327\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":32841,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (32018)","md5":"c53769a9a6b937ac11f3031625427d58","sha1":"07915748372fdc6a4e129f4105cc657c1f2765cc","sha256":"6cdd41c07788c24ec2eea773b1467dfe65ce90a620106d29b2ea9d9a22b5bab7","sha512":"fa72e5e662c270613df052c5525f458c987f5c3696056cf1fa486369993601744ca91b13b2c606eaaed5b1bee996467b9ed327db8c35cc8e6cd0bcd8f78cb5b0","ssdeep":"768:zz32q/OJr8R38XfrHi4QEuAV1BpZ9awyFj9:zzGq/OJBQEPV1BpZ9awyFj9","tlshash":"45e210c9b3896813438f6673007f1583ac3650d0492aa46c7e7da9cdf97da096327b7b","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.511744Z","times_seen":123,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":517,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/files/91/images/ehl-icon-white.png","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /files/91/images/ehl-icon-white.png HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Thu, 21 Feb 2019 20:36:06 GMT\r\nAccept-Ranges: bytes\r\nETag: \"0ffb01125cad41:0\"\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 8940\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":8940,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 752 x 570, 8-bit/color RGBA, non-interlaced","md5":"4a00d3ad58e28ca5ab1a989db81b06f4","sha1":"720d1cd3a9a51caeceedb5fd0b82ff2006d674d6","sha256":"7102d51d4f441a6eb95340a8d795fac134b2283d48ff4a600e92aa9600efc81c","sha512":"9233ed20f57213166bbf31483a4b0a102f3ea3a4c5f33e66ac2acb073932af1155a5dff17fc5292ae68dd6c2cd6638eea9e00befb97e1c85bba3c8882d68da5c","ssdeep":"192:W9MhsMty2Azvcd6yTyTy3qnXn+5K5K5xnXnXnXnXnXnXn7K5K5K5K5K5p9:qM9CrAAKqX+ccrXXXXXXWccccX9","tlshash":"dc027456451400b0daf265b28a6f88936a1bd2ff9cc43e8316cb8fc709d83c78957db9","first_seen":"2026-02-23T00:21:24.842785Z","last_seen":"2026-05-19T00:16:53.65222Z","times_seen":10,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":709,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-23T01:11:18.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nLocation: /customer/\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nSet-Cookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; path=/; secure; HttpOnly; SameSite=None\nrrs-customer-production=91; expires=Tue, 24-Feb-2026 01:11:18 GMT; path=/; secure; SameSite=None\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 14389\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":31020,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":329,"dns":41,"connect":94,"send":0,"wait":103,"receive":1,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OM5Id1fm23--Cv3Ojchx9Gf6NT0UXxby3e63hkEK3_vcEPLE1n0Ka_t0qFsztZcV9FF0aOtf57cwR51sW_rCNE5oXmPYnxSOVEEbfwhTqv9cPWl4j4tpJqZyccHFEbgOFs3UA_uOP6CLesR3MKw8Chs1\u0026t=5c0e0825","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=dwY9oWetJoJoVpgL6Zq8OM5Id1fm23--Cv3Ojchx9Gf6NT0UXxby3e63hkEK3_vcEPLE1n0Ka_t0qFsztZcV9FF0aOtf57cwR51sW_rCNE5oXmPYnxSOVEEbfwhTqv9cPWl4j4tpJqZyccHFEbgOFs3UA_uOP6CLesR3MKw8Chs1\u0026t=5c0e0825 HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: application/x-javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 22:59:40 GMT\r\nLast-Modified: Sun, 22 Feb 2026 22:59:40 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 9984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":40329,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (39257), with CRLF line terminators","md5":"da9dc1c32e89c02fc1e9eeb7e5aab91e","sha1":"3efb110efa6068ce6b586a67f87da5125310bc30","sha256":"398cdf1b27ef247e5bc77805f266bb441e60355463fc3d1776f41aae58b08cf1","sha512":"d4730ebc4ca62624b8300e292f27fd79d42a9277e409545df7dc916189ed9df13e46faa37e3924b85a7c7ea8c76bf65a05eca69b4029b550430536ec6df8552a","ssdeep":"384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE","tlshash":"a203eac9bb759135c1ddb52a513b86877b2ab023250480bf7910bede0a7cac3552eb39","first_seen":"2023-03-07T01:16:14Z","last_seen":"2026-05-24T16:55:16.456598Z","times_seen":9122,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":341,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=XlV9GqTk6b5uqDuL38kZ4L5WoqAJtWmGg7MHo_pHEIhbjqZN5qXoajAAXIzYczqKBTDU8MLSkBe-9p-uoIhuEZWDEuTmzORWfQ6vqdoOGmO8akuYRmbJWB43j_ityYhs0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=XlV9GqTk6b5uqDuL38kZ4L5WoqAJtWmGg7MHo_pHEIhbjqZN5qXoajAAXIzYczqKBTDU8MLSkBe-9p-uoIhuEZWDEuTmzORWfQ6vqdoOGmO8akuYRmbJWB43j_ityYhs0\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 4268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":22295,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (22291)","md5":"12b149a76dd1a298691f97c5e3889769","sha1":"f53cd87bee75a580b48dac734dca1e565a6a14c8","sha256":"4f201a9db257558e03914601b1fb3cd538a2b71bddfe58d889ef590fe9e117fe","sha512":"e8fb2f9ff0e5e770d532df7cc61ff873d769d593ab355bfb1ba70a398b7757ccc042e88d4b7a37429535c366c26f5b97c037fba6d3bd58e639b48e54a3565f89","ssdeep":"192:cK2yJig/2myQlybabzELjuJEXe1yUs1ieYAyIys2y4ZWoCMiKf5Wyn5ySZzueBE8:U+2myQlybhXe1yUs1ieYAyIys2yEWE","tlshash":"6aa29410b1d778a9528f983e36fa360f3a3251084506889c7e397dedf97cd4a616b63c","first_seen":"2023-03-12T14:24:59Z","last_seen":"2026-05-22T05:02:38.467319Z","times_seen":72,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":538,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/images/rateresetlogo-gray-small.png","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /images/rateresetlogo-gray-small.png HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nLast-Modified: Tue, 20 Jan 2026 11:49:26 GMT\r\nAccept-Ranges: bytes\r\nETag: \"c8ce41d428adc1:0\"\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 5146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":5146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 84, 8-bit/color RGBA, non-interlaced","md5":"0d684535974c69fcd15e9fad24fec600","sha1":"c70d831ae51a910b5fc01be534ed8647342eb8dc","sha256":"68b6303081ccd8d7eea7be1303e4850a816ea4f7d3c173c53288c4c6ead21f05","sha512":"08ba430a4e550856dafb3629e8cc188c55d2ae41f5612ed2feec8dd932f5b0d16a2021ded50f62ef8b7774280641510ecc7aa9ca0129858ee455cee0cc6ee971","ssdeep":"96:m9yu0ruSxXremn76WW9xzQvqlHXNfomZLqnbfGuND4fQqPCsiwr4/d:huTSxX6oKLPwk2njGKEfjCshr4l","tlshash":"e1b16abee62c88449fe91b366a0443d70191c89696b7475883d8ce4de30a6a2d5ab0b3","first_seen":"2026-02-23T00:21:24.801955Z","last_seen":"2026-05-19T00:16:53.644622Z","times_seen":10,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":720,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/js/maskedinputoptions.js","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/js/maskedinputoptions.js HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/javascript\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:21 GMT\r\nAccept-Ranges: bytes\r\nETag: \"6b3ac51838adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 838\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":1674,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b3cc13a2cbf192edcc07e83affc89404","sha1":"f32d6d4bac12d426f074fe7afd256dd7301feae2","sha256":"b55280782e37aae44a4a836d1e6114dc427f68ff77cad5b3da1ace5606e6c218","sha512":"abe0838fd3f7461d4c8a7b8ea978aed3e850999505731cb01a414239edb1fcdd40ca8b9f0b7c9a2a8630a00d7fa93a00bb6be1044931643c67f9c2f730d70603","ssdeep":"","tlshash":"d131af89a602259c5673e332a728d704ebc2232740849955bf3e59891f7439d57e8ffc","first_seen":"2026-02-23T00:21:24.805778Z","last_seen":"2026-05-19T00:16:53.678415Z","times_seen":10,"resource_available":true,"data":null}},"time_used":719,"timings":{"blocked":624,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-p.fontawesome.com/releases/v5.15.4/webfonts/pro-fa-solid-900-5.0.0.woff2","fqdn":"ka-p.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v5.15.4/webfonts/pro-fa-solid-900-5.0.0.woff2 HTTP/1.1\r\nHost: ka-p.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hsbc.ratereset.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Feb 2026 01:11:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 19784\r\ncf-ray: 9d22d93dd9430daa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: \"610ae35f-4d48\"\r\nlast-modified: Wed, 04 Aug 2021 18:58:39 GMT\r\nvary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method\r\ncf-cache-status: HIT\r\nage: 7829\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19784,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 19784, version 331.-31196","md5":"c7682b8035fc1d1672d6455631813794","sha1":"9e2955e5e55b3073e229c218724406425862d4a1","sha256":"1b50aa1d36ea249991fb44f8f6ad2aa74fe360df9cc04c564b5edf3b053b739c","sha512":"f1cde122b1f1ca23380e8bba10e27ee21e72bd7ba486228d12fa0056e2f172014952fc4c8b3c40fc119d5bc0ccbab5807995da4c62c0bbb0e0f7dcec72b0e24b","ssdeep":"384:xu3xWjTO/gQnvRRUvycKayTdVkFEANozWnDcFcsIOZD7FpT8W1YLx+9z:ixei/bnTcUDV65gxZh7FpTvax+9z","tlshash":"e592d05c91041a2892bbd6f84d4a6b18244f174624ae77fcb4ff2adc9065ffc16e3b84","first_seen":"2023-04-13T00:55:41Z","last_seen":"2026-05-24T16:25:21.068311Z","times_seen":2453,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/template/inc/animate.css","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /template/inc/animate.css HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/css\r\nContent-Encoding: gzip\r\nLast-Modified: Tue, 20 Jan 2026 11:51:21 GMT\r\nAccept-Ranges: bytes\r\nETag: \"1394461838adc1:0\"\r\nVary: Accept-Encoding\r\nServer: \r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 9397\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":76235,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2742964ebb01d2ce117e28ea498f6f87","sha1":"5cc34d9987cf8f9d3cd9689b0fa58d2465e00917","sha256":"e80f3c367de1777cce5e10929ea7f1cf02b5f7f6911eb72793934d911cb552dc","sha512":"bbefaa7b50a87f88d957ab0a3846ae54702ba8a548563b1c0f3d63a08e52b6cf34e2ca533e318215d53f051df2cff0fbcce733b959b2a802e41f7d21f5f7453c","ssdeep":"768:l1SH1uYoiYg1yH11YCiYE0gYziYvV5zVyYMiYy:rYoiYNYCiYE0gYziYUYMiYy","tlshash":"43730a5e1d40118447728b29d7de8f28db3d917318223eee72c6588b8fb6f9853c9a47","first_seen":"2023-04-20T02:57:07Z","last_seen":"2026-05-22T01:28:46.951968Z","times_seen":118,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=eE6V8nDbUVn0gtG6hKNX_BMxxHGH1Lp9Y56U9G0OoNwGR5Cv26GFO4A-_Ju0seMIIeyt9rmQl02ovXQeLnKCaUjxi_rMhGPbbn9ISEiX4H5A15asTO2-zVGMCMqCIIj10\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=eE6V8nDbUVn0gtG6hKNX_BMxxHGH1Lp9Y56U9G0OoNwGR5Cv26GFO4A-_Ju0seMIIeyt9rmQl02ovXQeLnKCaUjxi_rMhGPbbn9ISEiX4H5A15asTO2-zVGMCMqCIIj10\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:18 GMT\r\nContent-Length: 3586\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":11466,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (11463), with no line terminators","md5":"58efa80b8e4394863517ec143f179619","sha1":"fb5e3741307f1fa9479c6904ebfa2850efbfc1ff","sha256":"351064c4585c86aa016649d1e4fde71419edc20a9b1d5c533679381aa0cde8d5","sha512":"c2327bef27182a8e21aea8dd6192a8c88e3cd30e59e99f2001e85d0eb7303c2e345cc17fe38d7cbfb74c081bf2b94346d5ba9a0d1f20fe3da07634723487a6e7","ssdeep":"192:cJqEvkYpJY2lY5GC4NRlkz5YrnuJJy+hJ54ZKGP8yee0R7uccH+e:EDD4sNnj+9SKGseGe","tlshash":"a032a9d2e2448d2f476f43be11ce22402986a083c6a478da6e96dd5860ddce593cb7f9","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T21:43:02.33186Z","times_seen":310,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":362,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hsbc.ratereset.net/ScriptResource.axd?d=VOYD8Xe7kQA0lniBYXVpAkM5IO280bltIxvWI9CaPqbtv7cczJWLFqDggpDJdfPf-xpYdnEC15WMIrLKXNcHuMrNf63oKUeUhw2xZ0EGhMHbz0kb7TyBX9ec_wK1e5Fx0\u0026t=7d5986a","fqdn":"hsbc.ratereset.net","domain":"ratereset.net","tld":"net"},"ip":{"addr":"40.117.181.212","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hsbc.ratereset.net/customer/","date":"2026-02-23T01:11:19.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ratereset.net","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 09 Jul 2025 13:48:52 GMT","end":"Wed, 08 Jul 2026 13:45:08 GMT"},"fingerprint":{"sha1":"77:E4:D0:27:F4:C2:E3:EB:A4:F3:31:93:BE:0A:49:BC:47:89:FA:4A","sha256":"39:7E:27:67:9E:47:23:B6:78:DD:F4:0B:65:DD:C7:31:F9:EA:D9:7F:DA:44:A5:D2:09:87:97:53:DC:F5:4B:78"}}},"request":{"raw":"GET /ScriptResource.axd?d=VOYD8Xe7kQA0lniBYXVpAkM5IO280bltIxvWI9CaPqbtv7cczJWLFqDggpDJdfPf-xpYdnEC15WMIrLKXNcHuMrNf63oKUeUhw2xZ0EGhMHbz0kb7TyBX9ec_wK1e5Fx0\u0026t=7d5986a HTTP/1.1\r\nHost: hsbc.ratereset.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hsbc.ratereset.net/customer/\r\nCookie: ASP.NET_SessionId=pi1gzqlgj0hv2krbylvnaa1y; rrs-customer-production=91\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nCache-Control: public\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nExpires: Mon, 22 Feb 2027 14:21:55 GMT\r\nLast-Modified: Sun, 22 Feb 2026 14:21:55 GMT\r\nServer: \r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Mon, 23 Feb 2026 01:11:19 GMT\r\nContent-Length: 1499\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":8406,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (8403), with no line terminators","md5":"9e6cb6a0ecf8c6290928651ca582765f","sha1":"5b9571847cd049d484085bbbff0a689a86a2200e","sha256":"6b2afbeaebec8c306a47c14214c92d12dca51838721a4b6fbe4b39176d81213d","sha512":"e936714932a6fc2b987aaa03ba659ba839ea73da855958b4ad3b8a0eeb7319a68e3abb25de56f22426f3974315f0118267d7a36f8ca6f086ad11e879d4eb9d4e","ssdeep":"96:cgg+VPdbCRXbp6D7UfhCWbF4HI/87s2gCPt/+4vceEeeF54ZeBIELo6TafTctTtl:c3+VdWRrp6DDgvq8JBDGcNJyg","tlshash":"970247c570cd2c12939aab6a12ba110f676d0587781ec05c7d781dcebb7cd4ca36a63a","first_seen":"2023-03-07T18:13:44Z","last_seen":"2026-05-22T05:02:38.477324Z","times_seen":102,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":522,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-23","alert":"Sinkholed","trigger":"hsbc.ratereset.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}}]}