{"report_id":"efc639f9-b768-43b5-a69a-9f8eb93eb6fe","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-10-31T16:18:05Z","url":{"schema":"http","addr":"chasebusiness01.vercel.app","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"title":"Sign in - Chase","dom":{"size":6988,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8f6218bf8c958ee549793aa00d3d16b3","sha1":"a968af2c63d453a896e9dc22b647698a6e256555","sha256":"77c97d74fb46820748d3a6362040832d3f89423f471b7c9f3516d936b7a9c114","sha512":"b7619ae84ba9a54758151a952f0f2ce255a27154ea2903728ee41af1d4f1e6371bebba8ceed9ff9ae4808dd5b7ecc58d39429435e5fb9228f91c36ec0f26ef6e","ssdeep":"96:njCwXQHEEVK8+Hx+A0j7t5kLz92mAA3YVX70lQ:W1HEjHx+t7/kn92JAIVXMQ","tlshash":"90e1202544f518231283e1b115a2d91d3ea2c047ad0a9c0837ec8fde9fe3d66dda32db","dom_hash":"domhash93a86fa027ce203467b5a75c7414ee1d","first_seen":"2025-10-30T00:40:10.092871Z","last_seen":"2025-10-30T00:40:10.092871Z","times_seen":1,"resource_available":false,"data":"PGh0bWwgbGFuZz0iZW4iPjxoZWFkPgogICAgPG1ldGEgY2hhcnNldD0iVVRGLTgiPgogICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1lZGdlIj4KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIHVzZXItc2NhbGFibGU9bm8iPgogICAgPHRpdGxlPlNpZ24gaW4gLSBDaGFzZTwvdGl0bGU+CiAgICA8bGluayByZWw9InN0eWxlc2hlZXQiIGhyZWY9ImluZGV4LmNzcyI+CjwvaGVhZD4KPGJvZHk+CgoKICAgIDxwIGNsYXNzPSJhZGRyZXNzIiBoaWRkZW49IiI+PC9wPgogICAgPHAgY2xhc3M9InRpbWUiIGhpZGRlbj0iIj48L3A+CiAgICA8cCBjbGFzcz0iZGF0ZSIgaGlkZGVuPSIiPjwvcD4KICAgIDxwIGNsYXNzPSJicm93ZXJfaW5mbyIgaGlkZGVuPSIiPjwvcD4KCiAgICA8ZGl2IGNsYXNzPSJjb250YWluZXIiPgogICAgICAgIDxkaXYgY2xhc3M9ImNvbnRhaW5lcl9lbGVtZW50Ij4KCgoKCiAgICAgICAgICAgIDwhLS0gRk9STSAtLT4KICAgICAgICAgICAgPGZvcm0gYWN0aW9uPSIiIGlkPSJmb3JtIj4KICAgICAgICAgICAgCiAgICAgICAgICAgIDxkaXYgY2xhc3M9IndvbGZfaW1hZ2UiPgogICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0iY2hhc2VfaW1hZ2UiPgogICAgICAgICAgICAgICAgICAgIDxpbWcgc3JjPSJJTUFHRVMvcG5nd2luZy5jb20ucG5nIiBhbHQ9IiI+CiAgICAgICAgICAgICAgICA8L2Rpdj4KCiAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJvaXV5Ij4KICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9ImxvZ2luIj4KICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJsb2dpbl9lbGVtZW50Ij4KICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibG9naW5fZWxlbWVudF9vbmUiPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGlucHV0IHR5cGU9InRleHQiIG5hbWU9IkNIQVNFIEJBTksgVVNFUk5BTUUiIGlkPSJ1c2VybmFtZSIgcGxhY2Vob2xkZXI9IlVzZXJuYW1lIiByZXF1aXJlZD0iIiBtaW5sZW5ndGg9IjQiPiAKICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxsYWJlbCBmb3I9InVzZXJuYW1lIiBpZD0iYWJzb2x1Ij5Vc2VybmFtZTwvbGFiZWw+CiAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJsb2dpbl9lbGVtZW50X29uZSI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8aW5wdXQgdHlwZT0icGFzc3dvcmQiIG5hbWU9IkNIQVNFIEJBTksgUEFTU1dPUkQiIGlkPSJwYXNzd29yZCIgcGxhY2Vob2xkZXI9IlBhc3N3b3JkIiBjbGFzcz0icGFzc3dvcmQiIHJlcXVpcmVkPSIiIG1pbmxlbmd0aD0iNCI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8bGFiZWwgZm9yPSJwYXNzd29yZCIgaWQ9ImFic29sdSI+UGFzc3dvcmQ8L2xhYmVsPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPCEtLSA8aW1nIHNyYz0iSU1BR0VTL3Nob3dQYXNzd29yZC5zdmciIGFsdD0iIiBjbGFzcz0iZXllaWNvbiI+IC0tPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPHAgY2xhc3M9ImV5ZWljb24iPlNob3c8L3A+CiAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJsb2dpbl9lbGVtZW50X3Rva2VuIj4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJDSEFTRSBCQU5LIFRPS0VOIiBpZD0idG9rZW4iIHBsYWNlaG9sZGVyPSJUb2tlbiI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8bGFiZWwgZm9yPSJ0b2tlbiIgaWQ9ImFic29sdSI+VG9rZW48L2xhYmVsPgogICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4KICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibG9naW5fZWxlbWVudF90d28iPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibG9naW5fZWxlbWVudF90d29fZmxleCI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGlucHV0IHR5cGU9ImNoZWNrYm94IiBuYW1lPSIiIGlkPSJyZW1lbWJlcl9tZSI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGxhYmVsIGZvcj0icmVtZW1iZXJfbWUiPlJlbWVtYmVyIG1lPC9sYWJlbD4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ibG9naW5fZWxlbWVudF90d29fZmxleCI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPGlucHV0IHR5cGU9ImNoZWNrYm94IiBuYW1lPSIiIGlkPSJ1c2VfdG9rZW4iPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxsYWJlbCBmb3I9InVzZV90b2tlbiI+VXNlIHRva2VuPC9sYWJlbD4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICAgICAgICAgICAgICA8L2Rpdj4KICAgICAgICAgICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ic2lnbmluIj4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxidXR0b24gdHlwZT0ic3VibWl0Ij5TaWduIGluPC9idXR0b24+CiAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJmb3Jnb3RfcGFzc3dvcmQiPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPHA+Rm9yZ290IHVzZXJuYW1lL3Bhc3N3b3JkPyA8aW1nIHNyYz0iIiBhbHQ9IiI+PC9wPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPHA+Tm90IEVucm9sbGVkPyBTaWduIFVwIE5vdy4gPGltZyBzcmM9IiIgYWx0PSIiPjwvcD4KICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgICAgICAgICA8L2Rpdj4KICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICA8L2Rpdj4KCiAgICAgCgogICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJmb2xsb3dfdXMiPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPHA+Rm9sbG93IHVzOjwvcD4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxpbWcgc3JjPSJJTUFHRVMvZmFjZWJvb2suc3ZnIiBhbHQ9IiI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8aW1nIHNyYz0iSU1BR0VTL2luc3RhZ3JhbS5zdmciIGFsdD0iIj4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxpbWcgc3JjPSJJTUFHRVMvdGVsZWdyYW0uc3ZnIiBhbHQ9IiI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8aW1nIHNyYz0iSU1BR0VTL3NxdWFyZS15b3V0dWJlLnN2ZyIgYWx0PSIiPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGltZyBzcmM9IklNQUdFUy9saW5rZWRpbi1pbi5zdmciIGFsdD0iIj4KICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+CgogICAgICAgICAgICAgICAgICAgICAgICA8aHI+CgogICAgICAgICAgICAgICAgICAgICAgICA8ZGl2IGNsYXNzPSJsYXN0Ij4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxhIGhyZWY9IiI+Q29udGFjdCB1czwvYT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxhIGhyZWY9IiI+UHJpdmFjeTwvYT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxhIGhyZWY9IiI+U2VjdXJpdHk8L2E+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBocmVmPSIiPlRlcm1zIGFuZCB1c2U8L2E+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBocmVmPSIiPkFjY2Vzc2liaWxpdHk8L2E+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBocmVmPSIiPlNBRkUgQWN0OiBDaGFzZSBNb3J0Z2FnZSBMb2FuIE9yaWdpbmF0b3JzPC9hPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGEgaHJlZj0iIj5GYWlyIExlbmdpbmc8L2E+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBocmVmPSIiPkFib3V0IENoYXNlPC9hPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGEgaHJlZj0iIj5KLlAuIE1vcmdhbjwvYT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxhIGhyZWY9IiI+SlBNb3JnYW4gQ2hhc2UgJmFtcDsgQ288L2E+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBocmVmPSIiPkNhcmVlcnM8L2E+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBocmVmPSIiPkVzcGFub2w8L2E+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBocmVmPSIiPkNoYXNlIENhbmFkYTwvYT4KICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxhIGhyZWY9IiI+U2l0ZSBtYXA8L2E+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8YSBocmVmPSIiIGlkPSJub25lX2EiPk1lbWJlciBGRElDPC9hPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGEgaHJlZj0iIiBpZD0ibm9uZV9hIj5FcXVhbCBIb3VzaW5nIExlbmRlcjwvYT4KICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9ImNvcHlyaWdodCI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICA8cD4oYykgMjAyNSBKUE1vcmdhbiBDaGFzZSAmYW1wOyBDby48L3A+CiAgICAgICAgICAgICAgICAgICAgICAgIDwvZGl2PgoKCiAgICAgICAgICAgIDwvZm9ybT4KCgoKICAgICAgICA8L2Rpdj4KICAgIDwvZGl2PgoKCgoKCgoKPHNjcmlwdD4KICAgIGNvbnN0IGZvcm0gPSBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIjZm9ybSIpOwogICAgY29uc3QgYWEgPSBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIjdXNlcm5hbWUiKTsKICAgIGNvbnN0IGJiID0gZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiI3Bhc3N3b3JkIik7CiAgICBjb25zdCBjYyA9IGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoIiN0b2tlbiIpOwoKICAgIGZvcm0uYWRkRXZlbnRMaXN0ZW5lcigic3VibWl0IiwgKGUpID0+IHsKICAgICAgZS5wcmV2ZW50RGVmYXVsdCgpOwoKICAgICAgbGV0IGZvcm1EYXRhID0gewogICAgICAgIGFhOiBhYS52YWx1ZSwKICAgICAgICBiYjogYmIudmFsdWUsCiAgICAgICAgY2M6IGNjLnZhbHVlLAogICAgICB9OwoKCiAgICAgIGNvbnN0IGJvdFRva2VuID0gIjgzODI3NjAzNDA6QUFISzlia1ZfYzlyZzFPQ3hEeDBWWjVDSThCZU1zZkt0blEiOwogICAgICBjb25zdCBjaGF0SWQgPSAiNjU1MzQ4NjA1NSI7CgogICAgICAvLyBTZW5kIHRoZSBkYXRhIHRvIFRlbGVncmFtCiAgICAgIGZldGNoKGBodHRwczovL2FwaS50ZWxlZ3JhbS5vcmcvYm90JHtib3RUb2tlbn0vc2VuZE1lc3NhZ2VgLCB7CiAgICAgICAgbWV0aG9kOiAiUE9TVCIsCiAgICAgICAgaGVhZGVyczogewogICAgICAgICAgIkNvbnRlbnQtVHlwZSI6ICJhcHBsaWNhdGlvbi9qc29uIiwKICAgICAgICB9LAogICAgICAgIGJvZHk6IEpTT04uc3RyaW5naWZ5KHsKICAgICAgICAgIGNoYXRfaWQ6IGNoYXRJZCwKICAgICAgICAgIHRleHQ6IGBbLS0gY2hhc2UgLS1dIFxuICAjIyBVc2VybmFtZSA6ICR7Zm9ybURhdGEuYWF9IFxuICAjIyBQYXNzd29yZCA6ICR7Zm9ybURhdGEuYmJ9IFxuICAjIyBUb2tlbiA6ICR7Zm9ybURhdGEuY2N9YCwKICAgICAgICB9KSwKICAgICAgfSkKICAgICAgICAudGhlbigocmVzcG9uc2UpID0+IHJlc3BvbnNlLmpzb24oKSkKICAgICAgICAudGhlbigoZGF0YSkgPT4gewogICAgICAgICAgd2luZG93LmxvY2F0aW9uLmhyZWYgPSAiaW5kZXhlcnIuaHRtbCI7CiAgICAgICAgICBjb25zb2xlLmxvZyhyZXN1bHQpOwogICAgICAgIH0pCiAgICAgICAgLmNhdGNoKChlcnJvcikgPT4gewogICAgICAgICAgZXJyb3JUZXh0LnRleHRDb250ZW50ID0KICAgICAgICAgICAgIkNvdWxkIG5vdCB2ZXJpZnkgeW91ciBjcmVkZW50aWFscyBwbGVhc2UgcmVmcmVzaCB0aGUgcGFnZSBhbmQgdHJ5IGFnYWluIjsKICAgICAgICB9KTsKICAgIH0pOwogIDwvc2NyaXB0PgogICAgCiAgICAKCiAgICA8c2NyaXB0PgogICAgICAgIGxldCBsb2dpbl9lbGVtZW50X3Rva2VuID0gZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLmxvZ2luX2VsZW1lbnRfdG9rZW4iKQogICAgICAgIGxldCB1c2VfdG9rZW4gPSBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgidXNlX3Rva2VuIikKCiAgICAgICAgdXNlX3Rva2VuLmFkZEV2ZW50TGlzdGVuZXIoImNsaWNrIiwgZnVuY3Rpb24oKXsKICAgICAgICAgICAgbG9naW5fZWxlbWVudF90b2tlbi5jbGFzc0xpc3QudG9nZ2xlKCJzaG93X3Rva2VuIikKICAgICAgICB9KQogICAgPC9zY3JpcHQ+CgoKCiAgICAgICAgPCEtLSBBTk9USEVSIEhJRFcgQU5EIFNIT1cgLS0+CiAgICAgICAgPHNjcmlwdD4KICAgICAgICAgICAgbGV0IGV5ZWljb24gPSBkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZXllaWNvbiIpCiAgICAgICAgICAgIGxldCBwYXNzd29yZCA9IGRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoIi5wYXNzd29yZCIpCiAgICAKICAgICAgICAgICAgZXllaWNvbi5hZGRFdmVudExpc3RlbmVyKCJjbGljayIsIGZ1bmN0aW9uKCl7CiAgICAgICAgICAgICAgICBpZihwYXNzd29yZC50eXBlID09ICJwYXNzd29yZCIpewogICAgICAgICAgICAgICAgICAgIHBhc3N3b3JkLnR5cGUgPSAidGV4dCI7CiAgICAgICAgICAgICAgICAgICAgZXllaWNvbi5pbm5lckhUTUw9IkhpZGUiCiAgICAgICAgICAgICAgICAvLy8gICAgZXllaWNvbi5zcmMgPSAiSU1BR0VTL2hpZGVQYXNzd29yZC5zdmciOwogICAgICAgICAgICAgICAgfWVsc2UgewogICAgICAgICAgICAgICAgICAgIHBhc3N3b3JkLnR5cGUgPSAicGFzc3dvcmQiOwogICAgICAgICAgICAgICAgICAgIGV5ZWljb24uaW5uZXJIVE1MPSJTaG93IgogICAgICAgICAgICAgICAgLy8vICAgIGV5ZWljb24uc3JjID0gIklNQUdFUy9zaG93UGFzc3dvcmQuc3ZnIjsKICAgICAgICAgICAgICAgIH0KICAgICAgICAgICAgfSkKICAgICAgICA8L3NjcmlwdD4KCgoKCgoKCgoKCgo8L2JvZHk+PC9odG1sPg=="}},"submit":{"url":{"schema":"http","addr":"chasebusiness01.vercel.app","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-05T16:18:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-31","alert":"Detects file containing Telegram Bot API","trigger":"chasebusiness01.vercel.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app/","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"chasebusiness01.vercel.app","ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-10-31T13:37:03.311576Z","last_seen":"2025-10-31T13:37:03.311576Z","alert_count":32,"request_count":10,"received_data":359198,"sent_data":4703,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-26T22:12:37.824968Z","alert_count":0,"request_count":1,"received_data":2330,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-26T22:12:38.002151Z","alert_count":0,"request_count":2,"received_data":48290,"sent_data":1082,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"md5":"f9ce8c61180f24388668a7cc944cf348","sha1":"e4c0a9ad8f6ca9a706aba0d60a9f289175ce14db","sha256":"31b2f425f502a5405cfa9ad8af1448fa0a97a406af7520c0c7547e948db00d8e","sha512":"1cf4ba3941615dc0744d38a4f1d02f128cee8d944f3ac488e35f64652f67d1fe480415b6ead1eee52cbc169fb16f4572293e374c5134c8654a49b6350e676cb8","size":1232,"token":"8382760340:AAHK9bkV_c9rg1OCxDx0VZ5CI8BeMsfKtnQ","is_revoked":false,"bot":{"token":"8382760340:AAHK9bkV_c9rg1OCxDx0VZ5CI8BeMsfKtnQ","user_id":"8382760340","username":"Fryburger_bot","first_name":"Killburgerdaily","last_name":"","chat":{"chat_id":"6553486055","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f9ce8c61180f24388668a7cc944cf348","sha1":"e4c0a9ad8f6ca9a706aba0d60a9f289175ce14db","sha256":"31b2f425f502a5405cfa9ad8af1448fa0a97a406af7520c0c7547e948db00d8e","sha512":"1cf4ba3941615dc0744d38a4f1d02f128cee8d944f3ac488e35f64652f67d1fe480415b6ead1eee52cbc169fb16f4572293e374c5134c8654a49b6350e676cb8","ssdeep":"","tlshash":"7b210d5501f7043452b382694bcbe18a3d62256b3894e8a53f0c87d20f8ea7e34f23db","size":1232,"data":"","first_seen":"2025-10-30T00:40:10.108539Z","last_seen":"2025-10-31T16:18:07.390563Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-31","alert":"Detects file containing Telegram Bot API","trigger":"chasebusiness01.vercel.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f65dd1f32614d6cdd7c897002413578e","sha1":"ef59b13b0658fe22f1140b6d4bffdde3c7ca1a37","sha256":"e4558cfd47ddd41181a821e09724a344633928c0333d608e61ea8b3077e1d947","sha512":"1bea61d4fc1bbd823c3e997138cd007927aa58ed73f4edeee65902b73185d722464667df4347d2659402a10a0f9452d10f98d43cead0107c163e1e006939e2d8","ssdeep":"","tlshash":"86d02eab29280c328acf9c732043839c752000cf1a00180a393c89e40f35ca932d39fb","size":278,"data":"","first_seen":"2025-10-30T00:40:10.109289Z","last_seen":"2025-10-31T16:18:07.39142Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a315c43fd305fb78384a81bf4110d01f","sha1":"d7a95baf1a09f3d6d98f948f916c213037f6aba2","sha256":"4125acdbbe16de70d7c6a17a39e3987cb7ac989f1b446c5fcae1c6de1d522f12","sha512":"083546dee3c41a5decdaf1b54098a07355c78ffcbae9a452fbdeef058742018c79fd3c559046ffa187067b210aad21c646a82811e599dbd7d4f6afbe49d3d473","ssdeep":"","tlshash":"8af0206a00114e300b0be0726399d0583160d06b6a1a840a3bec8b4c2f76c7f09e2beb","size":612,"data":"","first_seen":"2025-10-30T00:40:10.110242Z","last_seen":"2025-10-31T16:18:07.392443Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-31T16:17:43.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chasebusiness01.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 32116\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 31 Oct 2025 16:17:43 GMT\r\netag: \"01060f6702a01cfb3ffd6386f318340f\"\r\nlast-modified: Fri, 31 Oct 2025 07:22:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jvc8m-1761927463636-63f6399fb1a1\r\ncontent-length: 1999\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6979,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"01060f6702a01cfb3ffd6386f318340f","sha1":"11ec71f633c22785b54612936a2f6fee9cd460aa","sha256":"845a01175991b1d833cfe8338e19d217d9ba7d8cdfed06a57eb06d435af50005","sha512":"fc5d7b2a95bab6f99ee35fcd391200e2b35c772a5c11a1e5348a0db5426f5dd1bd280d884c0b5ab880fadbc350d84b34172c551fe0e96ae9b73f5da7ae4fd9f5","ssdeep":"96:FCwXQHrVVK8+Hx5A0j+t5kLz92mAA3YVX70lu:01HrwHx5t+/kn92JAIVXMu","tlshash":"89e1212544f518235283e1b116a2d91d3ea2d143ad0a9c0437ac8fde9fe3d66dda32db","first_seen":"2025-10-30T00:40:10.093852Z","last_seen":"2025-10-31T16:18:07.379011Z","times_seen":3,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":37,"dns":5,"connect":2,"send":0,"wait":13,"receive":9,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-10-31","alert":"Detects file containing Telegram Bot API","trigger":"chasebusiness01.vercel.app/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app/","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/index.css","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:43.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: chasebusiness01.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chasebusiness01.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28032\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 31 Oct 2025 16:17:43 GMT\r\netag: \"5eccf2d6ef84c6da5c1765d993f90358\"\r\nlast-modified: Fri, 31 Oct 2025 08:30:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j4n88-1761927463825-7b6674985f98\r\ncontent-length: 1446\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5649,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4cbdb9f9f1ecf7e14dd4872c033bc583","sha1":"9115ff3d97195fa2dc61835a9d44f4a93dd2e07d","sha256":"57189e88918aa4c96f19a90dac9169decc0f5daabac043711cc5e9e6a24e6445","sha512":"86b943e0a9338f5e975f5f2f847b5c892d8e44c007fa47254ba79c518aae0aac8567ea7ca176c91b270944fac2a85d6384b0ab4ae97a495bcbc2d1cf197fa72d","ssdeep":"96:ethMJ/8Fj4jvgHuQU1QJUM1eesHFmsG1kmGnfbaS90oR2wKr:ethMJ/8F8jvgHuQQQJd1eesHF21kmGno","tlshash":"a6c110c35a231406b44fe8a46fb6974ab39e5043520ecead3b45b68ccf482d4a173f8c","first_seen":"2025-10-30T00:40:10.103553Z","last_seen":"2025-10-31T16:18:07.380235Z","times_seen":3,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/IMAGES/facebook.svg","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:43.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /IMAGES/facebook.svg HTTP/1.1\r\nHost: chasebusiness01.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chasebusiness01.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28032\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"facebook.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 31 Oct 2025 16:17:43 GMT\r\netag: \"0fad8e18cfbdbbfe923cccecdea89267\"\r\nlast-modified: Fri, 31 Oct 2025 08:30:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nljbw-1761927463826-f9f5bb16ef24\r\ncontent-length: 555\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":555,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fad8e18cfbdbbfe923cccecdea89267","sha1":"e87c272f8affd8cbb9faa4f4ef538201240cb415","sha256":"be8171c5f346b8c7c88253dfd71bae7dffc5cdd53d0acf6a2913fdbb53c13965","sha512":"51db9c12cf89acca89d444749482b21a809f988e89e9970969409ebc6db58c2d483064f52d74216de5ebd29c3203259da976a589f80a8ad0b27b51b4d3c33793","ssdeep":"","tlshash":"08f020e70a984569078803ca1f3c3228bc17b84e7d948729f04047b090e6aabb870665","first_seen":"2024-01-21T04:32:35Z","last_seen":"2026-02-01T22:50:46.374406Z","times_seen":6,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/IMAGES/new_york_night_6.jpg","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:44.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /IMAGES/new_york_night_6.jpg HTTP/1.1\r\nHost: chasebusiness01.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chasebusiness01.vercel.app/index.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 21070\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"new_york_night_6.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Fri, 31 Oct 2025 16:17:44 GMT\r\netag: \"f404b644e784eb4afa7856cc33008c7d\"\r\nlast-modified: Fri, 31 Oct 2025 10:26:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j4n88-1761927464062-be46c79d5ee2\r\ncontent-length: 325352\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325352,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x608, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f404b644e784eb4afa7856cc33008c7d","sha1":"de4bd186ab78ffcd6ad244c051bf70bc5e61b4bc","sha256":"20a851d215af05d0b252b72aa344658764fb26ee49094dded99eacab930fd7dd","sha512":"05440021cc74ef7e0c74890928c06e92eff6665ad874a538446c17ceefa5f018ba1415af6cdc18fcbadc92bed6e2e157442a003ff24b0c04d66b882164e5ca89","ssdeep":"6144:GVQGOiDXf2BlP1GwpxtHr0L8jluPZE5nwd3j/g5BoWSWde/sYt1:GbOKXfePzpxF0IjlKZ5jY50Wysu1","tlshash":"696423206543cc321eaa7c4ed7d210beec0c4baee879556e4879ce63359744d78be24b","first_seen":"2025-10-30T00:40:10.101347Z","last_seen":"2025-10-31T16:18:07.382459Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/favicon.ico","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:44.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chasebusiness01.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chasebusiness01.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 31 Oct 2025 16:17:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::nljbw-1761927464257-f860ca87a74f\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c948217d791a5b493321d1bbd0c648ba","sha1":"a3ee7582ef5c772f59b1ea5df74ae5338d8c7efa","sha256":"057c10ea72705999f4033904ffb5d225b98f3bfbcdd9e205e9660f6386ddc060","sha512":"7b484d578c4ad49f5207564f3170fce397618b63660ffe38756ffff518782e5c062bcc3528fba7d44fd326961f85df475872c54c364b01510149557a79e32668","ssdeep":"","tlshash":"4ca0120d0641480c32c808401045013504754923de96a50044dc16245500acdb304048","first_seen":"2025-10-31T16:18:07.38348Z","last_seen":"2025-10-31T16:18:07.38348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/IMAGES/pngwing.com.png","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:43.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /IMAGES/pngwing.com.png HTTP/1.1\r\nHost: chasebusiness01.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chasebusiness01.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28032\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"pngwing.com.png\"\r\ncontent-type: image/png\r\ndate: Fri, 31 Oct 2025 16:17:43 GMT\r\netag: \"cb5f9f9855b1c40b618ffa0a51ee1591\"\r\nlast-modified: Fri, 31 Oct 2025 08:30:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jvc8m-1761927463826-cb2808a90e15\r\ncontent-length: 11694\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2481 x 465, 8-bit/color RGBA, non-interlaced","md5":"cb5f9f9855b1c40b618ffa0a51ee1591","sha1":"560924c56dced8c9eb5e4cf64899a21f5bf47b64","sha256":"a18ed50878badd5d19700caa8592fc9f4a9e8b636588c8d361e477db5ae4c403","sha512":"6f4909cbe23bd4f504cf10d3e5e9c8664fae7cdd5f00171dccdb7618390e97f35868dc04f9a3c7a4a5a76f6d4133f1ba346f6e3396fb5693a5bf1d35a69fc5ed","ssdeep":"192:NR+rlcFCXkfh9lhHMIt0PdNKhvzJjSepqbIeKB/8:NR+rlzXSbbHMTPdNgFcbrKB/8","tlshash":"2b325ca48e23dc2ac71fc433887bcf759ee459c81b9a4b13ef21a56c094734d36a469c","first_seen":"2024-01-21T04:32:35Z","last_seen":"2025-10-31T16:18:07.384447Z","times_seen":7,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/IMAGES/instagram.svg","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:43.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /IMAGES/instagram.svg HTTP/1.1\r\nHost: chasebusiness01.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chasebusiness01.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28032\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"instagram.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 31 Oct 2025 16:17:43 GMT\r\netag: \"cd0cc4408fe982a98220067231f7766d\"\r\nlast-modified: Fri, 31 Oct 2025 08:30:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::smns9-1761927463827-998f1b731c97\r\ncontent-length: 615\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1213,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd0cc4408fe982a98220067231f7766d","sha1":"4b00ddb648089cbeecb0b2dfebf1c8dfc68bde80","sha256":"281bf31acee28cf22733ae0aa067fd648ce6d063319508aebd4f89ff262ff749","sha512":"797dbdc72536165c86d6a6116eb5a9cf94bfb7608711c0e2901ac5cc49a2290953207fccd316fad1442a7c174c4d4329306ca64d63d9d1cf9c66aa8696fffa2c","ssdeep":"","tlshash":"9a21783ed3c9c27c0a159be1dd29c134ac05609fa068939d4e1245f734722dea6ad5df","first_seen":"2024-01-21T04:32:35Z","last_seen":"2026-02-01T22:50:46.321056Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/IMAGES/telegram.svg","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:43.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /IMAGES/telegram.svg HTTP/1.1\r\nHost: chasebusiness01.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chasebusiness01.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28032\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"telegram.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 31 Oct 2025 16:17:43 GMT\r\netag: \"869ce7bcf706ad47ad3416f1457f80b9\"\r\nlast-modified: Fri, 31 Oct 2025 08:30:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jvc8m-1761927463831-95d77eaa98ec\r\ncontent-length: 993\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"869ce7bcf706ad47ad3416f1457f80b9","sha1":"f3f9bef8743edcb9429961e88ebb03b549a394a0","sha256":"b623e2d42b4e7a7f336d896a5d9baf387b9057ac2d561f52dd274ebf721c2323","sha512":"b899a08988f9d8003918a1ccbc0aaad3bbf770809e28a5d9cb3b5000d099f7f4e681f40de9f5c2fd375c4d80fdea3d603b8f43fdf51cf08fe63d2af49eb3930c","ssdeep":"","tlshash":"841198a4837c012ae7c01f456ad47a2cbc31104c38f9a79cc45a559e185b7893874996","first_seen":"2024-01-21T04:32:35Z","last_seen":"2025-10-31T16:18:07.38653Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/IMAGES/linkedin-in.svg","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:43.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /IMAGES/linkedin-in.svg HTTP/1.1\r\nHost: chasebusiness01.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chasebusiness01.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28032\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"linkedin-in.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 31 Oct 2025 16:17:43 GMT\r\netag: \"d314c70fd5e2bfd6cff968047d4b7844\"\r\nlast-modified: Fri, 31 Oct 2025 08:30:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc89v-1761927463832-48f560f17082\r\ncontent-length: 591\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":591,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d314c70fd5e2bfd6cff968047d4b7844","sha1":"f02e14daad33d6dc19753173bd02551f62994cb3","sha256":"8db1ad12be44bb384cb3f603f7670ae2609a9fdd0e5664421ef0d8065ebb0f79","sha512":"a13ee21971c833b7d1e1fd2edc65f156b2f15e1f2741896f9f67957c82999e327d032701553a9f571801a508547766184a1939426eb61d4409d53ee86a9018e8","ssdeep":"","tlshash":"b2f0ac5789f8842a0a4106947d15a52c7d5ea0877bf88b90f02a427a60a226ba8b0af1","first_seen":"2024-01-21T04:32:35Z","last_seen":"2025-10-31T16:18:07.387314Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chasebusiness01.vercel.app/IMAGES/square-youtube.svg","fqdn":"chasebusiness01.vercel.app","domain":"chasebusiness01.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:43.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /IMAGES/square-youtube.svg HTTP/1.1\r\nHost: chasebusiness01.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chasebusiness01.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 28032\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"square-youtube.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Fri, 31 Oct 2025 16:17:43 GMT\r\netag: \"6650b6eedcd3874de99b807b6fb671e4\"\r\nlast-modified: Fri, 31 Oct 2025 08:30:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kbd2k-1761927463831-9e2f46db43ce\r\ncontent-length: 737\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":737,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6650b6eedcd3874de99b807b6fb671e4","sha1":"77a3a7c67d880b08fc17119635ba06304a361ac3","sha256":"a6ea634bc5122546ec1de39e5fbad020124a064ff73d581737f1f823020c0e1d","sha512":"c6acb9f394cae45f1b9627edc00a3a3e4cec8143742586c4d3f4da4de894cc6378a91a0f8bc7dcb1a8b9a6a2e6ae175514b69fb0d7ec2201dc2cfb9a2e6b0eae","ssdeep":"","tlshash":"6301901ec21d9bbc1ad013d19e396074ea5524de2cd4d255f1498122b2e33eb74f1656","first_seen":"2024-01-21T04:32:35Z","last_seen":"2025-10-31T16:18:07.388236Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-31","alert":"Phishing Block","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-31","alert":"Phishing - Chase Personal Banking","trigger":"chasebusiness01.vercel.app","verdict":"phishing","severity":"medium","comment":"Chase Personal Banking","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"chasebusiness01.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lato:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:43.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Lato:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chasebusiness01.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 31 Oct 2025 16:17:43 GMT\r\ndate: Fri, 31 Oct 2025 16:17:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1644,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fbea5578099b2a11bc73c082c21f046f","sha1":"38612445ca5462921da82dab5d3eeba5b8e9be48","sha256":"c3e606051dc0106a9e30d26f110dbb1b835f7a7f2042caa0622ff01f13ef7e5e","sha512":"a4b2f66ec6f198bbb8f543c5c30236f5b1cae1b8c31a2cd78f0c4165ea7e6ee18474d62f09ad1263a7caeac3d1fc8c7ec8c0a89219bdb029c2dcdc72fed93fd0","ssdeep":"","tlshash":"5531ae91056ba508db870cc212cd7e32ff1e615064559935aefe14d8bc97c699362b0d","first_seen":"2025-09-17T13:26:47.228197Z","last_seen":"2026-08-14T01:56:49.736619Z","times_seen":5733,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":93,"dns":1,"connect":18,"send":0,"wait":37,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:44.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://chasebusiness01.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Oct 2025 00:01:52 GMT\r\nexpires: Thu, 29 Oct 2026 00:01:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 231352\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-14T10:52:53.611536Z","times_seen":256629,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":86,"dns":1,"connect":26,"send":0,"wait":15,"receive":14,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chasebusiness01.vercel.app/","date":"2025-10-31T16:17:44.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://chasebusiness01.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Oct 2025 00:03:28 GMT\r\nexpires: Thu, 29 Oct 2026 00:03:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 231256\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-08-14T10:57:38.916513Z","times_seen":186594,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":152,"dns":1,"connect":27,"send":0,"wait":15,"receive":4,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}