{"report_id":"040e620a-4667-4c81-a974-f7c3d00e022b","version":6,"status":"done","tags":["adobe","phishing"],"date":"2026-05-19T12:04:59Z","url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"title":"Adobe PDF","dom":{"size":367326,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (33499)","md5":"b377bf7c758e7139455fe2ade21408c5","sha1":"625573eb6c81f6467255933b86d6737889d857a4","sha256":"cd8956f6ee45916e971c00f155b99c920b5eb6c2ccd8bd2cd5292385f6014bea","sha512":"4c61afa1fbc50603d7d9a5c3ac1d81c3ee9ea95c602f7a3b0f7c5da1a3cfc11b45ec489dbf43e079b6610eb8c435d162838ccef44b4f46be24b34d8a2656717e","ssdeep":"6144:15m8ryTgHmZ8fX6lUBv3Q1LhImCOZPeQrzBqyMgFWqA5VJak9I:P1yTgHmZ8fqlUBv3oL+tOZWQf2gYbJde","tlshash":"4974f1320d097d694f01446d42ceaed99e8e63ab6d888c88f52f345defe761085db3d8","dom_hash":"domhash7fe3d2552dded636d83737537b45ede4","first_seen":"2026-03-26T13:36:39.0784Z","last_seen":"2026-07-23T15:20:26.768177Z","times_seen":15,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-23T12:04:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-19T12:04:33Z","timestamp":1779192273,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":46906,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-05-19T12:04:33.629917+0000\",\"flow_id\":386533396934358,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":46906,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.26\",\"port\":46906},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-a8ce1e00dace49c2b72e6baf8440ad0d.r2.dev\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":957,\"bytes_toclient\":1156,\"start\":\"2026-05-19T12:04:33.487126+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-19","alert":"Detects file containing Telegram Bot API","trigger":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]},"summary":[{"fqdn":"hean823.github.io","ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2026-05-19T00:43:37.256915Z","last_seen":"2026-05-19T00:43:37.256915Z","alert_count":4,"request_count":4,"received_data":398822,"sent_data":2017,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-05-17T23:37:57.921956Z","alert_count":0,"request_count":1,"received_data":86564,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pub-a8ce1e00dace49c2b72e6baf8440ad0d.r2.dev","ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2026-04-16T06:01:39.769578Z","last_seen":"2026-05-06T03:09:26.546882Z","alert_count":0,"request_count":1,"received_data":34746,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"f6bc82f600a4a7d84bc49b5820327d05","sha1":"023062f91b0a5410719052110aa919bde93c3cbc","sha256":"0105467f2befa106a0483ca9846392a422c7ccb70cdaf93f57d6ba942c4a6b06","sha512":"0e39d9a4abe875b782c810974cb49e9261a76bf4eef81f08cc31a5dcbb535b2a903dcfb1fa16e60e5fbb51f8030b536ff2018da3811f94ccf0079d4e213fabd8","ssdeep":"","tlshash":"2e400000030300000000003000000c000000000000000000000f0000000000c0030003","size":6,"data":"","first_seen":"2024-09-28T07:13:10.74699Z","last_seen":"2026-07-29T03:38:26.496938Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-05T19:50:05.426045Z","times_seen":293755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed424cdafddaafdfaf3f0d93e723b62a","sha1":"3aa59292a60de4cd01a26deccc3ec41f68e444dd","sha256":"58d586add1a334a25353df9f76a842df5c0399fd2ae4267c4cd92a06343addf4","sha512":"310c2b324cd858eeb72658fb30536234aeb352f4a802663a0752c7a246ca199881e982c913dfbe800450229dc571c0872876a22505f238507397b66a7fa728ac","ssdeep":"","tlshash":"75417b082c3d6b9883d3556014bf88cde3216d327966fc44c297ada45fe22662f57ce7","size":1941,"data":"","first_seen":"2026-03-26T13:36:39.08748Z","last_seen":"2026-05-27T07:43:42.029376Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-05T20:04:23.287657Z","times_seen":738592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b311c3a34b5c86eaa8cd5f89f535d9a5","sha1":"5e44a0bad582c58ed0d694e8d1c95cfcdf906814","sha256":"fcc1e5c9be99c44d1f8397d08fc6ecc868747e045386c8710acfb271fe587232","sha512":"6e8adf0d18d325cb5b8eed623ba17ad6cf8329ac6e9a0b767821c563bfe3418b93960e60f4affa0795722b98d7faecffd0ea64e89e32cd2cfb40011e1814c111","ssdeep":"768:fGJzVWYf5p7O04Dq3xoQArF+7XHfYOTBR7AdWth:fG4o9RD","tlshash":"fdd21ff9a7579c63cc36b16fb58e7761ca114b63ca2e41e426d0b24c47e4f328b185ca","size":30925,"data":"","first_seen":"2026-05-19T12:05:00.872904Z","last_seen":"2026-06-26T13:19:15.800743Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-a8ce1e00dace49c2b72e6baf8440ad0d.r2.dev/po.js","fqdn":"pub-a8ce1e00dace49c2b72e6baf8440ad0d.r2.dev","domain":"pub-a8ce1e00dace49c2b72e6baf8440ad0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27b97bba5c46fb26663032b543f881fb","sha1":"66d7b29729a97fea713cd30eadf817a86f5b3469","sha256":"c7ca3056620eb2b126424e5cab0f36c5b02c3797b9fad4df0ba28064f8dc9b71","sha512":"4ea25179b4deb43d4acdd53365705c9a81d6235fb94fd468d0c373f24d11de9e462b2bb70cfb0580e940e2156322a73d03432c3c44832c3e27363b05490bf2c2","ssdeep":"768:B+N3VGef7pNEMgbqvoiE/F+hzbfY0hTRhAdWtc6JFCwJVi8I:B+KQRc6JF3I","tlshash":"32f264f8a7439c53cd36b56fb58e7b5289110b63c9ae41e425d0b24c47d4f328b286ca","size":34452,"data":"","first_seen":"2026-05-19T12:05:00.86923Z","last_seen":"2026-06-26T13:19:15.797503Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"09df6d119aae9328203d9f6ac05f3b57","sha1":"f25f335a9a6c44c8e87f4775aa410a6b0aeff990","sha256":"ada92efa8667584801d43316368f6340fec917db4ea89b647202c36cef4e5e16","sha512":"c18b8a81eeba6de24193810640f813dbfbf033b3cd5ff08eb52033881d762e492ffad524544438a444247288fafc76463e67b1418b1f07ce06b2ad891b30c728","ssdeep":"384:qAZliSjJyBJbJdDjqnH9WhqA1ji3S2PrSIDZq+JrH:qk34PJJqndWhqA9iHDxJrH","tlshash":"f662c08eb5d3f7c4b38b906918fb1d4be67a1cc11e48501c9940e79abe34939c662f89","size":15272,"data":"","first_seen":"2026-05-19T12:05:00.874469Z","last_seen":"2026-06-26T13:19:15.803194Z","times_seen":5,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-19","alert":"Detects file containing Telegram Bot API","trigger":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hean823.github.io/favicon.ico","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hean823.github.io/Atttech-Docement/My%20Purchase%20Order","date":"2026-05-19T12:04:33.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hean823.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hean823.github.io/Atttech-Docement/My%20Purchase%20Order\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\netag: W/\"69fcc76c-239b\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-github-request-id: 9BBA:1C1778:E1B3B5:E51ECF:6A0C51D1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 12:04:33 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779192274.664091,VS0,VE128\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 031abe9dfde95b857374c266f359748f9d2dfe8f\r\ncontent-length: 5142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9115,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"1eb970ce5a18bec7165f016df8238566","sha1":"9efd1514af80fe14db4ed28e9bc53975b9ee089c","sha256":"70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3","sha512":"21b4d800cc282ca452f7394e95d5382340ac3481a002c21da681005a44f18ea6cf43959990cd715b4657f180e0e96d6087fe724f3200e909f9fd70ebcd5511bd","ssdeep":"192:Ywnb1iC9OA9XXMa9kukrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:7B8H3DUulGmmv3D6vglETliCfN","tlshash":"e6126d7e19e93308d8028a1539f267993d65880f9e866e6fb5ad0351cf8fe10e1637cc","first_seen":"2023-04-05T03:08:51Z","last_seen":"2026-08-05T16:27:32.102912Z","times_seen":59409,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/My%20Purchase%20Order","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-19T12:04:30.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /Atttech-Docement/My%20Purchase%20Order HTTP/1.1\r\nHost: hean823.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Fri, 15 May 2026 10:15:19 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"6a06f237-59e40\"\r\nexpires: Tue, 19 May 2026 12:14:30 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 77A2:148E:A9342F:ABDA7C:6A0C51CE\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 12:04:30 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779192270.379860,VS0,VE177\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 78c2624c85a3027c2568fc133b65237ed5f9c94c\r\ncontent-length: 221379\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":368192,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (33380), with CRLF line terminators","md5":"c01944f6b88dc965e2547f1fc2352fdf","sha1":"72dbe43d3e06a08da2af7f79d5c8a82a35dbd39c","sha256":"932bb746c366960cebacac2c1a995a111456503121734150fdc4c1a4f2e569da","sha512":"42762a7658c5691cfa1d371166f1815e5bf8dfe5bbfc07c197b2fa142c020b4423dad76b8634ad6c4c98e3f75ceea7b43326d1601999a6c266d39c05c6b5f491","ssdeep":"6144:15m8ry4gHmZ8fX6lYBv3Q1NnImCOZPeQrzBqybWqA5VJakT7:P1y4gHmZ8fqlYBv3oNItOZWQfMbJdT7","tlshash":"e674f1720c096d5d4f11452993edafda9e8d23ab6e8848ccf42f344edbe761089d72d8","first_seen":"2026-03-26T13:36:39.082992Z","last_seen":"2026-07-23T15:20:26.772078Z","times_seen":16,"resource_available":true,"data":null}},"time_used":3243,"timings":{"blocked":268,"dns":36,"connect":45,"send":0,"wait":223,"receive":2479,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/Adobe%20Sign%20In_files/style.css","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hean823.github.io/Atttech-Docement/My%20Purchase%20Order","date":"2026-05-19T12:04:32.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /Atttech-Docement/Adobe%20Sign%20In_files/style.css HTTP/1.1\r\nHost: hean823.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hean823.github.io/Atttech-Docement/My%20Purchase%20Order\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69a01f78-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: A1FC:F5BD7:E06052:E3CAE2:6A0C51D0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 12:04:32 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779192272.163987,VS0,VE161\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 74fa95c226c95035a2d2fad30ab4d4db3f582e07\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":9379,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-05T19:36:01.353819Z","times_seen":18968,"resource_available":true,"data":null}},"time_used":1057,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":918,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hean823.github.io/Atttech-Docement/images/bg_form.png","fqdn":"hean823.github.io","domain":"hean823.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hean823.github.io/Atttech-Docement/My%20Purchase%20Order","date":"2026-05-19T12:04:32.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /Atttech-Docement/images/bg_form.png HTTP/1.1\r\nHost: hean823.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hean823.github.io/Atttech-Docement/My%20Purchase%20Order\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69a01f78-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: A1FC:F5BD7:E0609F:E3CB2F:6A0C51D0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 12:04:32 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779192272.490501,VS0,VE140\r\nvary: Accept-Encoding\r\nx-fastly-request-id: a6f9bf80554b37557841d0f519aa651ed7a706ff\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9379,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-05T19:36:01.353819Z","times_seen":18968,"resource_available":true,"data":null}},"time_used":1234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Adobe","verdict":"phishing","severity":"medium","comment":"Associated with Adobe phishing","tags":["adobe","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hean823.github.io/Atttech-Docement/My%20Purchase%20Order","date":"2026-05-19T12:04:33.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hean823.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 17 May 2026 06:57:32 GMT\r\nexpires: Mon, 17 May 2027 06:57:32 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 191221\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85578,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-05T19:50:05.426045Z","times_seen":293755,"resource_available":true,"data":null}},"time_used":532,"timings":{"blocked":216,"dns":1,"connect":40,"send":0,"wait":43,"receive":56,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-a8ce1e00dace49c2b72e6baf8440ad0d.r2.dev/po.js","fqdn":"pub-a8ce1e00dace49c2b72e6baf8440ad0d.r2.dev","domain":"pub-a8ce1e00dace49c2b72e6baf8440ad0d.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hean823.github.io/Atttech-Docement/My%20Purchase%20Order","date":"2026-05-19T12:04:33.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 May 2026 06:57:47 GMT","end":"Mon, 10 Aug 2026 06:57:46 GMT"},"fingerprint":{"sha1":"24:D7:68:AF:FC:F2:DB:F6:04:47:7E:D0:7B:FF:F9:8E:74:18:97:12","sha256":"A7:D7:3C:F5:72:53:85:7E:A0:36:9A:EF:51:D0:3B:8B:FE:C9:91:D6:6C:42:05:07:D7:6C:7C:2E:4D:21:71:89"}}},"request":{"raw":"GET /po.js HTTP/1.1\r\nHost: pub-a8ce1e00dace49c2b72e6baf8440ad0d.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hean823.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 19 May 2026 12:04:34 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 34452\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"27b97bba5c46fb26663032b543f881fb\"\r\nLast-Modified: Fri, 15 May 2026 09:39:06 GMT\r\nServer: cloudflare\r\nCF-RAY: 9fe2f6feac531a30-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34452,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (34451)","md5":"27b97bba5c46fb26663032b543f881fb","sha1":"66d7b29729a97fea713cd30eadf817a86f5b3469","sha256":"c7ca3056620eb2b126424e5cab0f36c5b02c3797b9fad4df0ba28064f8dc9b71","sha512":"4ea25179b4deb43d4acdd53365705c9a81d6235fb94fd468d0c373f24d11de9e462b2bb70cfb0580e940e2156322a73d03432c3c44832c3e27363b05490bf2c2","ssdeep":"768:B+N3VGef7pNEMgbqvoiE/F+hzbfY0hTRhAdWtc6JFCwJVi8I:B+KQRc6JF3I","tlshash":"32f264f8a7439c53cd36b56fb58e7b5289110b63c9ae41e425d0b24c47d4f328b286ca","first_seen":"2026-05-19T12:05:00.86923Z","last_seen":"2026-06-26T13:19:15.797503Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2015,"timings":{"blocked":248,"dns":61,"connect":33,"send":0,"wait":434,"receive":1085,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}