{"report_id":"f514b4a9-2842-4801-b923-fa391128feca","version":0,"status":"done","tags":[],"date":"2026-07-12T22:07:14Z","url":{"schema":"https","addr":"virtual-currency-bank.com/","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"104.21.25.6","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"virtual-currency-bank.com/","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"title":"VCB - Virtual Cryptocurrency Bank","dom":{"size":141110,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62361)","md5":"2ad05a059e9b48ba25c4e4b203398a37","sha1":"1a073fe541a1c09a76d14effe9818d21a5d07931","sha256":"12afaaa08c489f90c6a33b52d262206cd685355582b15bea4b4427939df5bc88","sha512":"1e5e9ab415ddfa5822e714f66a9e065cf2dc4448a028b93af1e2342f9e385a168dfa95544dd37b021c203f515779c55a8f30c25bed08401e50161c9b95e047d1","ssdeep":"1536:tJUjoGUPm9NtpIOMpZ9/swM/93/mRQRtR6oMadY/VBsHml2JjCuLe2qIAt/2t+ZD:woSwcK","tlshash":"5dd394355348193de49787e0f6b1b73d91bfc28ae71f945cf26c42a26782c48ed17aa0","dom_hash":"domhash4414c33f42e588acd89170ecd0331d2a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"virtual-currency-bank.com/","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"104.21.25.6","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T22:07:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"virtual-currency-bank.com","ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-06","domain_rank":0,"first_seen":"2026-07-10T09:46:51.264205Z","last_seen":"2026-07-10T09:46:51.264205Z","alert_count":12,"request_count":12,"received_data":3597617,"sent_data":6083,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"go.screenpal.com","ip":{"addr":"52.3.152.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2003-07-20","domain_rank":578121,"first_seen":"2024-03-05T18:50:54Z","last_seen":"2026-06-24T22:08:02.226546Z","alert_count":0,"request_count":1,"received_data":3071,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":3,"received_data":148035,"sent_data":1752,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flagcdn.com","ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-07-10T06:13:48.09313Z","alert_count":0,"request_count":1,"received_data":1430,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"virtual-currency-bank.com/","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3867f167803d8d8d0173407d3ffdaf04","sha1":"17bc75a581cc0c411285746f97ada1d2c4a78c8a","sha256":"5a3f89c09ced03db716c418f2bdf4f27847892d80c0f9156ea1dee47fcf86b3c","sha512":"49f2c2c0982f095c3a2b7535862e6313100e425d7378d8c4fe03e067b798ab5e111a169d27f3307fa82387a0d374c2b48926fded57c5db06b5bbe85c4835c52c","ssdeep":"","tlshash":"25116dd99aa70b9333b22175e35bdb1d326d003fd02dcaa0704ec6986f995a4024f7dc","size":887,"data":"","first_seen":"2026-07-12T22:07:20.259945Z","last_seen":"2026-07-12T22:07:20.259945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/assets/index-B1NzRk5Y.js","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b99f3e7de67844f954f241fe2356b2b","sha1":"868be2df26cc06743c4eb42a1978d14ed3e41917","sha256":"8431422b59bcc044d0a9de57a3a24e863f4e38c17ec082d691660c717ee9433d","sha512":"51d40c348421427eac2e4d46b9e690551f9c86dc056acaf5112cd75cbd115f4a6b6d50ad3f7ac36d316682343ecc0e2b7b2ed8b5aac5c44ce059abb7d49681aa","ssdeep":"49152:bkPdp3Ci7M/j0an6I5zBmxlU37H/duY86unLC3IgwzrjCDTSQg5CG5F5jkmmNP2A:19VDBGX5jA","tlshash":"30d55c4db141beadaa6349d07c7f8009b12f1a58ea1e88d4f17cd8d12a74585b237ff8","size":2936878,"data":"","first_seen":"2026-07-12T22:07:20.263457Z","last_seen":"2026-07-12T22:07:20.263457Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.screenpal.com/player/appearance/cTQQDDnoULK","fqdn":"go.screenpal.com","domain":"screenpal.com","tld":"com"},"ip":{"addr":"52.3.152.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61ca64d018f139c5666694c7696442ec","sha1":"1b7842162a84e4282d3821f598d4c51f818cf385","sha256":"5aa62a42607e9cc001b25d218db300da1e438e8de248e206b17ed211f66a6bbd","sha512":"ef92522da618dd80369dc31fa0b118a316f7577856be2bedfd0b70be7a89a4f097b2723d7d4eb161bd703f283079b188e0069f689e984c240dabb1e8904702c9","ssdeep":"","tlshash":"973122284a7634180216b5ffa9cb141c3670903f6645ce4afd8ca22d1f58e687f62fbd","size":1539,"data":"","first_seen":"2026-02-23T15:42:48.684719Z","last_seen":"2026-07-12T22:07:20.243909Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"VCB Translation Protection System initialized","filename":"https://virtual-currency-bank.com/assets/index-B1NzRk5Y.js","line_number":1180,"column_number":42},{"level":"log","text":"Ticker updated from shared crypto source - Page visible: true, Should poll: true","filename":"https://virtual-currency-bank.com/assets/index-B1NzRk5Y.js","line_number":755,"column_number":16503}]},"http":[{"url":{"schema":"https","addr":"virtual-currency-bank.com/favicon.png","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.844Z","timestamp":1783894006844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 09 Jul 2026 18:22:46 GMT\r\netag: W/\"49a07-19f481e30f0\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SIf0NDXnSosMMTbiyCCdz9YoT5Fbh9fExKvodkX0s2rKcXiW5LEBLsnV%2Fun%2FvvZsC%2Faxyji%2BfbCuIxiVsNRqEzpxy4l5gCx8%2FVuwLmOwoTOiSZHmLSnMccQ%2BwQ4VzMXPVokYavub%2B0pEihSJ\"}]}\r\ncf-ray: a1a35b66cfe1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 301575\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":301575,"size_decoded":302377,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"f7edc8879205dfa45349ccb68bb9a3a8","sha1":"ba24c5d612b45bd4c9da673572df7372ffae99ff","sha256":"37f1939e67f5a497113936a6bab4da7f12884a277ae3efc337c9ec4f4bfb4b04","sha512":"83bdd456a9ce8c11fb2493f37867f793e1b562913de48560774008594289af3c738047886536a86cfb28e431c9f511cec55b74f6b0db1ac6fc101c9e24fd4658","ssdeep":"6144:c6FgoyhKb5b228wBfRIH+HE7tLo1kj/q06Vl6It7Z65O:VL6KV5BfRdE7poGq06GItw5O","tlshash":"85542361cac9c96e38678449c3e7298d3ff971aca33d9cdc916fa6e0806364179c95f0","first_seen":"2026-07-12T22:07:20.239054Z","last_seen":"2026-07-12T22:07:20.239054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T22:06:44.572Z","timestamp":1783894004572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0Y2E8Ldd8m%2F7AKPg9nXKDv7IXgK79ThwB%2FQKNiREKpDZmPbgGu6hoAKOywUrTqZBm1wgYyCUQDT6m5YoazYbYa5X0XF8JqbstufmDzTFSGwHlHhK8RE%2FzOo77uzrph8kONS1XhRrQpj7o53\"}]}\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 09 Jul 2026 18:22:47 GMT\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a35b58fd03783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2369,"size_decoded":1725,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"d6be541b7b2bab9898ed926bbe75d6e6","sha1":"7ea983b17731081d7fc12fe445a163222dd1c59e","sha256":"fdae37b82b88274f7f6ba8851112197bf8e35afb2d98d000efce5d6545a5c6aa","sha512":"8ebec40e39fce47553f453869b64a4ead5f970fb85e4d96cb3dddd4da1e7f701bf1416f229854ab128179a8b9da66713f375511afbbd4f09b91b3a09d366090d","ssdeep":"","tlshash":"1941518659a2090633301124ab93f62ca96e912bd0088e90b4ee90e89fd4be044d737e","first_seen":"2026-07-12T22:07:20.24133Z","last_seen":"2026-07-12T22:07:20.24133Z","times_seen":1,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":17,"connect":42,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/assets/index-CwHLaT48.css","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:45.375Z","timestamp":1783894005375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /assets/index-CwHLaT48.css HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsfK4EhGZ%2BJ7ZGLz5gKFxa%2B7z0NSf24%2Bcpqo10Zzilfde5b6wVYG8HcuAbwf0lV6ffgrBv3clA9qC0%2FYcGvUYY3kowY8nFQDlXBkD42sBPebfWk3AW7UxnnXujz2VDa9HBLkSQ9YGlvhDhBH\"}]}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 09 Jul 2026 18:22:47 GMT\r\netag: W/\"49ec8-19f481e34d8\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a35b5d9da7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302792,"size_decoded":39732,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"ed7721891da4f6e252af6cc9304d1511","sha1":"898d7d087f2d6ec517ce8da010898bcc534027df","sha256":"0b3207b4e0da8d99493c750ad36f4bbeaaba6875813ed76c7b16a7caef4645a6","sha512":"c54bd16d398f854a6cefedfedec5d5821327c28862b64f368af13f6a4480ac5ae0bfedd46c2c93972a449ce4929364f33807c83ddb40c61e0113e83194a21573","ssdeep":"6144:dI88+lhQhVmQchsd3Zri3U134vgRD6Z/OW9wxhcAUo/K378VQZkt5FWMnWRLp8Yh:OvKsQ","tlshash":"9c54207996f46077bc16f2e4d698746df92af1e4de3a4669ac8112087bf23f60c4bc10","first_seen":"2026-07-12T22:07:20.242573Z","last_seen":"2026-07-12T22:07:20.242573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.screenpal.com/player/appearance/cTQQDDnoULK","fqdn":"go.screenpal.com","domain":"screenpal.com","tld":"com"},"ip":{"addr":"52.3.152.187","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.443Z","timestamp":1783894006443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.screenpal.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 11 Jul 2026 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"9E:A1:6D:0E:02:27:68:1A:FD:E9:9B:8B:24:7F:6F:2A:30:F0:CC:28","sha256":"FC:FF:1B:45:91:C5:DA:D6:13:6F:A4:E3:02:EB:26:03:67:C0:C2:41:CF:27:5E:9D:E1:DB:8F:5E:22:E9:00:C6"}}},"request":{"raw":"GET /player/appearance/cTQQDDnoULK HTTP/1.1\r\nHost: go.screenpal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Apache\r\nx-trace-id: 141334644215590041339926934693982118250\r\nx-trace-span: 7243417392030032234\r\ncache-control: max-age=0, must-revalidate, no-cache, no-store, private\r\nserver-timing: serverRequestTime;dur=0.03\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding,User-Agent\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IktOcVJ2Q0pzS25FN0VwL1RuZzZLeUE9PSIsInZhbHVlIjoib0ZDeTZkdUQ3bTFNSWc5d1FDMDdGUTBja0Rnb1Nna0hPMUVHenp4MVd3TlNGanpkVWRMcjZndlh5RnkzVWpyTzhBNjliYTJKY3pTb2VvRFQvZ0c1UFh0U2s3RzFVYWVxaGRFL0xhL3dKMjU3RE1sd2JlRUkxZHluY2p5ZDBDbU8iLCJtYWMiOiI0ZTVlMGFkOTg5MzY2NTBjOWI4MmQwZGFiNDg5MTdjYWM5MzNiZjc3NWQ5ZGNhNzU1NGJmZjVhZGQ4MzBlZGFkIiwidGFnIjoiIn0%3D; expires=Wed, 15 Jul 2026 22:06:46 GMT; Max-Age=259200; path=/; domain=.screenpal.com; secure; samesite=none\nsession=U3zZl27e9NljrFSjaRwWN2nGvIV1gPxjPWL7wM8u; expires=Wed, 15 Jul 2026 22:06:46 GMT; Max-Age=259200; path=/; domain=.screenpal.com; secure; httponly; samesite=none\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self' https: data: blob: screenpal-launcher: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: blob: http://localhost:* http://127.0.0.1:*; media-src 'self' https: blob:; connect-src 'self' https: wss: http://localhost:* http://127.0.0.1:*; frame-src 'self' https: screenpal-launcher:; font-src 'self' https: data:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1539,"size_decoded":2011,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"61ca64d018f139c5666694c7696442ec","sha1":"1b7842162a84e4282d3821f598d4c51f818cf385","sha256":"5aa62a42607e9cc001b25d218db300da1e438e8de248e206b17ed211f66a6bbd","sha512":"ef92522da618dd80369dc31fa0b118a316f7577856be2bedfd0b70be7a89a4f097b2723d7d4eb161bd703f283079b188e0069f689e984c240dabb1e8904702c9","ssdeep":"","tlshash":"973122284a7634180216b5ffa9cb141c3670903f6645ce4afd8ca22d1f58e687f62fbd","first_seen":"2026-02-23T15:42:48.684719Z","last_seen":"2026-07-12T22:07:20.243909Z","times_seen":3,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":27,"connect":93,"send":0,"wait":165,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/images/cayman-flag.svg","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.451Z","timestamp":1783894006451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /images/cayman-flag.svg HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ZARbck2MOFpzOANlxSQ9yld%2F7D7ruZ4RTtsPuZ2%2BL%2BjQeajwJLq04UqW9gL2aXY%2BhCIyjLXDhLCXuVDIEUQAvODirSKVEpEzM8u8iFVifXQoSjBSxCmo%2Fh8BoEVc4X896mHFPPQJvHheb%2Fi\"}]}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 09 Jul 2026 18:22:47 GMT\r\npriority: u=5,i\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a35b645f16783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2369,"size_decoded":1732,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"d6be541b7b2bab9898ed926bbe75d6e6","sha1":"7ea983b17731081d7fc12fe445a163222dd1c59e","sha256":"fdae37b82b88274f7f6ba8851112197bf8e35afb2d98d000efce5d6545a5c6aa","sha512":"8ebec40e39fce47553f453869b64a4ead5f970fb85e4d96cb3dddd4da1e7f701bf1416f229854ab128179a8b9da66713f375511afbbd4f09b91b3a09d366090d","ssdeep":"","tlshash":"1941518659a2090633301124ab93f62ca96e912bd0088e90b4ee90e89fd4be044d737e","first_seen":"2026-07-12T22:07:20.24133Z","last_seen":"2026-07-12T22:07:20.24133Z","times_seen":1,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.538Z","timestamp":1783894006538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://virtual-currency-bank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 332284\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T13:18:03.385751Z","times_seen":233479,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":22,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/api/crypto-market","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.439Z","timestamp":1783894006439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /api/crypto-market HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://virtual-currency-bank.com/\r\nCache-Control: no-cache\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"2cf-fj9MVur+2EwjX96RM7vxuwikDr4\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JcAYt2MNppLxG5jA3ih2OQ393wcngJnaFh3cL9yLeL%2FFWBPuTn2y0oVM7EHywOPyhbz9H9jClnH5GX4lSexzv1dS5bbRbkyyHgzoRQUbjiDbkSNje6pJazqFITss0QzWXJQ%2B%2BgcyZWN1PMkS\"}]}\r\ncf-ray: a1a35b644f10783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":719,"size_decoded":1017,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ca768a58700d2908b68ac1cd0c23cc6f","sha1":"7e3f4c56eafed84c235fde9133bbf1bb08a40ebe","sha256":"abd23d839521c8f178d9a56424f7b3047a60e1f8246a5ed65c1ebb1d128a4748","sha512":"95be9230c494aa442053d5db9a7bc7e52f24149d73380b22df8461ea45afc58ad0992af32814f05c37040fceeec745c84aaff001ab1707ca02aaf455ab8bd8b6","ssdeep":"","tlshash":"d801d87b954ac83d9450a6c7aa624b88204423d4f3ba061b56ec8ac81371e7f102ef65","first_seen":"2026-07-12T22:07:20.24729Z","last_seen":"2026-07-12T22:07:20.24729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/api/user","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.448Z","timestamp":1783894006448,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /api/user HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://virtual-currency-bank.com/\r\nCache-Control: no-cache\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"1f-+6QzNnV5epxAIN04tcijgCAz6Yw\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFyL6h%2BuFeeL%2Fj085%2FrAABCgbjQASfJZZ0DPOzr3Z%2F6Sw9h47sn06Rnyec0u9Ikqt1%2FqMe2GTTaI0RuwsJNHJ3hN84tebxp081eGYOwu%2FO8yt9AteNHQLQPi9GnsJMqWQTFJfl%2FdA8iWs%2BC1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1a35b644f15783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":765,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"95be97568fee69e29acf9a225a14c078","sha1":"fba4333675797a9c4020dd38b5c8a3802033e98c","sha256":"7368628fac9988517cf84c8623899a1be9ff9c00d3c5cc043057eed59c8d0bcb","sha512":"f4af81d0c29a3fb408b80cda34723853aa3211133d8bd54fa81bd756f2ce1276bd4cd4475706e5208e3f1a668db718a71c7962ad09e99e5e4f41dbe37820c683","ssdeep":"","tlshash":"37800020c2802c2ac303c2e2b208208002822aa800e028028028280a820888e80ba2c2","first_seen":"2025-02-16T23:17:47.175672Z","last_seen":"2026-07-12T22:18:13.379901Z","times_seen":240,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/assets/images/testimonials/profile3.svg","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.457Z","timestamp":1783894006457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /assets/images/testimonials/profile3.svg HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bqDsOpjJezg3QIpjSYaB8mGH0x5Mlai4%2F4EAu0Dr7t0hCN35kvg3SxL9g8jYggbLo%2FQBJV07vhwCfP7ZzhL%2FmHaWf2D97Vco7kTfcfrrJbukGBhyAmu6lCbi4UWTwSuJtXEasAzti1YrYHjF\"}]}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\npriority: u=5,i\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 09 Jul 2026 18:22:46 GMT\r\netag: W/\"28e-19f481e30f0\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a35b645f1a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":654,"size_decoded":1148,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"199237b41a5e068ce0e50fab205cc014","sha1":"0abf3221ae4efbcd7beb718201e2a2eb4b19b52d","sha256":"c21b35b713d56930ff2d09f7ca26799d7f6056827582d87bd3fc51e984032e75","sha512":"b14c808f403a2a21f6a175b60124b9583e16d542f7b01a257e54a9c216389e2c980940dfc76be270569f6b92b88841e4e3caa55c8853f9f79f4d5c1162d78c06","ssdeep":"","tlshash":"10f04988e10c85819958c3e05b69f83472aad0db065032f5bcb06b7135a95afdec1ae4","first_seen":"2025-09-03T13:22:28.015644Z","last_seen":"2026-07-12T22:07:20.249582Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/apple-touch-icon.png","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.842Z","timestamp":1783894006842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 09 Jul 2026 18:22:46 GMT\r\netag: W/\"9a33-19f481e30f0\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J0bX2EL7dXAZSGgm5dI7bF%2BUl3qkSYxBJ4Px6U44%2B5kscFWVuzdGs%2FlZXkKLXpCyF8vxHvPsoKx9rluqcTUdnryADcW0ot9QmCDK1jC2B%2FwjS59U81sjfcTt4RxrNMdY1M%2ByBHuSMC8rM3R1\"}]}\r\ncf-ray: a1a35b66cfdf783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39475\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39475,"size_decoded":40271,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"6ad4f1fb05c82ad2bceb55e6d204bb07","sha1":"b4662b7257cdb7e84833ef40eaeadd9ee1752016","sha256":"50e426066f3e84a410d12368a81b10d43a733c512f3270ac0b62cd0973e40c94","sha512":"b711d58720c6b4a3e7c9478bed702a092cd6946d5877b0248fe022dcb3453c23e4effb45ad6789b0b74c3669e61b3438aa6f00a34b9d0acbdd251912a6d400a6","ssdeep":"384:uysPWIdKVbQBIvzGtT4SzyZUNJR4P2vsM62NNbF9wN0q9yHLvWh0vmIWR114pxoi:6duQKvITXZRe2/zqhFR1mxyjLHGCy","tlshash":"d003f190f50d4a8f9bfb5cb5edec0462ee895ca137f08961167ced10574a05b72029de","first_seen":"2026-07-12T22:07:20.25107Z","last_seen":"2026-07-12T22:07:20.25107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/assets/index-B1NzRk5Y.js","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:45.373Z","timestamp":1783894005373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /assets/index-B1NzRk5Y.js HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42Grc5MRmbFxY1I%2F3x63hldbjVWT%2BiAmo8UKOjSiJDGjSmjriHGkK54BQZdbKVn%2B2D82LhZhK%2BgcM6iOmvcxJR%2BnrlzJeruXSMo9y5NE%2B2hoIvkQBfR%2FzTMxpVPQOHp5ObKr7NL5%2BNE1HAi8\"}]}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 09 Jul 2026 18:22:47 GMT\r\netag: W/\"2cd02e-19f481e34d8\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a35b5d9da6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2936878,"size_decoded":793112,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37675)","md5":"70f20fbc843093a9d765efd42d8c0f7f","sha1":"19e74e78967adacaf63879a19d8f61ec350691c5","sha256":"c490cecbe07709f57064237feeac6acbb23e183afb37eb5a73b57e65100df9d6","sha512":"2a61631f9bf75f792a7f5e1705474e88ba9baf258ed82c0ee693169afe550bce2d6f9fb84fd453a4f864cf5123ad2eeb763d79d15cc879dec0d87d9589952fc2","ssdeep":"12288:SQoGkPdfGDSlVr9+Ll5dAus64Dy3SqJJwNKWAXoM/EA0an6I5zBmxlUnSU:bkPdp3U5iIyAT/j0an6I5zBmxle","tlshash":"93356c5db085b9ad9ea349d0bc7f8009b12e0b68fa1f88d0f07c98652771445f667fe8","first_seen":"2026-07-12T22:07:20.252084Z","last_seen":"2026-07-12T22:07:20.252084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/api/contacts","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.445Z","timestamp":1783894006445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /api/contacts HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://virtual-currency-bank.com/\r\nCache-Control: no-cache\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6hTVSdML1FBKHWwbRdmoP2pRQE2Tu9tGJsFQ4d2E3qecOhz%2BGQNc1M3ufQoWpE2tXczpWA9QcuWoyjHVahGTeQndKzxevxbCsmr7MY0JsWQ1Qz5%2FEMye4Y5vMlUiqtEwffDom6TD7Lt50BHi\"}]}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"f1-FfahcngGxrHgyCDqATQSkvzEu1I\"\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=4,i=?0\r\ncf-ray: a1a35b644f13783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":882,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bcbcb9eeed0941366471c09f55833c70","sha1":"15f6a1727806c6b1e0c820ea01341292fcc4bb52","sha256":"86783801ac71d4212bf42ef079e6b18d6cb4e8020e020b81e37b875201f82b57","sha512":"849b72b6ed2007fd0d77d05c30f025b9c12866eb298495e27ca3b0f75f92049d4aa3f160759beb3a70d8f340aa028bc507380116ada2637ccb4d411aa79ec893","ssdeep":"","tlshash":"8cd0a7568362cf3ae6807cd527cbc19a442560760fc05cadd4fd0ec9e5a13600d3d628","first_seen":"2026-07-12T22:07:20.253454Z","last_seen":"2026-07-12T22:07:20.253454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.533Z","timestamp":1783894006533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://virtual-currency-bank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 332284\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T13:18:03.385751Z","times_seen":233479,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":18,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.535Z","timestamp":1783894006535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://virtual-currency-bank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 09 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 332284\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-13T13:18:03.385751Z","times_seen":233479,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":28,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ky.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.699Z","timestamp":1783894006699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 01:26:53 GMT","end":"Sat, 29 Aug 2026 02:26:16 GMT"},"fingerprint":{"sha1":"D2:6E:B0:B6:96:56:08:49:68:3B:CB:E0:E3:66:23:60:CD:73:2B:8D","sha256":"F5:81:41:B3:1E:2C:6F:26:A5:EF:89:3C:3C:84:66:48:2D:2F:E3:EA:E4:EF:C2:ED:58:8E:15:45:FB:B1:55:93"}}},"request":{"raw":"GET /w40/ky.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-25a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2144245\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zhtqwxX95S3hcYzaFn8ZArbBAV0Vgr2zAMNqkgpifZg6L66wNkUqBkX%2FkHGqJYjFDsdvaQHDdQHy4mXW0aCFEjxkdhAPXrkQ%2FJbfsMKqgDIiVb1jPwpw7TdJT4i3Sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a1a35b65f8ee120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 602\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":602,"size_decoded":1430,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"06e1ac58b71af8a76983f3de69a08e20","sha1":"1027ecc135f1825ff4d24ea117c3ba8115f9bcf9","sha256":"27e86bda3e2a6ce8045d7a28f053f9a28365ac41c9d1b77a13cb048f5d24eb6c","sha512":"b96e4e0baca4f37ddfddffd6870ba982cfb45ddb75cf885c908e0d6307493f80d2028dad6574763760aa18b1761834a1fdc6ad4900f5e39b1b52395389af0423","ssdeep":"","tlshash":"32f047dd52674dfc051f22b113551392401e4356c431e31947165c11976232750de39e","first_seen":"2025-11-04T09:03:44.226574Z","last_seen":"2026-07-12T22:07:20.254428Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":3,"connect":12,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:45.370Z","timestamp":1783894005370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 22:06:45 GMT\r\ndate: Sun, 12 Jul 2026 22:06:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-13T13:15:30.764369Z","times_seen":33674,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/assets/images/testimonials/profile1.svg","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.453Z","timestamp":1783894006453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /assets/images/testimonials/profile1.svg HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqlDug7gdWjdURGbkvrjDNtbujSjddmJmLn492QNKyBEA2ooN6wCK5UJ1YYPQnkzd0jSywj1ng3zpY5R40NnVZDYToKMJfYxCpEqdShQUYA7rA5GsIM4ZZkFILSGneoAhrOdZ8ChozoMP20g\"}]}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\npriority: u=5,i\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 09 Jul 2026 18:22:46 GMT\r\netag: W/\"28e-19f481e30f0\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a35b645f17783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":1141,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dfd171d8318fe4a7f41ef5558cc86249","sha1":"c965d509579a1ae32a78ded2123081645cc9ce94","sha256":"ce3df19ebe10178a4ccde4526481f627bbe4a16a3e8d6bcb51ebfdc90ca281a3","sha512":"eb6bed0608a29e38301c55275b4ce60295fc9623d03b52634346643aa13fd6f878a59b96c942357d76740d347f022e70f023231e5ebb28f7d1be725c202dfd28","ssdeep":"","tlshash":"1bf09998e20c59808958c3e05b7cb82432aae0db165033f4b8b05b3031691efca81ae8","first_seen":"2025-09-03T13:22:28.01394Z","last_seen":"2026-07-12T22:07:20.255687Z","times_seen":4,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"virtual-currency-bank.com/assets/images/testimonials/profile2.svg","fqdn":"virtual-currency-bank.com","domain":"virtual-currency-bank.com","tld":"com"},"ip":{"addr":"172.67.221.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://virtual-currency-bank.com/","date":"2026-07-12T22:06:46.455Z","timestamp":1783894006455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"virtual-currency-bank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Jul 2026 10:30:01 GMT","end":"Sun, 04 Oct 2026 11:28:31 GMT"},"fingerprint":{"sha1":"4B:EA:DE:5D:6E:61:CF:C9:9A:01:0F:48:2E:DF:27:98:9E:FC:C9:2A","sha256":"16:EE:2F:D2:DF:1D:A5:77:D5:C5:7B:1A:20:32:0D:B2:C6:D5:2B:1B:0E:36:FD:F0:7B:5B:1A:F3:BA:9A:EF:36"}}},"request":{"raw":"GET /assets/images/testimonials/profile2.svg HTTP/1.1\r\nHost: virtual-currency-bank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://virtual-currency-bank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 22:06:46 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aADfnX0kSj1xtasTEgCNNYznarxyoLii47jA5%2BpWET5OoGpejZndN7aXPirdRZfLeml8VUi%2FF40xDpMnYFLjtahV7Km2hyBd3v%2Fkhfo2AKZfMiDm2u6GUi8aWZeoKRJ%2BtwS4r80Uc7go0bTv\"}]}\r\nx-powered-by: Express\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\npriority: u=5,i\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 09 Jul 2026 18:22:46 GMT\r\netag: W/\"28e-19f481e30f0\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a35b645f19783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":654,"size_decoded":1152,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9d8c94f18187a9333a25bccdfda7943","sha1":"5b4df9cddf1846d9ae8642f37750167abecd72ed","sha256":"14a9cc28b320251b1c8929b313231365c196dd767819fdbd8769fbbf3cee4142","sha512":"41484296094d1012cc48114dea8f61fff806f19a2616d455bd5f2da7c2fdc601e79ce748cefe6d96d3f5f16b7f5c265810f7237f19ffc1b0a01115b09574613e","ssdeep":"","tlshash":"9df049c8f20d4581d858c3a05bbdb82872aad0db175032f4b8f09a7131692bfda81ae4","first_seen":"2025-09-03T13:22:28.021163Z","last_seen":"2026-07-12T22:07:20.258943Z","times_seen":4,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"virtual-currency-bank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}