{"report_id":"fc1228e6-95be-4b41-b36b-eb3a2b790337","version":6,"status":"done","tags":[],"date":"2025-09-20T20:10:46Z","url":{"schema":"https","addr":"apextrust-union.us","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"apextrust-union.us/","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"title":"Apex Trust Union Bank"},"submit":{"url":{"schema":"https","addr":"apextrust-union.us","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T20:10:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"cdn-cgi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"cdn-cgi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"apextrust-union.us","ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":49,"request_count":49,"received_data":3037567,"sent_data":57802,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":101861,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":25150,"sent_data":882,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn-cgi","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":0,"sent_data":906,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.getbutton.io","ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":386210,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":885311,"sent_data":867,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":286,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":35039,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/scripts.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c044f8dc6f0d7019f851bcad434850c","sha1":"97222d42771822e90260504b2190e3f85160c262","sha256":"d1bcf8f08856cd9b1ae7292456ad652b425e3efa6e8c355d130fc3dfee40d587","sha512":"5a1ca212bcf355c702855d2c0755947be40bae389c2c4567116e0da00e928c5073820d869b0c473c7a6280df7044050d24cce43aea8c2f2ba19765e82276e530","ssdeep":"192:pqyzpN+p7bop9JZM4s4cDu+JEHtwqQdS7G+Y7Nt0fUVNxB:pdzHZM5XwtwqQwgNtEUVNxB","tlshash":"96628409700520b96d3bb339afb62204ef695317c101da977cbe27d42fb651a72a0f9d","size":15476,"data":"","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-03-31T05:28:16.144729Z","times_seen":128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/mixitup.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6277129ec6fe65cb8fd5aa6df3813d7","sha1":"085520055bafb1cbf69fb95071ca4d92cf6a6ad3","sha256":"9fa7277299b7a3b4fe70ef6ade6691d04b9ee5d3cfaaa4a728fd77a48a54e6f8","sha512":"87df288f653fa3102d5611afbcabfe50d2f6b0a8657b09024660d329c6684be15354e40978408607901c370d1d26af281f5cfc80f817f409e6bc34d87b7ba25a","ssdeep":"1536:9O1y42iuBCUsMsS765wA0Rd5zGUEFZXp4lx1tVZPO/mHSbo22iCm1QrMEcpnJQZ5:H4DCCKO5wfKetEl1QjcpnJQYHs","tlshash":"a2c3b6453ae43ab689b37326992e8f40f63583ab274244577e3c54584f7bc0416bbfb8","size":121918,"data":"","first_seen":"2023-05-27T06:34:22Z","last_seen":"2026-03-31T05:28:16.139443Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4afc0f7c5f07c5a98fb4d74543aa14d","sha1":"844f5652bef0c4c3215a3b94bab44b6fcd16852f","sha256":"732bc46045d54106ca17e5527104293fd5bab96e47fe512a9f14e4b1002f1fbb","sha512":"3befb781383f8b9a58edcb79d257b7fd42613b349312b012da88efe70596764182d0643c309604ef427fe5f4b90ee87240db2f184d95b73d88dd955c1f9f8703","ssdeep":"","tlshash":"60c08c188032a078000a210c8eba2292322041f70e163d24b39d954a0f0aa4f83b939c","size":181,"data":"","first_seen":"2025-04-16T16:49:09.320118Z","last_seen":"2026-04-03T04:37:17.258498Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b50120b4395b8e757e4857c24421c50","sha1":"1dd7267d8437564b5f7efe19f553e33a3548d37d","sha256":"9f31455e280dfe62030657efe10be565b34716a3655d27869621e2c65e50c049","sha512":"1cf4fd1eb8187b36d47d10a0fa5a4b6fb61e2823598ca3f8ec7715f577c346b775807efd6c6fe5f8f42e3b06f621bcd985e681a5c544f0000f70af65ce87c10a","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnEI:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnEI","tlshash":"fd946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","size":442019,"data":"","first_seen":"2025-07-22T21:56:55.389579Z","last_seen":"2026-02-13T05:13:50.572376Z","times_seen":3232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/jquery.mb.YTPlayer.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0092ff109f048e9efc293d1e910b2c1","sha1":"a97c44aaa0fa1cf9c1948cb6313fe3ee4dcfdb7d","sha256":"037c867c12383964b013a2c7e85029f083be663d0e76211fc39835f32fc98909","sha512":"f2d193d0feade643ac6f2e850fc092ea81a9fc704b2eab4620ca8bc800fda07b2f31b38605bdd8e7df1af8771e1af90588eb5484dc3bce5d5d778610b7cb8779","ssdeep":"1536:UMF59EiORs0eEl0agBW+5Kd99V4ho2z/ew+nbs7/eDX:UMF59EiORs0+agLh7/2X","tlshash":"5493600e559d502dc6336b65b47ac32cf234472752438616b42fe158af3e42fa1eafb8","size":89810,"data":"","first_seen":"2024-08-20T14:43:22.586433Z","last_seen":"2026-03-29T05:27:03.375152Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/wow.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a28a92aab28dc8b9e497fb6001844ac1","sha1":"d2776569bcd3455b5f3b86ec6c43cc16746519d5","sha256":"f878241d11f6d0431011224e4d33f0b3d87486cd593ff0d77c530acdbe6acb3d","sha512":"9af304e38910ccefadf29f853c650c5a2fdb4c76c75cfa9ec80c0aafceb95e01e99225da5f82d332f6c97857bc96d9a4fcf6c03caab4bd5daaf3a28408421fb0","ssdeep":"384:e9rUWUsfWmJNzfR0drygf5SIBEaiVlNsnOXiok66yBE:eFx7JN4RwVlNXXioqyBE","tlshash":"3062f34ab78560669a77b33ace6f8505f932463b2164cc9d3c7ca4d41f3052582b6ff8","size":14974,"data":"","first_seen":"2023-05-21T19:55:28Z","last_seen":"2026-03-31T05:28:16.134001Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"18294d805b9dd9f5010fd0643d8fbd2d","sha1":"73bd43e75d547ff4095841766f3fa21885457b36","sha256":"cf47c44a4cf0ae64543a5d79d5b6d0558633cdf48ae72dec131b93ef16485d12","sha512":"07d5bdb39b1f289c838a5417a228649975ddd0342c37d5f210a10f5fe64b00abf1f210b551b80d04f76de314c3d91f06ebcb244c7444c0f5d11b0dbfd48e4de7","ssdeep":"","tlshash":"2bf07dd979a704b0dd5bf03e4bba22a522658e0b2805e1123d1ea5225f44a41827cff8","size":632,"data":"","first_seen":"2025-04-16T16:49:09.321626Z","last_seen":"2026-03-29T05:27:03.423144Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/all.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"800a9eaf2195f34097d9a711473aef43","sha1":"9be370b676f037c24f879d6b79b25fc678011618","sha256":"9aff2f0629bb20834dca9e31014a7c0bb5004b87ea38322921ab2b04e9cc9682","sha512":"cb928f1a5fb4abdca91228364d82a809d8458504faa78c4e796df61c8a7ac321a1cdbe75e78bfa6484349336a674f239d7ebea31214a99c5c2736ec94e07460c","ssdeep":"6144:XyompD5cEYjS2sDVW4o3chsV2Dnio/NULo9tRtKeQVs3O3seX/YJF2S8eK8wDKSG:MD5cEJhswtRww3O3l0r","tlshash":"1f45d578d7a4a3bc9d8687b5c62110747a8f90be71a09328937dc6f0b2575dcc2dacc9","size":1195004,"data":"","first_seen":"2025-04-16T16:49:09.298755Z","last_seen":"2026-03-29T05:27:03.425059Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2eb52389bbfd63e366640eb6a8782643","sha1":"c23cb9c0bfd70c8609646ae0f213a8388ae8caa1","sha256":"e078d9a0f5ea678a28e1774c697db59a2c742591a53f796f4a380cbec67cf5c9","sha512":"3108ff41366be168c6f42bfb7674136b8592a9288f18155622bec8256baef6ad84bb00480ff951ef8316b0e3193ebe44b59ffeef8cfedd5ecde7a921b4d1204c","ssdeep":"","tlshash":"a3b01228715c7004743321b14c17a8003911bd0734065800fe0c1ce00f08548c507844","size":93,"data":"","first_seen":"2025-04-16T16:49:09.323421Z","last_seen":"2026-03-29T05:27:03.423691Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-03T19:30:26.434085Z","times_seen":593135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/0e6689e2/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38888371b017f120762db1d3b77c4288","sha1":"161fb4b884b9ea2662c1f9aead20300d227a1c71","sha256":"66a38f8c3ee491e0f2bde114cf82220a5985f5c6eb74ba2b98a227d81cabecc6","sha512":"832902e41c8978b36ed0261f7edd93139d16a6357b369c590cf2243b6b11696070421d8201cad9cb0a79c5b98bf16c407510855c9a7d6c1f06c408afd763529a","ssdeep":"384:Td4tAE658O7nfTwushZKjDOYjPncmXj2Gv+E4aiz2wZBat1CUS6UTGdtmv4nU+g:T+AV5PfchQjyYJjfV4jLlUS6UKZg","tlshash":"2ed2c6cd77b1b431437366b5902f100fb23e98aab40cc999b188d8e16cb59694637f7e","size":30663,"data":"","first_seen":"2025-09-08T19:19:45.811667Z","last_seen":"2025-09-24T22:31:48.730553Z","times_seen":1676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/popper.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc23df98e6d7a92eec9a4726c39f0ad","sha1":"676ec2e4a4fd08c7280f65f816d13aa47410c943","sha256":"718a9f1f7c899d8a61ebe7e335a1ba9f367c3151345eefeecae9750063d58faf","sha512":"00ddc052fa6bad18bc8dc4e2e6b577608303e48863244415e478caa62d178af51a34e364bd50642579ae3e8f5ae043543d8fa4e73a475a313dc29f864e31ed9b","ssdeep":"768:52rY8yiLQAFHPGc/k83IYRFEyF0bdidHtANhDR0MGiXVi+RrJR1+dAOr+fCSO7DP:aTcCHPTkURF4didN2hVhVXV+d6C/emZt","tlshash":"33f22f8c6ad171758637f37ad92fc909f336163b1286900239bca1951f71d6092bafec","size":37178,"data":"","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-03-31T05:28:16.129631Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/jquery.easing.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74285a16c34fbceae043e3f54b968a14","sha1":"70fde89cd354405cc6e384f15c68658fc15ccd99","sha256":"27b5bb9a93bdb1bb4f137cf34d692fdf8429df5a7d1db60b9a1736db7df4f4d0","sha512":"b86c36d91f7fdf4882cfc93f7cb43cacda5c6e83eb172df253896fef0f64843571f3ad33c3a3a0e5ca11cb5ef816fb31038a39943e98f89780fe791702634f85","ssdeep":"96:uemaJ7tI2eewIvbbCWEvLNMiOelReTkhduOaKLcGgPQb21TOyS+:bmaVW1eXvbmtLNtOuReTHOfngIbzy1","tlshash":"a581db4a7c95706ac277f3709e0f4105f26a7a2b419d2827742c1864bf3261a83f7eec","size":4137,"data":"","first_seen":"2024-08-19T19:49:05.614326Z","last_seen":"2026-03-31T05:28:16.122967Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/jquery-3.4.1.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51c34d98f17cac95b66cfd1d2a2c58e0","sha1":"1671659ce1558ab53d10fea034a3ade1a1e58c2e","sha256":"d7e1f444f0feb1b9cda80f0d1b35e8b27118cf66ea90cf54a90c9e35378019aa","sha512":"db65e14fa299ac628e292a5d51f214392b4036d580e1d820c3d92d440a9540fdb5446dad23b3deb8d03a43a98c7723bf5ff5a12c615fc75f3cf44ea9bf8bd123","ssdeep":"3072:f3a5tiUG/Kx6dWJxKbAe7fuj5zcS1mHFGfSBmFcRmkV0b4a7WOOX/wMzAnlkJalh:f3a5tGKx6dCxKbZfutzcS1mHFGfSBmF3","tlshash":"d5e37299b6d531369237f33a9e6fc908f277166f12898806797c44661f3181483bafec","size":152478,"data":"","first_seen":"2023-03-09T04:43:12Z","last_seen":"2026-03-31T05:28:16.143642Z","times_seen":137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/jquery.countdown.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b94e1d82e10dca7b7d6d18ef20c643","sha1":"3e36bb3f9d7c65bfb8f6535018c622ea0e10bdcb","sha256":"f50135fcb2c6ea446ffd583c17fbd407813b9b0656f3d5286b5034970dc08109","sha512":"aaf59ef2353b31045ce51f1e4a8c47c766951e016545500b83ac834989c227711e2fd6f7a787f969189a28898ce7f72838e805e957328c0e918577cb04610a1e","ssdeep":"192:rQHrSNepF9zo3gbTr/oi+PWPrRxdJJCmhkgJ5NY9:rJNe/9zo3gb3/T+PWPrRxdJJCmhXJ09","tlshash":"28e1314eb3b11262657eb3255dae4014f236e71ff092445e34fc96c82f3246854bbeb8","size":7397,"data":"","first_seen":"2024-08-20T14:43:22.590876Z","last_seen":"2026-03-29T05:27:03.376141Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/jquery.magnific-popup.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6c294f0c10a89a48f6585a27bcabc9b","sha1":"623eef7cd97ecc3ba679e77af55e4ecb7d7aad8e","sha256":"d4c84447872bd11007113a6aad3fe17f28ed9c216d939eb6ef3f510fa814c381","sha512":"d5033877192fa2eefb277405dc8958441fe7b18ad4d44568d69094ae31fe40f7f10166aae429e56bd25e8873e7d18a9b2f723a95b3365f7a7d3678a105f5e143","ssdeep":"768:9OfPuCOxgIBdyWshf66+2ThcWhhe6V1YIgd9vY2Uu:9Ej0H6hf66+0h7Yy1YIQ9vYDu","tlshash":"19e29719f1e2212b9773b338de7b8d08f2755227e6108c463e7c50a89fb585485b5fac","size":33461,"data":"","first_seen":"2023-03-11T12:39:30Z","last_seen":"2026-03-31T05:28:16.145739Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/owl.carousel.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bdc31d5282e381c8abcfcd9931b7f46","sha1":"4e642ebe4ca43cfa350f00dc6185306513dfe9aa","sha256":"df9b0ed781776fcb62e9a900f10db70a978f0860dd341369194b2c9dce3a1092","sha512":"8a2cafdeed8bb26d5ae0a23dba260052343d80dce226bf3db975fa65b49d351041fe6216ff19674b2289b459f3a6e43268916b5c647e9f7defbea08b8c36c083","ssdeep":"1536:OAkKTMmv5bvBbMDC3aRH2d9rKKk0Ryum61:OAkKTMR4zcb61","tlshash":"f7531d0aa3b0282b8677b3719e7f8a06f236062f9151585e7d7ca1dc1f39414467efb8","size":61379,"data":"","first_seen":"2023-06-17T17:20:00Z","last_seen":"2026-03-31T05:28:16.140464Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2c56854366626bf879e4eb5a16bd8b98","sha1":"53cd6c5bb59897d8c49275a8087cf55fd3a4eca7","sha256":"f20826b83380a78cde570c8cb621f228ea37bf65190532f188423104d4ca259e","sha512":"1a6649a3c78600e57457a29bcc027f1d60489c88961decbd101c5945ccc85c0987d9b24f4940bc43f792cdcafd80d53ee57d75ca941688b774e4bdb039746c6e","ssdeep":"","tlshash":"71d012af11404973dfb212a58b873354b63961ab1e0a57127890a601ff6de03c72ceca","size":197,"data":"","first_seen":"2025-04-16T16:49:09.325356Z","last_seen":"2026-03-29T05:27:03.42431Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api?v=3.2.10","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e6924d8e2737f43dbbacb975f4f1c8e","sha1":"85b20494668c4a723e512bc3cf814d0ed9c6cab7","sha256":"cac1f762a6bdff552319a1de74d3c8b9cac42aba35b6e343911718388d98cf3d","sha512":"d517476fbe6e1ebe17e766618a2867581c6eedfd10a29ae8acdc07a8decb3050e12384baa360ea1115f0a028ea24d2fb08053a4059a93830b5dc34c0ee2eaebd","ssdeep":"","tlshash":"4211cb7b3d80e679865894e8a03fc31cf1a22495bc50cd9110cee899e65cacadd2d5ac","size":993,"data":"","first_seen":"2025-09-18T10:00:34.897178Z","last_seen":"2025-09-22T22:01:49.07108Z","times_seen":678,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9e73cac843f52ccb3e407eb4c35833b","sha1":"63c3cbc76b196e7b5ac0c85c2f23b1059405a3ae","sha256":"6592380ebb853e62192de42281ba40b10dde7ed3284317cd69c5f18628d9bbae","sha512":"a2e20c1847617120e907f514fcbd7aa0c213b134aed7ef18f4ecdd85310860e181c682b7090a43e481ce2dd85773d903185c621a6f0d30aeedd4cf1b76113f5f","ssdeep":"","tlshash":"98d05b9336b5002c4ffe18965611e7843526d3161d519068753b1d144f54f44a1675c4","size":242,"data":"","first_seen":"2025-04-16T16:49:09.326654Z","last_seen":"2026-03-31T05:28:16.162499Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-03T19:26:47.083104Z","times_seen":78052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ce210d9b8ac86e651a987c4eda43671","sha1":"321453b5bec95d8cfb94824ec298d29496df1b23","sha256":"1e300f270e7f23ec4d83faa8a2f6b4558677baa834a7c4039f3bb09868ccce1d","sha512":"c6b2599ed331d3b4481315c2eab6a77d467b3d7b80a60d160bfcb20df03e616dae7b1b6afb1f6bc24d56e117ff42d8f44b001125a83079c303c32d816a90be19","ssdeep":"","tlshash":"0101444ccc436b36120b61e9717ea0503878011b8806e82ffa4dd990af65f986d47ded","size":754,"data":"","first_seen":"2025-09-20T20:11:20.207725Z","last_seen":"2025-09-20T20:11:20.207725Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":23033,"data":"","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-04-03T19:37:24.822981Z","times_seen":2636,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/bootstrap.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e4a43ef7aeaf6f305a65dedccebf1ee","sha1":"5175e44b998c6becf7bfc35133fe24d4ed8d7157","sha256":"b4c39a1cb17f64809bf5d07d0aeef2cf12fda33978919fa0c197154345e829ee","sha512":"dddcc8708d5a3003f818cb8586feb5b4391ae8d58530c90206a338172d2ccece8462d59d2c3abbc8ba008d623fcb3ab9c1d09dbfa3be536b86147fc987598071","ssdeep":"1536:H/dydWZ3Fh/ISTm+USqmRHtCebudHkduIo6ZwQmp:120FRISTmlSqmRPuydy6qQq","tlshash":"0693430bb3a47472417bb73ad97f854af636566fa206810a787c50dc0f3885462b6ff8","size":95320,"data":"","first_seen":"2024-08-20T14:43:22.58345Z","last_seen":"2026-03-31T05:28:16.130125Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"apextrust-union.us/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 417\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Sep 2025 20:10:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":938,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"abfc05c01cbbdac5f379e0b68c80c16a","sha1":"ae25adaf03bfe18f5de27299a000d2ec5af1111c","sha256":"7a3acb41db246da87ddb9d114528ea6d1f5b9d4f24174b85cd73e7a44ee03394","sha512":"40a792153184620ae0a52c43cc9603b19886eb8aa756657b0e46fd2506925876bb8a3f7aa079ffec56b6325d8741b9330d2789d903431373a9f202d673699580","ssdeep":"","tlshash":"6b11406f04042f6e521082a2b020733dd4efaf1b7e46a400e46394faaac4a82d57d09c","first_seen":"2025-09-20T20:11:20.154919Z","last_seen":"2025-09-20T20:11:20.154919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/32/en-us.png","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 00:58:13 GMT","end":"Tue, 02 Dec 2025 01:58:08 GMT"},"fingerprint":{"sha1":"7F:BD:69:96:67:8F:C1:80:B4:56:CA:2D:BF:6F:D7:53:85:AA:5F:49","sha256":"AA:9D:26:FB:CB:9A:0B:7E:9D:10:97:23:1E:00:BD:73:1D:C4:E3:24:4F:90:DD:89:36:30:85:35:4F:35:2A:EA"}}},"request":{"raw":"GET /flags/32/en-us.png HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 20:10:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 695\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=830\r\netag: \"63692750-33e\"\r\nexpires: Fri, 03 Jul 2026 04:34:13 GMT\r\nlast-modified: Mon, 07 Nov 2022 15:42:08 GMT\r\ncf-cache-status: HIT\r\nage: 6881772\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWMTqJ5a9ExH%2BOk%2BjjGsXHA5jFIwyp%2BYOjQbfXtcPx8sgjOFH%2B9e3Ds1J7bF68k%2FXnFFx3hMj8cw8ReD2y%2BSv8miBceIkuhSFPTQNGk%3D\"}]}\r\ncf-ray: 9823f755dae4568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0c7d024de9ea604d5112aafc2738f21f","sha1":"19eae4ef8a7275c8cd5a6528e9c302c36feb8ac4","sha256":"529bcccc5a1659f26fe9f396a809996d064504598f145bee5abc62b94f7d1ec6","sha512":"1f2d1c7015d2b000f5b271ead4e16c3f36f049a34991d7032ee3b353ad7b1297bedcb4c75af662aa15d4b86a2f8187557d701abbdc7b32133ae1f23b9042af7f","ssdeep":"","tlshash":"670144c70d10215ccc2bcc5251eb044584a36a6a453b41ff0f2e980c56f595f5cd0305","first_seen":"2024-05-01T05:40:26Z","last_seen":"2026-04-03T10:04:14.853923Z","times_seen":602,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/storage/app/public/photos/XLZl3mRq9NvdZI7Rquy9fPR8Y259PZNgDeh5iDym.png","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /storage/app/public/photos/XLZl3mRq9NvdZI7Rquy9fPR8Y259PZNgDeh5iDym.png HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 19 Apr 2025 14:16:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14078\r\ndate: Sat, 20 Sep 2025 20:10:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"d096ab136b191f356179ac37ae68cfd5","sha1":"7a23eb57f754b8fa323a000c1ede4f9de2b45509","sha256":"b303a36d716a32eef4b646647c308c7664b55020740509cffd3693e65208cf6e","sha512":"42e511f23786040a893993d57132e7d199faebcf322020cf75370a6d945fec076b75f38e37668f4e9d7e157b1a19136c61796570b3ec598514ef39c08f60b4f1","ssdeep":"192:FvEIIcK+K+K+K+K+K+K+K+K+K+K+K6sMN4P2VuFOkMO7Tt+bzwttttttttttttZo:FvEgsMN4PCJeJ+HouMWxKQLgR0","tlshash":"28528e9324864281d09fea2cdefbd9d0e2ab0c056f015f2f16d7e8672b712648de419f","first_seen":"2025-09-20T20:11:20.158697Z","last_seen":"2025-09-20T20:11:20.158697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/customstyle.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/customstyle.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1541\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7188,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a1ae24bf6f813e147677647e762fc912","sha1":"5bf79ee2685fc94cfcdbd8011ac411f685e1a5e3","sha256":"daec1d9695fb37769643d97e5b9040a213ca6daeeecf9726033bdebe474d3d7d","sha512":"33626e32e5f7bb64699a23c39034824b6002c0f895beccdcc89f95edef83c9b74fb198d55122af619c3aa9412194a236ece85192ffeb11509a04df08e78981c6","ssdeep":"96:xkyRNTHQ1zl5+AQRRnbfdfc5SRPdRff8f5EW:xkUNTHQR2AGVbVUARPdRX8f+W","tlshash":"e8e19a1aea110602643ba376e7a3b35def6a4013c30195f87fcd72644fb56a88765f8c","first_seen":"2025-04-16T16:49:09.309316Z","last_seen":"2026-03-31T05:28:16.133476Z","times_seen":104,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/clients-logo-05.png","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-05.png HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13819\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"32b96d9461314a2b8a2a13b5ff2c4002","sha1":"7865e35459f48d3464fa6c7a5d6714f9049ef3ad","sha256":"039efeeffa143c48f38e94d15640321eedfac7d7308392a67c8873d5afc839bc","sha512":"40a13571ab0ed900d169f9c106346ec77936ee413b5f8f4ea17319e97fb0b1536f9b11096bd99c341103f07f2e1e032bcdf4979f2793bd98ffc9b4531f7e97c4","ssdeep":"384:pcwF2IfxHWgOUh0/iLRuTC4KkPpY7vz3I8A696Y5I:pcwxHWgOglRuTC4Kkm/nAa6Y5I","tlshash":"8252bf0e9115d54d2a0fe58225fa9387e6ed0d80d09b108bddc3d4de76361867e10b9f","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-03-31T05:28:16.15539Z","times_seen":133,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/clients-logo-07.png","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-07.png HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3448\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"e19e897af73d97018482aa1e0f78cdcc","sha1":"76f2342bdb0a4cf9a595c6822c79a04aaedba6d7","sha256":"b927b2e10953b20c99e848b6b9b101db928bf73193a0ec6a72e75aebad08662b","sha512":"18f4c4095a26f3c3a8cd3894ec86f1532e1096a9202f67f9db32712195fa033f6b19316137e945a9f53fae5190ac84b2525ad832b1d528bc5dcaa913722a4e4a","ssdeep":"","tlshash":"51612d68d9414ad117dcb3d514f341e149219980cddaa5b56fd8f8570a022f671178e7","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-03-31T05:28:16.142354Z","times_seen":134,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.168Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"cdn-cgi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"cdn-cgi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 23:30:06 GMT","end":"Sun, 23 Nov 2025 00:29:56 GMT"},"fingerprint":{"sha1":"F3:DB:75:EC:D5:4E:14:6A:33:38:36:34:11:4E:DE:1C:1F:A9:ED:83","sha256":"41:99:37:CC:E8:5D:C6:BC:75:CB:9A:06:3B:36:23:53:3F:73:C4:69:88:F3:72:7E:5F:F9:3C:13:1C:EC:1B:6D"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://apextrust-union.us/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 20:10:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 06:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c7ad0e-6bea3\"\r\nexpires: Sat, 20 Sep 2025 20:44:09 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 8776\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QJLbkU9bQ9bT02Uz8PfaYmV5undgqCy8cAxhjpTVYWokq5aOk15FMHsEvCH8iY92ro4iyfsQrVJ1gXMyRlZekjX3wZsq%2FJeaS69cXPFsWs%3D\"}]}\r\ncf-ray: 9823f756d9967129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"5b50120b4395b8e757e4857c24421c50","sha1":"1dd7267d8437564b5f7efe19f553e33a3548d37d","sha256":"9f31455e280dfe62030657efe10be565b34716a3655d27869621e2c65e50c049","sha512":"1cf4fd1eb8187b36d47d10a0fa5a4b6fb61e2823598ca3f8ec7715f577c346b775807efd6c6fe5f8f42e3b06f621bcd985e681a5c544f0000f70af65ce87c10a","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnEI:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnEI","tlshash":"fd946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2025-07-22T21:56:55.389579Z","last_seen":"2026-02-13T05:13:50.572376Z","times_seen":3232,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/owl.theme.default.min.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/owl.theme.default.min.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 413\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ef9c02a9d33951f1ac6f547bfefdb72f","sha1":"53a61837620bdfebeab0325689e58c5d37b5d3a5","sha256":"b64ffcd5f35a7e4dfef1fede979637b6901018699c5e36b5c7ff88a2f472ab1f","sha512":"3a714d7084ddc37e4581571cdd75e8fc26e721d7ec7ece79b6f149b9745599a3c36b8668f4a55c6e5f0250ce63fc503f83ca10010081d63d086ae74fe76f4c71","ssdeep":"","tlshash":"7221abc4f216210f743386e01b688247fb5e243b0a4d09e8f5da9114cf7c904aa6ef6c","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-03-31T05:28:16.152533Z","times_seen":147,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/img/bg2.jpg","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/img/bg2.jpg HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78521\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78521,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 796x796, components 3","md5":"c429d9733f122b3f75dc09895f087f7e","sha1":"4afbefdcfb97514632a2ac5ce5d073bb3753af16","sha256":"2eafdcde00be6fd6f5022cf0cb185346ba43ab31c6d61570dc290726961433e2","sha512":"3da8639538bd118629ae730a4a254dcf68498c21cd8ea87155d5a311c33b9261cb8ae11bd4e8eda2cf27089c87e924374ee2e0693015e8d5ab1d54ce8d3b403f","ssdeep":"1536:kdLpweOva+ivOr+ZKbs9TOZjxIUov/IAtMTIwV5yeaI4lFPRXa:kdLl+ivOr+48SZ1II3TIGyea/Pha","tlshash":"a9730253b705e4c7f430a4579566bde8ffd58bdc26a1620a7623edbdc802f041a84a2e","first_seen":"2025-04-27T11:22:47.441839Z","last_seen":"2026-03-31T05:28:16.144207Z","times_seen":101,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/avatars/3.jpg","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/avatars/3.jpg HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44093\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 262x300, components 3","md5":"f9803c06337122374cf63d87de873957","sha1":"7d7520c14d3ad58e331f683232edb7e16ae0f80b","sha256":"0bc9bc7c82c1f4ee2066781ecf80c48fd8b1ccaaf50101170e0e607108a01800","sha512":"ecd28e3c419e1d05a4ad0635586e2319b2a4d21fd180769c06be15546db4f05ae5cb393504e2a6d316975917899e857a6e98605b70b39e136f60847f770942ce","ssdeep":"768:ZD24WP7LftOvCDuRl2vF/Ta4LVGf0+nljGIEGKvud0p9tuNF2q1zoW+1DpILZdl:Z4P7ZOqK/2vVTnGMMljGpG8uaUzmZwZf","tlshash":"7b13021cb59a1c60cb588841566bd4bb74bae9eb6c0fe89d0e0843ae7164cd439ccf39","first_seen":"2025-04-27T11:22:47.443312Z","last_seen":"2026-03-31T05:28:16.138932Z","times_seen":105,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":513,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/clients-logo-08.png","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-08.png HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14038\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"7d917afc12aa287c0e2d9dab0e0ef9ff","sha1":"bb76c571f887250487592a977a13ec2fa6ce8ae3","sha256":"bcd5bcb3fcdb29f85d0bb0435ced0cf4e4e1789e7c701663a1cfa626895eab79","sha512":"a96f73c9a4d6a7ba28c8f6eb1bc6f5fb9b4a75ec5f47d32c597b62f75f82ef0f42237af6b8bd12fafdee3bb394959ec5e276f5163705d53408546fee54a68fcd","ssdeep":"384:3HJdaqhRn7xglRDLF+nvlQgSB0E4mSEJgEOo:3p/FmR6tQ5yE4S/Oo","tlshash":"6252cf09289e2e101158ba475f5bd220185b0dbccd937d7c79dc91a6d3f8ef2a09c8f6","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-03-31T05:28:16.156438Z","times_seen":137,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/jquery.easing.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.easing.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 863\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4137,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"74285a16c34fbceae043e3f54b968a14","sha1":"70fde89cd354405cc6e384f15c68658fc15ccd99","sha256":"27b5bb9a93bdb1bb4f137cf34d692fdf8429df5a7d1db60b9a1736db7df4f4d0","sha512":"b86c36d91f7fdf4882cfc93f7cb43cacda5c6e83eb172df253896fef0f64843571f3ad33c3a3a0e5ca11cb5ef816fb31038a39943e98f89780fe791702634f85","ssdeep":"96:uemaJ7tI2eewIvbbCWEvLNMiOelReTkhduOaKLcGgPQb21TOyS+:bmaVW1eXvbmtLNtOuReTHOfngIbzy1","tlshash":"a581db4a7c95706ac277f3709e0f4105f26a7a2b419d2827742c1864bf3261a83f7eec","first_seen":"2024-08-19T19:49:05.614326Z","last_seen":"2026-03-31T05:28:16.122967Z","times_seen":109,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/static/base/img/slider-img-3.html","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/static/base/img/slider-img-3.html HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 556\r\ndate: Sat, 20 Sep 2025 20:10:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-04-03T18:11:41.221488Z","times_seen":39146,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/storage/app/public/photos/4xcJmzHUCQrzwc3zltKW2MIlittlyMiVeLa7In6o.png","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /storage/app/public/photos/4xcJmzHUCQrzwc3zltKW2MIlittlyMiVeLa7In6o.png HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 19 Apr 2025 14:16:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14078\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"d096ab136b191f356179ac37ae68cfd5","sha1":"7a23eb57f754b8fa323a000c1ede4f9de2b45509","sha256":"b303a36d716a32eef4b646647c308c7664b55020740509cffd3693e65208cf6e","sha512":"42e511f23786040a893993d57132e7d199faebcf322020cf75370a6d945fec076b75f38e37668f4e9d7e157b1a19136c61796570b3ec598514ef39c08f60b4f1","ssdeep":"192:FvEIIcK+K+K+K+K+K+K+K+K+K+K+K6sMN4P2VuFOkMO7Tt+bzwttttttttttttZo:FvEgsMN4PCJeJ+HouMWxKQLgR0","tlshash":"28528e9324864281d09fea2cdefbd9d0e2ab0c056f015f2f16d7e8672b712648de419f","first_seen":"2025-09-20T20:11:20.158697Z","last_seen":"2025-09-20T20:11:20.158697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"104.26.15.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 23:30:06 GMT","end":"Sun, 23 Nov 2025 00:29:56 GMT"},"fingerprint":{"sha1":"F3:DB:75:EC:D5:4E:14:6A:33:38:36:34:11:4E:DE:1C:1F:A9:ED:83","sha256":"41:99:37:CC:E8:5D:C6:BC:75:CB:9A:06:3B:36:23:53:3F:73:C4:69:88:F3:72:7E:5F:F9:3C:13:1C:EC:1B:6D"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 20 Sep 2025 20:10:25 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nqRWd3PQzmEXU9A2o8HuBa097TL4bBEFo202gtLzUAW9nbiOek9O3R6pdVGShmJnPCCqBguUHrXRoOf3M0IXLzrWco2o7PDEpu5GomGqdQw%3D\"}]}\r\ncf-ray: 9823f75619057129-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":47,"dns":25,"connect":1,"send":0,"wait":36,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/fonts.googleapis.co/css164416441644.html?family=Montserrat:400,500,600,700%7COpen+Sans:400,600\u0026display=swap","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /fonts.googleapis.co/css164416441644.html?family=Montserrat:400,500,600,700%7COpen+Sans:400,600\u0026display=swap HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 417\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":938,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"abfc05c01cbbdac5f379e0b68c80c16a","sha1":"ae25adaf03bfe18f5de27299a000d2ec5af1111c","sha256":"7a3acb41db246da87ddb9d114528ea6d1f5b9d4f24174b85cd73e7a44ee03394","sha512":"40a792153184620ae0a52c43cc9603b19886eb8aa756657b0e46fd2506925876bb8a3f7aa079ffec56b6325d8741b9330d2789d903431373a9f202d673699580","ssdeep":"","tlshash":"6b11406f04042f6e521082a2b020733dd4efaf1b7e46a400e46394faaac4a82d57d09c","first_seen":"2025-09-20T20:11:20.154919Z","last_seen":"2025-09-20T20:11:20.154919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/jquery-3.4.1.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35790\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":152478,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (526), with CRLF line terminators","md5":"51c34d98f17cac95b66cfd1d2a2c58e0","sha1":"1671659ce1558ab53d10fea034a3ade1a1e58c2e","sha256":"d7e1f444f0feb1b9cda80f0d1b35e8b27118cf66ea90cf54a90c9e35378019aa","sha512":"db65e14fa299ac628e292a5d51f214392b4036d580e1d820c3d92d440a9540fdb5446dad23b3deb8d03a43a98c7723bf5ff5a12c615fc75f3cf44ea9bf8bd123","ssdeep":"3072:f3a5tiUG/Kx6dWJxKbAe7fuj5zcS1mHFGfSBmFcRmkV0b4a7WOOX/wMzAnlkJalh:f3a5tGKx6dCxKbZfutzcS1mHFGfSBmF3","tlshash":"d5e37299b6d531369237f33a9e6fc908f277166f12898806797c44661f3181483bafec","first_seen":"2023-03-09T04:43:12Z","last_seen":"2026-03-31T05:28:16.143642Z","times_seen":137,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/fonts/themify9f249f249f249f249f24.woff?-fvbane","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/fonts/themify9f249f249f249f249f24.woff?-fvbane HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/temp/custom/base/css/themify-icons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:24 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74\r\ndate: Sat, 20 Sep 2025 20:10:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74,"size_decoded":0,"mime_type":"font/woff","magic":"ASCII text, with no line terminators","md5":"0935d506ad5d03bb060a5ef62605775a","sha1":"80c6896910d1ddd9f5271f389958496b1994c1b5","sha256":"2f61affc60d3b130f492a2a8d125ed73d167af85cd669ee9d4d8c5c7d407828c","sha512":"794c8986cac3ee42a5cbe4e56288df09eb5e0adf68ce29de0acda563a59f357b2ff6a4da3a8c54b5d7ba7edb330a59712f277453bfcc38a22fe5f840ef78f00d","ssdeep":"","tlshash":"67a022fe832300000f2200e30202300ace0302f820c00bc08ca003afa8e0b03302a30c","first_seen":"2024-09-11T20:09:12Z","last_seen":"2026-03-31T05:28:16.123474Z","times_seen":118,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/responsive.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/responsive.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 698\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3516,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ccf04542457e883d3bdbc2d98bf8fdbe","sha1":"8f5a67d5e52dde1e135ca1b781bb6c7d922cb251","sha256":"e7ed8dbc96e395c823b8a607158db76a236253ea8227ab5885646b62d17e41da","sha512":"59dc7870e4f6048f6e5bb0acfe877a2bc4bd142e92c84c8b57337840d4dd71fcb8cf59e3d766e464e020a125adc581017a353ec991b40350c6aa04361340aabd","ssdeep":"","tlshash":"fe71d94f2a4210094577737ae3a7a155fe2648b3d38ae1f1bd9c2210cf785994522f8d","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-03-31T05:28:16.135541Z","times_seen":124,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/fonts.googleapis.co/icone91fe91fe91f.html?family=Material+Icons","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /fonts.googleapis.co/icone91fe91fe91f.html?family=Material+Icons HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 417\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":938,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"abfc05c01cbbdac5f379e0b68c80c16a","sha1":"ae25adaf03bfe18f5de27299a000d2ec5af1111c","sha256":"7a3acb41db246da87ddb9d114528ea6d1f5b9d4f24174b85cd73e7a44ee03394","sha512":"40a792153184620ae0a52c43cc9603b19886eb8aa756657b0e46fd2506925876bb8a3f7aa079ffec56b6325d8741b9330d2789d903431373a9f202d673699580","ssdeep":"","tlshash":"6b11406f04042f6e521082a2b020733dd4efaf1b7e46a400e46394faaac4a82d57d09c","first_seen":"2025-09-20T20:11:20.154919Z","last_seen":"2025-09-20T20:11:20.154919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/all.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/all.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428396\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1195004,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65346), with CRLF line terminators","md5":"56fbbd387be498196d980e0213ecbf2f","sha1":"60698c43302313ce9681de3cdfe11b4e6c8e20e8","sha256":"38744741f55e4aa0ce2c92600c51a5a15d12e6f96bfe50a136a7a286f020ec8d","sha512":"658afff9cb3a78cde5fc1484a132c41857bf08b4c1177e031f1f2d736a47a96c96c05d53a7444b4967864c5d319d6072e4d527562443eba0c84349575e6a9823","ssdeep":"6144:XyompD5cEYjS2sDVW4o3chsV2Dnio/NULo9tRtKeQVs3O3seX/YJF2S8x:MD5cEJhswtRww3O3lv","tlshash":"6525c578d7a4a3bc9d8687b9c62110747a8f90be71a09328937dc6f0b2575dcc2d9cc9","first_seen":"2025-08-03T01:22:52.614063Z","last_seen":"2026-03-29T05:27:03.390573Z","times_seen":98,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/clients-logo-02.png","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-02.png HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8237\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8237,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"ff8a7e046de6fb8214ea806877d5fa20","sha1":"9a535c90610e914d9b9e03bb0100a3baf73d11d6","sha256":"3c5ab3b5541dd343303fa3325a3ace75cad5ca9434153a3fe4a2d364190a6f1f","sha512":"f4edb52484ddc481afe097658ee5a5c9a7c2edf75b0c7fbb539622d00ece16ee6b29a1fdd87dd405e82a8c2d281ec4d58cdc45c46b2f0bf2b786eda955f933b8","ssdeep":"192:wlHKsRiuMNz2ZeiwF4bHAZuYw3OFAhmz12th:wnRil28j4bAZuYw3nhmx6","tlshash":"74029d4dfd4049036b00c37d06c6d72b69d388d8dbe7a672a7c38459d7902bda0463d6","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-03-31T05:28:16.154333Z","times_seen":134,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/clients-logo-06.png","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-06.png HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18102\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"7620d1c169784f5c388bcd5df851e9c8","sha1":"8e4bc8160bd68d03b6b9f36dfa8aed0173ba6137","sha256":"f8dc6379062e3b9328a95a988b3b7109e267e22f47a6e52d63f971b7d025f3a4","sha512":"88ef144ffd75fca4a9d7ef1f06b24c903c07b939d7bc0360e27c511328b752372a5db0bee91553d6984f5a4874452816374c14ace81d4a9d3d2c50a38688c268","ssdeep":"384:jFf2VId+0frhaHXEjpDUJ3lEZ8iEXBcuugFp5mdkCLZ6A7tMWC:Rf2VId+UCEjhUP8EXBccr5mdkC3Jy","tlshash":"d582c0ad7339821e8355fbc1157b20eeaa5cdf86cb1a5084e9e7dbf26c02395408d187","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-03-31T05:28:16.151127Z","times_seen":135,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/img/innovate.jpg","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/img/innovate.jpg HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/temp/custom/base/css/customstyle.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44134\r\ndate: Sat, 20 Sep 2025 20:10:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44134,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 700x500, components 3","md5":"65e1281c13a4a6c5cbfc57eeb70eefb9","sha1":"17c12e43d713051456362a91d957e2717d879b2e","sha256":"7d4a6a11aef0d31d880c7190722fb0f6cb1aee94b178067be0e9a97bf2cbcf6d","sha512":"e999277328d1b1be235ca5fd4a2db4c46bcb25cc3d50bea6ed5802808dc56491c78d4f6da33860cdf8c33df7673149a36f6e4ffc1fc812c89d6e5600b4e5e048","ssdeep":"768:onRols/JgR2xyej2bCUJHEr3824pHXOyO922+YoKVNXvR1ugdhMsUQ7V7C:onRX/JgR2xygXtcXMbZ1ugdhBm","tlshash":"b713024b6b921051c8e5c232b9c24709f93c03da3a2bfe93d5016794d716feace605e1","first_seen":"2025-04-27T11:22:47.41813Z","last_seen":"2026-03-31T05:28:16.146699Z","times_seen":90,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/themify-icons.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/themify-icons.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2748\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19425,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (328), with CRLF line terminators","md5":"fba3cdd3ecf4d9b4355e13af6b632f13","sha1":"12f413adc203313fd0fbe1a000e77dc61edd873f","sha256":"3a02e0315d6259facfa5d69c2ff34559e80b802b92a5f57ab4a18538bfe43330","sha512":"81dcf645b09fc5151db59d55b23051a191d2d910745e5d6526f5a87b4a06b90bc2a5c8c8ba2f60ef832a0e9af158e8c5339284b39197084d96e683c75497a507","ssdeep":"192:EtlTgzkORrPbfc7awA+PsdkiKUxHYyObuFMqQY9dlY52egvDARVJmzplQJ/:4gzDPkCzTkYXRbMilQZ","tlshash":"9792d0f8906f14a65723da51e3436a16eb05b636db420c5cf293ee4c5ee3a21d1c2edc","first_seen":"2025-04-16T16:49:09.299742Z","last_seen":"2026-03-29T05:27:03.397964Z","times_seen":102,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/style.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/style.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14782\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":90535,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"ecb0ac78b6cb311082049439baa00710","sha1":"46952da0c64ad55980358270bb2b2f08b93a14bc","sha256":"9dde11e2b1c9e0d357a303138b9fb46d6aacdb10bfdbaf56172a4e8968fbe831","sha512":"47b490600e24db502f4c99019a6a1a401a6f320641925667ddc3946ac12bffe2ae872f270604b6b9b2333be79d1ec54fc0324de0e8fb9de1e390df3b19387d9d","ssdeep":"1536:ASKXDBVAlXHlXUzp/8bTWKeLlXTsp4Awhsr2hOAV:PyDBVVJ9l","tlshash":"de9356ac96021146a237df746be54318fb784023ca1705acbbcda2414ff677c86a6f9d","first_seen":"2025-04-16T16:49:09.313105Z","last_seen":"2026-03-31T05:28:16.131176Z","times_seen":94,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/clients-logo-01.png","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-01.png HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12156\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"54ddade7bfe79dd432e1f516e46b514b","sha1":"cc2a61c0abc58b736fe9251f9e4a6d7acbe940cb","sha256":"521e6092574d953e56c7539ee1139d6e220e0b10e56f2ff9c58c5921317d63ea","sha512":"9a516689a2c637b526ec8c69a207da819d3b6d90afe15fd8760aaf2a8dc6d5907dc5b8d1a5e8e903ea0365f02205409d392358fae71b2b1bcf691be4c6686517","ssdeep":"192:hEnvsBGBktTlyIpaaNdI8QCa3bIMzhq0IjSdBXJxXcaZdaiXtNTmO49ehNp:yqTly5aodX3bIvZuXLJ9L490v","tlshash":"8e42bf5bae505714a12afacb7c9d40e7842307391084d56dc28b5d134bac8be0b8e3df","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-03-31T05:28:16.153844Z","times_seen":122,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/jquery.mb.YTPlayer.min.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/jquery.mb.YTPlayer.min.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5097\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10465,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5048)","md5":"901273a083005ed8f05f19c235e1618e","sha1":"1c679b75452eb6fcd43e6d5a7c2bf5c1312529f3","sha256":"89122a24b64349cf4d1ae941cd23ca2a06460b807b732c3b2884869139fbcc25","sha512":"69470175bc1d4db318a8b96fcd215b73a3088d29f533484b82dfadcc14af85c034c8192b0ec8a1fc071a9d7cf0abe907dc3df453a4715a36ecbde4cb22717ea6","ssdeep":"192:y23C2pkgW7wRjcXpiOHdFqeVVVwJO7W8NUFbL0t2gvMgDY:z3CLH3FLqFHv","tlshash":"9022f9357eeb2b41651bc65827ba1bec2f181013124bccedbb957348cf5d69e48a0f88","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-03-31T05:28:16.127232Z","times_seen":121,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/wow.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/wow.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3141\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14974,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (482), with CRLF line terminators","md5":"a28a92aab28dc8b9e497fb6001844ac1","sha1":"d2776569bcd3455b5f3b86ec6c43cc16746519d5","sha256":"f878241d11f6d0431011224e4d33f0b3d87486cd593ff0d77c530acdbe6acb3d","sha512":"9af304e38910ccefadf29f853c650c5a2fdb4c76c75cfa9ec80c0aafceb95e01e99225da5f82d332f6c97857bc96d9a4fcf6c03caab4bd5daaf3a28408421fb0","ssdeep":"384:e9rUWUsfWmJNzfR0drygf5SIBEaiVlNsnOXiok66yBE:eFx7JN4RwVlNXXioqyBE","tlshash":"3062f34ab78560669a77b33ace6f8505f932463b2164cc9d3c7ca4d41f3052582b6ff8","first_seen":"2023-05-21T19:55:28Z","last_seen":"2026-03-31T05:28:16.134001Z","times_seen":143,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/scripts.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/scripts.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3341\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15476,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"0c044f8dc6f0d7019f851bcad434850c","sha1":"97222d42771822e90260504b2190e3f85160c262","sha256":"d1bcf8f08856cd9b1ae7292456ad652b425e3efa6e8c355d130fc3dfee40d587","sha512":"5a1ca212bcf355c702855d2c0755947be40bae389c2c4567116e0da00e928c5073820d869b0c473c7a6280df7044050d24cce43aea8c2f2ba19765e82276e530","ssdeep":"192:pqyzpN+p7bop9JZM4s4cDu+JEHtwqQdS7G+Y7Nt0fUVNxB:pdzHZM5XwtwqQwgNtEUVNxB","tlshash":"96628409700520b96d3bb339afb62204ef695317c101da977cbe27d42fb651a72a0f9d","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-03-31T05:28:16.144729Z","times_seen":128,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/fonts/themify9f249f249f249f249f24.ttf?-fvbane","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/fonts/themify9f249f249f249f249f24.ttf?-fvbane HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/temp/custom/base/css/themify-icons.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:24 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 40485\r\ndate: Sat, 20 Sep 2025 20:10:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78584,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, themifyVersion 1.0themifyhmf                                         ","md5":"e23a7dcaefbde4e74e263247aa42ecd7","sha1":"5bb1fe69452a484566a81076af7567728fe7e43b","sha256":"350663a4665e00072c68a87ad3fa0be47b8a91424127f5f3e09f664197295f01","sha512":"e3e9a7c1232c1ed4e20c8f4007f0fd8b08f1178ed126d62d677bef5d769bc6c7636b8b515ca5b421bda359f50571f8ed92676cda4b1d6fa88c704eb944217906","ssdeep":"1536:ToDkfLM7phIjep8azfBf9ggkZA1WL09KvJKh4J4Ig1yjTCe2:EDHthT9gzzWQU","tlshash":"ed735d4b32803357c1cfa77d48d7406d0baa910cab4627579bed9932c76234e7e9a39c","first_seen":"2023-05-10T05:38:27Z","last_seen":"2026-04-03T07:18:50.737525Z","times_seen":576,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/magnific-popup.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/magnific-popup.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1688\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7859,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2aad777437b42bb818d737c73156ddb7","sha1":"6127d39b81eacab77cd834258e8f34747a793056","sha256":"44c0bc765e9c74b5e70366863a39b5db34f121c37b0b9e45ad2244c672820584","sha512":"f6eb432e3ee2ad220eb295f62c053090d8778e9fb74254e49aae248253d96bf3af18ebcafd1bda560a1e46ecf9d0c9d703ebad2debf2d2c5a2fbfc9b92eee0e2","ssdeep":"192:S+mS4tKnIQA5H2CqAEgmLioElcXC6Tikpc/gQMAGxW:dWROCz","tlshash":"7ff1fe59db112342c237dbb4dbe30719e71200639b0300abbfcd9a46affa5684661fd9","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-03-31T05:28:16.141827Z","times_seen":126,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/jquery.magnific-popup.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8200\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33461,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (562), with CRLF line terminators","md5":"a6c294f0c10a89a48f6585a27bcabc9b","sha1":"623eef7cd97ecc3ba679e77af55e4ecb7d7aad8e","sha256":"d4c84447872bd11007113a6aad3fe17f28ed9c216d939eb6ef3f510fa814c381","sha512":"d5033877192fa2eefb277405dc8958441fe7b18ad4d44568d69094ae31fe40f7f10166aae429e56bd25e8873e7d18a9b2f723a95b3365f7a7d3678a105f5e143","ssdeep":"768:9OfPuCOxgIBdyWshf66+2ThcWhhe6V1YIgd9vY2Uu:9Ej0H6hf66+0h7Yy1YIQ9vYDu","tlshash":"19e29719f1e2212b9773b338de7b8d08f2755227e6108c463e7c50a89fb585485b5fac","first_seen":"2023-03-11T12:39:30Z","last_seen":"2026-03-31T05:28:16.145739Z","times_seen":165,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/bootstrap.min.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/bootstrap.min.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23423\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":213784,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (566), with CRLF line terminators","md5":"1a811fd7a5e52578985135b39a1664f8","sha1":"81989657aa78b1470ba4cc82761c36f0f6db139c","sha256":"b91adb9cc84595f9b4e46f6cdc2674b40199b9d6cbb81e7685a36fd59d962b36","sha512":"169656155090225470dcbb3503d7123d81851e3a7c611a851f902ddb567ef0ff990ef3b0ac631bb2ca8534b271026460d78647835f282d72f84afdc52722fb2d","ssdeep":"1536:BQLz5JZGAN8eO9tgTrocYU7R8cMdd3jN0oE5aQFCHiv00EOR3rXP1bJG3xKJBIr1:mwE8ezn8G6uLawupgBregZrE","tlshash":"1724551ae95121065973cb7c53e17765ffba0167ca0186aa7ede73008ff97d08922e8c","first_seen":"2025-04-16T16:49:09.303518Z","last_seen":"2026-03-31T05:28:16.147565Z","times_seen":106,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/base/cdnjs.cloudflare.co/ajax/libs/normalize/5.0.0/normalize.min.html","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /base/cdnjs.cloudflare.co/ajax/libs/normalize/5.0.0/normalize.min.html HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 417\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":938,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"abfc05c01cbbdac5f379e0b68c80c16a","sha1":"ae25adaf03bfe18f5de27299a000d2ec5af1111c","sha256":"7a3acb41db246da87ddb9d114528ea6d1f5b9d4f24174b85cd73e7a44ee03394","sha512":"40a792153184620ae0a52c43cc9603b19886eb8aa756657b0e46fd2506925876bb8a3f7aa079ffec56b6325d8741b9330d2789d903431373a9f202d673699580","ssdeep":"","tlshash":"6b11406f04042f6e521082a2b020733dd4efaf1b7e46a400e46394faaac4a82d57d09c","first_seen":"2025-09-20T20:11:20.154919Z","last_seen":"2025-09-20T20:11:20.154919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/clients-logo-04.png","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-04.png HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14865\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"437071d3ca37bbb3f3d4814e6ef6029b","sha1":"480780d285aef220034f29cf7b4d0fd1bf28e197","sha256":"699521a2c3be4cc036eef7f6990221bd6555dfcae9274a5979a9b78eda7a8627","sha512":"74ce29b27a5462cc1f602dfa41f00ab327166d807b2ce462402f3289cb082a7b6949b5fca94080e990ddc41893c6e601a8ffcb4ae544ad8fb99b291154ce9e3a","ssdeep":"384:6ERMJn+M2l9hbK+QFgZb5K4+9+zzzuHBLtVvBZ6XuZ05qtnHdG:6Eic3h1Qcb5L+9SEBLtlBfZ05UnHI","tlshash":"5262d0bacd5e4efed485f1442b205627d27a5cb37560fabc4ca6d85f04734b6c0427a1","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-03-31T05:28:16.129148Z","times_seen":133,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cdn-cgi","domain":"cdn-cgi","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.601Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cdn-cgi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T19:31:03.603551Z","times_seen":13300818,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"cdn-cgi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"cdn-cgi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/owl.carousel.min.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/owl.carousel.min.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1019\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4337,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9843ea449af1cd03ec3e44c854f42347","sha1":"4c0c46eedbb43465f866878d4081a3ca5f9e060a","sha256":"8a53e08937c56d0ca2c80ce4dd719cac4393f8f28aed062116850b1e26a08ee6","sha512":"e421174abce281cef8f4db552a7c1750d5f773035d99191ab8f75dd50ae00664098c07f849759a7ee8c78b79cd5ba33cf1625bc5c493738e5e57c4de882518eb","ssdeep":"96:3QgSZ+nXSV+8QmmcJeXhrUTJh39DyAAFdh0g0FarLvV7Kmiyb:QZ+nXQQzd2l/yP73vgnyb","tlshash":"949159e42226114f593b87a01bed8a56f87d84638c061104b6eb470a4ffea68911ff6e","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-03-31T05:28:16.124804Z","times_seen":124,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/avatars/2.jpg","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/avatars/2.jpg HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40309\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40309,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x640, components 3","md5":"fa34908c05fa685dee8c7f0d37d3e1be","sha1":"bd41c332afdc57c496152b42f068097fffd71b4d","sha256":"c79c0fbf58e412c0ec0a1bd1a5806daa30bb3ff657bb4577c2d595e628d8b268","sha512":"de8a3ca78207c7a683a1e3ad3bec196e85a10d0e8e118576edc6bb79032c23df1d3dc9c39630ea68bc226adb6cf4d5b809753ef44b51e7aab506fa5869a21f5d","ssdeep":"768:pbVw5YCxlRVA+vQ3knpIqcsPoJdDHctrTkknh6W:pbVaYA/AXWPonQ9Akh6W","tlshash":"0603f2ca9be82145eba955b8d9e3df59d76a80e9d03233e2bb5506738b3de03c05047c","first_seen":"2025-04-27T11:22:47.435561Z","last_seen":"2026-03-31T05:28:16.153034Z","times_seen":105,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/popper.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/popper.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8482\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37178,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (639), with CRLF line terminators","md5":"ecc23df98e6d7a92eec9a4726c39f0ad","sha1":"676ec2e4a4fd08c7280f65f816d13aa47410c943","sha256":"718a9f1f7c899d8a61ebe7e335a1ba9f367c3151345eefeecae9750063d58faf","sha512":"00ddc052fa6bad18bc8dc4e2e6b577608303e48863244415e478caa62d178af51a34e364bd50642579ae3e8f5ae043543d8fa4e73a475a313dc29f864e31ed9b","ssdeep":"768:52rY8yiLQAFHPGc/k83IYRFEyF0bdidHtANhDR0MGiXVi+RrJR1+dAOr+fCSO7DP:aTcCHPTkURF4didN2hVhVXV+d6C/emZt","tlshash":"33f22f8c6ad171758637f37ad92fc909f336163b1286900239bca1951f71d6092bafec","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-03-31T05:28:16.129631Z","times_seen":129,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/bootstrap.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/bootstrap.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17027\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95320,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (513), with CRLF line terminators","md5":"0e4a43ef7aeaf6f305a65dedccebf1ee","sha1":"5175e44b998c6becf7bfc35133fe24d4ed8d7157","sha256":"b4c39a1cb17f64809bf5d07d0aeef2cf12fda33978919fa0c197154345e829ee","sha512":"dddcc8708d5a3003f818cb8586feb5b4391ae8d58530c90206a338172d2ccece8462d59d2c3abbc8ba008d623fcb3ab9c1d09dbfa3be536b86147fc987598071","ssdeep":"1536:H/dydWZ3Fh/ISTm+USqmRHtCebudHkduIo6ZwQmp:120FRISTmlSqmRPuydy6qQq","tlshash":"0693430bb3a47472417bb73ad97f854af636566fa206810a787c50dc0f3885462b6ff8","first_seen":"2024-08-20T14:43:22.58345Z","last_seen":"2026-03-31T05:28:16.130125Z","times_seen":114,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/img/bg3.jpg","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/img/bg3.jpg HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 88995\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88995,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 796x796, components 3","md5":"69ff45757b6e20447b2131872dc18ce6","sha1":"089ab299ca4280339284790f4f1a80eb4c4c7724","sha256":"ac71b33e3b6ff0368a3555a627981510128f559b4f5e6b95217db047bdd21eb5","sha512":"e09f7e0cee68c7a64b8a29038c4410b62dc6d071acccc802c02679bebc1e7fa486d29972cf4fa71687bdff696a3e95724f447061988e2b2c671798752bc3d899","ssdeep":"1536:SwOdIzUxAVT7/f0vTdCdsTLgDqRthUprwVJNxvctXCIDxG8fgISwchPyC:SAUyVTDf0BCdXuVUh8xGLM84Ig9","tlshash":"029312207b109ca4866c2d7781ae3e4a6b199d9e8e53bcde14b0d260d7047974b3b3ec","first_seen":"2025-04-27T11:22:47.40106Z","last_seen":"2026-03-31T05:28:16.145249Z","times_seen":104,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/clients-logo-03.png","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/clients-logo-03.png HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14568\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 100, 8-bit/color RGBA, non-interlaced","md5":"8a8f38079225ce11ba10b8eae50775ab","sha1":"a2c13028e4e9e3c09af2ffba6d13186305590aee","sha256":"463110f47af141b30ef89a82da810081694ae34b40f6b9fcea044a8d90e85174","sha512":"b7d5717a876972373e1002a9bd5251b7301bcc27f1a99fa8dfbd27b7258ac76619222b53d4407bd775c975cafdbd968c5b4e54d0d9d7dfc90e1a474ed1883697","ssdeep":"384:3VbtTwSIEeChYgAmVRLV1ObcdQO+oYqCiZsUkS:3zTVeCCglVRLV1ObcdHyqCuNP","tlshash":"f262c0fbd42204815af5c1bd14e3da5fb9333a8893e732d030a7b55c1ed961402a9baa","first_seen":"2023-06-17T17:20:02Z","last_seen":"2026-03-31T05:28:16.150629Z","times_seen":134,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/jquery.mb.YTPlayer.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.mb.YTPlayer.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15576\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89810,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2606), with CRLF line terminators","md5":"b0092ff109f048e9efc293d1e910b2c1","sha1":"a97c44aaa0fa1cf9c1948cb6313fe3ee4dcfdb7d","sha256":"037c867c12383964b013a2c7e85029f083be663d0e76211fc39835f32fc98909","sha512":"f2d193d0feade643ac6f2e850fc092ea81a9fc704b2eab4620ca8bc800fda07b2f31b38605bdd8e7df1af8771e1af90588eb5484dc3bce5d5d778610b7cb8779","ssdeep":"1536:UMF59EiORs0eEl0agBW+5Kd99V4ho2z/ew+nbs7/eDX:UMF59EiORs0+agLh7/2X","tlshash":"5493600e559d502dc6336b65b47ac32cf234472752438616b42fe158af3e42fa1eafb8","first_seen":"2024-08-20T14:43:22.586433Z","last_seen":"2026-03-29T05:27:03.375152Z","times_seen":112,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/jquery.countdown.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/jquery.countdown.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2479\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7397,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (459), with CRLF line terminators","md5":"81b94e1d82e10dca7b7d6d18ef20c643","sha1":"3e36bb3f9d7c65bfb8f6535018c622ea0e10bdcb","sha256":"f50135fcb2c6ea446ffd583c17fbd407813b9b0656f3d5286b5034970dc08109","sha512":"aaf59ef2353b31045ce51f1e4a8c47c766951e016545500b83ac834989c227711e2fd6f7a787f969189a28898ce7f72838e805e957328c0e918577cb04610a1e","ssdeep":"192:rQHrSNepF9zo3gbTr/oi+PWPrRxdJJCmhkgJ5NY9:rJNe/9zo3gb3/T+PWPrRxdJJCmhXJ09","tlshash":"28e1314eb3b11262657eb3255dae4014f236e71ff092445e34fc96c82f3246854bbeb8","first_seen":"2024-08-20T14:43:22.590876Z","last_seen":"2026-03-29T05:27:03.376141Z","times_seen":111,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/iframe_api?v=3.2.10","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /iframe_api?v=3.2.10 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy-report-only: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri /cspreport/allowlist\r\nexpires: Sat, 20 Sep 2025 20:10:25 GMT\r\ndate: Sat, 20 Sep 2025 20:10:25 GMT\r\ncache-control: private, max-age=0\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: require-trusted-types-for 'script'\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: YSC=dYGVxyHKDVE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-YEC=; Domain=.youtube.com; Expires=Sun, 25-Dec-2022 20:10:25 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=DWjzI0fvGiA; Domain=.youtube.com; Expires=Thu, 19-Mar-2026 20:10:25 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiAj; Domain=.youtube.com; Expires=Thu, 19-Mar-2026 20:10:25 GMT; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CPTDg4f32uzS0QEQ5N3A6pLojwMY5N3A6pLojwM%3D; Domain=youtube.com; Expires=Thu, 19-Mar-2026 20:10:25 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"0e6924d8e2737f43dbbacb975f4f1c8e","sha1":"85b20494668c4a723e512bc3cf814d0ed9c6cab7","sha256":"cac1f762a6bdff552319a1de74d3c8b9cac42aba35b6e343911718388d98cf3d","sha512":"d517476fbe6e1ebe17e766618a2867581c6eedfd10a29ae8acdc07a8decb3050e12384baa360ea1115f0a028ea24d2fb08053a4059a93830b5dc34c0ee2eaebd","ssdeep":"","tlshash":"4211cb7b3d80e679865894e8a03fc31cf1a22495bc50cd9110cee899e65cacadd2d5ac","first_seen":"2025-09-18T10:00:34.897178Z","last_seen":"2025-09-22T22:01:49.07108Z","times_seen":678,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":93,"dns":1,"connect":7,"send":0,"wait":25,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/0e6689e2/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:26.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"13:4A:0B:81:A8:A4:37:A9:D7:31:CB:DD:A6:76:53:21:8A:1B:2E:0C","sha256":"2D:8F:A1:B5:9A:60:F4:14:AD:1C:29:44:92:C7:8B:AF:4F:27:CD:EE:15:0F:A8:E4:E8:11:CD:41:8C:75:45:4B"}}},"request":{"raw":"GET /s/player/0e6689e2/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 10185\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Sep 2025 23:18:17 GMT\r\nexpires: Fri, 18 Sep 2026 23:18:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 17 Sep 2025 04:18:35 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 161529\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30663,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"38888371b017f120762db1d3b77c4288","sha1":"161fb4b884b9ea2662c1f9aead20300d227a1c71","sha256":"66a38f8c3ee491e0f2bde114cf82220a5985f5c6eb74ba2b98a227d81cabecc6","sha512":"832902e41c8978b36ed0261f7edd93139d16a6357b369c590cf2243b6b11696070421d8201cad9cb0a79c5b98bf16c407510855c9a7d6c1f06c408afd763529a","ssdeep":"384:Td4tAE658O7nfTwushZKjDOYjPncmXj2Gv+E4aiz2wZBat1CUS6UTGdtmv4nU+g:T+AV5PfchQjyYJjfV4jLlUS6UKZg","tlshash":"2ed2c6cd77b1b431437366b5902f100fb23e98aab40cc999b188d8e16cb59694637f7e","first_seen":"2025-09-08T19:19:45.811667Z","last_seen":"2025-09-24T22:31:48.730553Z","times_seen":1676,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/animate.min.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/animate.min.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4370\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":83528,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1e45ee68bfae20a52bb319e40c1b04d2","sha1":"7391a7bb4ef5a2cad2a4033a7b0af054955233cf","sha256":"1b57004d81d1c2c765ef74b9dd93a75de620cc1c6d4a9cc1c8ebbf2877721dc9","sha512":"922a48837620532fffba1107a3c7618bd559e8709e4ae9fb529b6d4fe85f3d24a6c3d5542501176fd7b420b4f0a04d9e6c093873360a1330a000ae22bf306d58","ssdeep":"768:i1k1R4W4J1I184Y4w4o4+VkVK4q4z/3K3F7o7T9:74W4t4Y4w4o4Y4q4z/3K3F7o7T9","tlshash":"6f83d86e2840114447330b76d3de4e68ea3da57318222dea73de598b8f76f6853c9e07","first_seen":"2023-06-17T17:20:01Z","last_seen":"2026-03-31T05:28:16.138381Z","times_seen":129,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 417\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":938,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"abfc05c01cbbdac5f379e0b68c80c16a","sha1":"ae25adaf03bfe18f5de27299a000d2ec5af1111c","sha256":"7a3acb41db246da87ddb9d114528ea6d1f5b9d4f24174b85cd73e7a44ee03394","sha512":"40a792153184620ae0a52c43cc9603b19886eb8aa756657b0e46fd2506925876bb8a3f7aa079ffec56b6325d8741b9330d2789d903431373a9f202d673699580","ssdeep":"","tlshash":"6b11406f04042f6e521082a2b020733dd4efaf1b7e46a400e46394faaac4a82d57d09c","first_seen":"2025-09-20T20:11:20.154919Z","last_seen":"2025-09-20T20:11:20.154919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/webfonts/fa-solid-900.woff2","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:25.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/temp/custom/base/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:24 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74348\r\ndate: Sat, 20 Sep 2025 20:10:24 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74348, version 329.31064","md5":"462806316fea535a6a57651bc2b000b0","sha1":"80644191098f863f25be27841c0d92c452cf2327","sha256":"4f9ee3d8f6e621642979e6a8f7e75c57cb9da34918cc08a38abfe178dbae1dd2","sha512":"1765952f3490a3b063388c3258bf2ed0fce4854ed7fc6fc5937ec3d0cedb1368fa24a87ebd2dd62e4ba0f6244b648cbf47044381969252b62a2677a39c6b0b6f","ssdeep":"1536:gkdThXppBpYl2zoSgIfQGgAPlGqIfgCm86b2EGsX8wDT:gkzPYKoPI4lAPg9fg72ERT3","tlshash":"007312208918f9765bb7e0be5abd05a57cb1c4abc6af40343496abc46fcf93039c7550","first_seen":"2023-04-06T01:20:04Z","last_seen":"2026-04-03T19:11:33.304996Z","times_seen":3962,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-20T20:10:23.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; expires=Sat, 13-Dec-2025 04:10:23 GMT; Max-Age=7200000; path=/; samesite=lax; secure\nremedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D; expires=Sat, 13-Dec-2025 04:10:23 GMT; Max-Age=7200000; path=/; httponly; samesite=lax; secure\r\ncontent-length: 11549\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]}],"data":{"size":66512,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (421)","md5":"655cc9bcd1face9d59ec7732d92b83b9","sha1":"5acf1b807acdff972f9acb711e0136e35f4e05b9","sha256":"77f41d23ad3a897c869162bfbac253b0aee82bc6c1dc93d3544f7124c551746e","sha512":"3c94df26d888d3bf6deeb20cda36e304d863713f61254da881bd72e47ef7bd043de560d397f36be4f99ab97cb2fb41940e154bf803dbc7200e0f8d9c4795ec1b","ssdeep":"768:+FOOOOmEdBbcbsblb50OdmbzkpTfK7Jj/kg/FWvCPmNtC2:+FOOOOhj0OIOfKp/k0ovCQtC2","tlshash":"86535121a4f1223b01a380d26ab56b1bbfe5e10bda1f461876bc4bd81fd3c82dd5725c","first_seen":"2025-09-20T20:11:20.195166Z","last_seen":"2025-09-20T20:11:20.195166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":385,"dns":186,"connect":97,"send":0,"wait":264,"receive":1,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/css/all.min.css","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/css/all.min.css HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12356\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78221,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"05cb650082a3fc8aa618cb48208a79ca","sha1":"cc160cd30be0f9f99541a4763a6ce7d8cd001fa3","sha256":"dee2a403938d53a47b4ea62b38c5581aff1f943b85147fc7aad5f9e53d256fa9","sha512":"b7a3124ad5ccefeb9050f8c8de6f1dd37bf758214c413cea8871d32fee16ca5009c1aa2ee945bfabf6763f9b1cf51818a9ce7657fa0dad2fcfade6d53c9a26f7","ssdeep":"1536:299xhathLHFLwXhrjU2AWFS1L0pgUrtfmz:C9xhathLHFLwXhrjU2AWFqL0WUrRmz","tlshash":"1173167cd95f10924322dae197436242fb25763efe410c4cf2a1e78d9be1226a586fcd","first_seen":"2025-04-16T16:49:09.286329Z","last_seen":"2026-03-29T05:27:03.394951Z","times_seen":102,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/img/avatars/4.jpg","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/img/avatars/4.jpg HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 27 Sep 2025 20:10:23 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25747\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25747,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 262x300, components 3","md5":"dad1660a7b0d6cd05bb526df63add1fb","sha1":"2916407e1a053f877fdd409170e9162aee64c16c","sha256":"8e812b62a5008bd1e3f8353e623ba11cda37e8700597f8254da456ca8fea681c","sha512":"694ebcfbadb7fa52af36186a000fdb228d6c75fba01b42fd6f12e3540d915d14ece4de3b8ad778e1105beba0e0bb162a068bc0eec01360dbd955aed962a46420","ssdeep":"768:WEcob5jvRkbd1pJ4Jx7NXUAR/YLFJBD2R/U:WEb5jQmrO2Rc","tlshash":"f6c2e03db6c10ce8f8217374569f3c9a31d3aa5465112896e8e6f67b30502f28f14ee6","first_seen":"2025-04-27T11:22:47.44423Z","last_seen":"2026-03-31T05:28:16.142868Z","times_seen":112,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"104.26.13.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Sep 2025 00:58:13 GMT","end":"Tue, 02 Dec 2025 01:58:08 GMT"},"fingerprint":{"sha1":"7F:BD:69:96:67:8F:C1:80:B4:56:CA:2D:BF:6F:D7:53:85:AA:5F:49","sha256":"AA:9D:26:FB:CB:9A:0B:7E:9D:10:97:23:1E:00:BD:73:1D:C4:E3:24:4F:90:DD:89:36:30:85:35:4F:35:2A:EA"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Sep 2025 20:10:24 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 18 Dec 2024 23:02:20 GMT\r\nvary: accept-encoding\r\nexpires: Sun, 30 Aug 2026 03:39:41 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nage: 1873843\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NUusvkZfo7HiYtukLu6Ym6eAGdCaCnRMuz%2Fdz6VnRVyo7XXajJuTy7CkYlA4XQR50QA9hqUukXKqRvzG1TGM4hixNgkPNGoS6bJEdRc%3D\"}]}\r\netag: W/\"6763547c-59f9\"\r\ncontent-encoding: br\r\ncf-ray: 9823f74fbd16568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23033,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"28b3ac3854a618028ea6b65ca5ee2720","sha1":"a6fb4c36015084e678c90f6de18cf321b12bd56c","sha256":"69609cb8516655fb71fbc362399b2f1e533bd82c4ca3d1797704e6dce4d183a1","sha512":"2cbd59da377b21ad88b6284ea446693a3c0df6fcb56feb387a45a275dafb1524ec18a97d2b9db37c0aedc801c2d4b9cf1b538154c669df77d9c3801fb9c6f97d","ssdeep":"384:AzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:AVMhAh060svwcX0T1dMh","tlshash":"70a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2024-12-19T14:40:18.051582Z","last_seen":"2026-04-03T19:37:24.822981Z","times_seen":2636,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/mixitup.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/mixitup.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22826\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":121918,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (997), with CRLF line terminators","md5":"c6277129ec6fe65cb8fd5aa6df3813d7","sha1":"085520055bafb1cbf69fb95071ca4d92cf6a6ad3","sha256":"9fa7277299b7a3b4fe70ef6ade6691d04b9ee5d3cfaaa4a728fd77a48a54e6f8","sha512":"87df288f653fa3102d5611afbcabfe50d2f6b0a8657b09024660d329c6684be15354e40978408607901c370d1d26af281f5cfc80f817f409e6bc34d87b7ba25a","ssdeep":"1536:9O1y42iuBCUsMsS765wA0Rd5zGUEFZXp4lx1tVZPO/mHSbo22iCm1QrMEcpnJQZ5:H4DCCKO5wfKetEl1QjcpnJQYHs","tlshash":"a2c3b6453ae43ab689b37326992e8f40f63583ab274244577e3c54584f7bc0416bbfb8","first_seen":"2023-05-27T06:34:22Z","last_seen":"2026-03-31T05:28:16.139443Z","times_seen":129,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apextrust-union.us/temp/custom/base/js/owl.carousel.min.js","fqdn":"apextrust-union.us","domain":"apextrust-union.us","tld":"us"},"ip":{"addr":"163.61.188.89","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://apextrust-union.us/","date":"2025-09-20T20:10:24.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"apextrust-union.us","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 Aug 2025 07:49:24 GMT","end":"Sun, 16 Nov 2025 07:49:23 GMT"},"fingerprint":{"sha1":"14:CA:5D:43:BE:60:24:F6:B2:56:44:CA:95:69:3F:09:6E:06:5D:05","sha256":"ED:7C:09:D2:25:ED:4F:5B:DB:A5:D0:C0:98:42:8A:FF:0E:6E:C9:33:43:E5:1A:ED:4B:F1:1F:B0:66:EB:82:C4"}}},"request":{"raw":"GET /temp/custom/base/js/owl.carousel.min.js HTTP/1.1\r\nHost: apextrust-union.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://apextrust-union.us/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjVGdWdVNnF1dy9aMEpKZTZ1L1RjL3c9PSIsInZhbHVlIjoiT0ord1BZeEw1NVk2SGZJc2ZNKy9CY3pwdlhlT1RXdWdIWE9kL0N3MEVaVTZ4YzhvK2JTdE11b3JaSDV3Wm5KNE1zODh5d0hMSldYZWljeW5wN2xQblViR1VsWFg1OTc1Q01XNHVQMnhsSzhON1o3R3JBNmR3a0wzelZwK0lSQnEiLCJtYWMiOiI2MTI3MzQxZTBmYzk4MWFlNTI5OTg5YmEwY2ExYWRmOTVmMzY2ZWJkNjE2MTVjZmVhMjFjZTY0ZGExNzk3ZDllIiwidGFnIjoiIn0%3D; remedy_session=eyJpdiI6ImhZVk1udzRvblV6aVNKckVnVmZibGc9PSIsInZhbHVlIjoidWhNaW9rUDV5UjZkQmZudTI4a3FmN3YwMlNYdmlFa05qdTc5b0hhVTRkREVuVG9CMGFpK1M1L1R4WGpjTHlpWmRIZUNhREJtM3RMemNuVnpyelRoQUlYWndMNHJqQnRWOUIxTEVtMlQ0bnpjZWNlWm90SVZSMFViN1RCbFRDdE8iLCJtYWMiOiJlMGRkOWMwZDEzNWEyMjYzNmE5NDMwZDBlMWIxM2M4NzYwNWQyZjBkODJmMGZiM2JiODYxNDUwMTNiZTgzMThjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 31 Mar 2025 10:46:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12473\r\ndate: Sat, 20 Sep 2025 20:10:23 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61379,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (785), with CRLF line terminators","md5":"0bdc31d5282e381c8abcfcd9931b7f46","sha1":"4e642ebe4ca43cfa350f00dc6185306513dfe9aa","sha256":"df9b0ed781776fcb62e9a900f10db70a978f0860dd341369194b2c9dce3a1092","sha512":"8a2cafdeed8bb26d5ae0a23dba260052343d80dce226bf3db975fa65b49d351041fe6216ff19674b2289b459f3a6e43268916b5c647e9f7defbea08b8c36c083","ssdeep":"1536:OAkKTMmv5bvBbMDC3aRH2d9rKKk0Ryum61:OAkKTMR4zcb61","tlshash":"f7531d0aa3b0282b8677b3719e7f8a06f236062f9151585e7d7ca1dc1f39414467efb8","first_seen":"2023-06-17T17:20:00Z","last_seen":"2026-03-31T05:28:16.140464Z","times_seen":146,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-20","alert":"Sinkholed","trigger":"apextrust-union.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}