{"report_id":"08dc666e-571a-40e1-b36c-b89106d0b68f","version":6,"status":"done","tags":[],"date":"2025-08-31T17:25:15Z","url":{"schema":"http","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"title":"Google"},"submit":{"url":{"schema":"http","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-05T17:25:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:49Z","timestamp":1756661089,"ip_dst":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":53424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING TryCloudFlare Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:49.380302+0000\",\"flow_id\":2178091822722608,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":53424,\"dest_ip\":\"104.16.231.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058175,\"rev\":1,\"signature\":\"ET HUNTING TryCloudFlare Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_12_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_12_10\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3536,\"start\":\"2025-08-31T17:24:49.372272+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:49Z","timestamp":1756661089,"ip_dst":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":53424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed trycloudflare .com Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:49.380302+0000\",\"flow_id\":2178091822722608,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":53424,\"dest_ip\":\"104.16.231.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2060250,\"rev\":1,\"signature\":\"ET INFO Observed trycloudflare .com Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_02_21\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1665\"],\"mitre_technique_name\":[\"Hide_Infrastructure\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tls_state\":[\"TLSEncrypt\"],\"updated_at\":[\"2025_02_21\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3536,\"start\":\"2025-08-31T17:24:49.372272+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:52Z","timestamp":1756661092,"ip_dst":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":33808,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING TryCloudFlare Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:52.590639+0000\",\"flow_id\":416764389548262,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":33808,\"dest_ip\":\"104.16.230.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058175,\"rev\":1,\"signature\":\"ET HUNTING TryCloudFlare Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_12_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_12_10\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3535,\"start\":\"2025-08-31T17:24:52.581862+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:52Z","timestamp":1756661092,"ip_dst":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":33808,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed trycloudflare .com Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:52.590639+0000\",\"flow_id\":416764389548262,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":33808,\"dest_ip\":\"104.16.230.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2060250,\"rev\":1,\"signature\":\"ET INFO Observed trycloudflare .com Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_02_21\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1665\"],\"mitre_technique_name\":[\"Hide_Infrastructure\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tls_state\":[\"TLSEncrypt\"],\"updated_at\":[\"2025_02_21\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3535,\"start\":\"2025-08-31T17:24:52.581862+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:52Z","timestamp":1756661092,"ip_dst":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":33820,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING TryCloudFlare Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:52.595227+0000\",\"flow_id\":622935704663198,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":33820,\"dest_ip\":\"104.16.230.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058175,\"rev\":1,\"signature\":\"ET HUNTING TryCloudFlare Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_12_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_12_10\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3536,\"start\":\"2025-08-31T17:24:52.586910+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:52Z","timestamp":1756661092,"ip_dst":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":33820,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed trycloudflare .com Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:52.595227+0000\",\"flow_id\":622935704663198,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":33820,\"dest_ip\":\"104.16.230.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2060250,\"rev\":1,\"signature\":\"ET INFO Observed trycloudflare .com Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_02_21\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1665\"],\"mitre_technique_name\":[\"Hide_Infrastructure\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tls_state\":[\"TLSEncrypt\"],\"updated_at\":[\"2025_02_21\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3536,\"start\":\"2025-08-31T17:24:52.586910+0000\"}}"}],"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"cells-link-nat-prompt.trycloudflare.com","ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-07-07","domain_rank":0,"first_seen":"2025-08-31T04:14:32.367875Z","last_seen":"2025-08-31T04:14:32.367875Z","alert_count":59,"request_count":59,"received_data":1764960,"sent_data":33788,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"adservice.google.co.in","ip":{"addr":"142.250.178.66","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-06-23","domain_rank":279094,"first_seen":"2017-09-28T05:23:19Z","last_seen":"2025-08-30T23:25:18.134012Z","alert_count":0,"request_count":1,"received_data":331,"sent_data":501,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-27T15:11:05.791298Z","alert_count":0,"request_count":2,"received_data":33278,"sent_data":1154,"comment":"","tags":null,"fingerprints":null},{"fqdn":"go.ezoic.net","ip":{"addr":"54.240.174.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2012-01-10","domain_rank":3300767,"first_seen":"2014-06-20T09:10:07Z","last_seen":"2025-08-31T00:07:13.119329Z","alert_count":0,"request_count":1,"received_data":1025,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:49Z","timestamp":1756661089,"ip_dst":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":53424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING TryCloudFlare Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:49.380302+0000\",\"flow_id\":2178091822722608,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":53424,\"dest_ip\":\"104.16.231.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058175,\"rev\":1,\"signature\":\"ET HUNTING TryCloudFlare Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_12_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_12_10\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3536,\"start\":\"2025-08-31T17:24:49.372272+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:49Z","timestamp":1756661089,"ip_dst":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":53424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed trycloudflare .com Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:49.380302+0000\",\"flow_id\":2178091822722608,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":53424,\"dest_ip\":\"104.16.231.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2060250,\"rev\":1,\"signature\":\"ET INFO Observed trycloudflare .com Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_02_21\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1665\"],\"mitre_technique_name\":[\"Hide_Infrastructure\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tls_state\":[\"TLSEncrypt\"],\"updated_at\":[\"2025_02_21\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3536,\"start\":\"2025-08-31T17:24:49.372272+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:52Z","timestamp":1756661092,"ip_dst":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":33808,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING TryCloudFlare Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:52.590639+0000\",\"flow_id\":416764389548262,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":33808,\"dest_ip\":\"104.16.230.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058175,\"rev\":1,\"signature\":\"ET HUNTING TryCloudFlare Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_12_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_12_10\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3535,\"start\":\"2025-08-31T17:24:52.581862+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:52Z","timestamp":1756661092,"ip_dst":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":33808,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed trycloudflare .com Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:52.590639+0000\",\"flow_id\":416764389548262,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":33808,\"dest_ip\":\"104.16.230.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2060250,\"rev\":1,\"signature\":\"ET INFO Observed trycloudflare .com Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_02_21\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1665\"],\"mitre_technique_name\":[\"Hide_Infrastructure\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tls_state\":[\"TLSEncrypt\"],\"updated_at\":[\"2025_02_21\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3535,\"start\":\"2025-08-31T17:24:52.581862+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:52Z","timestamp":1756661092,"ip_dst":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":33820,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING TryCloudFlare Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:52.595227+0000\",\"flow_id\":622935704663198,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":33820,\"dest_ip\":\"104.16.230.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058175,\"rev\":1,\"signature\":\"ET HUNTING TryCloudFlare Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_12_10\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_12_10\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3536,\"start\":\"2025-08-31T17:24:52.586910+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-31T17:24:52Z","timestamp":1756661092,"ip_dst":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":33820,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed trycloudflare .com Domain in TLS SNI","source":"{\"timestamp\":\"2025-08-31T17:24:52.595227+0000\",\"flow_id\":622935704663198,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":33820,\"dest_ip\":\"104.16.230.132\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2060250,\"rev\":1,\"signature\":\"ET INFO Observed trycloudflare .com Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_02_21\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1665\"],\"mitre_technique_name\":[\"Hide_Infrastructure\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tls_state\":[\"TLSEncrypt\"],\"updated_at\":[\"2025_02_21\"]}},\"tls\":{\"sni\":\"cells-link-nat-prompt.trycloudflare.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":941,\"bytes_toclient\":3536,\"start\":\"2025-08-31T17:24:52.586910+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"698070fac9a41d043f8eb19b7112268f","sha1":"225089fa5488a38ca48055ab48ef8b91e66da3f4","sha256":"ca276cb6f0b20e7e6422fcf66533cba332fec85ae203d3113466869a47eb89a6","sha512":"c92b28daedebfa5c18ab9d125009ba52a3b7ca18a7f252a94f141b977300529b366bcbdaf1d455c54f35db0e97ae8521bda660512de846bece727772e132700b","ssdeep":"","tlshash":"18d0a7fb540896120ef279c168b5631469b35325784110ea2e382b9214a8f4f2c4fdfe","size":254,"data":"","first_seen":"2023-04-12T06:35:41Z","last_seen":"2026-06-28T23:02:42.625395Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"98bded22ec0bceaecaa5784c7374bb89","sha1":"fc86db4f575181669b023d558478b851b2ef8309","sha256":"679aa47eefb4320c81b9ed90338cc350d9e7d8c1750193097bb41d36c144164b","sha512":"6f63d32c333d5d80c900ae14b684a4a6ca57babf9bad03463912c4da839d6c5c4128999c30dfda7969359b8ea0d4293d449efa4fa66ff4ca6db1212ec975bee0","ssdeep":"","tlshash":"3af002f3104dfe966c6dcd651f4de24bb285eeaec250e3c1f951701192262e112eab00","size":628,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.190031Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c82428a35f2157d1ffc58db62a62642c","sha1":"23a3ba37c8219ada20ade938bf6ab027ddfaa32e","sha256":"c202f499070bf24f65287263b3c7fd4a221000ebc2e9a9eb1da84c48faf83f7a","sha512":"a7c78376ba5b38aed92e29e81fa5bf34201643e5d5c672c68e3fb7d60882d5de4f93047ac847711226094174dd3298991eb1f40e011527925da4616fa2d41f61","ssdeep":"","tlshash":"8db00108438b4cffcc08289a630492e330bd873368244231aae40ee017aa9a46a404ae","size":91,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-27T07:01:46.170439Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/rochester.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"692f0c67f04891ffc3c1003ee1eeb694","sha1":"a955676ffcdf91a2ea64110c393d29616a5d43ac","sha256":"645cb3933b83f3c78583042280625530a7bb59da558abb07419188ea8a7004aa","sha512":"d2319d769ea7c847a873a41926584f64ca46718df58ec2e37c91385adc0176298b742fd7b7d350cc026aa26ea25907fb7d393ccaf1a6efff05699e2d112783d7","ssdeep":"","tlshash":"3361ef5810eba436446f70a5eb9e9011b7257a67258e7820ff1c4aa4df53233039dfac","size":3195,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.183251Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c01fd5e1daa29944d2264143cd4c92f4","sha1":"c1b288f0039906fade66ce1afc1ca6651b9d11a2","sha256":"136389cb96ef600efbc370a412bb07bfabe46b8879eddcd8b1036c151e25b872","sha512":"b84d742c9a6a4b09d5cdeedfdefb9f4c278c5a35a2ac248553ce1632992f9d15593ee8ede0f7b366c02869ffc1f14d1dd9543baccf47556dd77b755d9f6d7942","ssdeep":"","tlshash":"16f0206c79253e3d6a420130b25e35aa3c28e9bb01025890412acd303d3140fc27ec87","size":508,"data":"","first_seen":"2023-12-09T21:56:02Z","last_seen":"2025-08-31T17:25:19.191283Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(1).html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d22e1e94477df345fd9ade801a68ea30","sha1":"c1f0c16e5a077bb5667b0d9ea530239a50d7d69b","sha256":"91bc6b1eb89ac32995dacfe3e62a5ea570fcbaa5b8e127f2b295b16fc3e0f40c","sha512":"931d4b75e45573df94284b4f0f29258fc2a6c92cace7e7633675dcb9646e6af28fc91e014d1cb1be148e434295d6248a4461255a700f2bb01968026955cee156","ssdeep":"","tlshash":"c6b012873060b4139c938d1c017937c17a0742315d640372dc782500ff00247c5b72c7","size":108,"data":"","first_seen":"2025-08-31T04:41:51.677273Z","last_seen":"2025-08-31T17:25:19.191935Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91a46bc25396cace3443f61a96225933","sha1":"9c677eafb7e08ed5f44b7061e220b9052c1fee19","sha256":"2a01f854b43ba97568cffccc536cbfb11ad0de79ccdb8b9e0db97f9a55a2cd43","sha512":"08d67afc297bb67f29f197006cca7b580fef3e44ec8ae5c14e8d80fa03414c4bca276a9bf1787e5a3ae59145ed4b3d8d70915601697d4cc2be89bbbdd4ec336c","ssdeep":"","tlshash":"73e02bcfb1b8bc7b376ac695b9b736052d600495e4813290c06e9adabfd1dca4810fc2","size":416,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.19255Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(9).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"018f7a29063fe18e4ecd6ef5d0e3b74a","sha1":"bf1fa79bd8812cab73b3514abe43f57d1e1d0d97","sha256":"f6d6ae6e3175e11e73247bbb9e9cfc94149e1f5a3aafcd963ba30d3fae19c4c7","sha512":"62a2efd9f073107c64516951677a715efd2d4e2a1b9602e8b54c6d7cf91a8b38a50fccd1cfb70b1f75dc2238f66d6b499b294a0fc9c3be38de95277ad2b81faa","ssdeep":"","tlshash":"26f02dbcb70522baaf82259ec4fce950a8817102310981a0218cc8994845b8102ff519","size":638,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.185723Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(12).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa83d05298ed56b93fc4f6e71062f3bd","sha1":"24120a174b00f5f62ce217f989db9cc6e00992bf","sha256":"dcb1d98358d26ef883da8cd8eeb41c9047f66d32aeb2d5605ac8c1787e142930","sha512":"7cc8be4ef841304c034ebb630398cdb3f9b3258108bf4e503f2255e4b7a60f937b3e4d2a3d6afaf6ca8e0195538636cd6b0fb42504c409d1ef428831a88d3cd1","ssdeep":"192:1WFAh7uv4eZOGUGhWOMdrD0ln5ugY85tNgT7DqfCvD6atvx4Ot70zi7gsXOAYi:eAhav4ecrGhWjruuR85LgTPr6axYe7gS","tlshash":"6d3219883766707786b290f3026f1547a223d86bf0589468b2d9eae168309f503b7f7c","size":11221,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.186456Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/audins.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"337980e2d678bde7a7d4a20bd8df1f95","sha1":"65d79168a76a202950c18fed09becb10884b38db","sha256":"d98f76f0461187c365efd671a87749384de00b589e87fb30c0486a892769c412","sha512":"430e7f9c7186b639ae7021975c206ce7cd6a3c7baf9d873e6ab4f18b85b33993f797b7a4a8dbb51bc303489bbff3fe4e632ac0576f67c7e1a33ba18ca0b22ae5","ssdeep":"","tlshash":"3301abab4c42143c9b7950bef23ed68cf3b502a861a1e022ec4ccc1d042ceee1c59e9c","size":821,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.15007Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df5bdd29cb602606389c7f91d35b7603","sha1":"202c28854eb9c1cd7e7b1ca2d61524e28473c828","sha256":"f7c4a5aa5002e12c3768213f266fa206fbc50c7a88815b8a9e2eaf97458b0164","sha512":"94c05f6af4ea6ef1bd06d218e7e55f1f65e65b74af128b8117a854a3c4192ad77b3691c3f1d3039180517e4a75d7c9211157ad26b93c3561543981c3bea69db5","ssdeep":"192:77jtkKTwJcYXnTqQCKwtOWwKhv20E3aURi41g+A:7P+KA5Xn2uwcw1vsXA","tlshash":"5c02c84d36d630a755e712d5157f2147b032ab3d1a1c40f4af05eae84ca9ece205bfe6","size":8386,"data":"","first_seen":"2023-12-09T21:56:02Z","last_seen":"2025-08-31T17:25:19.193169Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(3).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"687b6d35c16d13dd2975305c3fdd5861","sha1":"228e61a230e9a39cd5b8053b1f6a69c10dc4a5e7","sha256":"4868e9fb6edcdc42b5171cc42546facd8c66a4088134d2df47c60596bc400713","sha512":"bbde69afca2ee7d4bf2bbe94bd4762621afe9ba070ed34ebac30a239889d12484b9e24c01b06b26304d84d5cfec7bd7dbeb971bd0514bb7363d16c04bb8b9275","ssdeep":"1536:8yfeRoZpiYhEyUQQJ1GC30iXH4+ZYiuXwVTZc36bHzFcM7lrpaAtvmRd9rmXhW:MFyHQuwDjZnqwVGwHzF7lrGRzoW","tlshash":"cbb308da7691b8f38763a9b5006f100bb13fa967f51888b0e184d9d43c749a94237fed","size":108227,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.17386Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2b4a41594a1c367c9fddac990b097a1f","sha1":"7611e58240af9d6df06c66d7941485cef8a4bfcf","sha256":"eef5a8eb53bac7592b3213f7dbaa35fadece3a29187520ffcff7b59a08fbfc07","sha512":"60d49395d0c1a9bc440fe6726890ff4cd413bbee8705a05c80a08a8e9703f3045b52536b3ee3d8096a397a6044adfd0a83d147393ecc80edbe8bd6cbdab8c9c6","ssdeep":"","tlshash":"74b012873060b4139c938d1c017837817a0742355d6403b2dc782500ff0028784b72c7","size":108,"data":"","first_seen":"2025-08-31T04:41:51.654586Z","last_seen":"2025-08-31T17:25:19.19376Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/cookie_push.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5686e762d9c7dbc76d5f49f4a1186aa7","sha1":"34cffe881e5f7b85d57a0c705eba9f3f6b4c3cd3","sha256":"a679f8a06b5623f0eee671fc6c477d7f9c8d4f627d490f6b908e5a0ac3b00387","sha512":"a3c88a354b42fc64352a5a2e932f07169d2a055d3fb36cae142046f6b8d1db6943032139f0896d9082e776cbd0de220aa9ddb7d572c01e5e18fac546a05977bc","ssdeep":"","tlshash":"df11b3c2a323e85283a20581be9f138f7279e313c80cef30848ddae0aa646a40c69c05","size":913,"data":"","first_seen":"2025-08-31T00:07:19.426852Z","last_seen":"2025-08-31T17:25:19.194519Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"698070fac9a41d043f8eb19b7112268f","sha1":"225089fa5488a38ca48055ab48ef8b91e66da3f4","sha256":"ca276cb6f0b20e7e6422fcf66533cba332fec85ae203d3113466869a47eb89a6","sha512":"c92b28daedebfa5c18ab9d125009ba52a3b7ca18a7f252a94f141b977300529b366bcbdaf1d455c54f35db0e97ae8521bda660512de846bece727772e132700b","ssdeep":"","tlshash":"18d0a7fb540896120ef279c168b5631469b35325784110ea2e382b9214a8f4f2c4fdfe","size":254,"data":"","first_seen":"2023-04-12T06:35:41Z","last_seen":"2026-06-28T23:02:42.625395Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"go.ezoic.net/detroitchicago/audins.js?cb=188-2","fqdn":"go.ezoic.net","domain":"ezoic.net","tld":"net"},"ip":{"addr":"54.240.174.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb721f1e475d12fa5dbc89a8f689850c","sha1":"f49e618d107ed55afd4ba2981a86f74e2943b56e","sha256":"bcf7993523efcd42f5599e1c210b6433e35a39de688c9e5ae90829741937df71","sha512":"34fbf178f024006b5b1d2d197997e8a37bfc838ec177124d327a51a3dc5d0b579f6aa3790ff09186a953957c318b15ba98c343ea94e08be732aa177c73fd42a8","ssdeep":"","tlshash":"36f0c0a71e5044286764107bf3abe7c6b3a622999880e442e5cacc4d3615a8374325ec","size":516,"data":"","first_seen":"2024-01-09T05:46:11Z","last_seen":"2026-08-04T20:06:51.293907Z","times_seen":2068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(5).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0af861208b33d24b931e0a5bbf8c641b","sha1":"3d6053357149c7b50bb0fc4bc77ffe278cba93b2","sha256":"e027ce4c5e74170db714c7298c5dbc77a9bba930357431f8dd9a527c3e30fea8","sha512":"1013aff6c0b229aefd8258d1577874a4ef03768d56384526d9af3009b2c6c7e0e867bd93550bb6ed8540798ffd2fdd79bdb08e751a4cc83b34a501eca6f6a87d","ssdeep":"","tlshash":"4ed0231f76f69571485e4350f6d751c155b4f5464f853744193651501890cf25104b0f","size":211,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.157221Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8bb375ca5d7e34b418efdfcec1b6435","sha1":"75b77e7c8916c3da006e9c2bfe5b40b8bb6d7782","sha256":"8e3744c46b1b757d735949dbe8d106190cde09287d20ed1bb318032a42bb5901","sha512":"c50b3c2dda3c5288cc9d440765c63a53ddf888441000ba77ff9d6f320fa5821e7b4d2c0af8531f8cc600a7ad9e194677e7ff676ba08f46cea0e3a29db713224f","ssdeep":"96:+Ig3LXB/T4/vcEV/lUA08HbQyZxmI9fdJaCENG:aLXBs3c6F0mDwI","tlshash":"bb91206c7495307f94f793e0042f1189b120b67e265c0af07f2d8be0ad6298f31a6bb4","size":4507,"data":"","first_seen":"2023-12-09T21:56:02Z","last_seen":"2025-08-31T17:25:19.195207Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.899011Z","times_seen":919823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/d04074658525060c338e02e6292a36bc.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d04074658525060c338e02e6292a36bc","sha1":"a1d79b9a4fb8f3010d65ce82a67de8abbd97e965","sha256":"c7315e25523cd490e4537049c0840932b54b802b9ee1fdc7cc8e87cfde63c3d5","sha512":"2a33482c5c27a86b31297385da8fda7beef4e4ea6be9d13941dfba13a12be1466fbc8c508d2d12901efd9971055a231640cc7e04503e6054c083d0700e413dca","ssdeep":"96:ztbv+AwNytgdH4mPatYqRpsEExbhoOGPyd3Ypli63x3eLLGVSKQPQ7vGdntz/+A4:plwWutqY/XYm6VSKQPQ7ventbpjM","tlshash":"99f196ddbfa0b16256f351b6912f2107a03769a7f49888a081c4d8e16c707bd027ff6d","size":7667,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.183995Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/osd_listener.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"123db678abc905ddc24516bc8e1c147a","sha1":"a57fd3398908c651091e3c6a0623db914d09cc7b","sha256":"d2ccd5167c702b43d4c6dfc47eb2503d3717ca59de8380628c01b646583564a5","sha512":"7546e1b23425d284340af532870be1e01a1d866e326e031f897d1ba1e506f7e9a12a90712c6a084bb694431db907595dfd2868dd41c152919b6155de2ced4d3c","ssdeep":"1536:K/4cSZXKzOiHEr7QmzeONhtldUr8yWTZ5zEjFwPQjw5zLtuuST2p:EzHEgqhtltHTZ5zUFw4jw5zouSI","tlshash":"4573c5c9b69270568353a0b2417f004bb23ba99af858947cb149e4d5bc74abe0377f7c","size":75061,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.17605Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(6).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa156c297f379f631fc7bdb4c5510ccd","sha1":"935cb48186bc866aba28f7869253f64396044956","sha256":"f2c86ce564352bd0424b59ca94f621a47e325aac069927ee1f8a6d30ec5eb6d2","sha512":"089a43619355a8860f250ca18540ddff1c71784b41218513fc21fe22b54b279f4e7f899462a40066df58c720c7fcc87d28c97751fce9cee2a7e048593754e8c4","ssdeep":"","tlshash":"5eb09b0f2b3459b54855d350f5cb51c14190b649c15766140a2156a555e1da5554190f","size":121,"data":"","first_seen":"2023-12-09T21:56:02Z","last_seen":"2025-08-31T17:25:19.161316Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91e53dc435af29fbd49f261af0138a5c","sha1":"81de6faff8c16e5d14c3e55a9be417980e56fb5e","sha256":"67a7f50c9143d4c60f6e0a320b583f1e05e0483d18cc47441cdf1963c8ac07e8","sha512":"cdb71095249e81de4318da7a312fb45d3f215c65078e89e589d36765f29a9ec4b4e87bd02eefba8520cafbe993c54ac2addcf2af1cd4e82dc58e9a069541f1fc","ssdeep":"","tlshash":"50d02eea74f636e4ac2a107c936fe20a7273a0d7201d035898c28c70aaa800b80a2e54","size":249,"data":"","first_seen":"2023-03-12T07:30:02Z","last_seen":"2026-08-11T13:09:12.607151Z","times_seen":1191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(3).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"687b6d35c16d13dd2975305c3fdd5861","sha1":"228e61a230e9a39cd5b8053b1f6a69c10dc4a5e7","sha256":"4868e9fb6edcdc42b5171cc42546facd8c66a4088134d2df47c60596bc400713","sha512":"bbde69afca2ee7d4bf2bbe94bd4762621afe9ba070ed34ebac30a239889d12484b9e24c01b06b26304d84d5cfec7bd7dbeb971bd0514bb7363d16c04bb8b9275","ssdeep":"1536:8yfeRoZpiYhEyUQQJ1GC30iXH4+ZYiuXwVTZc36bHzFcM7lrpaAtvmRd9rmXhW:MFyHQuwDjZnqwVGwHzF7lrGRzoW","tlshash":"cbb308da7691b8f38763a9b5006f100bb13fa967f51888b0e184d9d43c749a94237fed","size":108227,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.17386Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(8).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5bda1331fd81f7bb6f6c74f11bcdd4f","sha1":"b9f69dee128f522d1d4084f1d94660f357eee86e","sha256":"221784c7324ed5061acd17f66a6979b54baf49f8d1a4fd9af5574bf756128057","sha512":"9d6548f79256fd23f0683100bc8a76dd2a3b7848d9894c0ebff4aa6041aef9619cff1f450a61921f39019e0c3c7e401ad9a47bd9c1c5b2f89ac312a06f6b66e8","ssdeep":"768:3leU33bN6lZzin88IqOqreUqw+rNuCc3wgSoPl5aliGXR4C6toG6D52P9Fr:3leU33bEP+n8gdqUqw+g1PzGdRM64P9B","tlshash":"34432b18f710306681e390b1553f1a8bb337a59ae50a84fcb184d4e4adbd9ad8377f78","size":55505,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.144014Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3affbcdc728e9b0624730219f9c3bcfb","sha1":"483f2677f2b6098d5ec5e4ade436d03f7ec98d2b","sha256":"595c6341fc28f97d0a2511db5e31db9559fdce190d982cae1a2c439472f571b1","sha512":"ecf9ff41ab4f87111852fa522424bc2756448311d797d58c1d5103d92c700c537ef1150df9a67330fee25826f765239ecfe6a7788f3f6b082ebc88dc51dc638a","ssdeep":"96:WIc/n2Zq7zDn/OcvuiAajpZoVnGY/sjO0ZSCho1o5obKzPndo4ozEKbFw/u0JyVw:hYzzazajpZoVX0yuPUls6+A76rdH","tlshash":"05c1849ab70070f684b31171877f3f03737625ba62458461773488f2bdf698bc68aac6","size":5823,"data":"","first_seen":"2023-12-09T21:56:02Z","last_seen":"2025-08-31T17:25:19.197114Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/sandbox%20eval%20code","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"64fe6fe97a487c82c5be70158b71aa87","sha1":"b93ba17d1796e404b0ca1ef6f262bbbb0c427366","sha256":"3ec8a12103cf9c2e91b9be1329d1e9f1c53043e38a641070650d1b8d07dbbcd2","sha512":"1a52d609a0d5b1688f664612d6fc98846ffc6d0899444651d29b0c076fdc4c6d4ea87a1ea3b97d816c166f3d91bac5e421f7160c6a00872cccb5aa126bcf7ba5","ssdeep":"","tlshash":"85c08cb3a790156b9a1267b1b8106013bbd6571047a78012b047011b1180ea659b8098","size":148,"data":"","first_seen":"2023-04-11T21:38:13Z","last_seen":"2026-06-07T08:17:54.127875Z","times_seen":75321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"590803d5e0983c19d996a6f975b6de84","sha1":"3ff10fbc6ad39e337a8b1475d28f2687ffe4cabb","sha256":"f6544e6686f8c9a1a3019b0491df0f1d09e17f0d1cb9bf8cc8d4fbdce862adae","sha512":"95078dfe1417ff94196f6384bc9fef50653e329ee9555c1a7c81bade03bea701c5c5bd31399ab70fa16168f23f4242e57713d72495070e3d55b2756769bce01a","ssdeep":"","tlshash":"c8f08c18e8f9208244bb34be19df99003d2548af864acd44bd5d5aa20f9a4688336b38","size":569,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.198377Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(1).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"124d3918819ab4c349a7f9fa979bef07","sha1":"6ad167d76a8768130783cd19aa6d8143c0b1bf37","sha256":"daa795332e5dbcf893adf2d5f3349f02b8c1cb957ff3b5f4c11b742e33c3376f","sha512":"4f7f15b28c6b38fc66002dbee29688b801a689b716093ba63adbe23fffe144621198973a8ac4981ff2d20881bd4c84e45130a631e5b9a5eae3a5fe26c106f7d0","ssdeep":"","tlshash":"b860000c00c00000000000003330000033c0330000f00c330000000000000cc000f000","size":12,"data":"","first_seen":"2023-03-07T01:11:30Z","last_seen":"2026-07-24T01:25:08.761647Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/rules-p-31iz6hfFutd16.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","size":3,"data":"","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-08-13T10:52:12.283096Z","times_seen":431403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e3b56d1c09ae1c2e102484c8a649ab6","sha1":"e852dc16af8271a571bde541f9fbc2fec74c00ed","sha256":"ef95037eec6fefc149965d320cbba34495c38089310dbe04e1e63a6f0f875a3e","sha512":"87e93f1d25fbd4f3e9687acaf17c779ad1d0efe3e276104411d7de7995540692f5a2f7728e91f9b2961ec3e87c857dd3fb8eb3f209a3afc7f19b61e534fca08f","ssdeep":"","tlshash":"e4c02bc8250e0c7281f727008b7ffa40b8023334d4d16d324849b3045e20e43d794800","size":155,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.204348Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/jquery.min.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-13T10:29:55.186349Z","times_seen":142750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(13).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07684386506f3267ba38368a85cf26a3","sha1":"8ffce627bf5b7e46c60949172abccecd494beff0","sha256":"a58c86b531bbf6d234be7d3da3af950ddf396b5052f469152d7cfdcb00333a8e","sha512":"a7be5d5dd09b041172a9bcb88a49f13ebf33b4fa42b6d1100ab1cf4bebc2d07510bbbfda7bb7d31e65ee2cf880f282db74d085448b9ff4b01865bcb4431b5495","ssdeep":"384:oD5rXgjN60+pTcuNEA5NHWGT219+X824P/y1JoCl64O4g5UvWcLNJA:1MJcuNE2Nx21wX824P/y1JoH4O4gYdLc","tlshash":"ab820a8573a1706352b260f6112f1503f127e956b888d4e8b28dddd17871ab912bff7c","size":19255,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.181462Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/beacon.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1827f116c73f319409b97f10b8a58ade","sha1":"16cdf30fce69405601446632e34fc15706b963b8","sha256":"a256529bd5b1b8846f8d2536ce7581fb6cea4479992f222d01535903dff48d79","sha512":"5e15653f5b13b16c7f28c2ea2275056989fa03097edf324a886669554bd228fc45b56e31685e011c5c7fd16fcf612464f3b982144bf7e2411a4ab973906eb135","ssdeep":"","tlshash":"0a31b5f0300a34548cbba3d5398fe40b123e0127695c8ec29942a56c9d398d706f6f6e","size":1469,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-04-19T06:42:26.424551Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(1).html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7dd5e50fb5c3fe3676e38091bc7f0d4a","sha1":"578167857f6478c3d39c50b088cf00883277019d","sha256":"14ee1ae2f9a718ac7d303634b6232607bc6d4138e820fa66e81fc5182c5bff6d","sha512":"1b6fb2d32cca990bd5ed0ee7b0ad3876eebb475d24962f257a4be7c425cf333242ed743db84e50c6853e6c8c45bdfbfedb9a84d820921077e170e348cd73056b","ssdeep":"","tlshash":"3cb092ce7444792a29eb8e044b237f633a6b0062a3230034a830090cb9700e3c4291c2","size":123,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.205246Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/analytics.js(1).download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af5c617d36e28d19710b882a6824e213","sha1":"39a22dc66ee4d211631f701d349bd3eb7ee20824","sha256":"eaf1b128b927ac2868755cb7366d35554255c8af362235afe270f9614f8c806d","sha512":"3a4325c38aaf546235fc7802956ac5d3ff0c0fbd4959baa93b249ef9812fcf43029fec8a8f9bb2c006e94c3532e36fdd5f432fd94bc23f33ebc52e603d88f3af","ssdeep":"768:naWWnt3d/a52Ug0yPnBJVuMWW0YOaCA/zXebYUDTJtWHx6g0stZu:nar05QpBJV6W0YOLWH8g0sW","tlshash":"6b130af9b7827466d3a271e4403f1007907eadc5f449d8e4a54ad6d06d38eab02bbf6c","size":45229,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2026-08-01T14:03:56.841585Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/js","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"594318810a9fcf6dac2a811c8b2ec0fa","sha1":"c291cecd6d18f4ff5311fa9ec97c0c81e538cd7e","sha256":"a99df04e686c685d42fef59869777b83f6bfb8f572b4c533e81594b6af39b368","sha512":"8e182b47f06b8c310e4ac936a0fd347daade23e584b98e0fdf2b784e5486dbec269ad2ac1d561dcd950041cd3af80d877e4653c5d9f8a2cc920db6a286e9829c","ssdeep":"1536:dcWXkMHYcsUhjWdEgo51sYmyzL6ZIYddB5m8XG1K92KPQ9XuVvaSf:2WXkG7sXE351sYmjDdB5xN","tlshash":"247309d9b786b4b683a375a4947f000ba17a9e91f889ccd4e182d5c01eb87dd007bf6d","size":76315,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.172308Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/osd.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"076c97e53d74917eae69af9dd20be849","sha1":"21907072248f1b1b29c91180f1a5cfba4621d999","sha256":"bdab5a45cd656121670184c9dfb1375f4c34f0345ff3232c7ab1d4c4ff6e4ade","sha512":"196f5cd192af3b8875153c112d3856aac24994c362615a9c476120b7d10f707b5a8af9f91fbcd08f5efb358be2e83b5c95508d95473f5d35355360b2ed4e334f","ssdeep":"1536:qVWVavK69M67W33NH6De1Z6xsjjVJCUH9+dce5B4jbRTrv0s:RYAH6c6xsv9H9+dp5e1Trv0s","tlshash":"3573a5cdb65270568213a0b6417f014fb23ba999e858447cb149e4d57c74abe037bfbc","size":74467,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.149258Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(4).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc27846f27e9a4d46e602a2ad98c394f","sha1":"c8433a83e74965bc468046618b79803304482823","sha256":"4883cb5443a9e8c527be6e9bf0bed75d2ed21ba32f143c9c5433c7d51e326bfc","sha512":"797ed047f1b986debb2a331048dc79e9d9d48aef3989e5173cf258f554f1b8407539e1fb18b8935952e8132ccf68bcd36cede2ae8b78e59523698c5a3f3606f0","ssdeep":"","tlshash":"b7d0230e2778d976b01d8310f78f508242d0f945c5d3a314163385701ea2cf75140d0d","size":210,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.16045Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b44abd1ae4ee84852bd62ca0f397736b","sha1":"ae25c9c0ab6bd017a5b7ca1d3fda9a895a8d524f","sha256":"caaa8e3185f9747eaab06c4633bca60bea0aff468e850d8d309bb979e6122aba","sha512":"d4e7fbc5d48b1a71a7a8f61f9c639635ebc7287ed82c8dab44a2eb244ac3056ac03f96dc4de5056fc41939e956cbde2c4b440d5666f77dd0a0a3717056eec349","ssdeep":"","tlshash":"339004c57cc531117577c303d5d57740d31333401177c075c044454c541745711d30cc","size":50,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.206037Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f993ddde773932063fdaa1fb569de4ea","sha1":"283700d114f1053e53301d0c5564b95d0873913d","sha256":"3121bf432913440e08b1bbdc8b31914c5a18b3517a28028c7acafc2ee95c440d","sha512":"e84b50334e52634aae4038bcdf5661213bbd33ce29f01199ca068b24a225b05393276dccbc82b3bf354fd35130c7592361c44599ddcfe5b735afc92d0bb24b62","ssdeep":"","tlshash":"8b116a3a9c3f4bbc476a52279478c0057ff6140ca923fa44b38cc4aa9d22b4034aab58","size":1068,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.206774Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81a6197e82ed6674ed12cb2cc12ffdcf","sha1":"6831aefdc2a7a3b0082665e6564b7f4e1473dee3","sha256":"55d6e68cddb41293bb8ff1b6ea547be7819ebd29075ddaf30659aef8fc54a52c","sha512":"dc92f1eda46c3a826bf7e115b4f7eabd3f8d8ed9f1e347c9772ceb0200cc0be1658ed96400334aa4504e49041520d20be1a7c5cc422a4ffbdf5fab475cb74a0e","ssdeep":"","tlshash":"e3600000a880000a00cc0a00a2000c00ac0800200a300888000800a8080088000a8822","size":17,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-06-21T10:59:03.137902Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f30fdf37890eca10f7e3984a685a8c5a","sha1":"629a4937aa25191fb8d22b174bc50c48ed937a83","sha256":"f8c3bc2ef10d4dc4f34be9a520c2b7437469575b53a57a09f8fcce514d92450b","sha512":"742664c5cd84faeee3e562bc4f4f11d215069c9573cfd820458ebe4ee0d6205e2a8431186942f5bcbd8668e69a788aa2ee276ae9a5b67c3f9d188e031046b984","ssdeep":"","tlshash":"e5c08c258cf21a59193d0628b10ea84afe7444360fb4c6ec4168d58d16a84bd820ea4d","size":160,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.208234Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/sandbox%20eval%20code","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-06-07T08:18:38.896325Z","times_seen":921522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/beacon.js(1).download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1827f116c73f319409b97f10b8a58ade","sha1":"16cdf30fce69405601446632e34fc15706b963b8","sha256":"a256529bd5b1b8846f8d2536ce7581fb6cea4479992f222d01535903dff48d79","sha512":"5e15653f5b13b16c7f28c2ea2275056989fa03097edf324a886669554bd228fc45b56e31685e011c5c7fd16fcf612464f3b982144bf7e2411a4ab973906eb135","ssdeep":"","tlshash":"0a31b5f0300a34548cbba3d5398fe40b123e0127695c8ec29942a56c9d398d706f6f6e","size":1469,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-04-19T06:42:26.424551Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de82d224204bfe5561e17154fde79d03","sha1":"802dc3fb292ff945e454365a87d26ada48408a86","sha256":"99071b4c8772d0d9c9a901a5a5ed5051d4b75a863f0518a5dadf42a4fee979e7","sha512":"33100316697590d4162f5466cd44ae17b000c12e107688cbd7cc6de18fd66a97d91222d0951da3bd61cc3ef751dfbe7c3dee515955626703139fc5caff01c419","ssdeep":"","tlshash":"11b092ce7400392a29eb8e044b223f633a6b0062a323003498300d0cb8700e3c42a1c2","size":123,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.209632Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(10).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83542a59d1ce30ff4d83280cba393225","sha1":"39620a36058844ca35529210215f75ec6051742a","sha256":"249e789a8eda90d533ff00f0cc43e9619210786967105478187da48ee66c03cf","sha512":"e488640be8c18c05c4778749ed92229453fbdb6072640d08f2b651561fa708f4116055f4bd7f1ec69b7072c5edde34fa55efc8174009610c09a4b466447fadb2","ssdeep":"384:YdH+10czncEcEyDVDGV3HT5ZgXYwe/2hcfSbsRtRivbgty42YDWyQiG+DX1Y:YdH+10cbc0WGBHTrgX4jSo1ivbJxOyiS","tlshash":"e9a2f99a7330b4b346f3a0e7606f1943b025c56af408d4bd729ddce264549ea03b6bbc","size":22678,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.180545Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(3).html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"967702e8b567477450488e164da98d4a","sha1":"85a7a276a5a8630f1658a54ddd2d847d7236c555","sha256":"042ea45a5510131567b2eab1b84b8b2ee4256a9dded30930f9f9ec2db42ace32","sha512":"9e79ade0498ac09e78fa8b90a8eae9ca7b4dd23dc506a3bca6758fe210153b610aa158c08e4904e7a0a02466cf4d45bbdf83bba8c446fbf7fc8aa8576b4e91cf","ssdeep":"192:++E0tw929kVJ1eNZS0fW3cSS1t0uSrY4j:+Ln9gkVJ1eN4VsV6d","tlshash":"d542d7a975a4b035c27371f1252f150aa573384be8442c5de2a08ae17eb06cb554ff7f","size":12196,"data":"","first_seen":"2024-08-20T16:15:03.881128Z","last_seen":"2025-08-31T17:25:19.21042Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/quant.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56c8c65389e19396f9d779d62805c4c9","sha1":"ac2539e667bd4d7d23e85d66c3039053f9218276","sha256":"e8d7c60749c1d62942a8e0a6f901800bd14ff3094251373626cd99a8875c6391","sha512":"9e2a3b599f60fd9b5bde2dcd92ef8eed72574b0005c713424827acff6cf9d327001aa3b4f9fa90b1f233087fa3125c5e77284f7d54d046fc1bc546f3734f66ee","ssdeep":"192:F5JNMaKcf+qGcf5L0MCwaAnTA3TOk0cN/udVLwoYXpCm/un:F5rM8fJ57ToTVRudVYzmn","tlshash":"5952c9d8375b341989a7b0a9923f414bf37aaef37c4c58a0d1c59dd06e3464b10baf48","size":13265,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.171525Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b5d5d43af2e57d040e218f57b5e7090","sha1":"d0912aa358e27e61eefb2bb66d8b36cb14363239","sha256":"96c723be551f9f1dd57aa8fd95bc7e2dd05a33cb8b6d411d1e78dfd3f49555a9","sha512":"381cca1e93406d8ccd74280d7eebd7508b0e3cf942a66f288a3492d739a284012051258493229eb9807d7f8ff8d9090d4c7de354518ae5e06f9cc2cd56163af7","ssdeep":"","tlshash":"59b012309816d94512a69058eabd90881c80a4380f8ee9ef409cd544698119b847c8cd","size":99,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.211136Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.google-analytics.com/ga.js","fqdn":"ssl.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f6d7efd99960ab916ee096e061f2e7","sha1":"e21f1b5b99444ed4e4f62308cf616edd93ee852e","sha256":"bbb1ca9c206e0ed72478ea72f3ca038cf739fd540d5d1c2da19620c942e4c4f4","sha512":"1a6172d7bd59e113fb23d09bed6e42141e198709e59442972a15bc6445de0a5d5713611269ffc5fdda04f5cd2bbd81e52cb15bd19ee5fa0b6f163880ed2a34de","ssdeep":"","tlshash":"bb615045e8bf3cf11151200a097b8137632e8813ef5db454bafa52139f6e4de24b2fa9","size":3362,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:46:41.429612Z","times_seen":81758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/zrt_lookup.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2da8c1797d37c6e77c27a95b086f269f","sha1":"e9cbe0f2b4cca0ee1698d391765f67afd26fff07","sha256":"f72f2cd413af736774f64bf1eac7ae2ea49a2940bbd9da25c2ca9fcaa190cd29","sha512":"c29854f7f634a873d24d211e35825e7e1f6c0f9125386bc416d757f25f4639c6f61605ae9c1b2f4355a2ea54404617dcef176028ab8e67c7ba2ee9564005cf61","ssdeep":"192:DjQWJROJ4NbOT4zMhRjql83FIOZVT5K7C2dI75v7A4:UJ6YTjxIQVTF2dIN7","tlshash":"1822f7cdb730646742f3547551af22039077da27b858e4b55109c8e1a8b8b9e02bbfac","size":9937,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.212707Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ngnpNuTQia9-adWoQUjidzybGxpVXp56Dx9ra3RUBDA.js(1).download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b4162acfe595b844b968fb119c74706","sha1":"423492558db9b5e08985eaadce6de187d92ebde2","sha256":"9e09e936e4d089af7e69d5a84148e2773c9b1b1a555e9e7a0f1f6b6b74540430","sha512":"0055999cbfa5851ffce90741acff2cab06322155b727cb325a9d4416c24e50f2ca3cd43da780594bb3259058dca37d01945f2ff05fd4bc8294017a9bd0820f10","ssdeep":"192:cUyE0tw929kVJ1eNZS0fW3+SS1t0uSXY4s:HHn9gkVJ1eN4VOV6y","tlshash":"1742d8a975a4b035827371f1252f250aa573380be8442c5df2a08ae17eb46cb554ff7f","size":12282,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.148505Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(4).html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"967702e8b567477450488e164da98d4a","sha1":"85a7a276a5a8630f1658a54ddd2d847d7236c555","sha256":"042ea45a5510131567b2eab1b84b8b2ee4256a9dded30930f9f9ec2db42ace32","sha512":"9e79ade0498ac09e78fa8b90a8eae9ca7b4dd23dc506a3bca6758fe210153b610aa158c08e4904e7a0a02466cf4d45bbdf83bba8c446fbf7fc8aa8576b4e91cf","ssdeep":"192:++E0tw929kVJ1eNZS0fW3cSS1t0uSrY4j:+Ln9gkVJ1eN4VsV6d","tlshash":"d542d7a975a4b035c27371f1252f150aa573384be8442c5de2a08ae17eb06cb554ff7f","size":12196,"data":"","first_seen":"2024-08-20T16:15:03.881128Z","last_seen":"2025-08-31T17:25:19.21042Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"51e2299d1daef82bcd1b196928cbd6bd","sha1":"adba5f33a33eb37ff7de14d02c2a60a8f3838c9b","sha256":"9ea35b3006cff0293ef4abcdce4d3e7a5455fb109d4e991064e77b564bfc0457","sha512":"c5f2ef957fb94e3862a0eb58401dccb497dba1361985ec6ab390cd3c6835b446cd77136a4e5b9f3c27e74b28779fdca1e525698dd209ad041c08597bf81c969d","ssdeep":"","tlshash":"6901ceb1a13989c26bfa3988798d304269f4f30adf5a5fa2d7e45f44054bb415313546","size":839,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.213538Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ga.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9372f0ebbcf71f851e3d321ef2a8e5a","sha1":"2c7d19d1af7d97085c977d1b69dcb8b84483d87c","sha256":"1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f","sha512":"c3a1c74ac968fc2fa366d9c25442162773db9af1289adfb165fc71e7750a7e62bd22f424f241730f3c2427afff8a540c214b3b97219a360a231d4875e6ddee6f","ssdeep":"768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m","tlshash":"7723d8bdb351702ad262f0e5457f000a91b9eedaf454d8a8b6c6c6d46c30e6b017bf78","size":46274,"data":"","first_seen":"2023-03-07T01:03:00Z","last_seen":"2026-08-10T16:06:16.650877Z","times_seen":4426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(11).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"219bac9807904a17381a86adfe296f03","sha1":"1c8675e3a2c6ad67d9b6df6345ce3ee9fecd83d6","sha256":"a0a556e0975784e00d56bb4b5ccea4ca10e03f6bc1ff88ad56e903c937689db9","sha512":"bd68e06a03dda307632be6e15f2fe4e993195c7417b5a6620ac93ed52cd86ba7c69bf7396bca86192e49cb8bc347580f5735369a79bdf02bf6cc57c85e7965cc","ssdeep":"","tlshash":"264181e62b10843709aa55d3032f628b101ae7f3b32884692a5cddd65878fc722e5e7c","size":2038,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.165587Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ngnpNuTQia9-adWoQUjidzybGxpVXp56Dx9ra3RUBDA.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b4162acfe595b844b968fb119c74706","sha1":"423492558db9b5e08985eaadce6de187d92ebde2","sha256":"9e09e936e4d089af7e69d5a84148e2773c9b1b1a555e9e7a0f1f6b6b74540430","sha512":"0055999cbfa5851ffce90741acff2cab06322155b727cb325a9d4416c24e50f2ca3cd43da780594bb3259058dca37d01945f2ff05fd4bc8294017a9bd0820f10","ssdeep":"192:cUyE0tw929kVJ1eNZS0fW3+SS1t0uSXY4s:HHn9gkVJ1eN4VOV6y","tlshash":"1742d8a975a4b035827371f1252f250aa573380be8442c5df2a08ae17eb46cb554ff7f","size":12282,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.148505Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(2).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9202daf4b59fe717f733f7f6668de70","sha1":"e79abe0089aa7f488145264ce98ea4696f8c0f0e","sha256":"4e3850a0e70bd9672d8be6fe02964098f3d80f013effb485bb598c2ba864ffe9","sha512":"cb82510374caf9375d4c7578cce74c1073ab56c7ca45872fa90183d2cdd6ca02334f0d000c10841e7c3015f5f3b5027bc58d54b80ca4c7a859a455c293386951","ssdeep":"6144:xx6/G3hByIQnvVRb0OCbitjWoPllv1mhC8PRInMVY+viedcE0CWeBMESuOoq:xx6/whByIQnvVRb0OCbitjWaltmhC8PC","tlshash":"61243bd7b2927077836385ea103f1007b92a9962f40dc4e8b65cddda7c24969127bfbc","size":227647,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.169625Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2194cef1d63deb547e0df6a6e8a1eea0","sha1":"c49f000856d68128de57d934146048fa7664e7e8","sha256":"cd4c63762d089a9e0be1b618c1b476ecb5d3fc80d28e0119a3f32859e23fbd4c","sha512":"5ab3d84325944aaede0b56b12d72a722dc22119267f2e31544d4359d5d8acb1d0952401e6cc9910eccb0ecdab59357b5c3c9c7ecd36ad93d5c0741b85c5765b3","ssdeep":"","tlshash":"9001f95875e2f414a637b035cf3f324b355251973044c9aa7e0ee580ef30527866d3e6","size":730,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.214316Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/quant.js(1).download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56c8c65389e19396f9d779d62805c4c9","sha1":"ac2539e667bd4d7d23e85d66c3039053f9218276","sha256":"e8d7c60749c1d62942a8e0a6f901800bd14ff3094251373626cd99a8875c6391","sha512":"9e2a3b599f60fd9b5bde2dcd92ef8eed72574b0005c713424827acff6cf9d327001aa3b4f9fa90b1f233087fa3125c5e77284f7d54d046fc1bc546f3734f66ee","ssdeep":"192:F5JNMaKcf+qGcf5L0MCwaAnTA3TOk0cN/udVLwoYXpCm/un:F5rM8fJ57ToTVRudVYzmn","tlshash":"5952c9d8375b341989a7b0a9923f414bf37aaef37c4c58a0d1c59dd06e3464b10baf48","size":13265,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.171525Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d48f89cb998f3bd2608a2249a390a16","sha1":"9fac7a2a545c24358ed42ac6619918191ff01b95","sha256":"012266fd23d78b3e873c75c6fa647fd6d9d5f494f3697fd3e252f7b82dc26080","sha512":"52c1a7effbe09a1586ca4adb7e2d8fc515c5711ba858c493b44ab5fdf69eff9a72568d0e119e9331cc90bc148c968d9e1744415b1923b9db35aa21b8a2d824bc","ssdeep":"","tlshash":"e3900233f0c18c7e4031b04421693508b543011c8290502066410830953705b95040c4","size":52,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-11T01:24:45.357695Z","times_seen":14623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/analytics.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af5c617d36e28d19710b882a6824e213","sha1":"39a22dc66ee4d211631f701d349bd3eb7ee20824","sha256":"eaf1b128b927ac2868755cb7366d35554255c8af362235afe270f9614f8c806d","sha512":"3a4325c38aaf546235fc7802956ac5d3ff0c0fbd4959baa93b249ef9812fcf43029fec8a8f9bb2c006e94c3532e36fdd5f432fd94bc23f33ebc52e603d88f3af","ssdeep":"768:naWWnt3d/a52Ug0yPnBJVuMWW0YOaCA/zXebYUDTJtWHx6g0stZu:nar05QpBJV6W0YOLWH8g0sW","tlshash":"6b130af9b7827466d3a271e4403f1007907eadc5f449d8e4a54ad6d06d38eab02bbf6c","size":45229,"data":"","first_seen":"2023-03-07T01:29:38Z","last_seen":"2026-08-01T14:03:56.841585Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ga.js(1).download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9372f0ebbcf71f851e3d321ef2a8e5a","sha1":"2c7d19d1af7d97085c977d1b69dcb8b84483d87c","sha256":"1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f","sha512":"c3a1c74ac968fc2fa366d9c25442162773db9af1289adfb165fc71e7750a7e62bd22f424f241730f3c2427afff8a540c214b3b97219a360a231d4875e6ddee6f","ssdeep":"768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m","tlshash":"7723d8bdb351702ad262f0e5457f000a91b9eedaf454d8a8b6c6c6d46c30e6b017bf78","size":46274,"data":"","first_seen":"2023-03-07T01:03:00Z","last_seen":"2026-08-10T16:06:16.650877Z","times_seen":4426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f.txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9202daf4b59fe717f733f7f6668de70","sha1":"e79abe0089aa7f488145264ce98ea4696f8c0f0e","sha256":"4e3850a0e70bd9672d8be6fe02964098f3d80f013effb485bb598c2ba864ffe9","sha512":"cb82510374caf9375d4c7578cce74c1073ab56c7ca45872fa90183d2cdd6ca02334f0d000c10841e7c3015f5f3b5027bc58d54b80ca4c7a859a455c293386951","ssdeep":"6144:xx6/G3hByIQnvVRb0OCbitjWoPllv1mhC8PRInMVY+viedcE0CWeBMESuOoq:xx6/whByIQnvVRb0OCbitjWaltmhC8PC","tlshash":"61243bd7b2927077836385ea103f1007b92a9962f40dc4e8b65cddda7c24969127bfbc","size":227647,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.169625Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb881a684589b1d2548e82f3567cf7d4","sha1":"d92b7601f4d7fd747ea048b04aa0024a0c5fce0f","sha256":"c3f1b6c77bd3a9701295ffa509ac922c777dce2aa28881db7b97695cb32dbbea","sha512":"026abd12461512a10bf2ec07926047798bee44b65709fac2110d83e55b9d1b1bfd244c8c6a8bf75b46d30e5440577bc86dc21937004fabfe7b47fe46299aca1c","ssdeep":"","tlshash":"dad0a70766c6467dfb79444ac40211819e02c66dd5033e22dbe460fe386072b3c30e93","size":247,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.215867Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(7).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2de85f9e5d19914fc26c65ad7f428ea7","sha1":"23330113b9ffbe5530ffbbf7c0fe5ad37176fb94","sha256":"51fee405c7fc399469a34576425ebf33527ef46c76162da4d5258d54e53728b8","sha512":"8e0298f13ac31610b7426d1e1b75d6c7fb838c931286e90c36b4bbc4644439c4160e5076ce2109212779880669482960bd5c388987a541fb9f4c0abef024384a","ssdeep":"","tlshash":"3cb09b0f277495718895d351f5c751c141e4b64b811566440a21569415d1da1554190f","size":122,"data":"","first_seen":"2023-12-09T21:56:02Z","last_seen":"2025-08-31T17:25:19.142284Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f32b36767d5d3d01946d74cba6c40aa1","sha1":"dfb2bccdf73c233e20c3dbb4a08527e53b188367","sha256":"2db0b2dcc934d4226f0235a4983d55b722e25d5b3ca56912497cc3059858884f","sha512":"1734c172fac9466c61c03c52a2bcd5d13815cbf961a64af720f0f7a912212252960cde2e46740d706e38dd08d337d6cf64bb40fc4d8dc3299836add62cbcccea","ssdeep":"","tlshash":"e5c08c3a438164b365672ca7ac246cc929e543c80223cae06f40fa8050b06621ca519d","size":159,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.216622Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58e1fb724c32479a772100f7f7a0fb2b","sha1":"b1d50d51665d00f906c6ca9a8c06a75b11e508c9","sha256":"e4ebfce10d5d252c55aa2fdae8f368f0e745435576dd85212640745c94d5892b","sha512":"191c9931aa6ac3de2d6fbc0f2143490a2a9d0f7ae87468f435f10ab828073df3f1a3c5a644f5bb72867c388f85d5da9fc12e1f03d6e173cfb165d5ef9dfb2765","ssdeep":"","tlshash":"fd41b838161c647ad8757666955f37ce3a3222bb624108a00a0cdc75aefcf9786d9ec2","size":2004,"data":"","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.217293Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"f315f5f2c187a05af1ace62d5f6aa477","sha1":"47d77a2a1665cb6202028ecd89b50920287d9148","sha256":"166a4ec3cb90d525f7f744c7616c01b36bebd6dcecd486c8f5be14ccc0a7b3da","sha512":"6a12034c64743bf5c625ee993a758561284de5950504d61abbd5273500db08efd1b2b82d71f7b378ebd4c1b3c9c22bae645564357b96bbf4f69de03b6214865b","ssdeep":"","tlshash":"1c9002f990a10009ad203ad00dc213454c19935434014e041ac5387894843169c17384","size":54,"data":"","first_seen":"2023-03-07T01:02:50Z","last_seen":"2026-08-13T03:22:48.443018Z","times_seen":34834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/edmonton.webp","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/edmonton.webp HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13946\r\nserver: cloudflare\r\ncf-ray: 977e39491fef5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:51:54.523378Z","times_seen":17870380,"resource_available":true,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(7).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(7).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39491ffc5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"2de85f9e5d19914fc26c65ad7f428ea7","sha1":"23330113b9ffbe5530ffbbf7c0fe5ad37176fb94","sha256":"51fee405c7fc399469a34576425ebf33527ef46c76162da4d5258d54e53728b8","sha512":"8e0298f13ac31610b7426d1e1b75d6c7fb838c931286e90c36b4bbc4644439c4160e5076ce2109212779880669482960bd5c388987a541fb9f4c0abef024384a","ssdeep":"","tlshash":"3cb09b0f277495718895d351f5c751c141e4b64b811566440a21569415d1da1554190f","first_seen":"2023-12-09T21:56:02Z","last_seen":"2025-08-31T17:25:19.142284Z","times_seen":4,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(8).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(8).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3954aa9f5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55505,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1698)","md5":"a5bda1331fd81f7bb6f6c74f11bcdd4f","sha1":"b9f69dee128f522d1d4084f1d94660f357eee86e","sha256":"221784c7324ed5061acd17f66a6979b54baf49f8d1a4fd9af5574bf756128057","sha512":"9d6548f79256fd23f0683100bc8a76dd2a3b7848d9894c0ebff4aa6041aef9619cff1f450a61921f39019e0c3c7e401ad9a47bd9c1c5b2f89ac312a06f6b66e8","ssdeep":"768:3leU33bN6lZzin88IqOqreUqw+rNuCc3wgSoPl5aliGXR4C6toG6D52P9Fr:3leU33bEP+n8gdqUqw+g1PzGdRM64P9B","tlshash":"34432b18f710306681e390b1553f1a8bb337a59ae50a84fcb184d4e4adbd9ad8377f78","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.144014Z","times_seen":7,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/rules-p-31iz6hfFutd16.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/rules-p-31iz6hfFutd16.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 3\r\nserver: cloudflare\r\ncf-ray: 977e3948ffbf5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"8a80554c91d9fca8acb82f023de02f11","sha1":"5f36b2ea290645ee34d943220a14b54ee5ea5be5","sha256":"ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356","sha512":"ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a","ssdeep":"","tlshash":"c7200000000000000000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:10:31Z","last_seen":"2026-08-13T10:52:12.283096Z","times_seen":431403,"resource_available":true,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":768,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ads(1).html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(1).html","date":"2025-08-31T17:24:52.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/ads(1).html HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(1).html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e395338565694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"6ada0f81a621feb267d27267ae295089","sha1":"12ad73372dc753769522e0a6a2a7dfe3032cfbc5","sha256":"82484f62aa99df58774198e9f5fbdbaa0352668575d7abf0a87cf02f32616023","sha512":"fe7d5c4a709ce3d463ae424cd007d4c064d7e8ad67abd0641cc345f9149ee70a4dbb5b1bd1f0268181661cff890a0db2df086daaf83c40f8f179677a302a8664","ssdeep":"","tlshash":"a8d097b82526201b8101b7e1a9d8f0163982ce91f0898c02b88030aca4cc318dcf35b8","first_seen":"2025-08-31T00:07:19.3459Z","last_seen":"2025-08-31T17:25:19.146156Z","times_seen":5,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ads","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/ads HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-length: 9609\r\nserver: cloudflare\r\ncf-ray: 977e3954baa95694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9609,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (9609), with no line terminators","md5":"c8814652c1532954a5bc0f090fa502c7","sha1":"b42e2112d482b00ab0cbb026d430c575aca7c363","sha256":"1cf7f69b5fb3149d7e6bdb8e8030bc8bd479e7afa66236631a2b996d57b2f876","sha512":"cbe804c7957dd39aca6d98628af0aaac5bf838e14ceff2317c1899122fa9f72a6d821ec6f580689871f8cde1180e9ec65d6cb376b60ec48e8ce43af7f1e46e19","ssdeep":"192:0+nMkgy9gUtu0SwhnImkNxgyHTBeqCXgy1569g2abFRe55w8b:0DR+5T1kNCJQAWg2abqHwi","tlshash":"73127d9b7991cc1b829791e5e377b38c806e72867ec1d48897c06db512835fb0de4ec5","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.147031Z","times_seen":4,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(4).html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:53.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/saved_resource(4).html HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39576eb55694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"afbd7bf3ba8fab30bf9d2a3b49f1f06e","sha1":"8426058607fe1eda5cf0073502856a093ed03596","sha256":"5b58ed9a9e13ea072b12b9c7f5b565f95e900f11f5b39bdfd7f88d66f34d4f4e","sha512":"5eb318dca46284e7e3efb64c22e92ee39c2d287954c98a6528c84a905f70d8f80c1b14988112e43d1a1b5aeb939f619a3589a55e5b37a5836418e8e00c31f019","ssdeep":"","tlshash":"51e07d6f1e135443501072d0f8f9f0251815ca50a004dc41a4c0349c29dc75c5893ee0","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.147833Z","times_seen":6,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ngnpNuTQia9-adWoQUjidzybGxpVXp56Dx9ra3RUBDA.js(1).download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(4).html","date":"2025-08-31T17:24:53.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/ngnpNuTQia9-adWoQUjidzybGxpVXp56Dx9ra3RUBDA.js(1).download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(4).html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:53 GMT\r\ncontent-length: 12282\r\nserver: cloudflare\r\ncf-ray: 977e3959696d5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12282,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (12282), with no line terminators","md5":"6b4162acfe595b844b968fb119c74706","sha1":"423492558db9b5e08985eaadce6de187d92ebde2","sha256":"9e09e936e4d089af7e69d5a84148e2773c9b1b1a555e9e7a0f1f6b6b74540430","sha512":"0055999cbfa5851ffce90741acff2cab06322155b727cb325a9d4416c24e50f2ca3cd43da780594bb3259058dca37d01945f2ff05fd4bc8294017a9bd0820f10","ssdeep":"192:cUyE0tw929kVJ1eNZS0fW3+SS1t0uSXY4s:HHn9gkVJ1eN4VOV6y","tlshash":"1742d8a975a4b035827371f1252f250aa573380be8442c5df2a08ae17eb46cb554ff7f","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.148505Z","times_seen":7,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":326,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/osd.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/osd.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 74467\r\nserver: cloudflare\r\ncf-ray: 977e3948ffc75694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74467,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (65425)","md5":"076c97e53d74917eae69af9dd20be849","sha1":"21907072248f1b1b29c91180f1a5cfba4621d999","sha256":"bdab5a45cd656121670184c9dfb1375f4c34f0345ff3232c7ab1d4c4ff6e4ade","sha512":"196f5cd192af3b8875153c112d3856aac24994c362615a9c476120b7d10f707b5a8af9f91fbcd08f5efb358be2e83b5c95508d95473f5d35355360b2ed4e334f","ssdeep":"1536:qVWVavK69M67W33NH6De1Z6xsjjVJCUH9+dce5B4jbRTrv0s:RYAH6c6xsv9H9+dp5e1Trv0s","tlshash":"3573a5cdb65270568213a0b6417f014fb23ba999e858447cb149e4d57c74abe037bfbc","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.149258Z","times_seen":9,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/audins.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/audins.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 821\r\nserver: cloudflare\r\ncf-ray: 977e39491ffd5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":821,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (466)","md5":"337980e2d678bde7a7d4a20bd8df1f95","sha1":"65d79168a76a202950c18fed09becb10884b38db","sha256":"d98f76f0461187c365efd671a87749384de00b589e87fb30c0486a892769c412","sha512":"430e7f9c7186b639ae7021975c206ce7cd6a3c7baf9d873e6ab4f18b85b33993f797b7a4a8dbb51bc303489bbff3fe4e632ac0576f67c7e1a33ba18ca0b22ae5","ssdeep":"","tlshash":"3301abab4c42143c9b7950bef23ed68cf3b502a861a1e022ec4ccc1d042ceee1c59e9c","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.15007Z","times_seen":9,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:51.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/saved_resource.html HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39508bc15694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (909)","md5":"36076f87e66f75e52d33a0954352c348","sha1":"15e1ee6cc81019c12c1284dbfea6baa53fec8c29","sha256":"f1226d80ad9fbe0e5d61f50f3d09b77d5d40110ebb68de338d283e574d35454f","sha512":"eb6e7bea9afb58738ccffe13729f9d81cf8c56fde8e6841b61e8199abfbec1be6665904aaa87b61a7c3a81580423b6a098f76c0e8797ab5f44dad03646b64712","ssdeep":"","tlshash":"6111259bba20683e54278b68a5f532013d079762f25283717cb0243474d03f75c671ef","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.150837Z","times_seen":6,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adservice.google.co.in/adsid/integrator.js?domain=cells-link-nat-prompt.trycloudflare.com","fqdn":"adservice.google.co.in","domain":"google.co.in","tld":"co.in"},"ip":{"addr":"142.250.178.66","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:52.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.co.in","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:23:33 GMT","end":"Mon, 03 Nov 2025 19:23:32 GMT"},"fingerprint":{"sha1":"3D:36:21:89:C9:CB:7B:84:60:48:79:1A:07:AD:C9:AF:72:72:A7:A1","sha256":"59:CA:A2:A3:0F:C2:B0:16:69:B7:34:1B:E1:13:75:B0:04:08:9F:41:7A:44:C1:53:C8:A5:1F:4B:B5:FA:5A:4E"}}},"request":{"raw":"GET /adsid/integrator.js?domain=cells-link-nat-prompt.trycloudflare.com HTTP/1.1\r\nHost: adservice.google.co.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1580\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\nalt-svc: h3=\"googleads.g.doubleclick.net:443\"; ma=2592000,h3=\":443\"; ma=2592000,h3-29=\"googleads.g.doubleclick.net:443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:51:54.523378Z","times_seen":17870380,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":134,"dns":38,"connect":15,"send":0,"wait":115,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/favicon.ico","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:52.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-encoding: gzip\r\ncf-ray: 977e3953a92a5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"77a9e5007815d923a4964a507953bd2c","sha1":"356a6a4942caeac5195d852ddeff558525074446","sha256":"33ca72f1eac56793d1fd811189cedef98004a067c85b1143083b564814a4b0db","sha512":"1a7dcf9abc95bd21dcfc78110ddde628b71263779c4f24361e55a7d18773d1b748cab978e19fdef34ad6dbc84d5f8a648a3af7fe192a8925b254a0ad086c33cd","ssdeep":"","tlshash":"ed218c316d44730ec3e273b881398a16f10a8c0d938df78a009cf155a875ca9279edb4","first_seen":"2023-05-17T00:41:01Z","last_seen":"2026-08-11T21:52:49.495226Z","times_seen":219,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(5).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(5).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39491ff75694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0af861208b33d24b931e0a5bbf8c641b","sha1":"3d6053357149c7b50bb0fc4bc77ffe278cba93b2","sha256":"e027ce4c5e74170db714c7298c5dbc77a9bba930357431f8dd9a527c3e30fea8","sha512":"1013aff6c0b229aefd8258d1577874a4ef03768d56384526d9af3009b2c6c7e0e867bd93550bb6ed8540798ffd2fdd79bdb08e751a4cc83b34a501eca6f6a87d","ssdeep":"","tlshash":"4ed0231f76f69571485e4350f6d751c155b4f5464f853744193651501890cf25104b0f","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.157221Z","times_seen":8,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/beacon.js(1).download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/beacon.js(1).download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 1469\r\nserver: cloudflare\r\ncf-ray: 977e3948ffc35694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1469,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (1469), with no line terminators","md5":"1827f116c73f319409b97f10b8a58ade","sha1":"16cdf30fce69405601446632e34fc15706b963b8","sha256":"a256529bd5b1b8846f8d2536ce7581fb6cea4479992f222d01535903dff48d79","sha512":"5e15653f5b13b16c7f28c2ea2275056989fa03097edf324a886669554bd228fc45b56e31685e011c5c7fd16fcf612464f3b982144bf7e2411a4ab973906eb135","ssdeep":"","tlshash":"0a31b5f0300a34548cbba3d5398fe40b123e0127695c8ec29942a56c9d398d706f6f6e","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-04-19T06:42:26.424551Z","times_seen":13,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/roboto/v20/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cells-link-nat-prompt.trycloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15736\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 10:24:22 GMT\r\nexpires: Fri, 28 Aug 2026 10:24:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 284431\r\nlast-modified: Wed, 24 Jul 2019 01:18:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15736, version 1.0","md5":"479970ffb74f2117317f9d24d9e317fe","sha1":"81c796737cbe44d4a719777f0aff14b73a3efb1e","sha256":"48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3","sha512":"13f6b2ecc2407445c1f97109ededcc8ac64fae89fc90432a28ffdaef233b373089be25731718408c32ff3cf632afb260d0035f85fbd8b1b4e068a0d7baf9f6a8","ssdeep":"384:4V2g2L6wzYU8GCyt8jJlPaIi8jGCIWzUy+k:Uk6+8UtaJlPK8jGfeDn","tlshash":"6f62bf0cc5245712f8120d37b695aa60cf1995cf1f787af71bedb822f560bc685de121","first_seen":"2023-04-05T13:27:57Z","last_seen":"2026-08-13T07:57:32.895521Z","times_seen":8981,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":122,"dns":0,"connect":21,"send":0,"wait":21,"receive":5,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ga.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/ga.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 46274\r\nserver: cloudflare\r\ncf-ray: 977e3948ffbc5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46274,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1305)","md5":"e9372f0ebbcf71f851e3d321ef2a8e5a","sha1":"2c7d19d1af7d97085c977d1b69dcb8b84483d87c","sha256":"1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f","sha512":"c3a1c74ac968fc2fa366d9c25442162773db9af1289adfb165fc71e7750a7e62bd22f424f241730f3c2427afff8a540c214b3b97219a360a231d4875e6ddee6f","ssdeep":"768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m","tlshash":"7723d8bdb351702ad262f0e5457f000a91b9eedaf454d8a8b6c6c6d46c30e6b017bf78","first_seen":"2023-03-07T01:03:00Z","last_seen":"2026-08-10T16:06:16.650877Z","times_seen":4426,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(4).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(4).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39491ff65694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"cc27846f27e9a4d46e602a2ad98c394f","sha1":"c8433a83e74965bc468046618b79803304482823","sha256":"4883cb5443a9e8c527be6e9bf0bed75d2ed21ba32f143c9c5433c7d51e326bfc","sha512":"797ed047f1b986debb2a331048dc79e9d9d48aef3989e5173cf258f554f1b8407539e1fb18b8935952e8132ccf68bcd36cede2ae8b78e59523698c5a3f3606f0","ssdeep":"","tlshash":"b7d0230e2778d976b01d8310f78f508242d0f945c5d3a314163385701ea2cf75140d0d","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.16045Z","times_seen":8,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(6).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(6).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39491ffa5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"fa156c297f379f631fc7bdb4c5510ccd","sha1":"935cb48186bc866aba28f7869253f64396044956","sha256":"f2c86ce564352bd0424b59ca94f621a47e325aac069927ee1f8a6d30ec5eb6d2","sha512":"089a43619355a8860f250ca18540ddff1c71784b41218513fc21fe22b54b279f4e7f899462a40066df58c720c7fcc87d28c97751fce9cee2a7e048593754e8c4","ssdeep":"","tlshash":"5eb09b0f2b3459b54855d350f5cb51c14190b649c15766140a2156a555e1da5554190f","first_seen":"2023-12-09T21:56:02Z","last_seen":"2025-08-31T17:25:19.161316Z","times_seen":6,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/bootstrap.min.css","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/bootstrap.min.css HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39490fdc5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140936,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65324)","md5":"04aca1f4cd3ec3c05a75a879f3be75a3","sha1":"675fcf28f9fbf37139d3b2c0b676f96f601a4203","sha256":"7928b5ab63c6e89ee0ee26f5ef201a58c72baf91abb688580a1aa26eb57b3c11","sha512":"890415fa75ed065992dd7883aed98bfbdfd9fa26eec7e62ea30263238adca4eecd6204f37d33a214d9b4f645ad7d9cc407d7d0e93c0e55cf251555a8a05b83ff","ssdeep":"1536:un1QWSUPBT+QYYDnDEBi82NcuSEz/NvT/gIENM6HN26e:q1L7PDxYIENM6HN26e","tlshash":"bdd373a7f5a0312da467c61864d0bafe156f8285d7221ffaf42737644b895cb0a73e0c","first_seen":"2023-04-05T03:23:19Z","last_seen":"2026-08-13T09:28:42.259471Z","times_seen":22963,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/detroitchicago/edmonton.webp?a=a\u0026cb=2\u0026shcb=32","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:51.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /detroitchicago/edmonton.webp?a=a\u0026cb=2\u0026shcb=32 HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39508bc95694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"9cd3b32aae1a81a9d88a46b260efd596","sha1":"ae926f5e4bd3fca3f9bcdcfd11ad71afa526ccee","sha256":"e30530b56788957b9607cef229bb39963029c7aad986edf57853ce7c7dd7d7f6","sha512":"0535ff609e06a1205387473005bdbe879c53eabcdf384e194e8d4a4fe884c32b8109df610f6c4caee89e9ef53211c4c09885b6f0feac26125ba91ed453490f96","ssdeep":"","tlshash":"49f0e11bc792210ef07954a47d8223d1731e0361f8114f74bd926e38d02c474183abcd","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.162968Z","times_seen":7,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(1).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(1).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 12\r\nserver: cloudflare\r\ncf-ray: 977e3948ffc95694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"124d3918819ab4c349a7f9fa979bef07","sha1":"6ad167d76a8768130783cd19aa6d8143c0b1bf37","sha256":"daa795332e5dbcf893adf2d5f3349f02b8c1cb957ff3b5f4c11b742e33c3376f","sha512":"4f7f15b28c6b38fc66002dbee29688b801a689b716093ba63adbe23fffe144621198973a8ac4981ff2d20881bd4c84e45130a631e5b9a5eae3a5fe26c106f7d0","ssdeep":"","tlshash":"b860000c00c00000000000003330000033c0330000f00c330000000000000cc000f000","first_seen":"2023-03-07T01:11:30Z","last_seen":"2026-07-24T01:25:08.761647Z","times_seen":41,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/l","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/l HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\ncf-ray: 977e3954cad05694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:51:54.523378Z","times_seen":17870380,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/jellyfish.webp","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:51.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/jellyfish.webp HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59137\r\nserver: cloudflare\r\ncf-ray: 977e39506b9a5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:51:54.523378Z","times_seen":17870380,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(2).html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:51.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/saved_resource(2).html HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3950dc595694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"56babbc7b72681bc9fa0d396a0d0a192","sha1":"edafd950c661a9814c452fc3ea7d6aea5fe99115","sha256":"5205e20104d0d52911cf1567bba14e4f1e9d9e759adc0c9e864c82cf4f4f03e3","sha512":"4e1988440d21f720fc0241b614dccd74f8caef111175f32a4d338dc31ad07e7a9743d508cfde301d5a0414c742fa282c1752875e56d02be4cf60d8e88ea09147","ssdeep":"","tlshash":"6bd022bb6412112b5220f6e0aacef2064c80d910e0488c01f88434ac24ec7a8d8e39b0","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.16477Z","times_seen":6,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(11).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(11).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3954caca5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2038,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1032)","md5":"219bac9807904a17381a86adfe296f03","sha1":"1c8675e3a2c6ad67d9b6df6345ce3ee9fecd83d6","sha256":"a0a556e0975784e00d56bb4b5ccea4ca10e03f6bc1ff88ad56e903c937689db9","sha512":"bd68e06a03dda307632be6e15f2fe4e993195c7417b5a6620ac93ed52cd86ba7c69bf7396bca86192e49cb8bc347580f5735369a79bdf02bf6cc57c85e7965cc","ssdeep":"","tlshash":"264181e62b10843709aa55d3032f628b101ae7f3b32884692a5cddd65878fc722e5e7c","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.165587Z","times_seen":7,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/roboto/v20/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cells-link-nat-prompt.trycloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 Aug 2025 18:43:50 GMT\r\nexpires: Fri, 28 Aug 2026 18:43:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 24 Jul 2019 01:18:37 GMT\r\ncontent-type: font/woff2\r\nage: 254463\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15872,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15872, version 1.0","md5":"020c97dc8e0463259c2f9df929bb0c69","sha1":"8f956a31154047d1b6527b63db2ecf0f3a463f24","sha256":"24369e1b2461af9dcefecaf9cc93d64cf22a4c5bac32506100b9e21014507bcf","sha512":"0c2d5d9fd326a1cf4cb509d311ee2a5ef980e951a8996d6811d401b7ae154cfb80ae21dbb03adcb9171ab24d42a35424cd90c6966f584110bdd1c63dec099a13","ssdeep":"384:+C8MpkNjkUN5FUgPE22HSoKuywE6Mw+hz9GicxFCdW+d4hCBXE:VFokIFzQSoZywE6MwYsxFCY+dvO","tlshash":"3162d16d56c56032c45d8fb0071a7fd1a0aefe712ce72c1b26e8018fad0615ff762962","first_seen":"2023-04-05T16:44:06Z","last_seen":"2026-08-13T06:50:18.765057Z","times_seen":4444,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":103,"dns":1,"connect":20,"send":0,"wait":22,"receive":5,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/beacon.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/beacon.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 1469\r\nserver: cloudflare\r\ncf-ray: 977e3948efac5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1469,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (1469), with no line terminators","md5":"1827f116c73f319409b97f10b8a58ade","sha1":"16cdf30fce69405601446632e34fc15706b963b8","sha256":"a256529bd5b1b8846f8d2536ce7581fb6cea4479992f222d01535903dff48d79","sha512":"5e15653f5b13b16c7f28c2ea2275056989fa03097edf324a886669554bd228fc45b56e31685e011c5c7fd16fcf612464f3b982144bf7e2411a4ab973906eb135","ssdeep":"","tlshash":"0a31b5f0300a34548cbba3d5398fe40b123e0127695c8ec29942a56c9d398d706f6f6e","first_seen":"2023-03-07T01:29:39Z","last_seen":"2026-04-19T06:42:26.424551Z","times_seen":13,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource.html","date":"2025-08-31T17:24:52.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/ads.html HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39528f475694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103146,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54025)","md5":"f1a6b9c502830be52aee8067a38424fc","sha1":"a785f6f266b80d2c625dc25e048a9ddb3e395056","sha256":"808d06cc96a88ca83435d3554e80f51ad4a535d47a1afe67322c9d18886a7291","sha512":"e91f3c6d95304016e025738360914f8579486fa0f8569e6519532bc4ad980772bb1d4ac17acee334644fc7ad8654bf4d2e6924fc5b72842543056e4eb220983b","ssdeep":"1536:RfSljkjo4cvQveCaveJdM1QgFRM87gVSVdlrxWePVKnnM+eOqK2FqVJVV:Gfwz2odM9kcNpDurV","tlshash":"00a39e6977516536c1e783a0a03f7709323f9c7bdb434af052d4cde0b9946a201abbac","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.167714Z","times_seen":6,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/css","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/css HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-length: 4630\r\nserver: cloudflare\r\ncf-ray: 977e3954baa55694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5edf279c154917aeae3c5f46cb64b950","sha1":"d3ae8c0f7041cc91ec0800ada47efa787ca52639","sha256":"de194513e4629c7a62da8ab95582cfb3294943483c00ff17a1d6ce80d7ca1477","sha512":"d040ff29fede5d9caf4b666602b5e48f1e251a32bb1a18fac1cd0f74fe70bc3e23e0e73d9b05ebfa1eb22a47f7b6ce15f4f0186120f9feb8fc2101b1d4c47e4c","ssdeep":"96:1OLk+lOLkIZKOLkSOLk8yOLk1OLkEomOLkt1NFOgSbvlOgSboZKOgSbeOgSb+yOp:Ak+Qk6k3k8XkAkEgktbUv7U9UAU+sU7l","tlshash":"e5a17c62088b9014ab830ce577ce7a35fd4e5519204ac47beafd3c689de3e2a53d474e","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.168739Z","times_seen":9,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f.txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f.txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3948ffb25694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227647,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1607)","md5":"b9202daf4b59fe717f733f7f6668de70","sha1":"e79abe0089aa7f488145264ce98ea4696f8c0f0e","sha256":"4e3850a0e70bd9672d8be6fe02964098f3d80f013effb485bb598c2ba864ffe9","sha512":"cb82510374caf9375d4c7578cce74c1073ab56c7ca45872fa90183d2cdd6ca02334f0d000c10841e7c3015f5f3b5027bc58d54b80ca4c7a859a455c293386951","ssdeep":"6144:xx6/G3hByIQnvVRb0OCbitjWoPllv1mhC8PRInMVY+viedcE0CWeBMESuOoq:xx6/whByIQnvVRb0OCbitjWaltmhC8PC","tlshash":"61243bd7b2927077836385ea103f1007b92a9962f40dc4e8b65cddda7c24969127bfbc","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.169625Z","times_seen":8,"resource_available":true,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/analytics.js(1).download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/analytics.js(1).download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 45229\r\nserver: cloudflare\r\ncf-ray: 977e3948ffd15694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45229,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1325)","md5":"af5c617d36e28d19710b882a6824e213","sha1":"39a22dc66ee4d211631f701d349bd3eb7ee20824","sha256":"eaf1b128b927ac2868755cb7366d35554255c8af362235afe270f9614f8c806d","sha512":"3a4325c38aaf546235fc7802956ac5d3ff0c0fbd4959baa93b249ef9812fcf43029fec8a8f9bb2c006e94c3532e36fdd5f432fd94bc23f33ebc52e603d88f3af","ssdeep":"768:naWWnt3d/a52Ug0yPnBJVuMWW0YOaCA/zXebYUDTJtWHx6g0stZu:nar05QpBJV6W0YOLWH8g0sW","tlshash":"6b130af9b7827466d3a271e4403f1007907eadc5f449d8e4a54ad6d06d38eab02bbf6c","first_seen":"2023-03-07T01:29:38Z","last_seen":"2026-08-01T14:03:56.841585Z","times_seen":83,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/quant.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/quant.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 13265\r\nserver: cloudflare\r\ncf-ray: 977e3948ffb05694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13265,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (558)","md5":"56c8c65389e19396f9d779d62805c4c9","sha1":"ac2539e667bd4d7d23e85d66c3039053f9218276","sha256":"e8d7c60749c1d62942a8e0a6f901800bd14ff3094251373626cd99a8875c6391","sha512":"9e2a3b599f60fd9b5bde2dcd92ef8eed72574b0005c713424827acff6cf9d327001aa3b4f9fa90b1f233087fa3125c5e77284f7d54d046fc1bc546f3734f66ee","ssdeep":"192:F5JNMaKcf+qGcf5L0MCwaAnTA3TOk0cN/udVLwoYXpCm/un:F5rM8fJ57ToTVRudVYzmn","tlshash":"5952c9d8375b341989a7b0a9923f414bf37aaef37c4c58a0d1c59dd06e3464b10baf48","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.171525Z","times_seen":9,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(2).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(2).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3948ffcd5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227647,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1607)","md5":"b9202daf4b59fe717f733f7f6668de70","sha1":"e79abe0089aa7f488145264ce98ea4696f8c0f0e","sha256":"4e3850a0e70bd9672d8be6fe02964098f3d80f013effb485bb598c2ba864ffe9","sha512":"cb82510374caf9375d4c7578cce74c1073ab56c7ca45872fa90183d2cdd6ca02334f0d000c10841e7c3015f5f3b5027bc58d54b80ca4c7a859a455c293386951","ssdeep":"6144:xx6/G3hByIQnvVRb0OCbitjWoPllv1mhC8PRInMVY+viedcE0CWeBMESuOoq:xx6/whByIQnvVRb0OCbitjWaltmhC8PC","tlshash":"61243bd7b2927077836385ea103f1007b92a9962f40dc4e8b65cddda7c24969127bfbc","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.169625Z","times_seen":8,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/js","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/js HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 76315\r\nserver: cloudflare\r\ncf-ray: 977e39490fe25694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76315,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1569)","md5":"594318810a9fcf6dac2a811c8b2ec0fa","sha1":"c291cecd6d18f4ff5311fa9ec97c0c81e538cd7e","sha256":"a99df04e686c685d42fef59869777b83f6bfb8f572b4c533e81594b6af39b368","sha512":"8e182b47f06b8c310e4ac936a0fd347daade23e584b98e0fdf2b784e5486dbec269ad2ac1d561dcd950041cd3af80d877e4653c5d9f8a2cc920db6a286e9829c","ssdeep":"1536:dcWXkMHYcsUhjWdEgo51sYmyzL6ZIYddB5m8XG1K92KPQ9XuVvaSf:2WXkG7sXE351sYmjDdB5xN","tlshash":"247309d9b786b4b683a375a4947f000ba17a9e91f889ccd4e182d5c01eb87dd007bf6d","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.172308Z","times_seen":9,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/google_PNG19644.png","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/google_PNG19644.png HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 90917\r\nserver: cloudflare\r\ncf-ray: 977e394928015694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90917,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 1250, 8-bit/color RGBA, non-interlaced","md5":"0188c4962230fb45bdbbd1be49a29e5e","sha1":"3a4b13b443f6f115a351fc90d70ff8919823835d","sha256":"6cc9251169424138ed12f531a4c3fe629549ef8b65ad8137a9bb8ca964f775c3","sha512":"927d7f2702f72433076e4778cd2e2115b47ffe508612490bfa05b26e354e0f5caeb7b95047b3f4dcaf066d70c63982a7c123934f2762b007f5adc78f6ffdd91f","ssdeep":"1536:DpJpzc4H+B3fNwyf6fy2W3d24dl5jbz7XXvbyKqQsd0g:BzBHewDfg3dldltbHHDTq7d0g","tlshash":"5693e1068fa6e4a8c8c8457e44362fd773e68579c064cdca23f0f934efc654b966a5c8","first_seen":"2023-12-09T21:56:03Z","last_seen":"2026-04-24T09:28:09.115195Z","times_seen":23,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(3).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:51.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(3).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39506ba55694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108227,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2760)","md5":"687b6d35c16d13dd2975305c3fdd5861","sha1":"228e61a230e9a39cd5b8053b1f6a69c10dc4a5e7","sha256":"4868e9fb6edcdc42b5171cc42546facd8c66a4088134d2df47c60596bc400713","sha512":"bbde69afca2ee7d4bf2bbe94bd4762621afe9ba070ed34ebac30a239889d12484b9e24c01b06b26304d84d5cfec7bd7dbeb971bd0514bb7363d16c04bb8b9275","ssdeep":"1536:8yfeRoZpiYhEyUQQJ1GC30iXH4+ZYiuXwVTZc36bHzFcM7lrpaAtvmRd9rmXhW:MFyHQuwDjZnqwVGwHzF7lrGRzoW","tlshash":"cbb308da7691b8f38763a9b5006f100bb13fa967f51888b0e184d9d43c749a94237fed","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.17386Z","times_seen":9,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/iconx2-000000.png","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/iconx2-000000.png HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 530\r\nserver: cloudflare\r\ncf-ray: 977e3954babf5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":530,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"e669c962f6ad41bf99d6299f17ffe6e2","sha1":"9796395e3b8f0135afcb46c9c51a7c9aab5d28ea","sha256":"bb3e52068be38d3a18fe444a5611ee5d124f2b36e6734e948a6bf81743e1a8d4","sha512":"51278a281edd34b8105a58c485c927164d79cc526632670d8f7f520a3704c0ee54a5576102260ad6860be5946abef7c4ee2a467ad70bb82eca297277a8c53894","ssdeep":"","tlshash":"a1f075fdc9202529f159ec4e8d700834d1220907d4e362afd81bc0cfbd84bd4312201b","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.174595Z","times_seen":8,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/l","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:53.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/l HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:53 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\ncf-ray: 977e39575e8b5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:51:54.523378Z","times_seen":17870380,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/quant.js(1).download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/quant.js(1).download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 13265\r\nserver: cloudflare\r\ncf-ray: 977e3948ffc65694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13265,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (558)","md5":"56c8c65389e19396f9d779d62805c4c9","sha1":"ac2539e667bd4d7d23e85d66c3039053f9218276","sha256":"e8d7c60749c1d62942a8e0a6f901800bd14ff3094251373626cd99a8875c6391","sha512":"9e2a3b599f60fd9b5bde2dcd92ef8eed72574b0005c713424827acff6cf9d327001aa3b4f9fa90b1f233087fa3125c5e77284f7d54d046fc1bc546f3734f66ee","ssdeep":"192:F5JNMaKcf+qGcf5L0MCwaAnTA3TOk0cN/udVLwoYXpCm/un:F5rM8fJ57ToTVRudVYzmn","tlshash":"5952c9d8375b341989a7b0a9923f414bf37aaef37c4c58a0d1c59dd06e3464b10baf48","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.171525Z","times_seen":9,"resource_available":true,"data":null}},"time_used":725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/detroitchicago/imp.gif?e=%7B%22ad_cache_level%22%3A0%2C%22city%22%3A%22Delhi%22%2C%22country%22%3A%22IN%22%2C%22days_since_last_visit%22%3A0%2C%22domain_id%22%3A96916%2C%22engaged_time_visit%22%3A188%2C%22ezcache_level%22%3A0%2C%22forensiq_score%22%3A-1%2C%22form_factor_id%22%3A1%2C%22framework_id%22%3A1%2C%22is_return_visitor%22%3Afalse%2C%22is_sitespeed%22%3A0%2C%22last_page_load%22%3A%221583952317146%22%2C%22last_pageview_id%22%3A%223b8a60fd-3e4a-40a0-539b-94c430582670%22%2C%22lt_cache_level%22%3A0%2C%22metro_code%22%3A0%2C%22page_ad_positions%22%3A%22%22%2C%22page_view_count%22%3A5%2C%22page_view_id%22%3A%225745617f-1bc7-47db-5dbb-89ca63c205f0%22%2C%22position_selection_id%22%3A0%2C%22postal_code%22%3A%22110054%22%2C%22pv_event_count%22%3A0%2C%22response_time_orig%22%3A365%2C%22serverid%22%3A%2252.66.175.39%3A19885%22%2C%22state%22%3A%22DL%22%2C%22t_epoch%22%3A1583952337%2C%22template_id%22%3A131%2C%22time_on_site_visit%22%3A695%2C%22url%22%3A%22https%3A%2F%2Fwww.freakyjolly.com%2Fdemo%2Fgmail-like-login-fields-example.html%22%2C%22user_id%22%3A0%2C%22word_count%22%3A13%2C%22worst_bad_word_level%22%3A0%7D\u0026ez_orig=1","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:52.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /detroitchicago/imp.gif?e=%7B%22ad_cache_level%22%3A0%2C%22city%22%3A%22Delhi%22%2C%22country%22%3A%22IN%22%2C%22days_since_last_visit%22%3A0%2C%22domain_id%22%3A96916%2C%22engaged_time_visit%22%3A188%2C%22ezcache_level%22%3A0%2C%22forensiq_score%22%3A-1%2C%22form_factor_id%22%3A1%2C%22framework_id%22%3A1%2C%22is_return_visitor%22%3Afalse%2C%22is_sitespeed%22%3A0%2C%22last_page_load%22%3A%221583952317146%22%2C%22last_pageview_id%22%3A%223b8a60fd-3e4a-40a0-539b-94c430582670%22%2C%22lt_cache_level%22%3A0%2C%22metro_code%22%3A0%2C%22page_ad_positions%22%3A%22%22%2C%22page_view_count%22%3A5%2C%22page_view_id%22%3A%225745617f-1bc7-47db-5dbb-89ca63c205f0%22%2C%22position_selection_id%22%3A0%2C%22postal_code%22%3A%22110054%22%2C%22pv_event_count%22%3A0%2C%22response_time_orig%22%3A365%2C%22serverid%22%3A%2252.66.175.39%3A19885%22%2C%22state%22%3A%22DL%22%2C%22t_epoch%22%3A1583952337%2C%22template_id%22%3A131%2C%22time_on_site_visit%22%3A695%2C%22url%22%3A%22https%3A%2F%2Fwww.freakyjolly.com%2Fdemo%2Fgmail-like-login-fields-example.html%22%2C%22user_id%22%3A0%2C%22word_count%22%3A13%2C%22worst_bad_word_level%22%3A0%7D\u0026ez_orig=1 HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3950fc935694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1673,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1271)","md5":"1a383972e2553793c58e7c3bb313a29a","sha1":"44457dc9945491d3013deeb87c5635909a6f5952","sha256":"64a18b90d0e5a1e75719b52bf72f0b6e2fdb59d6989a74582ede6c717b61bafe","sha512":"f6162b2dc3acb2ac980a84d96f693e9a17da835a7447287e73fab403101836c203d4f2b66ebe5cf3d3aee563ef07d5ec7e2084b7bf5de61ad7f407c5bb215e38","ssdeep":"","tlshash":"3f3150a0e83208093c7d78a1fccc365177696ec3f5943f3099a81600609ebd8053b6df","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.175287Z","times_seen":7,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":697,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/osd_listener.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/osd_listener.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-length: 75061\r\nserver: cloudflare\r\ncf-ray: 977e3954cacc5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75061,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (65425)","md5":"123db678abc905ddc24516bc8e1c147a","sha1":"a57fd3398908c651091e3c6a0623db914d09cc7b","sha256":"d2ccd5167c702b43d4c6dfc47eb2503d3717ca59de8380628c01b646583564a5","sha512":"7546e1b23425d284340af532870be1e01a1d866e326e031f897d1ba1e506f7e9a12a90712c6a084bb694431db907595dfd2868dd41c152919b6155de2ced4d3c","ssdeep":"1536:K/4cSZXKzOiHEr7QmzeONhtldUr8yWTZ5zEjFwPQjw5zLtuuST2p:EzHEgqhtltHTZ5zUFw4jw5zouSI","tlshash":"4573c5c9b69270568353a0b2417f004bb23ba99af858947cb149e4d5bc74abe0377f7c","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.17605Z","times_seen":7,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/cookie_push.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/cookie_push.html HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39573e6a5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1187,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (488)","md5":"e0a255dfdd0eaa08c184201168ee77f0","sha1":"a6b29b6d963a74972891ab63c39b496bd509f879","sha256":"f29b2ce787aa7fb8217e3e2f74cf23bb82ca893c0f5248e88ac71c293bf430fc","sha512":"54a9a16144a9902b2845eb84e62f46afe1effd9f5795b2a8fb585b633041c4313cc5100649c22ba232d79485da2c8858a3217e746d25b6d207cd3eb15f9595e0","ssdeep":"","tlshash":"b4217496a617e452836145c1aeefa34e31b9e312d40cde6085c4f4e46ae87a98c97c44","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.17673Z","times_seen":6,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ngnpNuTQia9-adWoQUjidzybGxpVXp56Dx9ra3RUBDA.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(3).html","date":"2025-08-31T17:24:53.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/ngnpNuTQia9-adWoQUjidzybGxpVXp56Dx9ra3RUBDA.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(3).html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:53 GMT\r\ncontent-length: 12282\r\nserver: cloudflare\r\ncf-ray: 977e395979835694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12282,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (12282), with no line terminators","md5":"6b4162acfe595b844b968fb119c74706","sha1":"423492558db9b5e08985eaadce6de187d92ebde2","sha256":"9e09e936e4d089af7e69d5a84148e2773c9b1b1a555e9e7a0f1f6b6b74540430","sha512":"0055999cbfa5851ffce90741acff2cab06322155b727cb325a9d4416c24e50f2ca3cd43da780594bb3259058dca37d01945f2ff05fd4bc8294017a9bd0820f10","ssdeep":"192:cUyE0tw929kVJ1eNZS0fW3+SS1t0uSXY4s:HHn9gkVJ1eN4VOV6y","tlshash":"1742d8a975a4b035827371f1252f250aa573380be8442c5df2a08ae17eb46cb554ff7f","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.148505Z","times_seen":7,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(3).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(3).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39490fec5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108227,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2760)","md5":"687b6d35c16d13dd2975305c3fdd5861","sha1":"228e61a230e9a39cd5b8053b1f6a69c10dc4a5e7","sha256":"4868e9fb6edcdc42b5171cc42546facd8c66a4088134d2df47c60596bc400713","sha512":"bbde69afca2ee7d4bf2bbe94bd4762621afe9ba070ed34ebac30a239889d12484b9e24c01b06b26304d84d5cfec7bd7dbeb971bd0514bb7363d16c04bb8b9275","ssdeep":"1536:8yfeRoZpiYhEyUQQJ1GC30iXH4+ZYiuXwVTZc36bHzFcM7lrpaAtvmRd9rmXhW:MFyHQuwDjZnqwVGwHzF7lrGRzoW","tlshash":"cbb308da7691b8f38763a9b5006f100bb13fa967f51888b0e184d9d43c749a94237fed","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.17386Z","times_seen":9,"resource_available":true,"data":null}},"time_used":690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":690,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/jquery.min.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/jquery.min.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 86927\r\nserver: cloudflare\r\ncf-ray: 977e39490fe05694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-13T10:29:55.186349Z","times_seen":142750,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/jellyfish.webp","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/jellyfish.webp HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59137\r\nserver: cloudflare\r\ncf-ray: 977e39491ff25694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:51:54.523378Z","times_seen":17870380,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/edmonton.webp","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:51.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/edmonton.webp HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13946\r\nserver: cloudflare\r\ncf-ray: 977e39506b975694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T10:51:54.523378Z","times_seen":17870380,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/porpoiseant/jellyfish.webp?a=a\u0026cb=2\u0026shcb=32","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:51.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /porpoiseant/jellyfish.webp?a=a\u0026cb=2\u0026shcb=32 HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39508bcc5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":584,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"e933988dfec3e92391bac204cdef3177","sha1":"eb095c429142e74324123b0e253f602281deb95c","sha256":"90a7c2162513af6a0a1b0a1e4c42104d8d1789a5f12f191220d01985ec592685","sha512":"cf334b373dc0cbf9265996321abf30da8add7f4e9ee843d370fc4758020622a7675c154a3ea6a0e9684f02714c8a7d7730523ea2b90ffb927268aa2671349739","ssdeep":"","tlshash":"6cf0eb1bc792210ff07d64a47d822394b32e0262f8214f75bd962f38d42c478283abcd","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.178146Z","times_seen":7,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(1).html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:51.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/saved_resource(1).html HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3950cc3d5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":946,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (837)","md5":"c0cd52c1d97e7cc501685c8880f374b3","sha1":"a879c36a0c3565424c72bb84e870e8e93fde8d88","sha256":"1c8492315b0157d16181cfd337ae0aae79409a06da7ec0ba345362edfb8d1597","sha512":"cc095a1c0896859eb37a5b90df1d84f3f99cb3ac60ca2ef02acc3c20762ea9a87031d77e9e13669294bfddbe1eae3b0cc0f63737cbc24fb0108031412640f4df","ssdeep":"","tlshash":"8b11d0dbba20643a54278b68a6f972013d039b62f1568371bcb02534b9d03e79c571ef","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.178759Z","times_seen":6,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/zrt_lookup.html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:51.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/zrt_lookup.html HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3950ec615694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10163,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2119)","md5":"961c7f8eab03ada3ea899f1b7912001c","sha1":"03ddbf8a542a852c610dd575d33a73b4fb64008c","sha256":"643628e67d070d9c3ab6d29716d7f2d3d293a69fbbe38cf41e50d541d0008881","sha512":"39e01123ea5635348a3bec1a9a658e9ff0bc8d692beb2b61d2b40b8579dbdbeacaf3ae9bd8b9e5ecf5722ac2e5511ae5b37a4cab9587eeb49d53b9c7131abb1b","ssdeep":"192:2jQWJROJ4NbOT4zMhRjql83FIOZVT5K7C2dI75v7AB:zJ6YTjxIQVTF2dINC","tlshash":"b32208cdb730742752f3547551af22039077da27b858e4b55109d8e068b8bde02bbfac","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.17933Z","times_seen":6,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(10).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(10).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3954cac25694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22678,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1918)","md5":"83542a59d1ce30ff4d83280cba393225","sha1":"39620a36058844ca35529210215f75ec6051742a","sha256":"249e789a8eda90d533ff00f0cc43e9619210786967105478187da48ee66c03cf","sha512":"e488640be8c18c05c4778749ed92229453fbdb6072640d08f2b651561fa708f4116055f4bd7f1ec69b7072c5edde34fa55efc8174009610c09a4b466447fadb2","ssdeep":"384:YdH+10czncEcEyDVDGV3HT5ZgXYwe/2hcfSbsRtRivbgty42YDWyQiG+DX1Y:YdH+10cbc0WGBHTrgX4jSo1ivbJxOyiS","tlshash":"e9a2f99a7330b4b346f3a0e7606f1943b025c56af408d4bd729ddce264549ea03b6bbc","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.180545Z","times_seen":7,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/analytics.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/analytics.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 45229\r\nserver: cloudflare\r\ncf-ray: 977e3948ffb55694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45229,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1325)","md5":"af5c617d36e28d19710b882a6824e213","sha1":"39a22dc66ee4d211631f701d349bd3eb7ee20824","sha256":"eaf1b128b927ac2868755cb7366d35554255c8af362235afe270f9614f8c806d","sha512":"3a4325c38aaf546235fc7802956ac5d3ff0c0fbd4959baa93b249ef9812fcf43029fec8a8f9bb2c006e94c3532e36fdd5f432fd94bc23f33ebc52e603d88f3af","ssdeep":"768:naWWnt3d/a52Ug0yPnBJVuMWW0YOaCA/zXebYUDTJtWHx6g0stZu:nar05QpBJV6W0YOLWH8g0sW","tlshash":"6b130af9b7827466d3a271e4403f1007907eadc5f449d8e4a54ad6d06d38eab02bbf6c","first_seen":"2023-03-07T01:29:38Z","last_seen":"2026-08-01T14:03:56.841585Z","times_seen":83,"resource_available":true,"data":null}},"time_used":962,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":783,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(13).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(13).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:53 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3954cad25694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19255,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2209)","md5":"07684386506f3267ba38368a85cf26a3","sha1":"8ffce627bf5b7e46c60949172abccecd494beff0","sha256":"a58c86b531bbf6d234be7d3da3af950ddf396b5052f469152d7cfdcb00333a8e","sha512":"a7be5d5dd09b041172a9bcb88a49f13ebf33b4fa42b6d1100ab1cf4bebc2d07510bbbfda7bb7d31e65ee2cf880f282db74d085448b9ff4b01865bcb4431b5495","ssdeep":"384:oD5rXgjN60+pTcuNEA5NHWGT219+X824P/y1JoCl64O4g5UvWcLNJA:1MJcuNE2Nx21wX824P/y1JoH4O4gYdLc","tlshash":"ab820a8573a1706352b260f6112f1503f127e956b888d4e8b28dddd17871ab912bff7c","first_seen":"2023-03-07T01:29:39Z","last_seen":"2025-08-31T17:25:19.181462Z","times_seen":7,"resource_available":true,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":738,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/googlelogo_dark_color_84x28dp.png","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/googlelogo_dark_color_84x28dp.png HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1796\r\nserver: cloudflare\r\ncf-ray: 977e3954babb5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 168 x 56, 8-bit gray+alpha, non-interlaced","md5":"2f9aeeb8a52a48b0a82d2c9553e25e0e","sha1":"f70f7af90f3d368822d17d6805ea9de47371450e","sha256":"e5c2769cc0c017cdf5046fc91cf37255c139a06ddfd50c7814bd5921e0e30c29","sha512":"01a1beb0cea3dc62ab8cbb045477ad3978cf3c49e6e149b26f7c014d939d2abc46309596f181534034ab123ea92a8732e2a3631e0e480fdfdaf09c3f0e07f22b","ssdeep":"","tlshash":"12310d5f35e40d090717e13109b4def1b3666a1ef4c3c689c4806ba30357a2791bdae4","first_seen":"2023-07-30T19:37:22Z","last_seen":"2026-07-22T05:43:44.032651Z","times_seen":23,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/rochester.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/rochester.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 3195\r\nserver: cloudflare\r\ncf-ray: 977e39490fe85694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3195,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text","md5":"692f0c67f04891ffc3c1003ee1eeb694","sha1":"a955676ffcdf91a2ea64110c393d29616a5d43ac","sha256":"645cb3933b83f3c78583042280625530a7bb59da558abb07419188ea8a7004aa","sha512":"d2319d769ea7c847a873a41926584f64ca46718df58ec2e37c91385adc0176298b742fd7b7d350cc026aa26ea25907fb7d393ccaf1a6efff05699e2d112783d7","ssdeep":"","tlshash":"3361ef5810eba436446f70a5eb9e9011b7257a67258e7820ff1c4aa4df53233039dfac","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.183251Z","times_seen":9,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/d04074658525060c338e02e6292a36bc.js.download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/d04074658525060c338e02e6292a36bc.js.download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-length: 7667\r\nserver: cloudflare\r\ncf-ray: 977e3954aa9b5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7667,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (2193)","md5":"d04074658525060c338e02e6292a36bc","sha1":"a1d79b9a4fb8f3010d65ce82a67de8abbd97e965","sha256":"c7315e25523cd490e4537049c0840932b54b802b9ee1fdc7cc8e87cfde63c3d5","sha512":"2a33482c5c27a86b31297385da8fda7beef4e4ea6be9d13941dfba13a12be1466fbc8c508d2d12901efd9971055a231640cc7e04503e6054c083d0700e413dca","ssdeep":"96:ztbv+AwNytgdH4mPatYqRpsEExbhoOGPyd3Ypli63x3eLLGVSKQPQ7vGdntz/+A4:plwWutqY/XYm6VSKQPQ7ventbpjM","tlshash":"99f196ddbfa0b16256f351b6912f2107a03769a7f49888a081c4d8e16c707bd027ff6d","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.183995Z","times_seen":8,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"go.ezoic.net/detroitchicago/audins.js?cb=188-2","fqdn":"go.ezoic.net","domain":"ezoic.net","tld":"net"},"ip":{"addr":"54.240.174.46","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:58.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ezoic.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 17 Oct 2024 00:00:00 GMT","end":"Fri, 14 Nov 2025 23:59:59 GMT"},"fingerprint":{"sha1":"BE:10:A8:A6:62:1D:E9:0A:C3:43:21:96:5C:A1:37:7A:5A:D7:77:EB","sha256":"99:BC:C9:90:5C:49:27:C0:DE:36:F5:93:E4:EE:5B:36:FE:CE:AF:58:B4:B3:2B:98:CF:7A:E7:2A:44:79:53:EC"}}},"request":{"raw":"GET /detroitchicago/audins.js?cb=188-2 HTTP/1.1\r\nHost: go.ezoic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 356\r\ncache-control: private, max-age=0, must-revalidate, no-cache, no-store\r\ncontent-encoding: gzip\r\ndate: Sun, 31 Aug 2025 17:24:59 GMT\r\nx-middleton-display: sol-js\r\nx-robots-tag: noindex, follow\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: QejlXKI41_lQYZAwtWfx2O6UcmrJo-jvXBcAzNdc4Y0iV0zn2i0LCw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":516,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (516), with no line terminators","md5":"fb721f1e475d12fa5dbc89a8f689850c","sha1":"f49e618d107ed55afd4ba2981a86f74e2943b56e","sha256":"bcf7993523efcd42f5599e1c210b6433e35a39de688c9e5ae90829741937df71","sha512":"34fbf178f024006b5b1d2d197997e8a37bfc838ec177124d327a51a3dc5d0b579f6aa3790ff09186a953957c318b15ba98c343ea94e08be732aa177c73fd42a8","ssdeep":"","tlshash":"36f0c0a71e5044286764107bf3abe7c6b3a622999880e442e5cacc4d3615a8374325ec","first_seen":"2024-01-09T05:46:11Z","last_seen":"2026-08-04T20:06:51.293907Z","times_seen":2068,"resource_available":true,"data":null}},"time_used":625,"timings":{"blocked":297,"dns":102,"connect":1,"send":0,"wait":30,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/ga.js(1).download","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp.login.php","date":"2025-08-31T17:24:50.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/ga.js(1).download HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp.login.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:51 GMT\r\ncontent-length: 46274\r\nserver: cloudflare\r\ncf-ray: 977e39490fd65694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46274,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1305)","md5":"e9372f0ebbcf71f851e3d321ef2a8e5a","sha1":"2c7d19d1af7d97085c977d1b69dcb8b84483d87c","sha256":"1259ea99bd76596239bfd3102c679eb0a5052578dc526b0452f4d42f8bcdd45f","sha512":"c3a1c74ac968fc2fa366d9c25442162773db9af1289adfb165fc71e7750a7e62bd22f424f241730f3c2427afff8a540c214b3b97219a360a231d4875e6ddee6f","ssdeep":"768:aqNVrKn0VGhn+K7U1r2p/Y60fyy3/g3OMZht1z1prkfw1+9NZ5VA:RHrLVGhnpIwp/Y7cnz1RkLL5m","tlshash":"7723d8bdb351702ad262f0e5457f000a91b9eedaf454d8a8b6c6c6d46c30e6b017bf78","first_seen":"2023-03-07T01:03:00Z","last_seen":"2026-08-10T16:06:16.650877Z","times_seen":4426,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":752,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(9).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(9).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3954bab85694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":638,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (536)","md5":"018f7a29063fe18e4ecd6ef5d0e3b74a","sha1":"bf1fa79bd8812cab73b3514abe43f57d1e1d0d97","sha256":"f6d6ae6e3175e11e73247bbb9e9cfc94149e1f5a3aafcd963ba30d3fae19c4c7","sha512":"62a2efd9f073107c64516951677a715efd2d4e2a1b9602e8b54c6d7cf91a8b38a50fccd1cfb70b1f75dc2238f66d6b499b294a0fc9c3be38de95277ad2b81faa","ssdeep":"","tlshash":"26f02dbcb70522baaf82259ec4fce950a8817102310981a0218cc8994845b8102ff519","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.185723Z","times_seen":7,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/f(12).txt","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:52.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/f(12).txt HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:52 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3954cace5694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11221,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2823)","md5":"aa83d05298ed56b93fc4f6e71062f3bd","sha1":"24120a174b00f5f62ce217f989db9cc6e00992bf","sha256":"dcb1d98358d26ef883da8cd8eeb41c9047f66d32aeb2d5605ac8c1787e142930","sha512":"7cc8be4ef841304c034ebb630398cdb3f9b3258108bf4e503f2255e4b7a60f937b3e4d2a3d6afaf6ca8e0195538636cd6b0fb42504c409d1ef428831a88d3cd1","ssdeep":"192:1WFAh7uv4eZOGUGhWOMdrD0ln5ugY85tNgT7DqfCvD6atvx4Ot70zi7gsXOAYi:eAhav4ecrGhWjruuR85LgTPr6axYe7gS","tlshash":"6d3219883766707786b290f3026f1547a223d86bf0589468b2d9eae168309f503b7f7c","first_seen":"2023-03-07T01:29:38Z","last_seen":"2025-08-31T17:25:19.186456Z","times_seen":7,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp_files/saved_resource(3).html","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html","date":"2025-08-31T17:24:53.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp_files/saved_resource(3).html HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cells-link-nat-prompt.trycloudflare.com/otp_files/ads.html\r\nCookie: _ga=GA1.3.428783131.1756661092; _gid=GA1.3.1012798011.1756661092; _gat_gtag_UA_102621885_1=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e39575e955694-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"bf8657fe3f4400108d331312e427b89a","sha1":"77ec272eb904919a5489b91e64721f4186cbfc52","sha256":"339adde91af930a5018b00bdf65b65baac8af793d3070d99cd987a59682effec","sha512":"5741385c5c8ca4ce9bd1f6e16d8270efe4fa3fddd817f596bcfeda73d6a4c06a162df50492f2777c056b632c354929ad4ff99c8339b5b5753c2628d230deeac0","ssdeep":"","tlshash":"6ce07daf6e1355535110a2d0f8fef1155805de50f184dc01e8c034ac35ecbac48939a0","first_seen":"2023-12-09T21:56:03Z","last_seen":"2025-08-31T17:25:19.187037Z","times_seen":6,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","fqdn":"cells-link-nat-prompt.trycloudflare.com","domain":"cells-link-nat-prompt.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.231.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-31T17:24:49.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 17:27:29 GMT","end":"Sun, 16 Nov 2025 18:27:20 GMT"},"fingerprint":{"sha1":"92:49:3F:4E:A5:8F:FE:E4:F0:DA:A6:AA:47:89:99:0D:9C:EA:CA:80","sha256":"AF:23:79:BE:4B:0A:C5:6C:20:AE:42:38:E0:55:23:B4:C6:E9:62:FB:73:43:09:34:BB:1E:19:C1:35:39:01:14"}}},"request":{"raw":"GET /otp.login.php HTTP/1.1\r\nHost: cells-link-nat-prompt.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 Aug 2025 17:24:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncf-ray: 977e3940bada5694-OSL\r\ncf-cache-status: DYNAMIC\r\nx-powered-by: PHP/8.2.5\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.5","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":36769,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13065)","md5":"70f61ab14021cf9305f28c6bf0ecf7be","sha1":"f1281246e94e439124de4433a7970c9d14b272ac","sha256":"9905903beaafc077d8d890afacd817786851ec45c053bd05b06e0ddfc2a9272d","sha512":"bb23b64849eae8c4ea66f4742fb386905173ea00034903c1a51e4e3b8b42bfa3d20de4c05367617ea2b3683b906d7d7d4e63e23ba4d116190e12fee4c7c89ad3","ssdeep":"768:hcmn5XnvwjSXKLXBlmVblz2iMc5AbJnwvHJgB7ngRkuWA+AItrsCtl2e4W/JzEH/:hdfwO/Bz2UAFnwvHJgB7ngRkuWA+AItk","tlshash":"65f2e7597d9270ba44b351e0527f76093132923fa604c8a0ba9c8af07fa4ecf5997fd4","first_seen":"2025-08-31T00:07:19.400109Z","last_seen":"2025-08-31T17:25:19.187708Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":1166,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-08-31","alert":"Phishing - Google Inc.","trigger":"cells-link-nat-prompt.trycloudflare.com/otp.login.php","verdict":"phishing","severity":"medium","comment":"Google Inc.","link":"https://openphish.com","meta":null}],"urlquery":null}}]}