{"report_id":"16569cdb-1e35-4785-a2fd-60548430a18a","version":6,"status":"done","tags":["phishing","microsoft","outlook"],"date":"2023-12-04T21:55:30Z","url":{"schema":"http","addr":"rides.sng.link/Aw5zn/ernw?_dl=uber://family?id=0\u0026_fallback_redirect=https://bbuworldnews.com/invest/ment/ecu/3802/bWxhcnNlbkBjYW1icmlkZ2Vhc3NvY2lhdGVzLmNvbQ==","fqdn":"rides.sng.link","domain":"sng.link","tld":"link"},"ip":{"addr":"23.36.77.34","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"final":{"url":{"schema":"https","addr":"8f124429.80cf8ce748a459f846ab8ace.workers.dev/?qrc=mlarsen@cambridgeassociates.com","fqdn":"8f124429.80cf8ce748a459f846ab8ace.workers.dev","domain":"80cf8ce748a459f846ab8ace.workers.dev","tld":"workers.dev"},"title":"Just a moment..."},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:07:13Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"bbuworldnews.com","ip":{"addr":"66.29.133.140","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2023-09-28","domain_rank":0,"first_seen":"2023-09-30 02:23:20","last_seen":"2023-09-30 02:23:20","alert_count":1,"request_count":1,"received_data":338,"sent_data":614,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.17.3.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20 07:02:03","last_seen":"2023-12-04 07:48:56","alert_count":0,"request_count":8,"received_data":324359,"sent_data":5003,"comment":"","tags":null,"fingerprints":null},{"fqdn":"8f124429.80cf8ce748a459f846ab8ace.workers.dev","ip":{"addr":"172.67.176.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":2,"received_data":7714,"sent_data":1083,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rides.sng.link","ip":{"addr":"23.36.77.34","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2019-02-11","domain_rank":0,"first_seen":"2023-08-14 12:52:30","last_seen":"2023-12-04 05:09:30","alert_count":0,"request_count":1,"received_data":644,"sent_data":624,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"8f124429.80cf8ce748a459f846ab8ace.workers.dev/?qrc=mlarsen@cambridgeassociates.com","fqdn":"8f124429.80cf8ce748a459f846ab8ace.workers.dev","domain":"80cf8ce748a459f846ab8ace.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.176.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"84f963513ee4e3c08c915e64668553d9","sha1":"2deee2cd81b55dd9e84014e2f8f5dea3e95682bc","sha256":"ad1cf6dad0c646c56cf267f603e2f0b3209809c6004846a1ff27916109f994de","sha512":"13a805ced8f61e9532f8e7c4f073a49d606a8a4ddae1488a5f6989679b649ef9d6da9f2a393dddca3dc61280a7e65f136378e92ac74f9b82670df01ce8fdbe06","ssdeep":"","tlshash":"f7e07d6c3843a283ff71c3a6121b2bc67c198065ac9ce15b6503d14c39106d18324905","size":311,"data":"","first_seen":"2023-12-04T21:44:41Z","last_seen":"2024-08-20T16:46:40.579025Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77389fe6f5cb85e94a09cbb67e5329c2","sha1":"0fd77826b37657f2e2f238d0a1bb022c64404b5a","sha256":"a2daab411db60dad969fda098358174fd52ab9437622635d773578a0201f88f0","sha512":"c75e57225ae267d59afb0ca567cca74f86d232c2a4fd2721db27bd6713cec9f7a9d9bf70f5af6acd4a3090e0ef5dfc34413fd5b27d1803c559b25ecb117205fe","ssdeep":"","tlshash":"8451b4fec4f9064a02a5a300638f63451631129f0c8874b93e8cd54e5f6c86f16f0be5","size":3140,"data":"","first_seen":"2024-08-20T16:46:13.336189Z","last_seen":"2024-08-20T16:46:13.336189Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"0c8000ac38802000803328e8002fa8aaa020083030800e022a02e8888cb222c822a8ae","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-04-19T09:28:42.97721Z","times_seen":281531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c90f391245a994ae95e644a587c8626","sha1":"7bfc99336571d0ccfe38f9e1d18cb26b4adfc316","sha256":"acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7","sha512":"916f4cd48fc87b759efa209ecb2b67a7878d6e16eb3128512be9668731027f7795bc016e6081ee9f74ff4b38af54c9cadf88a6f965980c7d0881b05d645cfeaf","ssdeep":"","tlshash":"","size":33876,"data":"","first_seen":"2023-11-30T14:29:00Z","last_seen":"2023-12-14T14:42:23Z","times_seen":11689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"69165ebff8690c39998558705627e927","sha1":"b86888593992fa44c3d1fe1c665367cb214e5416","sha256":"0de7a49f6d21fbef846aba4bd271502d7ec9489bfbb3fd96f5ff7cf19140875e","sha512":"5ba1e5e8c8d56c3f9e73156c711a2a9e69dc86f53f47ce07bd59f79e9f8190e0a63a46c05270582b3afdc144f98d15622a902864c5635409e682c317640a2371","ssdeep":"","tlshash":"0750000030c00000003000000c33c030000000000000000000003c003000f00000c030","size":8,"data":"","first_seen":"2023-04-10T23:38:56Z","last_seen":"2026-04-19T08:58:24.763759Z","times_seen":13856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=83074ae6eb201c0a","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd828a296b6d7268e790a858ec50f790","sha1":"98a91aa125b6b6041371563ff33ec5e4f2e0dcea","sha256":"9b78326b8606c5322eeb7a70d41584982d2a369600b3093e380947cb8dbef710","sha512":"25603371be613215ebed995c409ac9f2fd7752a56d0386e688e3b5bce9fb92160ac4d9cf6926b02b2188538a64ee907c5a4f2fdaa0308ac9c9b0304f8fad3dba","ssdeep":"1536:dzln21H5mNDDR/DSOqY56ykfKCqwlVAKGgOetkCBTBaNevh3FbM9IEPKpjFA3+wE:do1kNDDxS9Y5yCObAK3OetkcBf9jw73E","tlshash":"2c0461cc6785b99a45333e7878233216709f3d456c7c19ddea40b1d029f631a82dbaee","size":173063,"data":"","first_seen":"2023-12-04T22:52:16Z","last_seen":"2023-12-04T22:55:36Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-19T09:18:16.501428Z","times_seen":679266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"d50fe447c67a515d4ba936505175a8fe","sha1":"78d20da444441fb45dcf61e09d9bcbc9f01502e2","sha256":"7dcf7a54137031c03f28f6a33cb62b258023c5de06d504259d5ad39f16b1b85e","sha512":"b165f7e4c221c2c822ac9ad87b7ee17992ecad0cdb7521b7ffba8d24220f594eb2e3ff97f48eea37dd0a7a4a3fa26e3e9591764d4b63932cc9c4ecfe7d158474","ssdeep":"","tlshash":"","size":3573,"data":"","first_seen":"2023-11-30T14:29:00Z","last_seen":"2024-08-20T17:20:43.669801Z","times_seen":11653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"http","addr":"rides.sng.link/Aw5zn/ernw?_dl=uber://family?id=0\u0026_fallback_redirect=https://bbuworldnews.com/invest/ment/ecu/3802/bWxhcnNlbkBjYW1icmlkZ2Vhc3NvY2lhdGVzLmNvbQ==","fqdn":"rides.sng.link","domain":"sng.link","tld":"link"},"ip":{"addr":"23.36.77.34","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-04T21:55:20.159201115Z","timestamp":1701726920159,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /Aw5zn/ernw?_dl=uber://family?id=0\u0026_fallback_redirect=https://bbuworldnews.com/invest/ment/ecu/3802/bWxhcnNlbkBjYW1icmlkZ2Vhc3NvY2lhdGVzLmNvbQ== HTTP/1.1\r\nHost: rides.sng.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 189\r\ncontent-encoding: gzip\r\nlocation: https://bbuworldnews.com/invest/ment/ecu/3802/bWxhcnNlbkBjYW1icmlkZ2Vhc3NvY2lhdGVzLmNvbQ==?referrer=singular_click_id%3Dd1ca8bce-e9ab-46c4-8804-cd35b032412b\r\nvary: Accept-Encoding\r\nexpires: Mon, 04 Dec 2023 21:55:14 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Mon, 04 Dec 2023 21:55:14 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":189,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"813fade5958fbc5c6b419e92cb14d264","sha1":"60b12bbc8edc5b808f3eff5510825afd7919f18a","sha256":"535e7d5278637082b682c3e69a708e7b24ef34d67117b4ffff1d0d244e6ddeaf","sha512":"07d5e4bd8b5aeba58a93417155230fb9c39453c1a0b0fed66c7ded1642fbaccbb119a75bce7aae97b07efe6e4ea884b18fee755383f683b482fb930b4e5ee49e","ssdeep":"","tlshash":"a7c0c09380e70b0c817c40720c502a1c3d8b41c22c30cf0145b19929bc60f6371c9bc5","first_seen":"2023-12-04T22:55:36Z","last_seen":"2023-12-04T22:55:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"bbuworldnews.com/invest/ment/ecu/3802/bWxhcnNlbkBjYW1icmlkZ2Vhc3NvY2lhdGVzLmNvbQ==?referrer=singular_click_id%3Dd1ca8bce-e9ab-46c4-8804-cd35b032412b","fqdn":"bbuworldnews.com","domain":"bbuworldnews.com","tld":"com"},"ip":{"addr":"66.29.133.140","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-04T21:55:20.720436869Z","timestamp":1701726920720,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /invest/ment/ecu/3802/bWxhcnNlbkBjYW1icmlkZ2Vhc3NvY2lhdGVzLmNvbQ==?referrer=singular_click_id%3Dd1ca8bce-e9ab-46c4-8804-cd35b032412b HTTP/1.1\r\nHost: bbuworldnews.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 04 Dec 2023 21:55:14 GMT\r\nServer: Apache\r\nrefresh: 0;url=https://8f124429.80cf8ce748a459f846ab8ace.workers.dev/?qrc=mlarsen@cambridgeassociates.com\r\nVary: Accept-Encoding\r\nContent-Encoding: br\r\nContent-Length: 1\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"eccbc87e4b5ce2fe28308fd9f2a7baf3","sha1":"77de68daecd823babbb58edb1c8e14d7106e83bb","sha256":"4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce","sha512":"3bafbf08882a2d10133093a1b8433f50563b93c14acd05b79028eb1d12799027241450980651994501423a66c276ae26c43b739bc65c4e16b10c3af6c202aebb","ssdeep":"","tlshash":"c700000000300000c0000030000000000000000000c000000000000000000000003000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-19T05:08:08.506114Z","times_seen":25516,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/525177856:1701723990:CAbE5CWvg-_awlItYvtYJVT5kTUl7WUkmjI9_bGgidw/83074ae6eb201c0a/284a27d09981d71","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal","date":"2023-12-04T21:55:23.833Z","timestamp":1701726923833,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/525177856:1701723990:CAbE5CWvg-_awlItYvtYJVT5kTUl7WUkmjI9_bGgidw/83074ae6eb201c0a/284a27d09981d71 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal\r\nContent-type: application/x-www-form-urlencoded\r\nCF-Challenge: 284a27d09981d71\r\nContent-Length: 25496\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 502 Bad Gateway\r\ndate: Mon, 04 Dec 2023 21:55:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6386\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nserver: cloudflare\r\ncf-ray: 83074b087af31c0a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":6386,"size_decoded":0,"mime_type":"","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document text\\012- exported SGML document, ASCII text, with very long lines (394)","md5":"b434bd314a4271128a5cc631a0c92c03","sha1":"50cfff9574ac859902aeb871bf1efbc82e465f27","sha256":"e27b2110d2b6cd49fec0eafdd2d3ead7568f8215edb769a39859c4a74469c25b","sha512":"b68d6197d049aa70f93fe9ab256f8365463d11a46ae89ddf1b2c8d7f356ae544953db99af40547b4cbbfd75fd7db98f2146a03fbd989bff8f385d9db3c724c5a","ssdeep":"96:1j9jwIjYjuDK/DpKUBwG4Fh2TG4FYtJ1U24FZAokKmtmnazrR79ZGaQxR:1j9jhjYjaK/d9wwGHaZVMvzrl9ZBeR","tlshash":"83d16571b1f502b610a3c29236d5fb6a79e0c613cbef5494b3ddc2632f9ee81a903594","first_seen":"2023-12-04T22:55:36Z","last_seen":"2023-12-04T22:55:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=83074ae6eb201c0a","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal","date":"2023-12-04T21:55:21.461Z","timestamp":1701726921461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=83074ae6eb201c0a HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 21:55:15 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nserver: cloudflare\r\ncf-ray: 83074ae78b8a1c0a-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":173063,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dd828a296b6d7268e790a858ec50f790","sha1":"98a91aa125b6b6041371563ff33ec5e4f2e0dcea","sha256":"9b78326b8606c5322eeb7a70d41584982d2a369600b3093e380947cb8dbef710","sha512":"25603371be613215ebed995c409ac9f2fd7752a56d0386e688e3b5bce9fb92160ac4d9cf6926b02b2188538a64ee907c5a4f2fdaa0308ac9c9b0304f8fad3dba","ssdeep":"1536:dzln21H5mNDDR/DSOqY56ykfKCqwlVAKGgOetkCBTBaNevh3FbM9IEPKpjFA3+wE:do1kNDDxS9Y5yCObAK3OetkcBf9jw73E","tlshash":"2c0461cc6785b99a45333e7878233216709f3d456c7c19ddea40b1d029f631a82dbaee","first_seen":"2023-12-04T22:52:16Z","last_seen":"2023-12-04T22:55:36Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/83074ae6eb201c0a/1701726916038/Eoq0SdH3_YzCLl7","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal","date":"2023-12-04T21:55:22.511Z","timestamp":1701726922511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/i/83074ae6eb201c0a/1701726916038/Eoq0SdH3_YzCLl7 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 21:55:16 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-ray: 83074aee1ea41c0a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 81 x 92, 8-bit/color RGB, non-interlaced\\012- data","md5":"88d0d10eea8b3191bbc17ef1e24ebad7","sha1":"2d0c1d166593bfe54f54244b2e89337899e8cf60","sha256":"cfec1013b572a41ec02749eb7af07345a4e0e853da3df1d9a44808870877363e","sha512":"9e0d9551bacd7e2f905a779d896901eda2fb12145fc1db0ac99f7e905a930748c3a2c00b51ec115c2472b043edbaf36086d442b65c02ddd6db032a22ac79947c","ssdeep":"","tlshash":"e2a002eb67927c38c95a623766350061e8370554021731059805c425161f2fc84e4a92","first_seen":"2023-05-23T20:19:35Z","last_seen":"2025-05-02T03:23:50.754025Z","times_seen":83,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8f124429.80cf8ce748a459f846ab8ace.workers.dev/?qrc=mlarsen@cambridgeassociates.com","fqdn":"8f124429.80cf8ce748a459f846ab8ace.workers.dev","domain":"cambridgeassociates.com","tld":"workers.dev"},"ip":{"addr":"172.67.176.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T21:55:21.022Z","timestamp":1701726921022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"80cf8ce748a459f846ab8ace.workers.dev","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Nov 2023 17:47:07 GMT","end":"Tue, 27 Feb 2024 17:47:06 GMT"},"fingerprint":{"sha1":"C6:55:6D:05:E2:11:9B:20:5A:59:67:72:6E:2A:32:82:F8:48:C0:8D","sha256":"44:77:06:9B:85:46:36:14:BE:0F:9F:4D:F2:D7:85:DF:83:9A:96:D1:15:AA:FE:DB:10:2D:9C:A5:D7:31:5E:95"}}},"request":{"raw":"GET /?qrc=mlarsen@cambridgeassociates.com HTTP/1.1\r\nHost: 8f124429.80cf8ce748a459f846ab8ace.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 21:55:15 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=r6HBLp%2BkyQTWMSRP%2BYW%2BCxnk%2BajAf22CiJFsYNMd%2BY%2BG1jT1%2FqiE0kzeDjNfSljwtF4VNKzblDqppMoOAJvB2jinTPrCzMLGP8aehHAKf%2FM%2FaxfJJMtlSoWoTojeExYVp46qtC0w5LqguKJXCObO%2BSkW5JfZTCSIApUXlJ4reIY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83074ae4fa4556bb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3255,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3271), with no line terminators","md5":"2baa823b51a9a64cb282f9cde9eaffea","sha1":"b56dba985cedba7b420cb031faeb14d4b1d4ddc7","sha256":"8267389338022cf6aef68cfd9d235ed25405c4a333245874ac8ff90b55cb5051","sha512":"290e6157d21a9e4712d134f28e240f659b775e981f600ef49eac0f7e4aba2001b37f87bec5c3bc456c190b54e90363e4ff948ab6f5eb49b4d87509ab88833fc7","ssdeep":"","tlshash":"6d61b62b6e21b01a96f38d7620b023cd3934f108da07879eee63d7448ed12660f1274c","first_seen":"2023-12-04T21:44:41Z","last_seen":"2023-12-05T00:55:48Z","times_seen":14,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":24,"dns":17,"connect":1,"send":0,"wait":7,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/83074ae6eb201c0a/1701726916038/5fdf507f77cd674c258bc0cfe48a8b9b59abed7304a96e32d5e313eaf4423897/SRCLfmui9wiMhlo","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal","date":"2023-12-04T21:55:22.542Z","timestamp":1701726922542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/83074ae6eb201c0a/1701726916038/5fdf507f77cd674c258bc0cfe48a8b9b59abed7304a96e32d5e313eaf4423897/SRCLfmui9wiMhlo HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Mon, 04 Dec 2023 21:55:16 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nwww-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gX99Qf3fNZ0wli8DP5IqLm1mr7XMEqW4y1eMT6vRCOJcAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApsOXvs4inomvHEEJWeAmbewj10vTdOMUJh5YooYpzkcTFx8O1fGckZDmN__WSsDanz_dK-uZ_ETYKIumajyX7F3zXM4AXeZC2iYL_e3-Pi1TmaGIMJZdPWVVC9cf8AFwX7fRkcgCHxky-BRBi2T8ry--e2NK119BZC3f1t7LwQTVpP1LL3UYxZNFWJTGISYzuWNO5NvmWgGr2V4bint7BqWVsBG5VguykSCXBQX0WyMxge5W5z-tspRPjpXtc35sgdq737t6ATIZ2BVH0nyYaECjgMbN-BY6w9Y_jz03Ce0StP3YSZijpo1lfW2_lIX3SvsNX-SYCOkZ-9685ZUBSQIDAQAB, max-age=20, PrivateToken challenge=AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIF_fUH93zWdMJYvAz-SKi5tZq-1zBKluMtXjE-r0QjiXABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAyAcIyqXWj0XAym0z5V844rFA0WOzLVwj0uCwmVj6zC4qOH40oBiGHrMNMBnDyk95jvnBAuHeEs855e7nA4l4DPJ4jUWKZbua8BxGAzjn74A1BV81a52F1zvBPUm-VEJXPAPXQehXphSv51uR7HKtfcM5oaS33TGDSy-6xv0r84xjMuTBvwPgXGehxpi1MCGGE5yWkzKN5Zzllk7m6Nkiv6learV-Uz7tzaoPbdZkBk1bFXxm2q07jWavoBZ-JEuEJyjQ00PSTz2Zjpbct6AlR3eCS9sbmXtb5XxSs7JMsvoa8uojD7a5m2SEJIwaf8xKL6wtxkaPonUfvsLj4JoJZQIDAQAB, max-age=20\r\nserver: cloudflare\r\ncf-ray: 83074aee4ed01c0a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T09:07:14.333131Z","times_seen":410918,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://8f124429.80cf8ce748a459f846ab8ace.workers.dev/?qrc=mlarsen@cambridgeassociates.com","date":"2023-12-04T21:55:21.168Z","timestamp":1701726921168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://8f124429.80cf8ce748a459f846ab8ace.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 04 Dec 2023 21:55:15 GMT\r\naccess-control-allow-origin: *\r\nvary: accept-encoding\r\ncache-control: max-age=300, public\r\nlocation: /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback\r\nserver: cloudflare\r\ncf-ray: 83074ae5fd671bfe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":33876,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T09:23:21.870352Z","times_seen":13929305,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":38,"dns":3,"connect":1,"send":0,"wait":8,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8f124429.80cf8ce748a459f846ab8ace.workers.dev/favicon.ico","fqdn":"8f124429.80cf8ce748a459f846ab8ace.workers.dev","domain":"80cf8ce748a459f846ab8ace.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.176.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://8f124429.80cf8ce748a459f846ab8ace.workers.dev/?qrc=mlarsen@cambridgeassociates.com","date":"2023-12-04T21:55:21.314Z","timestamp":1701726921314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"80cf8ce748a459f846ab8ace.workers.dev","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Nov 2023 17:47:07 GMT","end":"Tue, 27 Feb 2024 17:47:06 GMT"},"fingerprint":{"sha1":"C6:55:6D:05:E2:11:9B:20:5A:59:67:72:6E:2A:32:82:F8:48:C0:8D","sha256":"44:77:06:9B:85:46:36:14:BE:0F:9F:4D:F2:D7:85:DF:83:9A:96:D1:15:AA:FE:DB:10:2D:9C:A5:D7:31:5E:95"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 8f124429.80cf8ce748a459f846ab8ace.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://8f124429.80cf8ce748a459f846ab8ace.workers.dev/?qrc=mlarsen@cambridgeassociates.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 21:55:15 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=5r1vAP8HFIhKkUrgBriLBHjwyDxVwF3wbeGPUtDYT4FJKp6hjgzNiqNXotFPryY1GRxJudti3dC1fNhQU1P%2FmaQIttANlmBe10hz%2FS2yCxYNTECQy2iAw8Yf%2FW9oBtOUSuoLKqKc2Hqj5ijZHZof%2FzUDWpxqGVeHSe%2BiRJQJASc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83074ae69dce7130-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3255,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (3271), with no line terminators","md5":"2baa823b51a9a64cb282f9cde9eaffea","sha1":"b56dba985cedba7b420cb031faeb14d4b1d4ddc7","sha256":"8267389338022cf6aef68cfd9d235ed25405c4a333245874ac8ff90b55cb5051","sha512":"290e6157d21a9e4712d134f28e240f659b775e981f600ef49eac0f7e4aba2001b37f87bec5c3bc456c190b54e90363e4ff948ab6f5eb49b4d87509ab88833fc7","ssdeep":"","tlshash":"6d61b62b6e21b01a96f38d7620b023cd3934f108da07879eee63d7448ed12660f1274c","first_seen":"2023-12-04T21:44:41Z","last_seen":"2023-12-05T00:55:48Z","times_seen":14,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://8f124429.80cf8ce748a459f846ab8ace.workers.dev/?qrc=mlarsen@cambridgeassociates.com","date":"2023-12-04T21:55:21.355Z","timestamp":1701726921355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://8f124429.80cf8ce748a459f846ab8ace.workers.dev/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 21:55:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndocument-policy: js-profiling\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 83074ae6eb201c0a-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72958,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (40091)","md5":"cb4a06ab7ee90be8e2fe310043f6b1aa","sha1":"f52d96c6be958f9312b6759989d6d3f945c9cdd7","sha256":"0496af6fb3a6f2cedead89ad4582441e782a60a92b5621d49763b1ccd5bbd953","sha512":"535826f67faa64c51bbe1696cdc5a41f3aa2f13da05802ec8913ae6020f7caeddf88f0975713b1a458058102026d510b3fdf70f4959018fb5487e2a427140d35","ssdeep":"1536:UaTfc9IJbBeceIedkeO5gwyc99Kh0afdU6/jPNXhzNmU77JuI15fJRjDbY1GvIjO:bfoTV/Pws9/j1hd77Jv5fJRjDbYMvIjO","tlshash":"3f63e6d98ebc7d69ab029a29b0ce51e3732d53471541e198b8dca190cfec04e26f1f79","first_seen":"2023-12-04T22:55:36Z","last_seen":"2023-12-04T22:55:36Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://8f124429.80cf8ce748a459f846ab8ace.workers.dev/?qrc=mlarsen@cambridgeassociates.com","date":"2023-12-04T21:55:21.231Z","timestamp":1701726921231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /turnstile/v0/b/56d3063b/api.js?onload=onloadTurnstileCallback HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://8f124429.80cf8ce748a459f846ab8ace.workers.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 21:55:15 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 83074ae61d841bfe-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33876,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (33875)","md5":"8c90f391245a994ae95e644a587c8626","sha1":"7bfc99336571d0ccfe38f9e1d18cb26b4adfc316","sha256":"acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7","sha512":"916f4cd48fc87b759efa209ecb2b67a7878d6e16eb3128512be9668731027f7795bc016e6081ee9f74ff4b38af54c9cadf88a6f965980c7d0881b05d645cfeaf","ssdeep":"","tlshash":"","first_seen":"2023-11-30T14:29:00Z","last_seen":"2023-12-14T14:42:23Z","times_seen":11689,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/ew4g0I%2FZYomJh1e75pupA0WLfHDXy%2FQKEyLTEDfnNN8%3D","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.3.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal","date":"2023-12-04T21:55:21.459Z","timestamp":1701726921459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1/ew4g0I%2FZYomJh1e75pupA0WLfHDXy%2FQKEyLTEDfnNN8%3D HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/k68ox/0x4AAAAAAAOFStlPd6aD4rz7/auto/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 21:55:15 GMT\r\ncontent-type: image/png\r\ncache-control: max-age=2629800, public\r\nserver: cloudflare\r\ncf-ray: 83074ae78b871c0a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced\\012- data","md5":"9246cca8fc3c00f50035f28e9f6b7f7d","sha1":"3aa538440f70873b574f40cd793060f53ec17a5d","sha256":"c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84","sha512":"a2098304d541df4c71cde98e4c4a8fb1746d7eb9677ceba4b19ff522efdd981e484224479fd882809196b854dbc5b129962dba76198d34aaecf7318bd3736c6b","ssdeep":"","tlshash":"a5a002e763957d7bd94b133756651151f8324514171305458805d475161736c81c4a82","first_seen":"2023-08-25T15:09:14Z","last_seen":"2025-05-14T12:12:43.698394Z","times_seen":189286,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}