{"report_id":"1663e90f-2ed3-46b2-95c4-c284b50a0fd1","version":0,"status":"done","tags":[],"date":"2026-07-12T21:20:49Z","url":{"schema":"http","addr":"sf.tumee.com","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sf.tumee.com/","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"title":"Login | Salesforce","dom":{"size":13638,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7011)","md5":"8064fe386a778fea6ca6a2b96e41c972","sha1":"d8e6efa50c2030d3b763bd3f11206dea9feb5dc7","sha256":"863c7ca1d0c412d5578d28eec9c0710ff9bc4cb46a6db38d0715af39f5a6de43","sha512":"a8104309c853572a8fac045246847bc0c5d52ee5951dffeed77b94dab311b578f7ad5cead3aeb4bc9d988abeda6481b0a41f467d9ff64a858f3ace3dcd65e98d","ssdeep":"192:b3zAgJaPTYhY7YShaRMiFmqvM5+M4wrN2weQMfKJmTrw2pfUsj:j3JabWYED3m5rNYQMfKJyrwas+","tlshash":"7a5282b71e255c266603c9feb8d2fb8c606bc22e47459d48b7bc2a137787e5d087052e","dom_hash":"domhashd200e6cfd88c584facfc5d60dc6fd8f6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sf.tumee.com","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:20:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":16}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"a--sfdcstatic.sf.tumee.com","ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-09-09","domain_rank":0,"first_seen":"2026-07-10T12:35:54.692181Z","last_seen":"2026-07-10T12:35:54.692181Z","alert_count":44,"request_count":11,"received_data":849520,"sent_data":6103,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wp.sfdcdigital.com","ip":{"addr":"23.36.77.170","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2021-02-01","domain_rank":73820,"first_seen":"2021-11-16T08:21:02Z","last_seen":"2026-07-12T19:53:35.274237Z","alert_count":0,"request_count":3,"received_data":157005,"sent_data":1835,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"geolocation.onetrust.com","ip":{"addr":"172.64.155.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":4022,"first_seen":"2018-02-07T11:23:41Z","last_seen":"2026-07-06T08:49:52.694879Z","alert_count":0,"request_count":1,"received_data":436,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sf.tumee.com","ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-09-09","domain_rank":0,"first_seen":"2026-07-10T12:35:54.69575Z","last_seen":"2026-07-10T12:35:54.69575Z","alert_count":56,"request_count":14,"received_data":162387,"sent_data":8151,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"c.sf.tumee.com","ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-09-09","domain_rank":0,"first_seen":"2026-07-10T12:35:54.685538Z","last_seen":"2026-07-10T12:35:54.685538Z","alert_count":108,"request_count":27,"received_data":3155105,"sent_data":18304,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]}]},{"fqdn":"login.sf.tumee.com","ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-09-09","domain_rank":0,"first_seen":"2026-07-10T12:23:51.044725Z","last_seen":"2026-07-10T12:23:51.044725Z","alert_count":8,"request_count":2,"received_data":28059,"sent_data":1180,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cookies-data.onetrust.io","ip":{"addr":"172.64.155.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-05-27","domain_rank":72480,"first_seen":"2021-07-20T11:01:34Z","last_seen":"2026-07-08T11:04:12.798365Z","alert_count":0,"request_count":2,"received_data":716,"sent_data":1106,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"privacyportal.onetrust.com","ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":16579,"first_seen":"2018-05-24T20:25:49Z","last_seen":"2026-07-09T18:08:33.626448Z","alert_count":0,"request_count":2,"received_data":3421,"sent_data":1134,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-05T22:30:27.189477Z","alert_count":0,"request_count":1,"received_data":851512,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-ogs/v1-latest/sdk/interactions-core.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"09caaebb93ae4155b32b3233238f288d","sha1":"4e98fea1b45f3363a571ecc208dfd32710888213","sha256":"3fbb451f6e842bbb73581fa1be9cd7c5daba01bcf981076cf8c3d566bb37a524","sha512":"ff3d2dee7afc45e6c5fdca66826c06da57285def5036afddc3d58368037aae9596adf3eaace475249caeec164df9b28c36a0ca7dc499e936ec3e740989898479","ssdeep":"768:yMMnVOgQBo/H8myCaVqJPCC1Wg1QzuLdX05LcD1Jk2Op9z+HUQf3ZFbt83:yRcgQBOH8mZPl17+yq5Ljp6UW3ZRu3","tlshash":"3113f8971e5a413e93baf06ca01d3149f81caed40549e898e76dad6a33c4d0970bdfbc","size":45188,"data":"","first_seen":"2026-07-10T12:35:59.921645Z","last_seen":"2026-07-12T21:21:00.166918Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a287f0df0ae00fcf01559e0255e8b1c6","sha1":"6e539c8f190365aff160e7e1ffe810e5fe5c1c76","sha256":"3a79194a3b473838fd2faa0ec675ddd26ba04c117ef6ba21896b8f574e978963","sha512":"bec3a03bb630efcdda96e3593f7957f451e384062881a27c782f61c5529ab3692ca503aaba94d8b5335c90c71584fda9fe5e4bb0de71f41440c323cef9da4b23","ssdeep":"","tlshash":"b3a0121df38531650247601a102641252003016608018600526649d840592894014d65","size":81,"data":"","first_seen":"2024-05-23T17:50:09Z","last_seen":"2026-07-16T21:57:18.425735Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43b73cbfac0a6ea618295d65a23591c","sha1":"255aa6fb02e3ce0190985255aa464e6180e27d1e","sha256":"98df6e935ef2d14dce377f16c1707fad159d5ed377cacd92feb6a18b1eda72ac","sha512":"088b0ddbce09d3364d9b3605ffc663f3441314b336a0046af2dc058f9e922c2afdb3c4eeadb9160ccb29f1294c24113e3ad803e572cbc6f3229466c339c4d63f","ssdeep":"384:aoA97P5RskmQLz6KpcXacSo9nYugy86OJvSRX5di:a9aSz6azo9nYuz75di","tlshash":"2e7207d1a65aca7403f869ddd42e9245f21a1d79438db450ff8efc90201ad4a30e6ffa","size":17292,"data":"","first_seen":"2026-07-10T12:35:59.988075Z","last_seen":"2026-07-12T21:21:00.180839Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"81973892d94cfab520e78f5c032b5a1d","sha1":"eb6ed0bc64e01781e375a8c56e3ea488e77fca2a","sha256":"4d462b042962c29ee6f76877b0074ecab2ed5a9b4421c178bcd168a8f62b4b5c","sha512":"9e91fce4aa5e797ea10c9cb9318424aee57ff97a932216fcec88409f0822f69ef4daf260dc68ebcdd938e72193952fea0d5878b02f06e862853d08859e8ec476","ssdeep":"","tlshash":"c6b09269f3bf71356a8661aa216a8122b016a5664981e692622e46d8602d2886022a66","size":111,"data":"","first_seen":"2024-05-23T17:50:08Z","last_seen":"2026-07-16T21:57:18.355755Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"df2a963288d69ae3e3e4fd2b7b1a3602","sha1":"82cdb0e7bd359881355234936bdaea361cae1568","sha256":"55cd0678050b595ba489ac10d7852840dd29a08d9091bdb19ff603c1272c75c6","sha512":"77a9d414aa3f526015df8a9299421114f7d9243478981ea2f07e5e879aa562ce7eb754bf9c75f9dd355dc1434dc37cbdfef8a1dc909e8103bd3cce45d852e7b9","ssdeep":"","tlshash":"bbe0122bf19d043f08cb615b78654911801b46f79c87db25b7332dfd6017a4a808cafb","size":358,"data":"","first_seen":"2026-04-13T12:31:35.656214Z","last_seen":"2026-07-16T21:57:18.412206Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"affc296fcad16726abe43bd82941bea3","sha1":"8c519fe49e72c67dd1eceadbb3b8a41bae2908c0","sha256":"38d776db4c55456a97f2152b948274297fec7ee6ce3ad962991bfea7c701c7f5","sha512":"4c168433643f0fa8d8202993ff783fb4a9ffa573ca3ca311006ccc2284246d28d348a5bca063f051338ddc46951ab52e3fee0d205e4dfc9c07f3bf9112b0caf1","ssdeep":"","tlshash":"51d02b9ff7ba221742ca641898db061b1029b78a0b048b93003709ee942a4c10123e39","size":272,"data":"","first_seen":"2026-06-13T14:53:10.101547Z","last_seen":"2026-07-16T21:57:18.177014Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a9a97359bf46066e05d438476843a46e","sha1":"1ca7ca0bee967845d53d406437a7b01e1a04169d","sha256":"65a0b49fc20bad89320523b403352a0aab36b8872274e8d12c6e1451c71fef5b","sha512":"0bc848fbe9df60518623bc34d601f756914bf1b4bdddc41e112aa0401a11137423aa5755b4f61ae6f0b102aa2cecadd02eb4fc97b3f5d46158d8c72aecc6bed4","ssdeep":"","tlshash":"4ae01b2bb299103f08cb715b78854911801747f75c4bb72573321dbd98166558044afa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.117328Z","last_seen":"2026-07-16T21:57:18.322163Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ad21008fbc0cd716ccef374a8d444aa","sha1":"bdeed03738dec7d8a98f9299483ceba3f914cdbb","sha256":"15e5e07849b06bb26989bc682e704979fb9247d5bfe021dc3f5245c122b3bb7a","sha512":"fa7d41abc26b8b02adb5d362eafadb34871f3ffd1cc2b14be6a0640f8de16467be85b65ea323e5837f1f84c2dcb6c72f6f574d09ff64244c8ae4dad47c152aa0","ssdeep":"","tlshash":"5001fe160f486fba8641e0ccb1aced82974e883241413d2e80b2570c2abf315261ab2b","size":703,"data":"","first_seen":"2026-07-10T12:36:00.142544Z","last_seen":"2026-07-12T21:21:00.185873Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"776805858ebc75913b1c849e8edbb64b","sha1":"9b8817b62ac96424ba4677f63260b84d35e5205b","sha256":"8533a8b03d702ddeacde4a97c31bf12d4f2457aa561aeeaa703448663f938ee2","sha512":"5f9520e150189ead88495e84b6d31066760a95f19353cd3d1a96942192c820faf7211d30d8015ff55f7a2a397e22efdc911a69d534aaa7558e89166fe632b3f3","ssdeep":"","tlshash":"43b02b270a1000309390f3c5e0101f0d9d348234448ea935639d354403393390420165","size":124,"data":"","first_seen":"2026-07-10T12:36:00.144934Z","last_seen":"2026-07-12T21:21:00.186325Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8461b832289f7985b8fb4c9fd222a0b4","sha1":"8a40613660c2efabf22de8f27b161580e2deca8e","sha256":"46a831ed53c4fb9bc0f3aa3188512170a369bb99de3c2c0a8cea3eda39bd1cb5","sha512":"b42b5457875d1aadc55d8e1df0adb4642cb76a5516820e6c1bb16b9deae27d69f73bc37bbf49303e101168080b567a5ac6eebb210a7507fd0edb6d40236080e2","ssdeep":"","tlshash":"59a022e208c882b2b0302300c00020033b3000f0c00a28fc23afec8c2f2f03c02fa802","size":71,"data":"","first_seen":"2025-11-06T18:13:25.092899Z","last_seen":"2026-07-16T21:57:18.148704Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5e9fa73263ad822ed822dabb24f8780","sha1":"3453108d4f541d370065441a03e4e5e9e1fdb82d","sha256":"3dabc1d3315e1506df30d902fc8e9f3a3a137190b01e29185c8e9f89d48ccbd2","sha512":"3ce5a0c26d7a4fbc97ea0c28b93853acb66945141d97256860bb4d6c2924dacb27f93f4f922385bd5950a483c4291bdb61c144af147eda13d2cdc96fc8609794","ssdeep":"","tlshash":"16a001d101653a1681f164d5977672957a2e213281d27fa27aacc2183f3b14f85426e3","size":84,"data":"","first_seen":"2026-06-08T09:34:55.067837Z","last_seen":"2026-07-16T21:57:18.150293Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12965d283dac6682d4ff52ba2270c9d5","sha1":"adc49f93c811f280ca0208d490509161015ff8dc","sha256":"e7fe8e2f06ac6f9f7f3086fff41d116e02d03b4be91c601dd10b01eba8006849","sha512":"4da00fe937d7e455b422810ed71de653858aa1e6857808c251f6ad398424a686f96705bca75cd7d70359dd02ac3c8b801a48daf60d122ca494bc0981c9984d42","ssdeep":"96:CAn4RCy3vIcRe+b/oEEMI4ABVECl8YlCWZ9IdGSYbA99pT8HDNabItR:Nzy3k46L4pT8jo0T","tlshash":"3fc1627b43a98636071419434bdab705d8cee027ca4c5edcf7ec8c9cd7e82ad61a12d4","size":6110,"data":"","first_seen":"2026-07-10T12:36:00.152072Z","last_seen":"2026-07-12T21:21:00.187752Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"84273574cf5bd0ba3000b1c5000bee19","sha1":"0d3fbc8a88eb303ab8e69c7efc8b63014cda53a3","sha256":"85d8dbe7b37d52094725a1c1616af716e72bb4caf0452bbcdd52a5d010536d23","sha512":"84142f14763d9b05f29ff7c500d22afe74a4cb6afcc5544a692f5a141b1d2ecc872f290fc9508c26f34331cd40ccd8a72e3f8e807475c05dd4eb3558cc80dfcf","ssdeep":"","tlshash":"ade0c25a69967558cb23f838cb9f6304283650532008ce08ba1caa546f73296a2796d9","size":325,"data":"","first_seen":"2026-06-08T09:34:55.086621Z","last_seen":"2026-07-16T21:57:18.155013Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d839eb83176a4fcde4d1f59cd2dbc202","sha1":"275c770836f30b0b7ea6eff30c9d3b0ad99df39d","sha256":"d41d5a847883c54c35dc30428a5f0b0e8059dcf25b83e40e22e766ee792b903d","sha512":"bf163862133f049e0f11b5829a442d2c690fa525e3c40cfcdc93ee494bbe55384b7f61441448567847e02ca1b5de167703f7e78a63a7f8fbaa8ceb9e0606a702","ssdeep":"","tlshash":"e8f020f880b541b08d3ba45e6b0e5402362521578e507c753bec4e4e1f4c81d1afc998","size":482,"data":"","first_seen":"2026-06-08T09:34:55.091231Z","last_seen":"2026-07-16T21:57:18.157272Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"4b80dcd0c4d0cacaf9e50f8afc01d5a5","sha1":"b51772b16ae628996bf9bff731d7ba48eaee7652","sha256":"12c24a63d2c9e7daddf3e42c629b68ad0fc0ad83d292f04f2c3d41d34e294b1a","sha512":"6a0b9e2d8f05578e7cb808b6937593466ea98f36393c71adfd6b456de29af0cc371ebf1a25a2f973529091ce027b4e0e74c7c37e088545940b5bb7a817ec42ca","ssdeep":"","tlshash":"be5000c03300f000cc00003c0030000c0000f0c30c03c000c00c0000fc000003030000","size":11,"data":"","first_seen":"2023-03-08T02:17:24Z","last_seen":"2026-07-16T21:57:18.475163Z","times_seen":2112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4ad7da59c58dcbdc69edc418c967fdea","sha1":"b72481b6652f6cc4e06826c201f2c4addb2aef72","sha256":"59fad95c312cdd06e5db0f8a7beee0baa05c411da36fde2a6c13489a270e3914","sha512":"21de4bcb5abff3a1902686f324ff8cd38f8033a3332aaf9db349f970a9804522bdd0b4c9d09f4adc112314b471739a79f0ba5b5432df9763b44d9e209b06dcd7","ssdeep":"","tlshash":"6ee0122bb199103f08cb715b784949118117c7f6ac479b25b3326efd6017a4a8498eff","size":358,"data":"","first_seen":"2026-05-27T18:49:35.091626Z","last_seen":"2026-07-16T21:57:18.476616Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dc61e3f396578f6cc81f5ad317411a4f","sha1":"d00c519ddb61d204929f6a6118224a63f7b88eb5","sha256":"b7f9c7043bbb43e369a0310861c308025f3bd44b259b03650f1b36a67deeeaea","sha512":"d3a467d4cfc3f9c235f74ee98f52714207b4dc6f6a0fdc11702715e301e3798fd89b3cd951968d426e3af235d62c35da14b6283f3b0817b7873f2d71f998ba4d","ssdeep":"","tlshash":"6ac08c3db23a242f0649504a282bcb10909bf6d01e828f2000aa3ed88100a1d90d89b9","size":151,"data":"","first_seen":"2026-05-29T14:30:57.231378Z","last_seen":"2026-07-16T21:57:18.582799Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b5bd9f2704c9fa5d8a4c1d08766c390e","sha1":"04f929dbcdd3746a92774c11a38807bd98112887","sha256":"b95048b523525233d3ce65c00cb3fc2550d9a034e4ad6cd2c8b8b598f586d3c4","sha512":"2bea9230cce415bf304094e487768c078a81a8be989d0d4a9ea5cc01a53d7952d8603f8d9f4756ef543bec2ee28bedc31e2f9da880eaf4f0eede36f8ca092393","ssdeep":"","tlshash":"d5b0125eb29623aed34e20163c694115301715950984d124612596e8a109b144030ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:29Z","last_seen":"2026-07-16T21:57:18.285351Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7900066ff6fc334c01f0243c2f42fee3","sha1":"42172f2af37984ac4134f2dcee17ae4f8592329c","sha256":"fbc96e1d703e62637e0458519ad05f7cbf24ceadf6065ebb4d349f2b74335131","sha512":"a128c1213cb0346bb3459768da8271b9bfe316c0a59c552a197e7a06d17ee2aeffe0c3c994f690ba3efbed4b7e75f22f4b567da7eb1f3b6a89aa05ddeb6db76a","ssdeep":"","tlshash":"17c08c3db23a202f094a5059281bcb10d09bfec00e824f2000aa7ee88140a1c54d89a8","size":150,"data":"","first_seen":"2026-05-27T18:49:34.916569Z","last_seen":"2026-07-16T21:57:18.469961Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"798d4a1b454c46a85cb3c37ef035e975","sha1":"bf43d1004d0869ebf32e28b87cac06ff07f1eecb","sha256":"ccb0baf41253d786f87eab4cf8d5e2ddcf49ae57fa184c4863cbfa7652ebc397","sha512":"581c7ef25dc59209215de6141f03a0d54dc87a71d14e8ccfe0890ecd6c9cd87cef3906f2230eedd09e4f6042c3fa2f023604f3ca78cd251a383fc54ae9a0d44c","ssdeep":"","tlshash":"7ad02b9ff7ba221742ca6519949b06171069f78e0b048bd3003709ea94264c10123e79","size":272,"data":"","first_seen":"2026-06-08T16:37:15.978164Z","last_seen":"2026-07-16T21:57:18.324691Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2338d7247f0782da58acbacc4409f5a5","sha1":"89ee5e01240058ee574bd1d06c8d2b113db6fb78","sha256":"150b4a1f61daaa17094d6ad90dbb6c80c7009723d0d5e3191b27c64ee68df60e","sha512":"baf9c2c8bd077abc98b313da370b6ba602c8183b29a39cb6f7b560d959c58c0bd357870c614d345e50228b68d0e33df3d573402751064f50a4e030da9ff2f5ce","ssdeep":"","tlshash":"61d02b9ffbba221742ca6418d49b061b2029bb8a4b048b93003709ea94254c10223e39","size":272,"data":"","first_seen":"2026-06-13T16:08:38.730025Z","last_seen":"2026-07-16T21:57:18.269291Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a709f8e0ce975bb024a130e279d3dafb","sha1":"8909f60553312d9fe9ab8c510322a7a8b40f7740","sha256":"372e52d8c4c84d2339ececf2a1c8471612129b3caeb0f992fa8b0a09832ab6e1","sha512":"624177cab8163e7dba1c7d7d866dcac5805f70ef311c2b78c3b9e4b2004c1ee1318c7fc0e3815ed55248fcc9253384f97b66cd1437f7f30ea38b667b09197c05","ssdeep":"","tlshash":"bae0122bb199003f08cb716b78494911809747faac479b2573321dfea056a4a8488efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.47999Z","last_seen":"2026-07-16T21:57:18.164929Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"da4c84270c02143b2801401672f92c84","sha1":"f41d797e25b53babb8b63484e7878c5f2f819551","sha256":"5377a6b6bd1d7ac4b7f71e89f59eb6ae92512c616787ef0a4fe5c3387cd5de1a","sha512":"8f14973d476cec386f6632a5480bc749234edf756b487657ad948c63a05a2ee18bea97f20061a5a539c458cd8409de8dcdc5e993eda25ac787394772e6e48f96","ssdeep":"","tlshash":"0bb0125df19632b9d34e301634694111201715950980e1256225c6e89915b184030ea5","size":90,"data":"","first_seen":"2024-03-15T19:21:57Z","last_seen":"2026-07-16T21:57:18.503271Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b414d9f7bddfc2a120a84486861f2fa9","sha1":"504dda33405a32c108464a0d79fc65f0b3a33cdf","sha256":"2b46ae737ae53e35083241a595e92acbe2d9481fe060a00c0c34757886a055e4","sha512":"8f451face1b8ce7e897e2fc84e177de38ebdaea17e209f2643bea4529df957211f95368c4c843989d048381e100f4812574bb0a9f3a60d3b3af7a9dda6518a53","ssdeep":"","tlshash":"e1c02bb0504152381c17030f30b443cee2b230feff110001401c00073eb0cb5035297c","size":133,"data":"","first_seen":"2025-03-17T01:42:02.535551Z","last_seen":"2026-07-16T21:57:18.270063Z","times_seen":512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c59f52050aa7228ecfbda65b443b76c","sha1":"4c45cff32f4af64be23515c96aac50d41bbc9880","sha256":"9592302965258be5be4e987cded53a719a3b8babd6cdde4b298ee7162c882ccb","sha512":"7caf78e97e8fe46222215b5d3962deaa124b5cd9e9ef32cd15674769d7f0f26c9d43bc0f47d7248ce7701790841799d69bbf03cacaf820949cd802bf681dd681","ssdeep":"","tlshash":"44a0241df3c531350347705f10374115300301714c41d300533744dccc0d3454014d75","size":81,"data":"","first_seen":"2026-06-08T09:34:55.626183Z","last_seen":"2026-07-16T21:57:18.48547Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83f8c7d964aa0d2537668dd16d7aee3d","sha1":"e7c68971349881c9a55e88ab2cae283d19cf4553","sha256":"f5f3f43f7a67bb5601f060706f42429e7b030ddeefc9c51178961b7252a38071","sha512":"c405cc7bdd0191a9152193117a3bb3b38500577cad71ffc64eefd50ed6aadbc41caebe82c71a55352bef2a5d4e21c19ac94be53fc0b1fc4fb5fd7735f69976a4","ssdeep":"","tlshash":"21b0125db19633ede38e701634394121204715950980a124712587e89507f144034ea5","size":90,"data":"","first_seen":"2024-08-28T15:18:11Z","last_seen":"2026-07-16T21:57:18.562085Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5df9ec2d72d1c6a0fde97d62207d6764","sha1":"e36a10665edd4cd0c6d6f7a9e4f2bb8bc25df789","sha256":"6d9ae64ff7d64554479b84a22c7ed5e406e782f0fd6d5b9ca78c89dcf0e2f7ab","sha512":"0d712becdccc7ef23d17ab20926724b4fd188d7e5d04ac519d36dc4d6b0737c57da9afc3f6beb7c84e268d9c122f9f7cf0ee20871e4ba6a23ef344b1fc8d8ef7","ssdeep":"","tlshash":"56e01b2bb759003f08cb715b78454d11801747f69c47971572321ebd9016b499044dfa","size":358,"data":"","first_seen":"2026-05-28T10:31:18.736442Z","last_seen":"2026-07-16T21:57:18.352962Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"108bd6d3a3433b56305c38dba35b3ae1","sha1":"9d90a37cdbe876a40f6cf71ef6459542d91c36ad","sha256":"1f8d603ac0ffd92e7b455ab2f0073267bd05efbb4e2aed047a22cd24ada71d9d","sha512":"85572cb1c77e6f9b3b169e20dd8916514554e2d2cdf560217604bf172873015ceaeea08cdf404d3473d1dfec62b2a59cb489c01c7af0ff2cc69c5c5e941ac542","ssdeep":"","tlshash":"61c08c3eb23a202f0549504a2c5bcb11905bf6c00f868f3000aa3ed89104a1c90d89a9","size":151,"data":"","first_seen":"2026-06-13T14:53:10.23689Z","last_seen":"2026-07-16T21:57:18.370286Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/SessionServer212.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"027be6574d025500127f526bcfa2665d","sha1":"97d37e63f4bf5af2ed1f60d1cbd6ef6da4d1c0b5","sha256":"b722a6e2fea947f99f4a25e026e51554b7e30c9735fa1549f2fbce941a4c10c8","sha512":"818c82d1ef30f4188ff5f35ff881abdae15edaddc6c38d7ab87cd4b8fe89cca6c659775dd5b98dc1caacffa894780652263956559143a9222b12dd2f13a1a6e4","ssdeep":"768:w6kuSAIWgJW6SSO5kNnhnE4kk7NoX1aIfQiw:hkqF6VTc4kqOFaiQiw","tlshash":"4ac209c636d2755986f230e9206f105af03d8e9eb86c9dd0e09ac4d17eb4e97807bf19","size":26707,"data":"","first_seen":"2026-02-13T01:58:22.210836Z","last_seen":"2026-07-16T21:57:18.1006Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1d63a1086f0734370017a031c509adb6","sha1":"ccc41810f6d53c9e07244dc0aa814e5488ce5d63","sha256":"2423f76c50df2f9ca9876ccc99e32eb723cd1d1e9a94d915bc7de158c2c1bc36","sha512":"992a2d4b9d740099107ee771678b0dac7e184b9cbe392e9ace81f6524a3b08307c7f43a9cbd8227efec0b95e0ae70b08d85f65b5e4eff50d4c55dac5ac214537","ssdeep":"","tlshash":"99b0125df69622add35e20163c7941116007299509809124612586e89519b184034ea5","size":89,"data":"","first_seen":"2023-07-12T03:58:20Z","last_seen":"2026-07-16T21:57:18.301488Z","times_seen":966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"688b5c1addfa25794ad4381065015035","sha1":"0a88c0d7ff2cd15332eb2eeeeec7bd8e6d4c9c43","sha256":"66335ea573c794cac51a3256ee4782fe0d72795521a76171f8e48eb4872075f0","sha512":"59c51c67510f6fbc6d9803a3f4ca61e0b5523e2fe47d58d07b20371ca64f9f6afae4d8431cf5ef6dca984ce0786fc257b99a3b9765acba26cd5ac84f10f4b818","ssdeep":"","tlshash":"a8b02228f2af30302ac220ba202a8002b002aa228880c222222e00c8202c2880022a22","size":110,"data":"","first_seen":"2026-05-27T18:49:34.839902Z","last_seen":"2026-07-16T21:57:18.443422Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9c1021ef7299b522ce667acbdef3a953","sha1":"98bd02f1f4843b3b06f22ba7c33978dd4716f67d","sha256":"712c7416daedb198a18ef3f0013aec5ef36e3b07ff9a9aae931efd6e8fe71b56","sha512":"c7959cd7b4ab017c664ed27f8cf6e783d6965572553df7e77190ae61e7049d66ec277c75dbf46aa4e32dae61e2b311493e2ff0b6a25be7927ab1137274db6ab0","ssdeep":"","tlshash":"6811275a775c0cfb44ce79167cc0057114bbc3b359c0eba9bb3956a98865a014064ea4","size":921,"data":"","first_seen":"2024-07-31T16:58:56Z","last_seen":"2026-07-16T21:57:18.551579Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"24f1a3b806e13f7a2ef566cf9f9de449","sha1":"0a675e8bfbf2ee487044bd6024dd527759812d62","sha256":"397566796d64423d689c141eedc5cbf0b12840068095679e391e98eb1d0e8df8","sha512":"41586b90edadf0a2c594c6afefc0fb7acf533036f5148de85b0985e975643778f1e4e1a73a3ae855a41de2d716acba97540eb3b5cb1b4e711fb9edc888e4b7ee","ssdeep":"","tlshash":"1eb0125db59633b9e34e201634694111200715950d809124612686e89505b144130ea5","size":90,"data":"","first_seen":"2024-04-24T13:59:13Z","last_seen":"2026-07-16T21:57:18.191906Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f311c4bf0cb293890b698174a0f6b440","sha1":"051403c4de5e6a9315587d7e0fcc7ed7b6c75434","sha256":"ded4662373cf7a670f82ce8c20a7f0e81ed34b580c6d9b2d56099fa751b27971","sha512":"fbd20ea3097b089362603af35477632629eafe94af88ad1e9ac7f24583a7c8bc3fbe352e8a1606b1d577cbbeb9c66d58f36f63ab04dcced8a77a5f63fd7fa8d5","ssdeep":"","tlshash":"a0e0922bb19d003f48cb682fb8458b04811782f79cc79b21b3321dfc6003b4a8188efa","size":358,"data":"","first_seen":"2025-11-12T06:39:41.456965Z","last_seen":"2026-07-16T21:57:18.42829Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bb56d00d00ecbd6851eca0aac4bdb821","sha1":"2426a9f504845ffe0f248f728e081e60e77a2f33","sha256":"b8dfa8aed7905f07f27e9d102b4888f0cea435fc957e2da6eabbbd79a47511b3","sha512":"5f0a9234eb9ea4cad5a1bb787e87f69244e971aa7ce1e0a48847c09d7a0ed7e37a839b4f6420f06fafa62ad45bf5849a3b2d54aa052e0b759b996e81f07e7fe3","ssdeep":"","tlshash":"f8c08c3db23a202f054a5059281bcb10909bf6c00e864f2000aa3ed88140a1c50d8da8","size":151,"data":"","first_seen":"2026-06-13T16:08:39.070276Z","last_seen":"2026-07-16T21:57:18.615382Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"345eab6c6a71d83456e76d19de6a07af","sha1":"309ae9df8ab0d3bc655f1127a68f089fceb97bf0","sha256":"906f1631ec78aad79652c4064935ce0f12f4f72fbab7904f3902a0cb5ef44386","sha512":"1cf372e00a4c1f7a7ea71a0bb610d574689ebfbe53604f332e016399dd29f3a0e8c44500d6f7e917e8b053d506c2ca3c2b3198c681ce72a5664f3c342e1e9002","ssdeep":"","tlshash":"45c08cddb2ce6812e0b6000c58a6c248b3385d209b0dc292e584828aac90ea1047ae58","size":156,"data":"","first_seen":"2023-03-08T01:34:20Z","last_seen":"2026-07-16T21:57:18.18161Z","times_seen":1815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7fcce8d9be5db849a4b35b1c4ae830fd","sha1":"b29a0211462f14b77b949b3a0826f3161733ac5e","sha256":"f6295fc0b3f15c6d6a34da929397ae18e4e709808cd2437efb658448af68ca64","sha512":"850a1160e430eb878cc560a608074fc5667f76468181066b7c6107a321f1b0c161ad431a0fffd8d02204e10e10418ada70d14af03de48bff2853ced04c3faa9c","ssdeep":"","tlshash":"7eb0125db59622addb5f2016343941112007199609809124612586e89505b144034eb6","size":89,"data":"","first_seen":"2025-10-11T09:00:05.48951Z","last_seen":"2026-07-16T21:57:18.323844Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8a5069d20ceac8af3889f4c4ba8b38ed","sha1":"bb66766f32858e4d4965bd6957464fa7623f9380","sha256":"19cea7ea6b6a9a91cef0659eac70d7a0713da416c0a5a6f88475b02aea723d74","sha512":"266993c241b1d907c8626c6aa644fff4cb518c908fe714693cb662bdd7abc8f666e553e6170a346494a6fc2d12048354013c9c567084045d74c9aa67c86fceac","ssdeep":"","tlshash":"43c08c3eb23a242f05495049282bcb10905bf6c01e864f2040aa3ed88200a1c50d89a9","size":151,"data":"","first_seen":"2026-05-27T18:49:34.885433Z","last_seen":"2026-07-16T21:57:18.398779Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3542e1407562347d59c429a1b94649e6","sha1":"9f97aabd188c6968ff27afd2b594f5dd2ac07cd0","sha256":"5801839381270b6f7addd20df706da490ac0a05133134a56b10e2203e583c1d6","sha512":"1bf1716578d66c7e7b7c8cfd612a963c8095d39f8a4595ecbefa21cf605b170cf9b3a0dbb14e979dca7eb3e9d7002af04aa8093a9870a017187826414e151d29","ssdeep":"","tlshash":"05115c6a765c0cfb44cf3d1ab8c0157114bbc3f359c1ef99bb3955f98d62a014164ea4","size":921,"data":"","first_seen":"2025-11-12T06:39:41.45779Z","last_seen":"2026-07-16T21:57:18.437221Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f95e0a39aafc4d072156d705b64ed6e2","sha1":"282a832837c50bc7349effd6ccde6674f0bf3b1c","sha256":"0bb9cb262949c62199cc8286c5c28474b7f26d0485ff3349c1b57b6c086db5fa","sha512":"19e10a48e7851aa29a04300bf179f08c2509a1247a9a79436ddb77a0e64ccb56b369a6283c5215a8cf5f54bd10f73855a89c6c8537c44da519c77be38c570eb9","ssdeep":"","tlshash":"74e0126bf199003f08cb616b7c894911809756faac479b25b3721dfd9056a4a8088afa","size":358,"data":"","first_seen":"2026-06-13T16:08:39.099676Z","last_seen":"2026-07-16T21:57:18.349714Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d4d3610bf5e94f628708bab2596dac3","sha1":"0caad1588e4c10e3eed53fad5a3a9b04f5cc1220","sha256":"52133bb7df94afcb49f2978687a3301e515965169fe3315692c69c0eac005910","sha512":"5fc03bbdbd81c2e312fa29c31c33457c0be853fe5c3df77ee3e8aba8061c02c710ae860737c5f882c2d8600e77bf07d89612bdceeb5867e2a06a5e85142e7e18","ssdeep":"","tlshash":"e1c0c21ef388103b048fb02b3855851a511307e74e89a21593310aec501b6429008afa","size":190,"data":"","first_seen":"2026-05-27T20:46:36.82557Z","last_seen":"2026-07-16T21:57:18.510033Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3380086e54b038ddef38fc9e767b657c","sha1":"d4b9feb8ba60592fc8b8885309cbe497049801c6","sha256":"a75fcc0a92edc1496f7c2a34bbd2ed594905f0c61df2b8aed9fb38c71b6bd7d0","sha512":"8e893203421b34ce8ac350565a8692900950e2313652c8333874d70056d6653ea47babaf907482bf884294761fd7013dc42727ec54be28c95cbcd2bf48f8a993","ssdeep":"","tlshash":"6db0125db29763afd34e20163d694115200715950d809224616586e8910ab144030ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.501744Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67388f451bb8b8a7c38562147785a2ad","sha1":"56d6ea0af5a4e58cb208fe51b10a33785bd78a1b","sha256":"6fcf5a7c3924a44b2c999316b590418b3d603cf846ea616beb80e1423602cd13","sha512":"d744b4b56db163e43bb15e23fb78c41252ec16bfa67290de5bc7b703f8c39004b612b2c833769a5b02f69fd4283ac1f9806a824239377d8a49a33b7ee387a35a","ssdeep":"","tlshash":"40b0129db29632b9d34e20263429451120871599098191246125c6e89105b184034ea9","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.463525Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www-emu/pbc-core-analytics/v1-stable/comp-data.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e19f22dbce44152b3bcd6a030d6a97d2","sha1":"64f825cf774e0ee7571878bf24d85e3e905142f0","sha256":"e6fa0d5861bf241e0e0cb1834252dbeb6bb8c6be3307bb018474e829baec9753","sha512":"23a5d3bf8fdec1bb9a870cafe6e90b43efd6ebb816b3b2df3d5e010467d1abc0f2350f8229d6107c8d1ec50918eb0f90c2d0e953d20e9cb6311b1043fe5eac7f","ssdeep":"192:N7+zDrAtrzxg68LRkwUVRLcBjTAF6ejxpzDU77BaafkXOgOQCYF29qrncgxas2of:NPt8LxU3LGEfU/Baatg1VnMs34ZNSrv","tlshash":"4262e8e2a612c6b903ed95cad8189145f9592db8064ef548ff4decd6219fc0270e2ff2","size":15601,"data":"","first_seen":"2026-07-10T12:36:00.038992Z","last_seen":"2026-07-12T21:21:00.174059Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9c676fea9a92f70e4f6791261476159","sha1":"6e6adba248a86959d52a9bcd9ffb929b0963385d","sha256":"3a11473734f132094d74f28202c2176d1f9edceea7f03400bb3958e26c87a078","sha512":"1150c8ab763a1ed0702175cb926633a52f43a5073c050213ab8cc87abb56270b88c2742506706e2cea49ca75384924d3f2a760d429b3bf3f898e4fa38a16c281","ssdeep":"","tlshash":"d4f05cc36d10062fc1b5604c584511dd2568d6474b97dff1865ec48e6b04f652698c18","size":447,"data":"","first_seen":"2023-07-12T00:58:42Z","last_seen":"2026-07-16T21:57:18.565674Z","times_seen":1598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b21924147807c7d8d986e1679067bbe","sha1":"df2ff071e49666cff6f80a38dc3cc5634ca8e8fc","sha256":"1e9a8b0be15465ac8d17f270e431977060ebda1ff4e5034f1753d51b773145e0","sha512":"34c6c4012da64081e487b8b437f1fca767e7252ca21a5409a2b9fc9e0ed7913dfce3f3c1611a46676a98f46bf0fe20b8c7b6d2c97763eb280ad558501590cffe","ssdeep":"","tlshash":"bcb0125db19622eae34e201634294121200715960980d125612586e89505b144130ea6","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.420533Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8317b903450ec5c7dbe930ae963c4ffa","sha1":"f42c8189a0c28b4ba99e84d6b1530d6cdffe75f3","sha256":"76e8246c6f7ab90a60edb09f943f9ae915df67e191969e021180cd2eb9f2d611","sha512":"ba1fba538f7e5fae69672792d1f37478d7a04bc309946c2f95fcbe4b277a168a6b088cb669574edddaf7c51d865f8ec13bf527437c17a6a72100c710d5288c82","ssdeep":"","tlshash":"f3e01b2bb559003f08cb716b78454911805796f65c47971573321dbd5456b478044dfa","size":358,"data":"","first_seen":"2025-11-04T09:03:29.627983Z","last_seen":"2026-07-16T21:57:18.483223Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4775ab8652bf87539f73534101b73d4b","sha1":"44f718cfdc958787ef89b898f05aa2fde4f1c9a8","sha256":"a1601fe8233bd92dcec5ebd42ff1c9450530bae8b98e238e6ae54c7dd0b27508","sha512":"7973006bda8aab05099dfb4c80946212a05fdf32a97ae79b416f768bd7a16c08ba4320dbdc4d99d83d2a0224b96e62c658c1c0fe82d1dff2afe10ff671960605","ssdeep":"","tlshash":"09b0125db5d722ade35f2026342941212007259509809124a12587e8d105b148130ea9","size":90,"data":"","first_seen":"2024-03-15T19:22:03Z","last_seen":"2026-07-16T21:57:18.396937Z","times_seen":333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"db67b7ea89a29a10d9665227524c5582","sha1":"55ac484849bdd5b1d5d79bb0661f9b4d356115dd","sha256":"a4d307df52b4f93e593433248869751a4c42439f126d08a1b82b34f7f146218c","sha512":"4f683f2c17f1feb5b2baf6f1d72abd73e2c2a4391130852b5adf7cd7800db201afbfa46a46682969d3d8ac345df09efab0ca3064bb6a845477360c84b2ae5e23","ssdeep":"","tlshash":"0cb0125db6d722a9e34e201a342941213007199509809124a12587e8d105b144170ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T21:57:18.385748Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6ff57cc1c7425e9b0b15b9c6f916de04","sha1":"d57a01eb74a999c9cd8a431c525ad94f821123c6","sha256":"620457ba06837ed7637856132add50b9d3fb28530df877c730b9ddc5161f0a59","sha512":"469e1daadef26cf205c0179ea5918bdb3254ba58f11c6276a3fcaa4f06fd80d5be35f8dc5807698812898e1c99aaeac5defc2f013000707efa6ac34bd934789f","ssdeep":"","tlshash":"93b0125db19b22a9d34e201734294115608725a50980d125612587e89505b154130ea5","size":90,"data":"","first_seen":"2024-03-15T19:22:00Z","last_seen":"2026-07-16T21:57:18.389844Z","times_seen":409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/identity.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fca56bdfe3e31efaa975c1714ebf3468","sha1":"077ae0ee618bffbe45ea62885f16bb6def5111a4","sha256":"1afa9703700f948aa56e1ea8cb30c0b3d9e8af0a9cd8c2df38bc62eaaa80f504","sha512":"da51719e05780c11df513b41a2c63b79f9633fbf56892e2034cd566442b6e4f09b269503d49caac0c66aafc21ba0aa5c91a1815df394247ea30d2feb489838f3","ssdeep":"96:iyKV//kWYy4wHMT8n1YzZQy4/bzKykL9SGm/wLbYN4moE6dKDWA5yjjs9nix:YmpzwHM+gQz3fkL9bCwwN4qiye","tlshash":"930282c29857daa802d5adcacc1a22a8f7459c3853cab894ff4efdc5b506d4930d0bf5","size":8375,"data":"","first_seen":"2026-07-10T12:36:00.010685Z","last_seen":"2026-07-12T21:21:00.173595Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4a3a0a88f4f699a597925734438fd2af","sha1":"b3cd0f9c485d54f9e23aedcb0186cdae7c93b215","sha256":"232e91682fb5d51cec9672aa1fb2f6e527d67cdac0b8b55ca935e9e36b95e2fe","sha512":"9ca0854e0f97a05241109862f17e727790d36190f35c801e6744bb093ca5474bdf0da571fcc304ca2715cb27dcebccdc4eb5c1323475058722ce89e1e1b09bb2","ssdeep":"","tlshash":"dd11e76a7a5c0cfb44ce391a78d0067114bbc3b359c0ebadaf7a55ad8ca5a014068ea5","size":921,"data":"","first_seen":"2025-01-31T21:03:31.454563Z","last_seen":"2026-07-16T21:57:18.343277Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0e4bbbedde0c118bc549d92f8b25aa5b","sha1":"2af203a7cbd9553e572d86756757a0a844859280","sha256":"eaeb9052146484de126409dcf182994f85ae855d797b02e15c74b6762b0436a3","sha512":"493f5e69c25aacadcd9b81b3b6f475df8d074ab726680ce2875db9edbe18a456992640293295cc7eb7cc6eb30741afd4821e6b44683bb9555383b344b8a54161","ssdeep":"","tlshash":"70b0125db29623e9d74f20163ca94215200715951980a124613986ec9109b144030ea5","size":90,"data":"","first_seen":"2023-11-30T16:50:00Z","last_seen":"2026-07-16T21:57:18.348937Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1c23c70b106aae098c76eb25ba6e872f","sha1":"c5ba0731a21b7f04d68b7166a34be3a6a2904a6c","sha256":"02e80f725a306cbcb98f25844ddf6d2d9191022c81116152da1a114de87a4be4","sha512":"448cd5cd14d63f46ac8cdd0a15234e65c29c02d53792e37ef5e383c057d8397c69d89d08ce3ff2ad2048306c0a894d8f2f2a6e210383f9d1471a0609893e9ec0","ssdeep":"","tlshash":"f7113a5a7a5c0cfb44ce3d1a78c0157114bbc3b359c4eb99bb3956ba8c61a014164ea4","size":921,"data":"","first_seen":"2024-11-13T15:18:07.465806Z","last_seen":"2026-07-16T21:57:18.480821Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"39ffb71077781e74f3713d871cf528f4","sha1":"0c4b1d222588598d4680d381e9b66bcb4d80a8e5","sha256":"b45c0f78ac801683bf25a970a9b4bda7f1787b87e2328b15a12a9276244f0f6c","sha512":"82ad7f93f3fec0b13ed6f01d52323b4141f2f362d822d2ded11abb8bf8d3d9acaf3a02737f4ca2208a546821b656a54ca4fa0bee65aaf9e1660e85a71852ff64","ssdeep":"","tlshash":"70b0125df59622a9d34e2017342945112047299549809124a12586e8a106b148130ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.277473Z","times_seen":433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WRXS6TH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9b02c1a9ad67b30b2f755e47f2ca943","sha1":"dc660437a0eaf3322e2dcbc2809c194879694c9d","sha256":"1d9450f876bea3eca5686123271f9d0fea5e92ff4af45d7c45461393fa41a913","sha512":"948aac60939aa275f06f3e8a54004818ae068167c6dcfbf0cc32d06a983294943e44d6a0fbeeedb1c3d69c5c74875147eaf841df7819ec70ebb970ed512d02a8","ssdeep":"6144:XGUPBCfuwQMi8VPPTvRse4WBXuYF5KTZeGXo0Jf7wozbF3V512qp6q0Zci0SJGW+:bQftmZeGbZFp2IUtnSkAC7++XK","tlshash":"c905fb8df2c56836c3a69564a83f014a663d34f2b28c58a1f0d9ccd42eb85756193fef","size":850833,"data":"","first_seen":"2026-07-12T21:21:00.178619Z","last_seen":"2026-07-13T03:08:48.900986Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c5c991b163ead2e80281af65c86a261a","sha1":"93deb42116cf377e4ae66075f0510139d7d13b07","sha256":"c0bb3853bb74e9fba54dd803db422721f84459e2ac7ec7dcd62a7237a1d4ae4b","sha512":"cc0ce1a0809acfeda68e62d3fe075834f719df49baab3bb70360a29c1d2a8f07f690ce411695c803790a6c0a3ec48f9edb25f9c206c2cf79c32fbda290aae709","ssdeep":"","tlshash":"96b0125df59626a9f34f2017342945112047299549809524a22586e89106b144030ee9","size":90,"data":"","first_seen":"2024-03-28T12:54:33Z","last_seen":"2026-07-16T21:57:18.346418Z","times_seen":825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9d147842c95b44138319cf9a10c8e42a","sha1":"a536e36d093c3b1d0728bbddf89fc75471fa6547","sha256":"976584489b9ba8e9592e90b315ce632908501b576706ffb08799c28bee9e8fd5","sha512":"ade6850211f8a7e7db8075a4f5d79735d302a0fa373c4bd98870e561c7d1d6e135592f4f2d708caf840130f7411ba2ddbb4011b981f8784a8e1ed4f6d3949727","ssdeep":"","tlshash":"0be0e52bb799013f088f715b7c894d1180175af6dc479b15623219bd501a64684849ea","size":358,"data":"","first_seen":"2026-06-13T14:53:10.000415Z","last_seen":"2026-07-16T21:57:18.479124Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f6f900d72ae21c4f52ef1bb6db936bf4","sha1":"1b2a2ca1c02e2f2828f2ff2f3a53eca258a21813","sha256":"01c298f8f524c6dcc2f60a70e0c3309a4b87fd3bbd88218fc18ef790d4c32ccd","sha512":"3646272cf5ba3e92943817160d07a60f5fc12e8494a31d0a298ecf17fd660b890b941224ee958fd7680cdbd7ea6badd19b1966a4575265710f73422aa49d9708","ssdeep":"","tlshash":"1511366aba9c1cfb44ce3d1a78c0157114bbc3b359c0fb99bb3956b98ca2e014064ea4","size":921,"data":"","first_seen":"2024-08-28T03:37:44Z","last_seen":"2026-07-16T21:57:18.202624Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e70b66fbdffd1795bbc55f0609f0aea","sha1":"0ec073bc4c9acc6693231050a034ee8ce18a1cbb","sha256":"50eec0c0d5b976f01b590d827f9e5c08181ac40b5d7181130846eb386da3f60f","sha512":"3def989601d4c2f093fe5f9fb04c51a7ee0383f1d2b3053442764d2f38969784c1c156a7a1840483fab93dd27c49c24609656ea0bbba35a61f9e9a0764ca457f","ssdeep":"","tlshash":"15b0125db39622a9d34e601a3429411120071995098091246125c6e89105b184030ee6","size":90,"data":"","first_seen":"2024-03-20T22:00:42Z","last_seen":"2026-07-16T21:57:18.49587Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"804116170d62b0c4463cb8c62f5780ba","sha1":"d8958dd6a5aade9c4a15cf8648f83529ba2c780a","sha256":"ecde577a2f9fdfd999da86165387263b95c7ccd8027c827fdabf9981fbfdaf15","sha512":"7e660e1bb37390da1ba8678ae528c1424988bb431188037c8347a84b47b17692a80d779a3303f1ec882a4124271b816709844145a74b09db1e2ed32f0780f6b2","ssdeep":"","tlshash":"77c08c3db23e202f054a6449681bcb10a06bf6c00f864f2040aa3fd89100a1c51e8da8","size":151,"data":"","first_seen":"2026-05-27T00:11:11.665141Z","last_seen":"2026-07-16T21:57:18.407824Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f7eb1743ec6946fde7c0627fef344f15","sha1":"0a481a0c51a05396f380074befe19a8e76009eca","sha256":"d77e3af22f9139384837368942290966da24cc1c34efea6ca9b1fef109a50ce5","sha512":"accd0f04af846f8b4a702d63d471b4eea3df308ab80a659fc8a1b059579639f01c2f8669893637261dee0a38bc0d8a1a9d6b1beb530a27b02d528f014a557a02","ssdeep":"","tlshash":"fac0e96ff38c103f45cfb02b39958616510307e74d85e31953320efc901ba829008af9","size":190,"data":"","first_seen":"2026-05-27T18:49:35.11976Z","last_seen":"2026-07-16T21:57:18.235667Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"03813c8f9c7090b5946b115aecc8b75d","sha1":"ba790fba8950382b4777afe25228aa1a4b2eebc6","sha256":"c1facf73fa6d0df37438e6d203285d46e3685d655f23c29d10674f619115a378","sha512":"32c918dba9ae558457330b7f4997d75eeb9f6569012d3687aaeb3f4f9017165ce28eaef3a42241d718f15c7ed4cc3afceb3086c3bb20e17d84c3b8c4e8415d14","ssdeep":"","tlshash":"e3b0125db39662a9d34e6016342d41112047659509809124a125c6e89205b184030ea5","size":90,"data":"","first_seen":"2024-04-24T13:59:09Z","last_seen":"2026-07-16T21:57:18.311226Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/js/public/nunjucks-slim.min.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78fc369d6fdd305de0b0a3eaea038d1f","sha1":"05d6127f3bf2918323989a8c043f7378b386c887","sha256":"2a99120b93dc55bc88954cc7f5c193533bc18510a105232cf3d6bfdaf07f660f","sha512":"04b7b475b6b1c281b24c9688fd976df884915a0ee0c9e1eeccec7013f97ffbfc2a05716d5bfad99d3220d445c4194f2a4b56921e43358463fc41373f09e63104","ssdeep":"384:usERpZZk9UOuxriJ0okPky/N4RpAdHRksFTdz/5vVocg5IQMywtpdr3mOB7NdOlP:ck9UOdBOJNcKHdJqc2WeiE5","tlshash":"3fe263dcf2d2f06543a3a5b5822f500bf33e6999344e9068a259d4e6bcb954e8037f7c","size":33478,"data":"","first_seen":"2023-06-30T17:49:22Z","last_seen":"2026-07-16T21:57:18.127205Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"787d9cba43584398bddc5b323d298896","sha1":"307ad752c82236b6b94330425b99934b028ee1dd","sha256":"3f9f560dc71b691bf2fd5e4ebd2123afafafb585e10339d7a3c618b8906646cf","sha512":"713153cc032047f1b9ce26c77862abd53cc2226cdc468cd1f4a62cdaa4b9eea29af52b41bbade431d3fe0c76d2c3b282a1352e01edd7a64473fc704b8a625d04","ssdeep":"","tlshash":"6bb0125df79622add34e202634694511200729964980d125616586e89505b184030ea5","size":90,"data":"","first_seen":"2023-12-19T15:22:51Z","last_seen":"2026-07-16T21:57:18.348109Z","times_seen":830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b1d1599095ade800344b83701f260bbc","sha1":"f162563b02bf87d8a366e465bf9a6eb3429c438a","sha256":"9c27b3c39408b56db6a5f7a13198406480bf8fe4163b0c3ebd4c857ff8ee8202","sha512":"4617ba4cb7fae9341bb98d5c640a829b8d3f10b985e989cb2ece7e66e59ee121bd8fc6b89e56ba7ee4bbc478a1b0e07451a8839abad3dd4492af6dd5dbcdadb3","ssdeep":"","tlshash":"4fe0126bf399003f08cf615b7cc94911805756f6ac8bdb25b3721dfd901ba4a8088afa","size":358,"data":"","first_seen":"2026-01-13T11:26:40.524772Z","last_seen":"2026-07-16T21:57:18.211065Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e1e671ec23c376c5e5303932bdb60f20","sha1":"51540539714c9e8f01dee4ebf190796dce15b531","sha256":"733ca51d2d1523b6793df99ee3146fe9de63b1d27323363836008319b0c92c13","sha512":"72fb66f1739787ac73db383d9dd08bcaebff460e7e4bcc644acf2f11b416e7c2313c079c967c834c37f5f8126be33c7ea77cae78591d2ef7fc018f8b43267613","ssdeep":"","tlshash":"8cb0125db29622a9d74f603634294215204726a509c091246125c6ec9105b144130ea5","size":90,"data":"","first_seen":"2024-04-03T00:03:27Z","last_seen":"2026-07-16T21:57:18.260329Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"740c9ca7e1606ec89cf62b24851b9dab","sha1":"e5e025ceece4cbdf93b323addc606b8972872105","sha256":"43db62a0ae4cab94d2da56fa53eb15336d3b0f192f88bcf58766d3df499f0233","sha512":"9b76cee624dc2a5d0f3faa3c8a699d80c83684471cc7e3513e0fec8a3c5e94646f2736bacf3a9ddda3d4e82e6ec8a675a21017c1a41299b5304a95ffe05e00f1","ssdeep":"","tlshash":"67e0c08df0db603402d7705734ec8411307f6c324068e1a4b2bec6b44ca594d8177d1c","size":358,"data":"","first_seen":"2026-06-18T04:00:49.554948Z","last_seen":"2026-07-16T21:57:18.416273Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b439fd40339842f031c9f54e3aba7574","sha1":"ac9d6b66256117320dcbda64c500613fb1a9a9cb","sha256":"575e02abf95b2eac6488e56b661bd126140df98f96381e4156eacd97c76354a2","sha512":"b3126beb2b24005289eace75873a5666008b3e729d5883e1b43c37ea42f870b056a4d1c53f7944bd6b4083c6173edfba54ce5cbb9327fa529d6e53c10ecd1899","ssdeep":"","tlshash":"9ad05eb46212a23002a7a62678b7db5c793a2463b0073640d83e018491b0f5e9a53ded","size":249,"data":"","first_seen":"2023-03-07T14:55:54Z","last_seen":"2026-07-16T21:57:18.296212Z","times_seen":942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c87d1aa51babdb36cd13a64a12c7e1b2","sha1":"8aeac68b8f1945c44f91b77e57de830a2a15c2a1","sha256":"e296577e8f127ca8624c30a40a8f3ec0dc1ebf5a4373b0071e926dbf95b30e0b","sha512":"03d967400bbee0739cff90366210a98186acd774bfe046d10072da410c96f8a8ae4bd832c38420cfc468e674f7c82305de100b899ae96d3ed6dfe4ca50159fcc","ssdeep":"","tlshash":"1bf08b392e020c3b51d105d4607208e83bfdf4a55121efe99fed3e2667d9a9a44a1003","size":567,"data":"","first_seen":"2026-07-10T12:36:00.18246Z","last_seen":"2026-07-12T21:21:00.218454Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8103d3e8387e32cf361c0e8b2b344c51","sha1":"9e5587feb21500aa44b24cf8443e30a496d3a088","sha256":"73f9e62599202c81dea54a9448af6f96f07177807f358ca43cf3533581e88b6f","sha512":"21398d717a1010e961dd5d2496275f643a7d32a1dd16406899e070b7cb8b20ba50d4f09fcb389d262258becded0bd8c0779392a84d972b9f91ce2e72f57992ec","ssdeep":"","tlshash":"0280000222c00c883800802808a308c222888c332882cc3c0c008280e88080f30222fa","size":26,"data":"","first_seen":"2023-03-07T14:55:54Z","last_seen":"2026-07-16T21:57:18.298791Z","times_seen":1578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0c5cce62dc464e89fae808d1640c900","sha1":"4afe4cb9dfef577682db08964d47ab44d712ec7b","sha256":"e9bcfe3afd2e8f3d30686f9b65b059b564e681174496d3d431c4b31089135290","sha512":"3938165af1011a3d1619f5b1983e0061a1c4e2ead41e44328e2d94ddd4fcb573304475dba9107ef5d886d6196352ca79ea20f20f03ed474d07a865bbb0c42a15","ssdeep":"","tlshash":"4080041145c0533c55014444d540c5c711054453074454345530d401f0113331040101","size":36,"data":"","first_seen":"2023-03-07T14:55:54Z","last_seen":"2026-07-16T21:57:18.299729Z","times_seen":1585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bdadb8c4753d3f5e76897bb4a1df484a","sha1":"a9051951b61cd4c207890307425839caac2f89a2","sha256":"e96e5c58f957438d8fdb89cfb825fff56554bd591f125ca58d110c58e6de3685","sha512":"41e4d5b3f7d6090ccaf83bc23a52978a0b42c9a2fffb5df262fe1e8ab4dce344721f253be5ff584ad9069bc1f464c804513cc77c68d25280d096fb23425e93ab","ssdeep":"","tlshash":"1bf0ecb77459083505999cbb3079978c7d3891143e02f949ce3c15346e74e495867e74","size":449,"data":"","first_seen":"2026-07-10T12:36:00.191813Z","last_seen":"2026-07-12T21:21:00.220201Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6368f931d6146ba4e948b0f6b141ed27","sha1":"40175a0afa91c5ed8ce34903bbfd2be5082b1c66","sha256":"a933cbae6215ce31bddda489f4dc0a971426f82992459168d0dfec5c140ab959","sha512":"ef1fc861d6e0669fb5c937aba795d4e3abc691889b272ba167cc7e2953fd786c91a674d28560f5094d290ac6fa3a24e882854b81e1c9669988e7d28dc6833d36","ssdeep":"","tlshash":"25a01219f38935250247601a1036411a200341a2080192005226c4e88009245402cd76","size":81,"data":"","first_seen":"2024-12-16T06:32:04.33845Z","last_seen":"2026-07-16T21:57:18.190243Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e9ff2b569d9bfd915236dfda5b567eae","sha1":"6ac3ef1872c722b6f8a0f3ecd8e633d667856ce3","sha256":"d19a7fc3fc9cd975baef6d12a94ef6b0fc48ff68bce32fbd54053932410bd778","sha512":"e808552ac3e1b0084e19618d44af60d6d3a37268780b07e3633b9290ef5f48e0ada19a4f2483d9d1b147b9bcea9ebc0c0931bd06d6c3735ccfc94a3d28749452","ssdeep":"","tlshash":"ffb0126db39a23add34f20163c6946153007259509809124612596e8a109b148030ea5","size":90,"data":"","first_seen":"2024-05-03T20:33:13Z","last_seen":"2026-07-16T21:57:18.602157Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"312edfee68c7da02fa90164cdbd99cd2","sha1":"82a5d06d62a7b147607226c43aa5cad23c5d5e62","sha256":"4ab928bef1ae8f3c9fcb0c78f4c8d3efcf3d1ee373ec38d3974d43f80801503d","sha512":"f5b73e73fc45f9c44aba06904c9f5c8e513c1d53324c98170027202d3e4faf09fb5221d2280dc6cdb124737688a0f767b2cd5e466b4c04b5a92ea50ce3543331","ssdeep":"","tlshash":"88d02b9ffbba221742ca6418949f06171069b78a0b048b93003709ea94265c10123e39","size":272,"data":"","first_seen":"2026-06-13T16:08:39.00157Z","last_seen":"2026-07-16T21:57:18.3354Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"57fead6de3fd1b8937685a32d66bdb74","sha1":"525ccf2e222ce8d5846460080d0279dd9856d21d","sha256":"c5e64df4fea7232a0075573b81979610692aade479de3184211435578cfa4035","sha512":"0f75f58bba2bafecf01bbd9275ee3cd6f7db4ed00a54472a8d3a5dc40da125502e0982732617d056511e1dab24b7802415c56f8e0f515ac0186da07a669ef1d4","ssdeep":"","tlshash":"d8c0c22af78c243a058bb02b38654a2601130bd78e81a22517320aec901ba428008afa","size":190,"data":"","first_seen":"2026-05-29T14:30:57.171978Z","last_seen":"2026-07-16T21:57:18.291855Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d999a2482cce450e28712ee2cb17e2d2","sha1":"5c959a16405d8458b99ff50863d77ce1e26516fc","sha256":"79fec9ce9632ab6b111996e6823352b1d2fb9b09880a418858411248f51efade","sha512":"04f45928116e976b6c88ed7c21b4a6e12cffaddf89ea16c452d8c701101e906b4292a8258a4a8e87d35cfe86b1e7f7b866a4f8f10fafee1a09ccfe8c424db987","ssdeep":"","tlshash":"b2c08c3db23a202f0549604a281bcb21905bfac00f825f2000aa3ed88101a1c50d89a8","size":151,"data":"","first_seen":"2026-05-18T11:46:28.212373Z","last_seen":"2026-07-16T21:57:18.431329Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e324432423d1002ea42b2ff3cd8d473d","sha1":"d84022613a0a25ab61cde2daeaaf4b0b032990df","sha256":"fe29fe5b13fa728895d67a883df75d31e5473630842a289f70a0dcf520a18f36","sha512":"c35c22b6a1433a7faffa0bf50abae5c36fa12c6fdcc713a806dd7e5f2817b0d85af00ef96ba708f2a7726d0fd9c251d1627ad9ede7effd53ccaff924a6ec7870","ssdeep":"","tlshash":"d0d02b9ff7ba231742caa518949b06171069b78a0f048b93003709ea94264c10133e79","size":272,"data":"","first_seen":"2026-06-08T16:37:15.927247Z","last_seen":"2026-07-16T21:57:18.23056Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8d8438d12ed8a7c07795a27fdde620d0","sha1":"5efd7e67831ce5c653f447b287bac0f9f7a9a0a5","sha256":"c0b5cb339b7fbb6e89a2cd429d17b6bb4f616711f0f2b6e51d5d2b50056f768c","sha512":"391d6739ae6be9c17fde901b2c46e1d72aeb30b41c22a024c798e6bec7e837b93c8a8423c6e69c947a1d90fd876d369bb5218a9882d24ff7acfd42ca41709fe6","ssdeep":"","tlshash":"bda0125af38935260247601a103641152003016108058301522644d8500d3454028db6","size":81,"data":"","first_seen":"2026-05-29T14:30:57.129728Z","last_seen":"2026-07-16T21:57:18.387444Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c1bd45150303bdab922a635d474047c","sha1":"a4b1474ed3d6908120c6821798cc27582d229c8d","sha256":"c4a10f1e38858f49870e94df23aed6a8f243393e9bd85bf1543308f8558617e2","sha512":"784ee852415c76960353720d4de7f0d1c3e664b31ce4eb12726b04dd4be540480a04e52d8d22b73faaccf94b1135ed3440691eea81f7d50a54d728eb4e1c82dc","ssdeep":"","tlshash":"64e0122bb59f003f48cb715b79494b11801746f69c479b25b3321ffd9016a4a858cefa","size":358,"data":"","first_seen":"2026-03-06T00:02:05.852564Z","last_seen":"2026-07-16T21:57:18.471397Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cea2f1b0cc53be3196ae301092ecf112","sha1":"b79cd0758aaca7380d0d212a1b879cae77cdd963","sha256":"32b97758d730f85b108f194cd3beea34cff11913481c4959f7c4add99be1fb75","sha512":"3889c13727a57efbbf5b15b14581dbf712785d6d730eaa9ba2e6337d4db3699ed202699019b003db5037aa4f47643ee7b942584499df02082cc9f9ddedb17f9d","ssdeep":"","tlshash":"91e0126ff399003f08cba15b7c898a11801756f79c4b9b25b3721dfd9416a4a9088afa","size":358,"data":"","first_seen":"2026-03-25T19:58:20.948951Z","last_seen":"2026-07-16T21:57:18.519606Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e8516b2874738577acc303da62405b83","sha1":"c4d5d1fa78858c9b94ea65b10f9e1083b58c18a0","sha256":"077b6c171f75c575a76af72541855a09502b36f38c7fd5458c1b6602019abd4e","sha512":"0fe4ddaa1c68bfe273cf00220fc533d81be422a2d8bd36ff881df242b715c08353fd18efd903ebbd1225813e0ca01e3738dfd19e468c46cabfc258ead28e5c68","ssdeep":"","tlshash":"3ab0129db39632a9d74f201a34294215200729a509809124612586ec9105b144030ea5","size":90,"data":"","first_seen":"2024-04-24T13:17:49Z","last_seen":"2026-07-16T21:57:18.268635Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"209cd99a405d2a3fd692633c063cbe0a","sha1":"6bfd6176f178e3501f99a9434df13a905f324ef7","sha256":"a46f47d8b201c27bf062528953b74a13cdfe4924e2989d810577fde47c5b15df","sha512":"d87dfe49e1bba0df394f6a19b3209267db5bd79320a649289a27a5559b453b64c3b663c945d6376afd86bc8cdae3a807cef9f20d37488bc94564dda96b9e8e84","ssdeep":"","tlshash":"14b0125db1962aa9d34e201734794511204715950a809524a12a86e89105b544034eb6","size":90,"data":"","first_seen":"2024-08-20T07:17:49.262866Z","last_seen":"2026-07-16T21:57:18.498909Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/xsf-nav/v1-stable/navs-ssg.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"185319741a3fb824d2c36e4d44d6f5e8","sha1":"861830c9171ed0c9ef7c562d0686d3ac43153f7d","sha256":"e3b92adc41ee954f2c622731200d3a5b0017ef3f13e06cdde9abf459fc97fa77","sha512":"44109299a8d4de86a559d92da478b0498092747bdec4720278d51be80c0931cfecb97c2b7a70e9f309ac957b7e42c8459f7b64aafa5e69c1557867fa7c2ffb32","ssdeep":"12288:p13dpryCVJQ72azkhE6X0do49QCe3YIa2/8adXFth7D+anFBeLSMN6Gqv9:p13dpryCVJQ72azkhE6X0do49QCe3YIn","tlshash":"9bb44a59b352503a62f707f9e0675c03f35c3851a40ad4d8b2aa5afa5fce59b2022f3d","size":534753,"data":"","first_seen":"2026-07-10T12:35:59.986097Z","last_seen":"2026-07-12T21:21:00.162783Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"317b397647e6b3bb7b03484207e16ac8","sha1":"8e765c7cd48fc45ad1a9c46bc6a553008952ddfd","sha256":"3b8841c0e6d29f787c62e504e68a66984c1046cc5144b6649b0d409c896dec35","sha512":"69e25798fa396b8fdf16645fb20c4cf32a76ae8912b8281ce4e7d8948a74f4ccfb13cea325fb1a5ede8bea8a38464f5ec4055eb5fd3759cd679cd2ac9d02e710","ssdeep":"","tlshash":"17b0129db29622a9d74f201634294215200715960980d125616586ec9505b144030ea5","size":90,"data":"","first_seen":"2024-03-15T19:22:00Z","last_seen":"2026-07-16T21:57:18.405434Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c3db6e2baf9eb9a5e0697e29909aea64","sha1":"15c47f19acc24ee70219311c313b4942684a9ccf","sha256":"32375d23946c13ee22f1327d3b6908903538d9ae2980f3bb29297447af5e0d99","sha512":"dbbed5aa1764ed2009ea71e94943e5ea717d732263633e900dfa7b4d05af391fe986b567652cfea0ce09b67b70412dda8d708d4f23a8dc9853b0707ede1c28c4","ssdeep":"","tlshash":"fbd02b9ff7ba221742ca651898db061b1029f78a0b08cbd3003709ea94294c10123e79","size":272,"data":"","first_seen":"2026-06-13T14:53:10.183801Z","last_seen":"2026-07-16T21:57:18.174899Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d1b7defd824a045dc10a1bd045e597c","sha1":"2c18982f622fc81c4b7af9dace5f66e0fd6aaac9","sha256":"d6dceff13180ed6defad0d344b1397076c69147a2b2cc953145ad185495bd694","sha512":"737a67d868141bee56220c385307b10c2e46d661bb1a318e38f5b084387762424e69e7e956683eb5f6d992174438f5b6fe7a4482d329eb4cd84f22f05c98aecb","ssdeep":"","tlshash":"46d02b9ff7ba221743ca6418949b06171029bb8f0b08cb93007709ea94354c10123e39","size":271,"data":"","first_seen":"2026-05-27T18:49:35.130962Z","last_seen":"2026-07-16T21:57:18.354914Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a9261a1c0d4df581a5b506a1c5c56b6b","sha1":"8c56383cdc1a198dfa8253ae24a51e3f8735bbe7","sha256":"7b16ffa778efa0ce84f77b16bce0e9a11dd1a2f257295c3dffe0c2cf4476c7e8","sha512":"a828c73593af8bc4615986b570ff3d1d73dfc90aec98862915840f5404dfc8cc577142c3dd01710f756b1aeffa334a5370733e4a1a6025a99af72664072eaf94","ssdeep":"","tlshash":"54b0125db29632a9d74f701634294211304726950980e124612586eca505b184030ea5","size":90,"data":"","first_seen":"2024-07-31T16:58:56Z","last_seen":"2026-07-16T21:57:18.473507Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"80ed0b05e73ec4a0a714b238da48bcac","sha1":"efddbb0d4aaeb5c9548408c6eabfeb054b38ed08","sha256":"ac57e03f96145a9b80620d82d07490d72608ec8d3027aeaabb57ef991f5bdca8","sha512":"0b996bba900d241876208ee8ecf4a271813a00210486e4a4cf9225ee4c8209c06f76227437e0eaf23996432f4c347d07199b74c75998c5a373f8e01583e9462f","ssdeep":"","tlshash":"beb0125db59622a9d34e2016342941112007159509809124b12686f89506b148070ee9","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.45085Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b97a1d4424ae0657d53c9e21d8604f70","sha1":"31c56cd75a2d695890b6f2beacb5dd31e677bbbc","sha256":"7ab5f9e885575605ec0b13802a94bdacac6fef6cc5b276e7829fdc3147892048","sha512":"df053aed2419ea901590c53df5e4b35a106c43150e6671862009836885a201cfa0ae5e9cf37596a34e562ef54009957508c7c4516721f70b232d05d7edae45d8","ssdeep":"","tlshash":"6cb022aaf2af30222a8220aa202a8002b002a0280880c283222e08c8202c2880022a23","size":111,"data":"","first_seen":"2026-05-29T14:30:57.234491Z","last_seen":"2026-07-16T21:57:18.457026Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1a6e1ec5f58a835c296f47756d39298b","sha1":"f50d8752fdf7a810caf07f57b5744b8d3264c864","sha256":"a2c24ac414610d11aa3598907c6d34d4c898a40c2c0b451cf7ab4d3999bd8197","sha512":"3aeb7f242984261788f1bf2f64d0b5ab8400f6d7306c27a7f58ed5ab522b3cc791622ba8581608109290a7c970e65e1e27ec48de3ae688a656981e60fb7fa2a7","ssdeep":"","tlshash":"bde0122bb299003f08cf615b7cc549118017c6f69d479f2572326dfd601aa4a8098efe","size":358,"data":"","first_seen":"2025-12-22T12:12:57.946797Z","last_seen":"2026-07-16T21:57:18.392212Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d40f6c49990ebbc96249f5997459d79e","sha1":"e3783cecfabb97f95a3f51d83ed40a162d765528","sha256":"18832d1f3602d2cc4041983b213eeefaf161a1686b5f01af17da0a3d97caa4f3","sha512":"07990e5c077466c841b209862df5823e30a0c55c3b898e106a71b35a256dd84d09fd13f39927d67416dea4656fd1e0a62d3e64ee8c0558bf402af9401429a3f2","ssdeep":"","tlshash":"dbc0c21af38d103b058bb42b7851561a53034bd79e81a21593b209ec501b6828104ae9","size":190,"data":"","first_seen":"2026-06-13T16:08:38.844149Z","last_seen":"2026-07-16T21:57:18.536408Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"23110a3503ce3429011860ca17df3475","sha1":"b7dd9e78392f7b1a0bc77fe0b3480a4d0fce3eec","sha256":"9f7113594e3e1c1f8768b1371215c540ae14db172b9c26e2e55da67f12333da6","sha512":"6fee0b5b07bfe989cd6395695c4ac9539980cff43913798bfe34ca5713358094f3cade3f4b9c325f4517926b54ec7172eeaba4ce2b7aa7d95f76be45d54e9ecf","ssdeep":"","tlshash":"b0e0c08cf0d7603901d3306734ec8411307fac324468d264b2bfc6b44ce154d817b95c","size":358,"data":"","first_seen":"2026-06-18T04:00:49.647994Z","last_seen":"2026-07-16T21:57:18.340881Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4882ebfee9b77a87cdc19e9cec888a1d","sha1":"594e82e06df27dfdb5c7be68bff26f8efa858d79","sha256":"9170bb3c2f098d5c0a5a6ffb2f7b4a771cc8beb9d53a381c402c04e1c6eb880c","sha512":"7ac3ab7d5d9e98d11fb7ba10d1750790b0af868dc347a592d465369df837779d382b09a94b6131b2613aebad7f2029ffbdb19e152a00f1c3904b9687ace1d639","ssdeep":"","tlshash":"ceb02228f2af3028ab8320aa202a8202b003a0200880c202222e02c8202c2880022e22","size":111,"data":"","first_seen":"2024-12-18T23:19:35.298534Z","last_seen":"2026-07-16T21:57:18.563339Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"607947744601004d1a1dd06e6f7d9371","sha1":"839b0a63b9d68bf3e5510663db8f48e3a9b59e88","sha256":"762e7a7a2327c0c7b94af28371bde7125dc595242ff9829b36b679630b17d2bf","sha512":"576b81172f4ad54ee5e388014f8f3a3ce887ad4d9968a83660b368be1a9b03300a993f71258525cb821aa5cfd89d539912a1ff9089732b2646112d5537dec6c2","ssdeep":"","tlshash":"23c08c7db23a202f054a514a281bcb10d09bf6c01e828f2000aa3ed88104a1c51d8da8","size":151,"data":"","first_seen":"2026-01-12T15:19:10.778572Z","last_seen":"2026-07-16T21:57:18.37207Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4442532fb0c1a8301393a4f592f8b051","sha1":"161220d4e294c8026b96e6caa00767aeb172f961","sha256":"ca3d3ecdf81f6bcedbb6e120cf18a4c19fb40b64bb615673ed51467c01c7f4cc","sha512":"d96058a6e6af8dd68cdfb244afba6bd04c91697088a101e5b7b9edce465bd0ba2273a0c50df5bb2d74a9fba39113bc90fff63b6c6705fd98b73506d8fef817f2","ssdeep":"","tlshash":"e2c08c3db33a202f054950493c5fcb20906bf6c00e824f3000aa3edc8104a1c50d89a8","size":151,"data":"","first_seen":"2026-06-13T14:53:09.962705Z","last_seen":"2026-07-16T21:57:18.19494Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3ce6d1dbbff524c45fcd974b173d478e","sha1":"c6dede7f2362af5f81db2b41880ddc34cff7deab","sha256":"abd17c0ddffc0778baffd8542d6217ca923df7d188c40ee5663053ebfc56bf6f","sha512":"a214cf9e87c3800cc0695a2c6cb25d758b2571a7f8a700db983b33d90b4a8a3d927bc6d91efe8a886d76c4a9b657b420d288a28e858222cae1ad89b557748b3e","ssdeep":"","tlshash":"97b0125db5d722a9e34e201634294121204715d509809124e1258be89105b144130eaa","size":90,"data":"","first_seen":"2023-11-28T22:30:32Z","last_seen":"2026-07-16T21:57:18.331405Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_ga_tracking.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"896b537ab40c719676b181b6f375ee1c","sha1":"394d45b85af419d70f2df9a0bd05a0c09d22d02e","sha256":"90fcea0618e9842c88c2955fee356f94d4a236f4ace217ff1d3bc91e6a49cb7d","sha512":"0f917e771bd7d7c6f94799e5ddd12fa68aa9f3b49cf1d516a9120c8cb7e5b5133fc67d28f1f4c45cb5254a13d089f56bfe45da34274a47df598c71e501385c6d","ssdeep":"","tlshash":"978114692bf7203305a3a039579fe149777a601b291bf9643ece02845f9806e4775fd8","size":3929,"data":"","first_seen":"2026-05-21T21:31:36.391154Z","last_seen":"2026-07-16T21:57:18.141841Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5cbe05d0537828f6089ba88b1c7e426e","sha1":"8c95ba3c40985eb8ba88f81df2b7abb617fb74a3","sha256":"be7dce00e1410d8b7cca682ee4f945ee164f0a007208ff1632fcf2fbf28fc8e0","sha512":"a608e551e7e99da2ffaefc40c92413d8aa2d9061dc79acc47d995c268ea95d8584d71a7f2cb4842ec912f18d1df69b33a3e54285cacc4ed4906639b2878f0e83","ssdeep":"","tlshash":"09b0125df69a26a9d74e601a343941112007199509819124612586e89509b144034eb6","size":90,"data":"","first_seen":"2023-11-30T16:50:01Z","last_seen":"2026-07-16T21:57:18.340026Z","times_seen":432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a429d89c6600bac7a3a284131f151ad5","sha1":"796fbd17b3e6844482ba28e785db78c6b0d64390","sha256":"965ac9a65c82f84418dfe8d68cab435076099b7932b3ae2049fbffafe99f7ba4","sha512":"d462a5e5eccde6f2ceac4942ba3b1178dbf86d72ebe03b0c55941f608116b2c12dc2a846ad721d6f7e59b1c04c882f517bd4d91e74f577ffd4a23ac141047857","ssdeep":"","tlshash":"c4b0125db19623add34e2016343a4111200719950a809124612986e8d105b144130ea5","size":89,"data":"","first_seen":"2025-10-11T09:00:05.37671Z","last_seen":"2026-07-16T21:57:18.237424Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dce7ba84a23892661deef4cd63788bba","sha1":"d71727dddb7c49a12c0e6ab6fdf481c3bf54650f","sha256":"d90ddfdab0c3485f1e494f3ee7fe13c9495a143ddf7d9897be8735efdfe08452","sha512":"099beac5f183296bfa916dbf31d8eb34d947bca1db344b4cca659151f674c13aeea9ad129a7e07151a6209c33be5affd213b03be206011f14087fdd07af422b9","ssdeep":"","tlshash":"84e0122bfa9d013f28cb615b78454d11811b5bf7ec479b2573321dbd6017a4a8188efa","size":358,"data":"","first_seen":"2025-12-22T06:43:29.898245Z","last_seen":"2026-07-16T21:57:18.592497Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c62e02a1b42c834a8b71e2c9d10a55ff","sha1":"990176c889a6b361557e122294eba88e2b88d68c","sha256":"37cccc258fe40c12568cf9840d0a31eb372f8b4b02cd6b394d01795f3e99cfc0","sha512":"b3a6c19bb7633498b9ef49afe8db19597b0071d179121260a51f31544d9047f4786d6652de27df8f2d75a778dfbcd9e3983fa1287f4bc1c54dd4416fdc4eaa66","ssdeep":"","tlshash":"dae0122bf19d103f08cb616b784d4911805b46f79c879b26b3322dbd6056a4a8088afa","size":358,"data":"","first_seen":"2025-12-15T03:49:33.928032Z","last_seen":"2026-07-16T21:57:18.329476Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1bdb7eb3bd4830691f6b1381c8912b21","sha1":"4b9eef802cd8fa81f2cf5316d1f76ce626afc787","sha256":"687982c0d6817329c7e78dbdef5bab979cd7956151e8f41009affc77fa6a9673","sha512":"dcab534327a76928823c24f85ae24c786d1dfa80938125c5df3332575c7b473bb5b3d634060a4dcc7accabe8e1ba83b7fefe99b922c07656242efc63e92fe07b","ssdeep":"","tlshash":"37117a2a765d0cfb48ce3d1a38c0057124bbc3b319c5eb9dbb7857b98c61a0101a4ea0","size":921,"data":"","first_seen":"2024-03-01T11:49:11Z","last_seen":"2026-07-16T21:57:18.27961Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"697d92f4884ba0e8b281e25884cb898a","sha1":"9154204787837be8c9aca2d55cc890f4c1286b6b","sha256":"de3f1fb8bb057f81b745da337c4f1e92ad2c9b97a8740945f75a43461f004c88","sha512":"9ccdd648dd8f3fbe93a7cf06ca93e84155e5b88214bb543ff9e9ac9a59fc79bca2458e45aa95168b9924365965f9b5c4f2c90bee19cbcc399edc2c8fbc34c015","ssdeep":"","tlshash":"d2b0125db59726b9d34e201634794911204719964980a524a12587e89105b148230ea5","size":89,"data":"","first_seen":"2025-10-11T09:00:05.3184Z","last_seen":"2026-07-16T21:57:18.332577Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"56a4452d5d7a342ed29abc14c0d4301b","sha1":"5b9aa32b17f573112919e7d88df236aa40a630f1","sha256":"92f6c4e6e5d7d891ba7498715773d227635757334ab94fd686973c108d20dd85","sha512":"785c1d4cfaefe6de4ae5436b927d45c94c4b8d614cb5ef679c0cb3993957cb6b3d09e52ab844a503e2a790a616d9f6938eac7cffaa3bd40f3e2dd342d7228520","ssdeep":"","tlshash":"93c0c22af388503a088fb02b3c91492a41270bd78e85b226233109ed901f6428414ae9","size":190,"data":"","first_seen":"2026-06-13T16:08:38.834756Z","last_seen":"2026-07-16T21:57:18.472826Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"76df713981ffc13fe8f2c338a90bdced","sha1":"7ce0f3e00c95f9ddcd11792567db11e01209579c","sha256":"bac0b0885879910201a3483a7ed6aadd174dc98930137595761ae097d87fd0b0","sha512":"1879a5e4d7cd328d7bba52d775037c3133112dcdebcdadd8a377d082037d14aac92cc13b3d48b3f40d48e13857bec245d31c29d204587f16eb3f2ac53b82c0c8","ssdeep":"","tlshash":"6ad02b9ff7ba221742caa41898db061b1029f78a0b088b93003749ea94298c10133e79","size":272,"data":"","first_seen":"2026-06-13T16:08:38.878943Z","last_seen":"2026-07-16T21:57:18.236563Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"72956e9f10af1a3652fae481a792287d","sha1":"0df6add7dbe879bd3895531a8cf9de9579aadb34","sha256":"880263319eada4e16dbbeb7df0df68484211a8f19bedc706ff0e5996c2cce8d7","sha512":"2f9d480f9798de99b66241456d765276308baf1493886eed97c355211777d985a684516790a36ae0ef7b514353f4f9a1b05aa78c009c40eb447ff500e21c05b8","ssdeep":"","tlshash":"afd02b9ff7ba221742ca6418949b06171079f78a0b048bd3003709ea94254c10123e39","size":272,"data":"","first_seen":"2026-06-13T16:08:38.851542Z","last_seen":"2026-07-16T21:57:18.376387Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"54a9b0e7aff173a81cb8a05a4c865b51","sha1":"0ade989749d8349a5a4add9a3eee15ab2a066228","sha256":"9278b208382cafd97aa10b636a10bfe97437b279da1cd373c1963d5be8ccb6f2","sha512":"4216b982dd37a37a9ac40f3cb0d29f85053aff4cf64b4dbb208d1e88e4a49744dae697d541e9f7f4445ef273f5bc2402fb8ec9b4784d475305cdfeedfac636b0","ssdeep":"","tlshash":"6be0122bf199103f08cb715b78894921801756f79c8bab25b3722dfd9417a4a8088afa","size":358,"data":"","first_seen":"2026-04-20T18:55:02.247581Z","last_seen":"2026-07-16T21:57:18.414406Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c0bd9fb29be0a169d284fad96604df1d","sha1":"bbd43b9bc49ea5aaafdf42a7fc028f2b226c1fed","sha256":"6d2a0be16366b335c402df171cc16163a9f8963e67ed66a4b934e98463866ad7","sha512":"0ec7e9c2e586e0c0f01a7d9a07eab7d9cac4d0dfc14f58aa240fd20594d9311bac65c4d2fa56b332a4251b8e7216e77327518986705878aca8fc0dd731e15bfd","ssdeep":"","tlshash":"78c08c3db23a202f09495449681bcf11905bfac10e825f2000aa3ed8c100a1c91d89a9","size":150,"data":"","first_seen":"2026-05-27T00:11:11.733924Z","last_seen":"2026-07-16T21:57:18.523Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"57d04e17742bdb72abd054a3932c93a1","sha1":"a1d3ff7fb0d4111b10c29b2e7baebaebcfe813db","sha256":"694881105d7b59f840ad63f1da4da1a8091ec527a848f2a9db7b65278aed35d3","sha512":"d2b0047ddb24629d922e03f8f3b003a4c9988c18d8eac5af59d323b8df615a99e8f3c2443550a21246c824dd34ce40376b7145a43e7fe0f56ec380a5a8e31a14","ssdeep":"","tlshash":"e1d02b9ff7ba231742caa518949b06171169b78a0b088bd3003709ea94264c10123e79","size":272,"data":"","first_seen":"2026-05-28T10:31:18.742736Z","last_seen":"2026-07-16T21:57:18.238408Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"82724f8f113e3e86c334ec5afd2e2f85","sha1":"a2222920296c5db6bec2c48e3595131e30994335","sha256":"a1da2397a480f1c3abd931d6e4f01190f9051c4d5ca5b80646a6a89d7eccb116","sha512":"de5113dcbf2a96c8dabd23dcc86cdaa8d1674785282ba7e71645d87ff03aacd0a9c9059dc428793ee01c882272a2fad2be3512e5790ecf1304571f3297179a95","ssdeep":"","tlshash":"7ba01219f38531250347703a10264615300305a108018204522644ec50493858014da5","size":81,"data":"","first_seen":"2024-04-24T13:17:43Z","last_seen":"2026-07-16T21:57:18.506047Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3a66e8fe6ec63d182b4b9af57af99028","sha1":"308b13fff67f94b1c1d7d9fb2737df22a039a96d","sha256":"1605be0931ad90334b4db9c554c4f8416059228ec502ce513578c40900dfb3e4","sha512":"c4bbe97860c316de13f5d9d3cf470f0bea0fde8ae77347c6e26eab2e5de4879358f8627f91d0068cdf3dba744da0e0f047c4c71e67a98605dbf313f7cdf0d6ce","ssdeep":"","tlshash":"73c0c22af788203f05cbb03b28a58a5651430fd7ce91a229133209ec505b6828044af9","size":190,"data":"","first_seen":"2026-06-13T16:08:39.015832Z","last_seen":"2026-07-16T21:57:18.317096Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0950b994730325818ede100b3aab3437","sha1":"6df56496e17345185714f8f6dcd525534259a940","sha256":"fb7fed62efee4bad5347afe9885dd1a4e26d63aaf0e6d7a104664d75d92386f0","sha512":"f481561a9ea3360395d7077907676f6adcba6b26bb3118e6ece19a3eadbbd773acec42e221259cb92dd1354df738723a10b122b548ea2c13107d193c7280e11c","ssdeep":"","tlshash":"71e0122bb99d103f08cb715b78464d1180175af7dc87ab2572321dfda816b4a8088efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.408218Z","last_seen":"2026-07-16T21:57:18.560257Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d3759d913c57238cd34ac277e3981be0","sha1":"34d37a291ad26aada43b117b1e1624faaa1b0417","sha256":"1871184c371e010fb2117cca8eb2288affff16728364e719d4a6f1ef71ade28a","sha512":"0fe2c16f71d6169dcab2f2d7a7535518f7c780f91eceeae6664e52ae32b45f8b846a576b1b97b33fb72438ce806b8a46c98feb8753f73e0c20be06f68cc21b06","ssdeep":"","tlshash":"d1c08c3db23a202f05496049281bcf11a05bf6c00f825f2400aa3ee89101a1c50d89a9","size":151,"data":"","first_seen":"2026-06-08T09:34:55.489629Z","last_seen":"2026-07-16T21:57:18.507655Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8895cbdfe457e35de2224bc7922edf80","sha1":"e28dab1007ad659124c2f6d5a16af346f5be99d8","sha256":"915305877b86da6bc36a31287df1d88be445064718203e9aa0cf2d9876a1bf06","sha512":"7ace8d4db47af5065167bf682485957d0af533b108e54ee9e0e9efc91a4a20c590ee9ffa8cc8398163fcddf62691da61929680dd7e561cbb7f164194534839ec","ssdeep":"","tlshash":"d1e0126bb699103f48cb715b78994b11801746f69c47ab2572321dfd6016a4a9088afb","size":358,"data":"","first_seen":"2026-03-25T19:58:20.882522Z","last_seen":"2026-07-16T21:57:18.410427Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"38170d59272698ab2fe5c34a0b789f47","sha1":"efe77118945d8e5f0c7cfe20f1b5227a71920951","sha256":"54eb2f4c4a786c47ba91044fa98bb692a82ea9e947be5f0ec920d0e9f73eb3ea","sha512":"9cd2c44486543fdec213f4d073d630c9fdbc03873924bd1299892879cd44d177e6fe339659518d504eb7502d7b888e857d3cc7c6bd996e2b9a313ba223325079","ssdeep":"","tlshash":"beb0125db29622b9d34e201a3c694115200715950a80d5256125c6ec951ab184030ee5","size":90,"data":"","first_seen":"2023-11-28T22:30:30Z","last_seen":"2026-07-16T21:57:18.360613Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"872d502a184165acf9130a7d37fcb207","sha1":"9ecaa0ffda377da072c27793ea24093b43c3a4ed","sha256":"8c7f1d17726f796d4628fbc749c68f400cbc166bf32cb05c537513311550869e","sha512":"2d791b1b2c7705dba1bbb493959591431b9862df783be043aa62a8d10cd63813fff6a11bb968852f51c98c89d8ea9180a52ba217e59b1904d5f36956d1f2de71","ssdeep":"","tlshash":"9ab0125db29622a9d34e201a342a4111200729950a849124612987e89105f544130ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:32Z","last_seen":"2026-07-16T21:57:18.169018Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"553fa7478ce24208ce59aa9af21197f1","sha1":"5e4619af92d7ea61a6ddae6b077e59f5e061d28f","sha256":"840899f9f085fc6e29c0dd412ecb802b1551dc1a3e76b7d3b6a789ebc713f589","sha512":"1146038dd9b85a43233a4e2e089799354dafbc49aa44f29c40a2301cba879530f7ac9e8b007d38ff07a852a7d51d678be84c78541f3bfce0805353b67cf52231","ssdeep":"","tlshash":"16c08cdeb2cb2420e0b6040c54a6c158b3399d209f0dd2a2e180c28a9cd0eb14475e58","size":154,"data":"","first_seen":"2023-03-08T01:34:20Z","last_seen":"2026-07-16T21:57:18.193522Z","times_seen":1815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b55808bfc90527f15fcb91d0072c62d","sha1":"713e005ad73e9d678bb3ce8e38b31101685c67ae","sha256":"ba408a769d4bbd98396d5ea1f86441a4b10be728776749c0f0b81128118450e9","sha512":"448f6073169afe4f1feb9bb14ac65ad0bc83a6ac8a4de772fec762fe7bf658cfe89e78e7805d3931bf1d4d810acc92b30928563f9407647c95e970ca9e5f4312","ssdeep":"","tlshash":"7cb022a8f2af30222ac222aa202a8002b002a0200a80c202232e00c8202e2880022aa2","size":111,"data":"","first_seen":"2026-05-28T10:31:18.754349Z","last_seen":"2026-07-16T21:57:18.564697Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5617fca0024316e976d92ae44bedd0ce","sha1":"f875d464e8399585078f7c47f43ae3ca0eb1aaeb","sha256":"7e53fcf57726f688f581d75d49cd87d9903922e68e35d2ac872c24e52bca223e","sha512":"1ddf969722c39c2abd891697bcf02dbf783027327173c3eeaaf4272b737fed5783deebb0d72e4e2fb487d41eafabae86af588abb0efe387ef99753391f21d11c","ssdeep":"","tlshash":"03113a1a775c0cfb44ce3d1bb8c0057124bbc3b359c0eb99bf3956b98c66a0150a4ea4","size":921,"data":"","first_seen":"2024-05-23T17:50:06Z","last_seen":"2026-07-16T21:57:18.601277Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f9841dabb1af7e7cf28a25f9be6a68c0","sha1":"a9f383ce18a6e96db116097ccaa5e46978a1a5c1","sha256":"5f4383e7dc8eb40a70b6599ce7cb026d48dff3bedea15712c3b6505617aa2f7e","sha512":"0e3cd012223421edead74588b82bda5d354a42bf7b45ac2910dbcbf776614e49079824e95e39fd991a9426db1dddc60db52b71d31018b834e45d8ad33af1cf33","ssdeep":"","tlshash":"75c08c3db23a242f09899049282bcb10905bf6c00e864f2000ba3ed88500a1c50d8ea9","size":151,"data":"","first_seen":"2026-05-27T18:49:34.801607Z","last_seen":"2026-07-16T21:57:18.566663Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0bea8158dd165d0c5468b01ad1753603","sha1":"b1f730d82b015f3c7505269238dc25e05a67127b","sha256":"9aa5df1b96bf59d9c3952a5b251bbd3dc9ecff949405d14f44cd461919ec205d","sha512":"54a0d128a8252e63660a5586d23f9e9343c738338270ab55c061a60ac6435a392d0472336998c376e5e9557fb113d1553263e00392b1b11a076e0c67f0a919ee","ssdeep":"","tlshash":"e9b0126db29a27add34f201634394111300725a509809134612586e8a105b154034ef6","size":90,"data":"","first_seen":"2023-10-25T20:02:32Z","last_seen":"2026-07-16T21:57:18.280631Z","times_seen":432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9a4ad9a39e69be6d4afa7b1d0a3ef64e","sha1":"e997c979e912ee19e4be44766595afcebe88ba94","sha256":"59b77ceea4dc0fa66351f11d6881f6a577e970afe0b79449c4c981521e4587fa","sha512":"2596e54dd879a21c2332535a9ebfedc7021d0759205ba3d7b9fba3fff735c8540dd5305f462f4fa2a28ac966d66205ec425b8fd79b9c65b6bf0aa625f91d08d4","ssdeep":"","tlshash":"dab0125df59636add34e201634394511200729954980d125612586e89505b144034eb6","size":90,"data":"","first_seen":"2024-03-20T22:00:43Z","last_seen":"2026-07-16T21:57:18.578566Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"60ed438e23936dc05b120367be842f78","sha1":"6087b98a917e14a4c12adb9fbc6b0887b8d57872","sha256":"21cacbf8d439b98f4d35d33217028b7a03389754650de47ac39c6f2f3e0aae2d","sha512":"9a0ce36db2858393296039f3bb0cb7b7fbba8e63c2377aac7deebd8819283f2e4cc966af180dfc523959d5f6c8b9a00a00d386ecd17e0b31870b2ee16282d84e","ssdeep":"","tlshash":"3fb0125db19633a9f39e2026346945212047159609c09224612586e89105b144030ea5","size":90,"data":"","first_seen":"2024-07-31T03:34:18Z","last_seen":"2026-07-16T21:57:18.484773Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e987e7ad26814ac5d4ca12d6210056d0","sha1":"da3e09381c904aa62e5ba157a4fd54c42e3b466f","sha256":"acaa56f11124a76d45c1648667400d6161a012683077310946d0202144c4b70e","sha512":"2a96d973e636b55e4649e89e84b5c8c708c863af84e85ab93349ce76589ac2208dc3751fc0ff37dec4d03faad1faca87164bf8a3022e2e25e8f78d1a15a3c86f","ssdeep":"","tlshash":"4ab0125db19632a9d74f301634294211201716950980e125622586ec9905b144030ea5","size":90,"data":"","first_seen":"2024-05-29T17:41:04Z","last_seen":"2026-07-16T21:57:18.352094Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/jslibrary/SfdcSessionBase208.js","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e2870fbac46a1cb8236be77c9994949","sha1":"8ff7c8444655613a742d035a29e78ace56bb9f24","sha256":"3472427f067f8339f37000e07b9f7e9ff0bbd4adad5be419e65b2640970f06ec","sha512":"5b76917441dec93fff73c53e95cf4ca8ff2a80074b6e5a8e6b1a247737c890ff872ee8973e9a335604f59e6d27ee5f98f6446695400cbe70ec22c0b5db3522b5","ssdeep":"192:wUPZL9Q5pKURHiMtKKJBEOcjSNOIchZG6F1fqLpISpW7ZUCK4sp5l+NZxIucVwvD:wQL9QHBOjSNOIWgZH8sp5kNZxx2w37","tlshash":"8872d6c2b6c2746289b6b0eb503f1046e57ccd5ab86c4dd1d0e9c6c47fb48aa417bf28","size":16274,"data":"","first_seen":"2026-02-13T01:58:22.085082Z","last_seen":"2026-07-16T21:57:18.102199Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3439040cacddacb098b6b1db077a411e","sha1":"bc8140ef7584ef0ac00d15985426bda18c8f96aa","sha256":"7826d84d6bf32a8be4e144af3894ef9446ab4b47170377afe214f9c2c020d4a6","sha512":"d80e809e809bea7dffddd0b6d884cc76a8f156c3510810fafcfc85f487cc4b9635a812a6740ddd737ce559cf104127138a09145a7f96e3505d496e2d4267cf8c","ssdeep":"","tlshash":"dab0125db59a22add35e201634394111200719950980d124713586e89525b184030ea5","size":89,"data":"","first_seen":"2025-12-22T06:43:29.909167Z","last_seen":"2026-07-16T21:57:18.591618Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f3cbf46daeaa01a62cd943e1e3001637","sha1":"8b3df38a8d66a5be7bf17827cbd922b65dea935a","sha256":"797f2113eb3db906cca2af3d1d0387b23065f7db1c11df716930969da59d7e07","sha512":"366958c98f54bfe4d8e29b691eea4e269d7019e5efd669a13a534470f5ff01bfe0e0609e6fefa687e1532dc317cc060abdd8ac90ffb9ee9d4e870eb243130e2c","ssdeep":"","tlshash":"e9d02b9ff7ba221742ca6418949b06171069b78e0b088b93003709ea94258c10123e79","size":272,"data":"","first_seen":"2026-06-13T16:08:38.88396Z","last_seen":"2026-07-16T21:57:18.399659Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"eeee85b8e2556e2d128f05ee5fc84106","sha1":"aabeb908c76148063599361011ff38d8ef87b05b","sha256":"2363f5cb8470e16929c5e6bbd0eae185e000337bfdbdbd5ec656ca9f107c8d95","sha512":"3a59a89e943b6cc7861e6dc07839eeceb4c759739f69a56d2ef36fefcb32bbccb3becba2ea61cb08cd2e7a09e6cdfbff924f3c2cb702fb4d9f578d8a9d712f6a","ssdeep":"","tlshash":"c4c08c3db23a202f0549a059781bcb1090abfac00f824f3000aa3edc8140a1c54d89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:39.043301Z","last_seen":"2026-07-16T21:57:18.512283Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fdfceb3b31225f9931d9d8a9e858725b","sha1":"a2f054f5b65ad3552f11db79ba64958d8d3dc0fc","sha256":"c3cdd86d849545b50217d719739ba37798f9010aa6391367c7b4e3e1dcea0bb4","sha512":"a08e497da02e9bee7d2df26e8faaf78524bc08f5a07b31707e2019174c1cb0429443330c5bbebfa892c6bc63630055cffd55015a8be38828fc6e19d6e086d726","ssdeep":"","tlshash":"cf113a6a765c0cfb44ce391a78c0057114bbc3b359c4eb99bb3956b98c62a014064ee4","size":921,"data":"","first_seen":"2025-07-03T18:28:56.136326Z","last_seen":"2026-07-16T21:57:18.345643Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9c38e9b06cf0a8d73fa53633c2764c56","sha1":"fe179ff06cd662e4bc830623af0bd3cd5f6cfbd6","sha256":"7c29e1b6ec3f70b588b0645ff1db547e7e05037aef557f543853d2f0bc07491b","sha512":"bba99a73355893ccaa5ec0ab960126b6666df0d71c9b16088c55aadadf442a2f425e8bbebba5ddfa68e4b0f4a4827fbc78a7bceb6fc65c5313ec11a31ab41999","ssdeep":"","tlshash":"9cb0125db19622aad34e2026342a45112087159509849124a12596e89106b144030ea5","size":90,"data":"","first_seen":"2024-03-28T12:54:32Z","last_seen":"2026-07-16T21:57:18.526763Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c2afa7027da1499cf38aea260515cae7","sha1":"703c092aaf6cb4ef6de643ab678d77a9210f8b22","sha256":"ae2c71892335ccf142174295adc75bfa25931dc3ef08d67e43e735f0938f5e94","sha512":"2fa2591b00e2546f4698ebb58ba3afe756b5331d0444a3352e73dad7195c18d8f94f550d95175ccc032b1daf5a74a132b0436ad5e9de2f1fc981a10753728394","ssdeep":"","tlshash":"aeb0125db19a23add34f2016342941112047159509809124613586e89107b144030ee5","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.205455Z","times_seen":232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b00a211aba5b6dcca1dc99d4006bdcda","sha1":"708b1d6783dc18e90cbca671825f014ca42936af","sha256":"fec8200a382937ee3a2123d5e231612cd9bdd6401dd8a92f583d33798792bc8e","sha512":"664d37602415fb1b8a76b3a19d6e3e77c29e2c4db53c90bf6a1a6b8cd85f117fcff77b4ebc9ce9cf7d7579ea0241930dbe15e4ff1bc2b96f902bbbfb1609a9bb","ssdeep":"","tlshash":"59b0126db29a23add34f2016342941113007259509809128613586e8a507b144030ee6","size":90,"data":"","first_seen":"2024-03-01T11:49:05Z","last_seen":"2026-07-16T21:57:18.168114Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3123d0625a0827f1e64c5f6f3e32f891","sha1":"3f72b2eec7e1e6c456eb8dc5c9ce70c03599c864","sha256":"aea84fe18d8f8dc31093b1fa36768587f0e1f6b2a6e5a5849d2488ff2b904625","sha512":"634e86156d9486cd921dca4ae8104b4497ea777302ae999ef79eb41d475ace908fec8b804a894e9e3329f23169955844c8e1c6c0777e28f34fd3fb30d52af0f9","ssdeep":"","tlshash":"17c0c22af388103e05cff02b3c954526411307d74d85a23a133109ed901fa428104aea","size":190,"data":"","first_seen":"2026-06-13T16:08:38.839272Z","last_seen":"2026-07-16T21:57:18.242196Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e9f56acc4a3cb3d61b18423901e368e5","sha1":"c275ad7ec9b9cecc6224ace98357ca717e9eaef1","sha256":"8016df2f2bb9e6f0099ec42f0c966a82f173a0604ccb7caa3af8d770275742c6","sha512":"417ddc0d9809ec3f82e81f0891891776e96654af9f1edb8e69a0fed902056bf9e55a7f9e4ca8bfc2bfba1c47160e1e4fd627c1e561d1667634e56a22c4883859","ssdeep":"","tlshash":"b1e0122bb699153f08cb715b78468d12801747f79c47ab2573322dbd9816a4ac088efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.755179Z","last_seen":"2026-07-16T21:57:18.449293Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dd1c5679e42fa374efba5c6d68b9d3f6","sha1":"baf6bf2dfad913fc67ffe50b8dbcf04092f02e12","sha256":"84991d01939e011209d7cc3362e8615dbdfdf64ca4dbb23e9553144a45d5be62","sha512":"dab3f45f00a54d3ff615933c12ac7881bd15f9e5332fd98c047f3ad7d9e012cd7cd551c09f420ad4df87d51d5db066cb3a668a84aed358aac9edca6b90e52645","ssdeep":"","tlshash":"36b0125db19623a9d74f201634394122200719950a809124a13586e89105b144034eba","size":89,"data":"","first_seen":"2026-03-25T19:58:20.879566Z","last_seen":"2026-07-16T21:57:18.586722Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0b4963a07b72932cfb6d4e45a69f50a7","sha1":"c6f7b0567d24058f0ec20f3a64f4fa687661d365","sha256":"3a52ed12ccab3ae5ca9f2d12a7974b5ad05e648623abc3e9014872aa87362a9e","sha512":"3894e04e726b508f750c58756ba56072b591f84f06802c3d6d61d65f70e8a69fd74cf34e4d3dafe8519e05c0457f5d6ffdefa788bc166edb2d32d4ca1ff23ce2","ssdeep":"","tlshash":"0fc0c21af78e103e048bb02b28614e5a51034bd78e81a21553320ffc501b6428108ee9","size":190,"data":"","first_seen":"2026-06-18T04:00:49.590277Z","last_seen":"2026-07-16T21:57:18.522193Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"69b1035222d0e465a9421193e3fb415f","sha1":"72fd1a419971603b436a396c754bd710bd89f195","sha256":"e01368f3cc9533ae3d7badae551b87faa022535f94f2f2ef852dd10b62ee9467","sha512":"7feaf5d3f8722f6acfa175981031dc36d075efc1a0770d9bddf29cf2b1c90f604e84bf29b8bd95f4767519232b2d3a46cd837175a1f1928d70938bb9e1fb51f2","ssdeep":"","tlshash":"88d02b9ff7ba221742ca6418949b06172029b78a0b448b9300374aea94254c10223e39","size":272,"data":"","first_seen":"2026-01-12T15:19:10.772376Z","last_seen":"2026-07-16T21:57:18.167171Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d6aa9b42c6833290f4c115a6288f7838","sha1":"267879cca28f4b06367bba1424e909fdc7294d49","sha256":"e705c8cd1976ffcebcdc61bb3e28d7aec6358f351d5cce607d812e1094e30c29","sha512":"4f3c94d1b735ff485748bffc012a62efbf3e280849fd29a798ca3a4eaa60edead6cc003ae8c8b5a7134398cfa8f4a68b888c641521091dd0a9403a570fb68235","ssdeep":"","tlshash":"79b0125db19722a9d38e201634294111204715950a809124a1298be89105b244130eaa","size":90,"data":"","first_seen":"2024-04-24T13:59:09Z","last_seen":"2026-07-16T21:57:18.283563Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/jslibrary/LoginMarketingSurveyResponse.js","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02bc0d2087326d4b0fbdfc0a80ec1f1d","sha1":"2878b53a2bf784c212f89d7593a660c93f3e2f90","sha256":"51c7fa0719e80398c74a788208999a9e92398a740e4850ea456e2ada18fe4879","sha512":"ed17248eb726618ac637f3d893531f0d097fe7322413b5d580c48a6916e3c7202bdc02c8706b503b266bf0aa42634ea0d0072f387f01f325e550203b09d87b6a","ssdeep":"","tlshash":"b721fec9ba907094675a38908a3f9b0cb06a8069ba00d581e514c4e0bd3565f803ee9f","size":1175,"data":"","first_seen":"2024-10-11T09:18:50.387359Z","last_seen":"2026-07-16T21:57:18.13732Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/page-utils.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"396161a46dbbfc784e6b7a758fccf4a2","sha1":"56fc5254139c79ec38631194cb6df6cd34a6c5e3","sha256":"1f8d43153b0a4d8fabc1651c26a0363bec785505208e3cee748a7f7c6d79d6e5","sha512":"9087630a4ed09304fd213e14f37f5bdf0e4298834569185ff7116422cdf24c8fe5eb4e14fc2af68cea0f447b42eb58a8922b51dfbbb332994b8e71694229fae6","ssdeep":"192:2zgVUM1jzhWYSSBZH6mrLghegVek3eclt+bS8:Bn1DBZ9rLYzXeq+b/","tlshash":"ba32d5c19943ceb503e96dca8c295295f649ac384389b894ff5efcc17606c8a30e1bf5","size":11083,"data":"","first_seen":"2026-07-10T12:36:00.015839Z","last_seen":"2026-07-12T21:21:00.130399Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"060cd5c3dd7ed2bfa48201fb2b6edc65","sha1":"6fd2f977fa95d82ebae2e98682e5e53b7c030b2b","sha256":"75cbc481349a9962a8a5addb22e8f53a0f99ba6ae876e910c41a0fc95792e77d","sha512":"3e954758f5d8de629ae00086cd9fe6f31e6498185dfd06ea99c1f5412517092c69eed13f9a44b4fecb3511b1318d57155658ab5e8ad9698eeb17bc79eb9db7cc","ssdeep":"","tlshash":"e9b0125db19622aae35e202634294521204b159509809224a12686e89106b144030ea9","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.597682Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e2a6d7384f495c00e451a086983fc1cc","sha1":"448597f22fc575ca3b2d90c4ab208089ac18bb2a","sha256":"71fcb933c50402eb7339719d4119a9c3fe526fadbcf339c7406e99e853ccf41b","sha512":"68602ad89a905ccb1b2c4ed2e2fb6f74c2138ce56061d47ce3577f2dea0d2eb11e8e2b6a2f6d9f9c06048c48a4a300e9e3b4438cb76c82799e5dfcec187c2575","ssdeep":"","tlshash":"1ab0125df29632a9f34e701a34694121200719950980a1246165c6e89505b184030ee6","size":90,"data":"","first_seen":"2024-07-31T03:34:17Z","last_seen":"2026-07-16T21:57:18.25218Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/jslibrary/baselogin4.js","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5c862f98f1364f73bf0233d6e16fe5c","sha1":"ca45e4c6f41cba54314b739495d59a7d26a25381","sha256":"189f242883a88d98ed5da5366f6518a62c537a9883395ab484753c3f0b49652e","sha512":"07ff1ee304a50bf97376e0082b792aca9d1659a2790b9b72abed98afe5c8b14181460408f334949291842f3378219151b2f513a81a5b9d73248a8f12e1c1a065","ssdeep":"","tlshash":"3671f9877134b4316833249121af4a8fb1bd8f689488b4c4dbd8dce165b1d871775f5a","size":3694,"data":"","first_seen":"2024-10-11T09:18:50.381887Z","last_seen":"2026-07-16T21:57:18.136334Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/legacy.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"373a30f1c10381c1a9b6f7cf75abc104","sha1":"eb2b224bd1577f2e112b44ec75d86a9f40617c1d","sha256":"e39b971c57f741685ce756b372ba5bd987279161949ce44c0e87fc749c7f54d6","sha512":"d160b33e50fbf2d18ee830078ec25d0c314e18857d014f22fdc8146540946872a3eb64da5b7f5d092fae82c9d23bc3ff3266c5fb144d9a14b78500dedce56a5d","ssdeep":"192:F+z64zbZ1QKzSPzOnwNsSvorlWvye8BRUb:FA6KQBPNpJvqBqb","tlshash":"fa12c8d6a963d9a402e4adcacc195299f6069c3803ddb894ff59fdc17406c0e30e2bf6","size":9188,"data":"","first_seen":"2026-07-10T12:35:59.968618Z","last_seen":"2026-07-12T21:21:00.137838Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bacfc3a1ccdaebb9e247820c01986886","sha1":"42935f32feb8d5827c950dfbeeda9424b5dd0ae4","sha256":"f77dcc0c109d392078855ad66294e23feacd193655efc04297b7b4345c099821","sha512":"d4b9c84b28cae668d6459162a9419e5bcd58d7eed9f4cda59d55497ae93c5398d0ae7e337c89baee297c38ab28a4f0e4eb46a50f1637433758be3f3a65cacf37","ssdeep":"","tlshash":"c4e0126bb99d043f0ccb715b78698a11801b46f6ac47db2576321dfd6816a4ac08cafb","size":358,"data":"","first_seen":"2025-12-22T06:43:29.955101Z","last_seen":"2026-07-16T21:57:18.415258Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"16bf7b7ff433440325548a0cbbe42016","sha1":"afb0751ddaab811cb2083eadbab278e8f7beb513","sha256":"ed9cee9b1463f7bbf4a0e1e702c3d41bbc64a2b1368f276cfed855fbcb297651","sha512":"b15eead34e16b82e1cee878729f9327416a9be4343fe68c329ee378bdd2d3b892f1591dcd4d16e8e1adaa927e36d78c6831a907c1e969b2f621d61325cba99ec","ssdeep":"","tlshash":"1be0ed2bb59d083f08cb615b78658911802b86f69c479b35663219bd9016b4a808cafb","size":358,"data":"","first_seen":"2025-11-11T21:36:18.896261Z","last_seen":"2026-07-16T21:57:18.521312Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9f5bcd0fe7e48253c3a1ad634606fa28","sha1":"797116d5df747cf39358fa683f0767f7b265b3c0","sha256":"a68bab8614938c58d71a87f804c281f6fabbe70b3365d19968e30a15a987c124","sha512":"33ea3209e5e03550d1ba178a9f5eb7754b3e1b05243243419c8eec1b90e5b3234e1b0e5e4d2d3702c923ec01bfc6f5673a4746333e729753a7fba8d1010b1fa1","ssdeep":"","tlshash":"5fd02b9ffbba221742ca6418d49b06171029b78a0b048b93003709ea94254c10223e39","size":272,"data":"","first_seen":"2026-06-13T16:08:38.927513Z","last_seen":"2026-07-16T21:57:18.325647Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b5f2f724ebd0512c27ecd6bfdf4a7e24","sha1":"9829bab7f6c7a426f888ea4f2bd9285f27fb4cfc","sha256":"59e7a610c0998c9774bfe82c8e5fa91e3a455749ba21d2ec0e625dacad690414","sha512":"8d1986bce50dcba48eaca7ef6381a5217fcec638fae004df531e9c0d8e6df0482a8413ab36c67836193f396aee75d9ed7310aa579c01d96054269d3a09e48c12","ssdeep":"","tlshash":"74d02b9ff7ba321742ca6518949b06171029b78a0b048b93003709ea94255c10133e39","size":272,"data":"","first_seen":"2026-06-08T09:34:55.698029Z","last_seen":"2026-07-16T21:57:18.354024Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7f6d75f55d3ebe024ef2ac1c3ab9b47a","sha1":"7e715a0522d7c514ddb9d9f1d00392145488e87d","sha256":"07f38189356a60a781f15417db54411002e1f0292b4953f16d81329aa6bbf56c","sha512":"c170e474b78041b6cb506ad32d7460d72b9a42499c74fce39370b697013c092a8985212e5f727bea184279cd4cb2562e1e6c0ea82baf2b8185349de5aacbcdc6","ssdeep":"","tlshash":"88c08c3db23a242f05496049381bcb11905bf6c01f824f3000aa3ed88500b1c51d8da8","size":151,"data":"","first_seen":"2026-06-08T09:34:55.776418Z","last_seen":"2026-07-16T21:57:18.530882Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"57e208f738f06be4433937684e36d08a","sha1":"71c5d3916e65d3e4458146a931983b2289bc79c6","sha256":"b5e6c686f7e3a2302d62018e0e69b4a11ae8b5f11e1d42dad65f6d75cb012836","sha512":"316fba76adfe3fa32ec3d7d24f30126decd118b30a339b037621be7a57e937b0b4eda72821df9cba5e83d2346a58475de5d4fcab9c212deccd36c4a9cf4d4a92","ssdeep":"","tlshash":"6de0122bb19b003f48cb615b78854a11801746f69c479b25b2721ffda017a4a8588efa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.897415Z","last_seen":"2026-07-16T21:57:18.435407Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e89e30b0ce91753407ef51c704111907","sha1":"9fb6142b2d5471f69b325e3355e0345adbd7e413","sha256":"5a7f261ea3ef584b6b393ad54000a7a6c5401cac0f74af861365738443ce05a0","sha512":"b845108e6c9e469bcc981037cdce277e43217a6d27671592a90a347c0cd722236f1e4a7aa5656f647b0f16dc628496c17466b5e6bab30fd0171c5b1483f78d70","ssdeep":"","tlshash":"31e0122bb39d003f08cb615bb8454a11801786fb9c47db2572325dfd6017a4a9098afe","size":358,"data":"","first_seen":"2026-03-18T07:49:29.578416Z","last_seen":"2026-07-16T21:57:18.197353Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1ff8c6673c326f9e303607466b334606","sha1":"4640047b7f36a5ce785ab167ddd9e6778840cfbc","sha256":"81dcda5b92ccfbd8a2625286a945092ac4d22bf94b2fc6ec3ea7ec19905d5fe4","sha512":"29ea27ba0ddf80974233f042a5367e4fc0f823b424acef6ab59aafb8c05d9ea6c672d21fff3af799692e9a63375197249ea841c5d1b2b6df12edfa97b46f6f81","ssdeep":"","tlshash":"49b0129ef69622bdd34e20163c6d4515200b399549809124a12686e89109b144030ea9","size":90,"data":"","first_seen":"2024-04-21T15:34:22Z","last_seen":"2026-07-16T21:57:18.320431Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"550bcf79b0aa326f2b2dc9c4389e3bdc","sha1":"a3228643e7e63a0bd0dac74f62c281ed36a950a9","sha256":"5e2dbe7324c37d1bb0af82ddc62fdb8dfb2b28a096d4011e8f9412d6e61dec68","sha512":"bf0f30950bfe39005b70645fdbe560c071126e2d3b1a53422424fcafaaba96a32dfa4fdfd1450a22e465eea54427a45e0d5bf9151a4e328758dff8539eefb9ca","ssdeep":"","tlshash":"a701c6c8ba03ec3cd58680a01a3e4fc8b4721d203100c860667eacb4a620f8b0f23b8d","size":678,"data":"","first_seen":"2024-06-19T00:56:25Z","last_seen":"2026-07-16T21:57:18.20107Z","times_seen":1135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d2db3e5b97f7c2b2ea0b33738744189a","sha1":"4b6cc08db3da22616d914a90862bf684cb53d6cd","sha256":"5d92e7cc0a62ca7ea3388318d209d69cc314b163abe51291acb06c13b00bb5a6","sha512":"8a3a3b409dbd70e4ab033482e5cba2a588a3b99a226fc727faf305fa16b972b1241e630dc3be3b5a0d6044f28bc17bbcd286895994ec5312b84327e6bdbdf0cf","ssdeep":"","tlshash":"4fd02b9ff7ba221742ca6418949b06172039b78a0b048b97003709ea94254c10137e39","size":272,"data":"","first_seen":"2026-05-28T10:31:18.685163Z","last_seen":"2026-07-16T21:57:18.561168Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4c65d20e80c94eac2198c2dc3b152b6c","sha1":"fb723eb401b47ac328cc6f012059bd7ac3d79a36","sha256":"56dfd384863c8f9170983ecd21494dfb9325c40a7fbb891a8bc6a9f6eaf4db09","sha512":"a28b5a2e7ee8f681266a3200a3c26db1be8cb60832b5d7277682d90046fab9cc6fb7807742e14b689cf163b299c4b10b2857a3f3b0d3511b088702d96b5d3be4","ssdeep":"","tlshash":"a1b0125df59723a9d34e2016346949112007399549809124612587f89109b144170eb5","size":90,"data":"","first_seen":"2024-03-15T19:22:00Z","last_seen":"2026-07-16T21:57:18.590754Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ae3c573f714274fae3e89f532ee97b58","sha1":"c5e55b2a23717ab410009eab8aeccf6361d950c8","sha256":"fc37260960cf023f268c77ffa1438ccc79ebb1d31c3adf22a3a3d2b5984c84ba","sha512":"563fd5b5b88ff0fd8e7c5a5ff0746733347d307192e619abc9f427989a44c8ddb925b07e6dd113558b4972a2039bfda1e0fcac243c785321a08e67fdd51ae4a6","ssdeep":"","tlshash":"20d02b9ffbba621742ca6418949b06171029b78a0b048b9340370aead4255c10223e39","size":272,"data":"","first_seen":"2026-01-12T15:19:10.744244Z","last_seen":"2026-07-16T21:57:18.453324Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"34ef3c5114f149cdfb4b32f78308ec96","sha1":"43da8dda14ad20ab44352cbe22d22f4561e98698","sha256":"88fac97bc0108cba590b573bb378be266cdfe2c8fd97557ed9e4c6a62c84a152","sha512":"17ff15dac1e238a1ff92d0a314eaa92dc1f76a81656858a1dd3911d7741a2be129341198f1c2cba74c756deafef2c76aaa9bb144554ce086518b876046098003","ssdeep":"","tlshash":"d6e0122bb69d083f08cb615b78654e11801b46f79c47db25b6332ebd9016b4a808cefb","size":358,"data":"","first_seen":"2026-05-29T14:30:57.213372Z","last_seen":"2026-07-16T21:57:18.402125Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/bottom.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8db122cea9be6f9e55ee75e9db2dc4e2","sha1":"0864984f0a123e31f1bfbc52fd84b5052bf74905","sha256":"afc0886603db1ed4ad2cc6b5bdc3c4ae7e7ce680461773331f7dfc4211e6ecc8","sha512":"f292da69d9736567fbda96bb141adf6f50e7a545eff96adf58005f7b8d2b726166c56b68518ba4b37e5797ff56803bc631546c662b82d7ae2e262f6d2fbb6ad6","ssdeep":"384:DirtSUV2zQ5tM5k3ZLbQ3euj/DEksBcfgch0A:O50u4klEEdBcYM0A","tlshash":"8562f5d1aa63e97403e9a8d9d81d4145f606ac79479db860ff8dfe88700ad0930e2ff5","size":15693,"data":"","first_seen":"2026-07-10T12:36:00.043031Z","last_seen":"2026-07-12T21:21:00.128501Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b47235393098c57f2f77d3b77b8ae836","sha1":"d718c86ab75f84e53cf0a7d208bc5a85f6bd2e35","sha256":"95d87bcd49dc39c8cee4734204dff468fed1f55fbe8c85162a0959fc71748ea2","sha512":"49a9a3e5008fc18b7b9d2832baac7061175101b4c0f193fc042e728fdc0232b27c5c0ccae8afc2742718f9b660eed88349da4993aa1fdde57980cd3a39a01816","ssdeep":"","tlshash":"98113a6a775c0cfb44cf391679c0057124bbc3b359c0eb99bb3955f98c61a015064ea4","size":921,"data":"","first_seen":"2026-05-27T20:46:36.800873Z","last_seen":"2026-07-16T21:57:18.209248Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"498f9ea3a94e46e9a45f31ebd34bb87e","sha1":"b5e9b306fc1a56f1ffff0594daacf43f6381c74e","sha256":"38b76732797773b6bbe25524638a0aff40d9106f2196c1d0be4f508b2c14b9e6","sha512":"3e3556966929305f315c3e418475625a95fcaa9afcd18e2f5e5cd0f48019eb8580816893c9ef6d6de51fea0b3a1281c343919af281e59f3bfbf40c47f3805311","ssdeep":"","tlshash":"17c0c22af788103e048fb03b38614d1a41474bd7ce92a22513310aec505b6828044ae9","size":190,"data":"","first_seen":"2026-06-13T16:08:38.746688Z","last_seen":"2026-07-16T21:57:18.447542Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"32fa474fa979ffb6690bdbba98345f61","sha1":"07c5204c66b49059334a4fdc9c140a36961a8416","sha256":"a5ad18f4c6c149d5aaaa00f41d6ab95aff24d7711362a9bd5666180efa2d6490","sha512":"e3693ff1701b2787aca9d4f6e18aa11d6cb8569bfe25cd32e17fb5fe576042d8a902747d18e72f67e02a7c075c6c7962e7e9d9ede668f302be69b0b2289254d7","ssdeep":"","tlshash":"cfe09b2bb95f003f08cb715b78454952801742f65c479711b2321efc54066498288dfa","size":358,"data":"","first_seen":"2026-05-27T00:11:11.740208Z","last_seen":"2026-07-16T21:57:18.25791Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/xsf-nav/v1-stable/nav/www/prod/en_us/prospect/config.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56865a02d72acea7c1846b55ba3d8e96","sha1":"dc650cde3600b1f6c03322e35ffe9f47391cc142","sha256":"87b028d9b5e34c260ded7207b069ac8f13684242718e93a35e7c9ec75f03da4f","sha512":"cbfe4fcb80e96181699f2a93fe4d0964f0cb88cd19d5ee67b3949a4c63f15387d82d842bcfde850b335c48b14f6b1c7ec8f6c5811f5b7e67459cbfa5ddc5a611","ssdeep":"768:6oCzjTPbroZrT/hnF95L9LYhfr3pWz0GPBK+eFI7b7kCxIyozR8Q7cF8gDQxlWFh:DCXTPtapF7ACzj61viXAjN6Af2L","tlshash":"379347af0f684633dfa47fd554a7e29fe44e128aca419eccf5909d0952d03d92e2b0e1","size":97089,"data":"","first_seen":"2026-07-12T19:53:38.776562Z","last_seen":"2026-07-12T21:21:00.105428Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1dcc224095e5331dcadd60462e8dde13","sha1":"931e6f21ddde2cff6b7e32abd7c0cbc5870f774c","sha256":"17c10cec0bde020e2ec39e650c5c25f924c9df2a43783ac4a1103f25a3f3711f","sha512":"4dd170a2d708b9d402d78e0013a81d7cdfd5a7c9b19d4cff87339af9cce2b14689651761fb97dfa6a5c9a608bee1977d6af1354e962a493c45f93497eee4374b","ssdeep":"","tlshash":"d7a0241df3cd31350347701f11374115300301714c05c300533f44dc400d345401cd75","size":81,"data":"","first_seen":"2026-05-27T20:46:36.802705Z","last_seen":"2026-07-16T21:57:18.498204Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d0d6f140a24a0decf454f2df3eba7a3f","sha1":"dd8ce2d95ad2dab3962b8d013fdbd202f0afe65d","sha256":"162df3cf4c768858c6c1a2498d657f1db8f1eaed963e2dda8d128a0d20d44a41","sha512":"e989d9b883323b9b0b4745072d8c3ed1f9a5453d7387818509d79c2b0b8e599ac3c37449db43788eb3865651840d54c5b7fca65778b26381e8fa4d2fe332dab3","ssdeep":"","tlshash":"7fb0125df59626add75e201634394111200715960a809124612586f8d505b144034eb6","size":90,"data":"","first_seen":"2024-03-20T22:00:41Z","last_seen":"2026-07-16T21:57:18.486172Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cb578c1074d59208e857db13e3bc0fd3","sha1":"3677c185bfc6e28073501ca636177fb6da0cc0cc","sha256":"1685ebe0d585b2b7b390fbc601fed18376a33569d145cb3accd753a7267cb095","sha512":"94f3ea243e0432277cf8fe518b7059492d9a2af24ac3ff7651e059ff29f2aa60120d9e907f68704b667f4596e78b51fa2221c7a4f3109e8448d58481953a00c3","ssdeep":"","tlshash":"6bc0e96bf38d103f45cfb42bb8555626420357d74d86e31923310efc911ba928108af9","size":190,"data":"","first_seen":"2026-06-13T16:08:38.769916Z","last_seen":"2026-07-16T21:57:18.543272Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/templates.ecefdc8932e79bab8e8a.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4364a6ebf5a66c56b717244b97e0dfb","sha1":"c448162eb695356780463adb159ece61af89dd52","sha256":"49a011be8bed7991b1fb6197f87bedf0e1dc86eb34f5b62ea4462b3c21116b5b","sha512":"16589a0092992dd02144508b4fbbae818b9c84e6ed8aeba926c70c784ad352cfb0ebd18370223b7fc4f2b3704c32495304fea026f3b234d2d4bb74c931cb1c5f","ssdeep":"3072:vGwYx6TR2iYYTbYi7rUa7WmSrnmecEPf7luiTUs:eY0ijTn9fSrnmecEPf7luiTUs","tlshash":"65054464ca6874b0b7f6b2ccd91751163a78bb15e410caa8fa4c85ed0bdcc5335a7b2c","size":809523,"data":"","first_seen":"2026-07-10T12:35:59.995692Z","last_seen":"2026-07-12T21:21:00.182429Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1466646474b83b44dcaae413c146a3cd","sha1":"654523d5f68b46fdd555a1c84bdb6da95d140dd7","sha256":"cfe36a9158f8bf69bfa1507c02f168d596ab1e7aa1db9fff3d84e1d2c832bcec","sha512":"213d4ace784e3acaf20e574cecd56cb2d6355f726bbcacdcb552d1d509f395b97e94bf5deb45b01b24d57769db356e6becc4a65c307544b9c04288e7591bb3dc","ssdeep":"","tlshash":"49d02b9ff7ba221743ca641894ab06171029bb8a0b048b93007709ea94254c10127e39","size":271,"data":"","first_seen":"2026-05-27T00:11:11.700019Z","last_seen":"2026-07-16T21:57:18.418775Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"29f6c03ecfb066b5c6d376f5a50ffd7c","sha1":"2b538657fb4a699bf8f2183ec7c92fc0811ceb1c","sha256":"edfb6e5bca88c6b64a3d06591117b76e1ddbcad3c288a548da5448e4b2f2277b","sha512":"346300a863277ca61c36a54b49dbdddaebdd8ab97306d2f40ca6df43bf6167bd8adeaafd0859d57026c93e557f8f9180438e07e148678be4b508dc92bdf556fd","ssdeep":"","tlshash":"b2e0ed2bba99013f088b616b68c94d1180178af6dc479b2562321dbd6016b4e9088aea","size":358,"data":"","first_seen":"2026-01-26T17:55:22.91696Z","last_seen":"2026-07-16T21:57:18.580589Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7e509bb4074b042629cd0e5e4bd06e21","sha1":"13c51da9b59f71bf7a717308b03bcc8458dc5e97","sha256":"f1cc23cdd999f63df2c572e283c2bfb31878035045d19e115b0993be8cba0a84","sha512":"63851e5a9966a8883192717133299c1b1eb61b77f740508bec679110ccb5bc1f8da2eb4f5776e733806451a1b33489bb66d2dc48dd09c5d28a32655d3e445748","ssdeep":"","tlshash":"48c0c21af388103a058fb02fa851861a11430bd75e82e316133219ed901b6429004afa","size":190,"data":"","first_seen":"2026-05-27T18:49:34.89195Z","last_seen":"2026-07-16T21:57:18.196635Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ac1543cd64ca3fb2f812ac19f5894bef","sha1":"bdfcfbb762257da2141d129298dfab38a48f23ac","sha256":"f56b498dd0ca59190b711c37d3cd0bf77ae6bf3a9914d2a154a0c1825bffb1ae","sha512":"92848633a049ccb7a03e31a41d1ed3b01782813aa311d97048e3d0f3dcab99ef684cebad5e39b3e6ed20d0038f37bc4a7b3413a01410f2371705537ed0a142f9","ssdeep":"","tlshash":"e3c08c3eb23a242f054a5049282bcb10d06bf6c01e824f2000ea3ed88200a1c50d89b9","size":151,"data":"","first_seen":"2026-05-29T14:30:57.144506Z","last_seen":"2026-07-16T21:57:18.245799Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f209e62b2106ff6ea1a98ae6fdf2f875","sha1":"836453e67e5b058ff0f0a1057706a61050a5502c","sha256":"31c72458fabba994bdb38f0c527749d91c29034fc64e2b88263e98ddddc79be0","sha512":"de46053c1ae05d07b5155709cf9d70da32c3d14ed4383ce008b5d62cbfba7d21c6297ee1c8993fe4a925a0f5046fbb40605de55ce3ea3c4003be9dc8168f680e","ssdeep":"","tlshash":"1de0122bb999003f08cb715b78898911811747f6ac479b2573322dfd6417a4ac0c8efb","size":358,"data":"","first_seen":"2025-12-29T18:56:15.978147Z","last_seen":"2026-07-16T21:57:18.369476Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c9a40368f02b16637de52ec2a97a358c","sha1":"d1ccd0aaa623986a9552f2514a0b0238504ee205","sha256":"315ab3132b9d025fb961223219b8e7ccaf41e4de94b270086b79c89a984ebdbd","sha512":"eff0aff7b483a23c235f80854ef8b009f984d59a3f00ed4f9da47e214042c2b361830303c171ec0b376f94d592e2a6512d09805e82923bfec24793be3e5216e8","ssdeep":"","tlshash":"f9b0125db29626b9e34e201634394121204715950d809534612586e8d105b144034eb6","size":90,"data":"","first_seen":"2024-04-24T13:59:08Z","last_seen":"2026-07-16T21:57:18.292904Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"268de07f72fe8826fac528c19bec9c7a","sha1":"bab813aa81f748a277e628401e27859e5c8df003","sha256":"9a7f52bb9aaa594869f77c981d12d21a27d881a253bdf8a292bbda6018b48b2f","sha512":"9d4ed472679f21d9bb9e9fda47c09a47b3a83b1a7e8449d3118fe005a1864d9fd24d3ce90f5cb75bf50ae56f0cbcd4f5be509ae2aed9a4f21456207b7f7072a0","ssdeep":"","tlshash":"5ed02b9ff7ba221742ca641994db06171069b78a0b048b93003709ea94254c10127e39","size":272,"data":"","first_seen":"2026-05-29T14:30:57.261207Z","last_seen":"2026-07-16T21:57:18.373823Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c22105b9e89dee538ed97ce839c38380","sha1":"214c9c0d20895f04872bc9816b405bf5bffedec0","sha256":"15ab5568fa4ca9c5208bf7233904dba3dcac53233ee383f4501def25d76a4f0e","sha512":"bcecd0ffecaa84063f6dda0a9b28943796c219a5cddacd3575c25e7f8f4b89ab25089fa799d9ce5418b823cbc9e7b2538ca0c36d09e47f1ffc8f612306fdc996","ssdeep":"","tlshash":"3d110d5a7a5c0cfb44ce3d2674c0057514bbc3b759c0eb9abb7956b98ca5a014064d94","size":921,"data":"","first_seen":"2025-01-31T21:03:31.660127Z","last_seen":"2026-07-16T21:57:18.186231Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"677a188f42b6f5fafc8bec0ba312bf1b","sha1":"da11344aba116665fef964a0191636e8a11e38bd","sha256":"ed6623e8793965b23fc5689287760f101230aa15b653235669ba92897fbd131b","sha512":"c39dbf15054b7e91a9ead84183c1990fd399d9204240c1670a04d36572f10aec5d514c268b0748d27fe2e75d054beb1cc2249493a1b40b6fe78f296e617d079e","ssdeep":"","tlshash":"50d02b9ffbba231742ca641898df061b102dbb8a4b048b93003709ea94294c10133e39","size":272,"data":"","first_seen":"2026-06-13T14:53:10.134504Z","last_seen":"2026-07-16T21:57:18.178985Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c3bfe26f728c1cdd90fadf823f3bad2e","sha1":"6077ab0ff2d9f45c9cc536325fcefb97ef11c678","sha256":"601214d58c1f103eb110fb7e38f7557504e72bb180ee932147cf4e284ccb3193","sha512":"3fda7b2d635e0be24ebd9e3b0e1a2195ba9f8f157112a82f22e64ddb4ca93d8ba9b5e1032159c1cde5783f54dc06d0dae3559dd852c4f79ce654ec7dcbe466ed","ssdeep":"","tlshash":"73d02b9ff7ba221742da6418949b06171069bbcb0b048b97403709ead4254c10123e39","size":272,"data":"","first_seen":"2026-06-13T16:08:39.085653Z","last_seen":"2026-07-16T21:57:18.554468Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e7f045abc8c5896f3126bd2e1dd1191","sha1":"0cb659cee593c9f9f6b99416d30c42b33fcbe87d","sha256":"99882f2b7e1a544a11acb7c519e065b160ad4725e9f3d25925d758503d5410b5","sha512":"202278b77d9e8ea2d660cc1c398d552d467ad11e0be90cebb20f6521eeb425ff85104d2e70494a0dbc37bc4fda099f2743481987335a502f31d234a789688868","ssdeep":"","tlshash":"57b0125db19a22a9d34e201634394122200719950a80d224a13586e89125b184030ea9","size":89,"data":"","first_seen":"2023-09-19T08:28:18Z","last_seen":"2026-07-16T21:57:18.57234Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"679c93fad6a39e7d1299e5953ec373ba","sha1":"23cf6929c0cf1f7fcf89705e82ae37d857577e4e","sha256":"dc137ec69d23c26e1c798dcc2badb5ad8844b5f697e7809109d99dd38d41f311","sha512":"b20ab523247da7793a306f57ba21a490936b975464ab1642e548581b28057020d87943212c79e74b2411868f88b9afff637bcb718ed13bae60afb769b1aa1356","ssdeep":"","tlshash":"a8a01259f38531260347702a506641153113016108058204522644d8540b2454014de6","size":81,"data":"","first_seen":"2026-05-29T14:30:57.168086Z","last_seen":"2026-07-16T21:57:18.254611Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2df57da7af44d6d54742e4407366a6af","sha1":"196d44e65a2e3b1419486b4c59a9e1c9ac98b3e0","sha256":"2310bc0dcc035f675f3225b26094d71b87f7398863e016752b7592b6c43035c3","sha512":"179e9abf893dd8d8842d71f41268fd82a56166bfb49b2b1841ad205fd099fb1d8906164ef16677dba37a126cab2f0cf560d93383095a9e36f3309bb9eb416815","ssdeep":"","tlshash":"1be0122ff399003f48cb615b78458911801796f79c47db2573721dbda017a4ad098efe","size":358,"data":"","first_seen":"2026-05-27T18:49:35.106507Z","last_seen":"2026-07-16T21:57:18.504619Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e24e31aad52ad77a794f9c71e7aef47f","sha1":"35044b48fbc7ff2873859f12a8b26dfe5505227f","sha256":"bc253a402ddcb1b3fe5e886a38f67006807d2cb6406ab61137cf2a1994e8acfb","sha512":"de78171146c253cbe00be37e951abf1155f7785f20c129f035de7d59dfed1b4b7e647c4f53d6af9a708b7cd1638e6ded65899477919626cd89b66597ebc4cfbe","ssdeep":"","tlshash":"0dc0c21af388143e05cbb02b28a54716511307e74e81e219173309ec511b6428008afa","size":190,"data":"","first_seen":"2026-05-29T14:30:57.217035Z","last_seen":"2026-07-16T21:57:18.467288Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2f9e74f395bfb6461fc2f7a5abfb50ef","sha1":"8437a00fda652147118e698008aa5387785b2f0b","sha256":"5d58a558e89ffac5869d9760830dab202c4f220ea1d4a112cef0f28ecfba7661","sha512":"4d793aaeb89c5645d7209e903620de4d50603f12a0cfd7c9d7cdbad9cba2c78587b6e54b741200e87f1488851d490a3bd2856c3fea555bc39f02442499c8eaeb","ssdeep":"","tlshash":"1ae0122bb399003f08cf615b7cc94a11801746f79c8bdb25b3321dbd941ba4a8088afa","size":358,"data":"","first_seen":"2026-06-13T14:53:10.131907Z","last_seen":"2026-07-16T21:57:18.365879Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"569f95168477dd9790a528c4062c49ee","sha1":"611d31715cb50cd52eff3658620ab425531a9285","sha256":"341194ad1889cbcc09fed2268374c906fb3bd19abdc386ea0f9d3c392ef62b3f","sha512":"8c059e3b79432191d64e02b6e741144e7b05bf754d96c4518bd3204a001180e7e67298f7d28eae5aecd36f823c7e1b5c1918cb0bac421429b73dd8754c5ffdc9","ssdeep":"","tlshash":"93c08c3db23a202f054d60492c5bcb10a05bf6c01f824f3000ea3ed89104a1c50d89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:38.986116Z","last_seen":"2026-07-16T21:57:18.314575Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f4bb8f8489d667693d0b2802bb59a170","sha1":"4f8df380a57c4a26f22444abd8518202db9b4c2c","sha256":"3f24c5abadf63ae2def2983b99802a16f40b7dd75b5d3ed88e79e94664275b59","sha512":"2c2f49b6851687a02fae1be697699db978bf987734fc4f880bf018594a5b8404780bfc48e0bea9095e51d54ea48a8b04e1427b696f0c01871deef6901bb67f79","ssdeep":"","tlshash":"49b0125df99626a9d34f2017342945112047299549809524a12586e89105b148130ea9","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.482496Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca6e971072b48e7a764fe2fa181874e6","sha1":"00d11cee704d757d41f93a6348178eb7faf9b39e","sha256":"3fefa01888e83507cce33dff9a4a23678010c0cf6508fbfa57a514dc1555e126","sha512":"a6e2609fca3ea6731b4d22c0d38ef1e123d0444832264ae761009ca8987b3a12e09fc232f4cbac48f3647134bffb4f379d84cebfc395be3fd12421a56e21dd2c","ssdeep":"","tlshash":"06c0e95bf38c607f45cfb12f38954526511307d74d81f31913320dfc991b6828014af9","size":190,"data":"","first_seen":"2026-06-08T09:34:55.72435Z","last_seen":"2026-07-16T21:57:18.417129Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"06522d0422d4356123af03c70d6c3719","sha1":"7147c7cc813b01278baf6ccdf82256b7b7706062","sha256":"f81e0d12010a045bbfad28d512e2426d5740a232cf9d703c70c3fc6326dc336b","sha512":"a3b98dd3c58e694e1cfe3608069d0603d16869666cf97a48eb49f76b1c69115e5be330a9531214d5ed48f4e60227978c3359e70ad1284e9e107a47e1744e5246","ssdeep":"","tlshash":"a2b0125db29722a9d38e201a34294111300719950a809124612987e89105b244170ea5","size":90,"data":"","first_seen":"2024-03-15T19:22:05Z","last_seen":"2026-07-16T21:57:18.163062Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5612bc53d61b7c6780420e3a1939495d","sha1":"dee8155035bc184d9542c76a94bea5ac7c5b81be","sha256":"2929aed208886894d4cd32593e117667f45e9a8198e972adaec5d0b6c438f5a7","sha512":"ea314d4d93125c06fc95f748dbb357bc589ddc27c632d735cfe504d1b45015fadf913c0c325e9f769b7e1533f1030ab8993bce4501ba131758a612efcba01734","ssdeep":"","tlshash":"6fe0482bf39d003f08cb715b78858911801b8bf79c479b25b3321dfd6417a4a9188efa","size":353,"data":"","first_seen":"2026-05-27T00:11:11.654644Z","last_seen":"2026-07-16T21:57:18.418012Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0b64c66ab499fbb2bf943628ee7d4124","sha1":"4fdd53e116b24b4afea074377a91c92eb7bf0686","sha256":"ceb8f48a46be51b9fea1bc4bed97621b77b1d70eea626dd12f968100936f5fde","sha512":"d93a16953221eef842ebdb463e049ba864fe4a5e201b2762429349a57f5c163d4d372bf65925e1996a447ea6097d8e9ed3c1657171368451d20b913ff268038d","ssdeep":"","tlshash":"fcc08c3db23a202f094a5049282fcb10906bfac00e824f2000aa3ed88100a1c50e89a9","size":150,"data":"","first_seen":"2026-05-27T00:11:11.708487Z","last_seen":"2026-07-16T21:57:18.284456Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fda98cf892d69ff585e1e124c8faceca","sha1":"20810e624b668473c903a1cfb048cbdebd6d9b1e","sha256":"4f94efb88e22a09b798ae5b73a537f93bb076bd7fe6b65178b8c7acff8e07280","sha512":"c7970f24a2456e3dbb64c4ab604929911618bbcf6891acddd749027ef8257bea490f43762844c9a9fd93bfe4c31bd5b050e45b16c6dad993bfde04310709bc64","ssdeep":"","tlshash":"0db0125eb2a622aad34e2016342d4511204717a509809124616586f89106b144030ee5","size":90,"data":"","first_seen":"2023-11-30T16:50:02Z","last_seen":"2026-07-16T21:57:18.391456Z","times_seen":805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3ee5e212c7fa03573136cbdee3e07208","sha1":"f454244aaa63308514e2e6af5dbad290d725acdb","sha256":"3d741cfefa249eba1b75b923607c761f44b5aeb744ff0257f6738252350ef96f","sha512":"11719f0fd590363ef814aaa294376be543d4a7ab258776cf5e743eda0661b5da02f2a0b245033d109cc088fc101a7224f1e38e30729122d8f264bfec4108e4d4","ssdeep":"","tlshash":"d2b0125db1a626aad34e201734294111204716950980a524a26586e8910ab148030ee5","size":90,"data":"","first_seen":"2024-12-10T19:46:17.644702Z","last_seen":"2026-07-16T21:57:18.50832Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f98dbff668b907c8511a21192001701f","sha1":"4326c74a3b706d90ca360f12956a2ecf02414394","sha256":"7a1e072bc9fcf408b18212ae6e2c365c7c693f43017ee34a6cf71ba819bdcb94","sha512":"0ac981fa19faf55d619f346d8687e77eac673d101721a56137c3d70667fb01f2e984f2016cace40e082a29aa53e75cf402430bf441d87fc87dac9bbbf4afdfdb","ssdeep":"","tlshash":"18c0e96bf38d103f05cfb02b7855851a514347e75d81e31913721dfc901b6439004af9","size":190,"data":"","first_seen":"2026-05-27T18:49:34.83212Z","last_seen":"2026-07-16T21:57:18.538905Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"199737c0d806511555eb9147d3d30c6d","sha1":"258b97b94841bbfb9629299d665951927416c56b","sha256":"3841fb3cf904efb9369c3467a1d992358a2811d7f7aa14949774311ad1ff1e63","sha512":"99f6f360e4e965ef0221d4fd182cb81def625ddc9b54900acd2ac5786407ae49ec0db592c715906d365da17254528f5682bedda20582471efb5790c33bed8d44","ssdeep":"","tlshash":"52e01b2bb15d043f08cb615b79554911801746f75c4bdb6576321dbd5417b45808cdfb","size":358,"data":"","first_seen":"2026-05-27T18:49:34.446688Z","last_seen":"2026-07-16T21:57:18.249073Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"beab81313f959b75786749bc8b57229e","sha1":"9a6d86af9078867069df2e973422f7327b2c3e29","sha256":"bcc001e26b32cd370415efde5d1da61018ff0f01990c14bd875ec31bc2cd6ffd","sha512":"64c559997c76267917bd91f0e4a5ba9a8f4795ae8a24891ffa4b9e4bde5f5a0c78161f6fbaa965226f117ce64eacc4146dd5daceb51061761e949932ef48bc44","ssdeep":"","tlshash":"9ab0129db69b22a9d34e201634294152200725950980d125612587e89905b144170ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.51684Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bf84997bae31a0c7abd3266e85ae85ca","sha1":"6f78bc411b8028f0988b5c85bf252f15f7bbff18","sha256":"2ba85a878f4738db415f3511038d974acea8a93b8eb4567e3505aa2e6d0c32c0","sha512":"2ce3a321a199c3d0e7faf0e25182beabd8698f4b630734f79d443c9aed61112921fbc4e78e383cd99627ee5e2f47f9a99e8628e02eea71a8b83a40580f0cbcda","ssdeep":"","tlshash":"b8c08c3db67a202f05496059386bcf11905bfac00f824f3000aa3ed88100b1c60d89a8","size":151,"data":"","first_seen":"2026-01-15T16:01:47.179024Z","last_seen":"2026-07-16T21:57:18.347263Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"561df9656e542d0a959ec793b7f5c615","sha1":"98651d47557e71a935475f7aeeed72e54360ce0f","sha256":"e5c41849aa2ba37023055a593d08e0adb8b9550aa8e3658f6a256e368a568a5f","sha512":"ef7ac6578cbcc9cdb1bd2a6e95e582336015ce196b760559dc29b58aab26d8b520558b1f30629b714625008bb6eb6b128adcb211ea64e2d6693728142720b9a2","ssdeep":"","tlshash":"14b0125df59623b9d34e2016346955112007399549809124612586e89105b148130ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T21:57:18.286278Z","times_seen":335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73a558581f9446166541680d2674c57c","sha1":"cc022d002bef070aae3ca1bd848a6679e157c8de","sha256":"b32917b013f8c2e8788afc16047666229be959b404b3af415a5ab8bb15fbad80","sha512":"3c630cedec623b95266eba2833fe5f42a2b45533f26265535f7aabfbf2178835d18a958eb9dbee36f3a5f50f824f2b301c06e5106c01d7c1ed978e488665c3c5","ssdeep":"","tlshash":"c5e0122bb199003f08cb766b78554921805b47f69c479b25b2321dfda056a4a8088efa","size":358,"data":"","first_seen":"2025-12-15T03:49:33.864508Z","last_seen":"2026-07-16T21:57:18.249959Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83c60ed375782a673a3297e6f6b5d7db","sha1":"9b4be1a16967a51372ff49cb63929c041e090a68","sha256":"3cb300d6f7cf87ad995232ab45e71617670212f6f6b41966f635f310dcfea8ba","sha512":"219671b2a3704d198d29f6a1d0abd93c71017e06e2937fc85f3d98b46c862a322e310fcceabda88b4a1112bd5810550cc8d27197c6bfcba4a943e9bf35d50870","ssdeep":"","tlshash":"b4b0125db19b23b9d34f301634a942112007159509809124a12587e89119b144174ea5","size":90,"data":"","first_seen":"2024-04-24T13:59:08Z","last_seen":"2026-07-16T21:57:18.397907Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e6d775bb30f183883fc3405ececb9b82","sha1":"d7f84404a5c2eea761789b298efb4618e7fbf001","sha256":"6cc2a2de95c4fea284fc9f04d1bf7e2ff57e95bc6fd8b48b46afdcb8f488c5b3","sha512":"c816c0ef4dbbb9d53ef4759dfea57760acb12a479f59971a16a2f95fec55b6e5d6fc9f6a85ddecb4171014d47b334dbd75d6e4f225d6d08759f8216abfea4d5a","ssdeep":"","tlshash":"a2b0125db19b23add34e2017342941157087159509809124612587e8a105b144130ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:33Z","last_seen":"2026-07-16T21:57:18.274045Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"eb825bea1a096d40c92a0da385c2b98e","sha1":"1758b12682a60fdeb349dd39d228cc0fc56d5ce2","sha256":"5f6b04986398e1ae813efddb2e4f8b8b5daaa5067e0b1bf87d2e2e31701f6a5b","sha512":"341696b8e3b6ffa3b0a605210950539cdc336bfade27618b7af85416a04b8cb44328369e824d206a61e325a3ff66a77b59b56bc28cbc5480d2bae82f91d9987f","ssdeep":"","tlshash":"64b0129db2a623aad34e201634694111200715950980a124616586e89105b145030ea5","size":90,"data":"","first_seen":"2024-03-15T19:21:58Z","last_seen":"2026-07-16T21:57:18.493587Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d871fb0bd07a241c55e58304e4cbd44d","sha1":"4aeb14208d75343a464a34f19344e108776c9812","sha256":"a2ca23b8b4916905d93d9e93c77e87ce044292eb39716c8d11d4644e2f00e9b3","sha512":"b988b40cff7eb1cf41a4b7da218ced31734e96deaeb952d79752cb58a03d35ceb8f7de6a961cc315c56a1e533d16ddc377ec4a33b7b43dd8fa506dec90275812","ssdeep":"","tlshash":"4c113a6a765c0cfb44ce3d1678c0157114bbc3b359c4eb99bb7995b98c61a014164ea4","size":921,"data":"","first_seen":"2025-04-23T13:00:46.487472Z","last_seen":"2026-07-16T21:57:18.395881Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"26ad06aefc939d66791a104a6b5c08b9","sha1":"5295eba7918c5361f74fe27cae190d00b745a928","sha256":"c8efc7b9c59d4a659c96d068b56e79420874b6a779396d2c9e0e0a60a55e0fb8","sha512":"89d271a2d3c7f73aaa6513a32e0a0a2a54570d0197c5d1fa6b6cd5cbd02256f0e8f007166db48e4d1b02688e77f5a833eedc9e39878154f96ddda0970c5ffa0b","ssdeep":"","tlshash":"cee0122bb199003f08cb616b78894911805b46f69c57db25b3721dfda057a4a8088afe","size":358,"data":"","first_seen":"2025-12-15T03:49:33.848582Z","last_seen":"2026-07-16T21:57:18.45246Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"327fa139557ac289ff8ccb35317a45a0","sha1":"344f990c517d53a049d68633000ee70cf3661927","sha256":"2b329517d2069f35f1b07947949a518f7d332c5a890ef22e5ea352d1dc26828d","sha512":"3c94089df4503919d470a5fd2b490893c0824d13226f501e7cf6bec1ad98131b75747598f31b1ca0208f5cf6724c7dcebdb0c464ba1f2e656939067cd2c99d53","ssdeep":"","tlshash":"79c08c3db23a202f05496049282bcf21906bfac00e825f2000aa3ed8c100a1c50d89a8","size":151,"data":"","first_seen":"2026-06-08T09:34:55.323657Z","last_seen":"2026-07-16T21:57:18.323027Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61f8426342b79d954ade4df1606f617a","sha1":"18dae98c550264186ddaf7405bfcd0ffd4c8197d","sha256":"dc8d0898c9e688bce8415c44a521a606801737049e0fa92769f83e88f2282047","sha512":"b0b7107bf9bac3a0c9748dc2e756f6fa955c0e54a28e01d0ac322b5746897c1a5dc5dd030b567484dfd234c80739c6e601a702b121ed7f79a3bdf45cbc18e6df","ssdeep":"","tlshash":"82b0125db69626a9d35e2016347d4511204719964a809524a12586e89105b184130ea5","size":89,"data":"","first_seen":"2025-07-03T18:28:56.134232Z","last_seen":"2026-07-16T21:57:18.174017Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c0f79c4626b40567ea50c2d10739cd1e","sha1":"803cc1009097063d35145bbb955065479d78ae3f","sha256":"7acfb80e8891fe218bf2941f2142d375d8a63c637120064b85b397d904794504","sha512":"7c31fc68e66b0953d189fd09532cdc34a7e6c72fc21a85365b68e5f5f4c6e48520ab18b6e4c4655105c54aed122cb2fb1278bae5ce5d0dfefea9b7720c8cfbe3","ssdeep":"","tlshash":"ddb0125df29622add34e20163c794122201729950a809124a12586e89109b184034ea9","size":89,"data":"","first_seen":"2023-07-12T03:58:20Z","last_seen":"2026-07-16T21:57:18.159185Z","times_seen":960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1c078c6768967de0d1aca9d6fb27ce31","sha1":"81b0ebe7381914755663152a2fc5924946f05227","sha256":"1bd72edb23488678da111fc2e25670384951a11141b75fb5998a31ee87ea78d2","sha512":"c22ddb003eb74aa77ad363635fdc0cb82ff20424f245d262c4744c1f58f9cebef39454d878d43de908be3539270b9a07c76b7c39109664203c53a7e26650c039","ssdeep":"","tlshash":"63a01219f3853125034b703a103a41152003066108018201522644d840c92454014da5","size":80,"data":"","first_seen":"2026-05-27T18:49:34.567254Z","last_seen":"2026-07-16T21:57:18.518783Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"66d58aa3d91115f0773d5f7afc5b3b71","sha1":"2a81de0443d1ff765bfa701661a0a29e870c4878","sha256":"eec5d6fcd01cc8019709c689f320071bb55072dbd5239eb32146960b5ee8373a","sha512":"b18e25d20374d81e16767c021953fedc76beda08521ed4021abc5e184ba4621e9f967372d83f9920ba4fcab7f23012c0baf64ec5b900d226bac22f9bbba5345e","ssdeep":"","tlshash":"b1e0122ff19a103f08cb655b78598921815f56f6bc479b2573321dfd9017a4a8088afa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.888429Z","last_seen":"2026-07-16T21:57:18.364245Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"332060eb74ee52539ad90e77f973ccd3","sha1":"f235f95c23a925a1107ce2abb49fe014552f1d8a","sha256":"0fef26c98d2d8b59173bac150d24cab3937e42a82e9430a816ae1dfc3e22212a","sha512":"431cb908e8fc464edf9cbeb02b436d1b8086797fe94d1f2613731bebc2548ab7847dccdbde758ca5ce44295ff0b477618380e4c061064453ac0afd2f66b946da","ssdeep":"","tlshash":"63b0125df19623b9d74f202634694215200715a519c0a124613586ec9105b144130ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.433392Z","times_seen":346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0dfc25318940ea19b54a71ea5d9d524d","sha1":"5e5ebd3d9f5bcd1fb12b670049cb9a2d824221bc","sha256":"92ac210ee527fe354a8e2dac92ba6e212d8508c135c7d3d9cc1197c66de11fd1","sha512":"bd056e7d7f50bce7509f6f7b82825fbcdc7e4758ae5311c202d76635442749a10dd6454f9d9502145de5b573b645e359bc181a4bdcb939cce6a44e49f840466c","ssdeep":"","tlshash":"8ac08c3db23b202f054a584a681bcb11909bfac01e829f2000aa3ed8c100a1c51d89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:39.092408Z","last_seen":"2026-07-16T21:57:18.579457Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6b3747acf38894368aee8e5965a4ecdc","sha1":"2c2bbcaf93dd9671764a1ea3630bd4260124ebee","sha256":"603a4e2af55faa04a6bc2a6421dba191db792bd611b8ebc84591cb64c2256760","sha512":"ce80fe6e9f0f01b08c3b2841681ac52e55c9539599098f009ca34e8343eac5f673b95fb2368215a8d35a8e31f97eadabbce852b56298c97fb45f17f156ae590f","ssdeep":"","tlshash":"a4117a1a7a5d0cfb04cf3d1a38c0067110bbc3b319c0fb99bb7956fd8c61a014164ea0","size":921,"data":"","first_seen":"2024-12-18T23:19:35.487395Z","last_seen":"2026-07-16T21:57:18.46802Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3a6c77983bb4f901cda6daee7ae12cd4","sha1":"0597bf224953edc76396736b0b04cefee35b6a94","sha256":"566ffee79279137978db0d0c698ea3b7c97531bcdc33454485b418f3111473ec","sha512":"882f643abf49aba50bf9121f9a17c9f6fdeaf8a094982a90a0c6722c8581de0abad72b2a98476f1d383f906d1b5b1737adfbdd7b97c26cbb3e723cdefa2a1ff1","ssdeep":"","tlshash":"f3115c5a7b5c0cfb44cf7d1a78c0057124bbc3b359c0ebd9bb7955f98c61a015064ea4","size":921,"data":"","first_seen":"2025-02-25T11:21:33.986314Z","last_seen":"2026-07-16T21:57:18.258676Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3587416ae556d9f8af3e9607754e38e3","sha1":"33b2d6f3ebbc5658c868011ce474f347ae1a49c4","sha256":"777c47952a6f76e4f94874218734629a67c23ae022a7a23b37acfef6acb68b2e","sha512":"1ce20bddc79cdd82525be2b72ae5cd6d97157f55ad4abe2bb7dd879a6958637c48378150f16d8d212560d06d9647b3b90c8f667fec19c23699c57eabd43dc795","ssdeep":"","tlshash":"8bb0125df1962aa9e34e201734394121204715950d809924a12586e89105b144034eb6","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.457764Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"917282164236d6a5e8805d1885dca546","sha1":"c5bd8c197b4d401558ce9477abe552ec561fc79f","sha256":"3b2dfe1d3deaff3a2cfd83054a235bebe030422b54209988adf44dc9e68ec6c6","sha512":"fd11fd2618e8c975773b5ddf74646edbc03da8acde38aef50fb68f65f3e4ece56227cabdde169d96894478496ca039872d6435e285742d017da537ffbc0e2088","ssdeep":"","tlshash":"eab0125db79622a9d74e601a3c6941256007199509819124612586e89509f144030ea5","size":90,"data":"","first_seen":"2024-05-23T17:50:04Z","last_seen":"2026-07-16T21:57:18.427454Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e5bf247a524c7da5ee6ba56c9ad32ef","sha1":"d2997ece05d18e02decb90c96e37b0b60c076b98","sha256":"5e2f38e4ded95b07315ba70d717df3ede93e8333a76b17d4cca45706f43ce773","sha512":"82abda430c918317be4e76bfa21bb1acbf44445669755cd872cd612f18989737235ec133a7c6da3341477f5329396f02d056ae6cdaa2d0d910ff54b50fb07253","ssdeep":"","tlshash":"e7b0125db59623add34e2026342945113047159509809124623596e8a506b558030ea5","size":90,"data":"","first_seen":"2024-04-03T00:03:22Z","last_seen":"2026-07-16T21:57:18.606886Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a18f6e75e75e25b026f7c59bbecc4145","sha1":"07bbf43d9abf04f86fdc5ce6a3032fb882a3ec75","sha256":"fbc3702dcbae44b6dd452519022c79e65143142a2219c016859f77fb516114b6","sha512":"9df74e930238b0f195b1a85c79d4b85073184204ed2c683b810237629edc16ea284e772a423087b6b815896c44d01a88f14355bdd703b47c1e1735720181471a","ssdeep":"","tlshash":"93113a2a7a6c0cfb44ce392a78c00a7114bbc7f359c0eb99bb3955bd8ca5a014064ea4","size":921,"data":"","first_seen":"2024-04-24T13:17:39Z","last_seen":"2026-07-16T21:57:18.611937Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/geo-data.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5df6c43ea2c3c6ffa4ca6674ea90c1e8","sha1":"18554be278362ee9f9627eb0e83c0e408ff84b63","sha256":"88c4c34efbfa446ce1bb7fcd32147fca46d563478d75d60bed07130ded65ba77","sha512":"b4be03a222dd67baec158d6c6d34d2286bddc63ed45362908988e1272527374436edb0b3f4a8f27ebb3d01dbbfc004f69f000cb8d85bc30df77eed9ab9640394","ssdeep":"192:KUPzwLz2BoEzwU6yNaKWiLby1ldfM7lthVang+d//Ts2VIk:Kb2Be6aKH6130lTAnNJQ2VIk","tlshash":"f932d7e26996da7403e5adcdc8196295f50a9d3843cd78a4fb4efdc0b506c0530e2bf5","size":11567,"data":"","first_seen":"2026-07-10T12:35:59.937849Z","last_seen":"2026-07-12T21:21:00.106315Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5aa0f56138784033715e3012f696a872","sha1":"ec2e039d1ed8d005f77e5b759fa5a393336dc3e3","sha256":"484d1d31c1f232f75d9842eb77243a1554b665c037dd8821ae04dff1080eb991","sha512":"2edeaef6485acc7f73f4067c7d5b829028f86c1b7a4e223e1fd2ce236822a099ff7e67c1a91f7ef67ed2107d83894aaf4e90dfeef468fbcc046476324d96ae0a","ssdeep":"","tlshash":"1ac0c21af38c143e05cbb02b2865451a41034bd74d81e3191b3249ec911b6828028afa","size":190,"data":"","first_seen":"2026-06-13T14:53:09.970797Z","last_seen":"2026-07-16T21:57:18.61029Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7d2e8cfbdd3955ec4652eeb818577d90","sha1":"95b820a35cc7d20fc642e0716038eef9ca5696e4","sha256":"0a6d879a554e6ba1d8dc6927c3af4a55ca9bda412f939fe285f987dcab9b0251","sha512":"7520646c5747d521c97d2dbad4e9586c14007ba676275c9946d760646212de2b1f647d6ef9957d4685b0f4496cc2c5eaa232cc640dd544a37142e5b226c534b2","ssdeep":"","tlshash":"6ee0122bb79d043f08cf615b7cd94911802756f69c87ab2573321dbd901ba4ac088afa","size":358,"data":"","first_seen":"2026-06-13T14:53:10.225765Z","last_seen":"2026-07-16T21:57:18.302393Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bb57a062b8dd66fa2410127680199d12","sha1":"a6c96b565a309569f874d3452c575a6f8d05c20b","sha256":"2539049acfbba3bd2b568275199700ff891b78cf8172a34adfc4ad918fa2a472","sha512":"95c42d30a2fa9bc28d39e8b99aca79d2592d72fa86e0b7fcf82220081dee9ec9d509f3e580a041b69f83f5ace4ab57a2f3c70d96da04f06a38956a6b32923e23","ssdeep":"","tlshash":"0fb0125db19a26a9d34e2027346d4915208715950b809529a12986e89105ba44030ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.282506Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6bd4f15703c5c137d1aec16195d04cf3","sha1":"36e13d44f2775d5fba149bea360d6a1b35bde9b4","sha256":"085d833f05067178d68007e351195622866437114292aff5b77b3485f9f33a31","sha512":"eb156186d6d984cd2b03f53603d87ad46963beaa2e8dfb94ae204f356fabd42a1ae40ae96eab578d7da2c031e3dbda8e3db49286961611f7a0ef7ce6bfc452b0","ssdeep":"","tlshash":"28d02b9ff7ba221742ca6419949b061b1069b78a0b048b9300370aea94254c10223e39","size":272,"data":"","first_seen":"2026-01-12T15:19:10.673697Z","last_seen":"2026-07-16T21:57:18.361449Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"950fc0104c6443e6cbdc972abf0b7aa8","sha1":"5b32c68f0d96e38f89786e5e60eebe4c23975de3","sha256":"6d10c73d9adf7fe08a48688d8506db964a78da5cc317e69e78d771b551348eef","sha512":"813caa4c0c54a8fd8563e6526a284a3d4ca55c140e769fba731aa8ef9082b43fe585df9e65d9169b34bab9a03c8c10ecfdae1efc553d1267cb1b87a89e0d3093","ssdeep":"","tlshash":"00115c2aba5c1cfb44cf3d1a78d0097114bbc3b359c0ef99bf3955fa8c61a014068ea5","size":921,"data":"","first_seen":"2024-04-24T13:59:10Z","last_seen":"2026-07-16T21:57:18.281607Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"302dff7e7aed43b693ff90f6001afc00","sha1":"9c4e581242911602b42348822c187e67209bbb75","sha256":"7bfa1138dc38f81940f38885f522bf716ae0d988812722a824b33e4b79735a2e","sha512":"2d599f697b83bc685c6bf39b139eb53e7d4a53453bffff4d6aa9835ce847a3aa6c47601fbcddeb75aca94595843e32b62477a3e75f7f98850f12ad46cdcbc5ee","ssdeep":"","tlshash":"5bb0125db1a622ade36f2026342945212047259509809225a12586e8d105b148030ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.459278Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c1ee377ea0110fdf343d6a209e43d32a","sha1":"1a0990032b30e418fc6240f670a30f6dec61a00f","sha256":"0e77f6d907c9f0aa26713164740be7d2a55a522d32bdc018fc722eff770e20fe","sha512":"7506bae462879a1c44eb8a1229ae8ee83a3e5b567960d219fe623352d78a2f81ac4017f363762ee6ce07a66812cd9f04a60f9441006fe90ed3aa69636b685574","ssdeep":"","tlshash":"28e0122bb29f003f48cb715b78568a11801756f79c4b9b25b3321fbd9017a4ac188efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.208698Z","last_seen":"2026-07-16T21:57:18.229686Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cac95aa2cb248ba001af6847a28f166e","sha1":"b7de62ef9e1ebf9fcb1fbb4d091a61ab2fcace2b","sha256":"15211acb0d31b778ce2e35017c5c01d42eb63e086531fbf7bdada0b2b4a60c8a","sha512":"9de3a2ac6d821eb9b84b1b8395c38638f4cd962f92e1c0f5c92d13fb9634fdf7e0336d6884e328a97221a9118e52b83efe196d2d67c80ed7fd7b7ffa9084affd","ssdeep":"","tlshash":"dcb0125db69622a9e34e20163429811120471695098091246126c6e89505b154130ea6","size":90,"data":"","first_seen":"2024-04-24T14:51:20Z","last_seen":"2026-07-16T21:57:18.18543Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"58a3a7dab78b60e780d0651719f1c35a","sha1":"908e97da1b1c11f6d2ab8e2041cc018d90fc3995","sha256":"162b808ff472d3c0049c7f77fb40b34587cb882a4fcbe4eff102fe5e243dc793","sha512":"c11e05ac8588911d345593a12da1ca3e66603ecd3d45bb7bbff869ecb91421165b3bd89f4a8753e50dddae3d20fceb9ae4093d54e7de7a211ae68a01ca1d7233","ssdeep":"","tlshash":"5cb0125db19b26a9d38f3017342942112047259509809524a12587e89105b144134ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.295123Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fa09ce78b1fe27a077e4c0c1295e68b","sha1":"59900068fca4c131345fc8d7bb7710305b49700d","sha256":"7d179ca717c31b3969eaeb389ff93bccbd9763bed89a53be529f546caba39b94","sha512":"bbeec76df308bb51510f4530e09fe86f9bad195fb6fb05e5c285fe6690326fd64a88da4c522ee4d7ffb4342987c6a5faa76e6e7a95497bf1931711e2595a5c90","ssdeep":"","tlshash":"78900296b698043e05ceb427649086a1550303a748c19615133e19ed44175825404de6","size":55,"data":"","first_seen":"2026-06-05T02:31:51.604039Z","last_seen":"2026-07-16T21:57:18.609555Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6eb226459baee83b9868223c38bb7656","sha1":"81f2d65dd5af60f5be37b2f08b0b30440ac9e404","sha256":"dca25b8d72bbbcf717fb2a73dec86be6c4b367cf237855c86430373973b48bbc","sha512":"f6d145383d3612002bc7c9cc8f735d13a634f3f76bbe21a1581ab3d38fa2de3e7df24926ae8298f6ee6977b576ef09d44157aa2fbd4bd8855311a42c95b1010e","ssdeep":"","tlshash":"48b0125db19622aad34e2027342945116087159909809124a22686f89206b144030ea9","size":90,"data":"","first_seen":"2024-06-04T22:59:00Z","last_seen":"2026-07-16T21:57:18.388283Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6ee898e16f36b1165e1f620c93deaec0","sha1":"9d2c07f8fd4c5dbb90f84f35d49fb9ad5b836fe7","sha256":"699930da1ac1fb840a07f9e9168af58a35e3fa7400b8134f19af822b6842ee4d","sha512":"9b1855e2ceaf976448e38e131ff33307f702976794e89ae02bd45c13e31e2c985e9f820ed871eb701068fc2ef125ab28159d33263bdc244be6159ee8b97b9387","ssdeep":"","tlshash":"96b02228f3ef3020aaca20aa28aa8002b002a0200880c202222e02c8202c2880023a22","size":109,"data":"","first_seen":"2025-12-22T06:43:29.890412Z","last_seen":"2026-07-16T21:57:18.400531Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2a75b3fab0ffcaf1c067e8e692537340","sha1":"d4e5ec3c42a2201abc8405c90916c19a44a27360","sha256":"4c27c3db35e84b1930008d295342be18e11009df9e15b7ac49e63689adbf1885","sha512":"e59fc2355d7148a0f881d67306afafdae0c0c08eae5ed483b4e756c48753254b0a9f61b5be5c7df02920350d303925e9d5e0e03d6d02178e56d32169c20251c5","ssdeep":"","tlshash":"37e01b2fb199103f08cb795b78554921811f47f6ac47971573321dfd50176468048dfb","size":358,"data":"","first_seen":"2025-11-28T11:46:19.35683Z","last_seen":"2026-07-16T21:57:18.544775Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"41ceb9e30750b10bb9ce1821662539cc","sha1":"bb2e1f89bc0772e22a92291b18a012c7cc93b138","sha256":"8314af5f7471e7d4daa8a13dca54e71173aaa6ced245afe23bd338dc0a606e01","sha512":"68e70eab510c1191cc3ef620a5533b69435c295f4135c3c72e042aa8a23917b45330e8a3a51351bb9b295201960d9d7121927b95c2cf0b3a36e1c95f0c6c2f4b","ssdeep":"","tlshash":"8ca01219f3897125024ba01a286a45192003017109059210522644d8404d3454014d65","size":81,"data":"","first_seen":"2024-07-31T16:58:54Z","last_seen":"2026-07-16T21:57:18.312213Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"419ec8055e44d9888030a7a65a69a023","sha1":"887d8d51800a0dcca4f96db70c56d993c73a1f0d","sha256":"2b78782bb0504cfeeead3feae5100d5cd0f8e472828c5613fc1d81e68390937f","sha512":"cefaa96247dc044452d869233b3bed0821927898cbe2e5aadd594fe7c140491c031cd151d071952d0a61eec717bed159276163067434ad54b795b67a96c396af","ssdeep":"","tlshash":"72110a5ab79c0cfb44cf3d167cc0057124bbc3b359c0eb99bb7955b98ca6e014064ea4","size":921,"data":"","first_seen":"2026-06-13T16:08:38.768339Z","last_seen":"2026-07-16T21:57:18.458497Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f8089479ffabb8a4230714739fd1d8ec","sha1":"6a74b7587a365e3e1caada634706d9d2ebfc4f4e","sha256":"5f66ac3ab3ff1a21629c90330c52a1d45d0c34d2e2731998c6a4d4378afc14b6","sha512":"1474666c8959d3ba9f8eb11c170917f0317e769200e6da2768f46581544b74d49ae30252285179e102b3dd604db5cd5a7da0df40be8e2e2b096dfc38d86de89a","ssdeep":"","tlshash":"e2b0125db19623aed34e2026342945113047159509809124616596e8a105b544030ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.461526Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"072fcbb6e3a83930223609bdb325c713","sha1":"342fedcc5062276da3c2745f7d9d53c806f80ca1","sha256":"e52bad3334c2ac85719c95875da951ba1c2ddfa83ec75c46ccc4b8d01266f600","sha512":"d5183487c9cdaf7f017869148e22fa911495105f7b028e6755b93fd3a3fe3a587aff800c0665428c3bf63ef45a358e630f51d3793d0d94b89956eb7ca3882ddc","ssdeep":"","tlshash":"dbd02b9ff7ba621742caa418949b06171069bbca0b088b93003709ea94254c10123e39","size":271,"data":"","first_seen":"2026-05-27T18:49:35.18688Z","last_seen":"2026-07-16T21:57:18.544066Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"64bd6d8768c1f9a0356b961150017c30","sha1":"00fd2d10ef39991bc21bbe19a1e0fe585f7f705c","sha256":"61b7a85f12aef1edfb3a73a50b8d9c18dccd9b559e579f5aa873c578b7b52129","sha512":"07f96d3ccd3d9ad7f7f8926a718f6268cfd167c6183a51680997d076138337a388c0fdf85db721c96e7c9d6be7408dd20250db8b5fdf4d810f12bf2bbf812735","ssdeep":"","tlshash":"c8c08c3db23a202f09495049281bcb10905bfac00e828f2000aa3ed88110a1c50e8da8","size":150,"data":"","first_seen":"2026-05-27T18:49:34.553414Z","last_seen":"2026-07-16T21:57:18.233651Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d2114b33d9752150e47b202e539444e5","sha1":"fa01e1e2cdbe7686b852d96ad0990cc14bcd53f1","sha256":"217d58a917b2458c99ba41b5b92033721f7fc4ccac7f23718716c8d2d609769c","sha512":"856eda34cf0e0850e5e9eba0c2cb9cbbabec9a1394f54c3b980ad3d4d75821895db69952cbd169d302cb990dae87749bdad8aadb21dd2f34803fb492753f1e34","ssdeep":"","tlshash":"8fb0125db29626a9d34e302734694515204716950a809528a12986e89105b544030ea6","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.513572Z","times_seen":579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9ded22977d8c3092685c3a5077f82b5c","sha1":"2de4b8ab71ce53c9aad3f8ab62c29e1125cd3292","sha256":"d9eae3699efeda506f9d8b7afbcb830220e9cb7fa560216b0b63108e1ae0c89b","sha512":"7e97f683badb4a59d64374745dbbd6f9ed52ec73412cde5e05bf4dcdec1ee86eaf36a9e793fea684ce0107b724b895226488efc8687a19d60c01e3ef1a879c63","ssdeep":"","tlshash":"4bd02b9ff7ba621742ca6419949f0617102ab78a0b048f93003b0aea94254c10123e39","size":272,"data":"","first_seen":"2026-05-28T10:31:18.759838Z","last_seen":"2026-07-16T21:57:18.374709Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"388fe2ac61884b5c30c64fbd6b5df36a","sha1":"d7e68f95be4ff7ca509c54bd3b5c116b9506144d","sha256":"439ce69e505028c51301dd1c370f37f7eb559d8249c50712a610b8dc27b8de7e","sha512":"15dfb5fd109e2e308a07bc6b253f7184acfad6a717776bdd89360fa0a732f5b86ec70a76b04f0f5335a18449166372d0e902d1f0a25d9a1313dc2fe6f87a4f66","ssdeep":"","tlshash":"1ac08c3db23a202f054960492c6bcf10909bfac00e824f3000aa3edc8105a1c50d89a8","size":151,"data":"","first_seen":"2026-06-13T14:53:10.19021Z","last_seen":"2026-07-16T21:57:18.587614Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"87edd10a633a8b763386a75a177ddf41","sha1":"408f05ee22b876dd082ef26737988e9722890441","sha256":"fa7df8de893ec3ba6a1eb9f302cffb299d573cb3f0e5e03b0ee77007071bb2ad","sha512":"92583d786d10994d58c6d4acaa8958964d8010f2e059ab2a9cca242885bb573603b83ec088fefd98985fa3afc2387db7b861c47391af3cfab4eff2f5d025dc29","ssdeep":"","tlshash":"3be0122bb699003f08cb695bb8469d11811b57f79c479b2573322dbd9016a4ac188efa","size":358,"data":"","first_seen":"2026-06-13T16:08:38.981055Z","last_seen":"2026-07-16T21:57:18.267312Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"01edb9db99bed3c0a67517dad55cca02","sha1":"5d7072fac0bc10e233470fb3a1a7b5d0275f41f2","sha256":"1f3adbb9376a8dd2ecf4c63b5147edfcfd50eaa6f3e094c8f43ccdc25d9eb41f","sha512":"ba6e0720fbb8390d2d2e279935456e80048b6cc8e0f4ad172087b186f878add78744c1ad5b7c6077235c74293201e9e6b69cf7cd8022e66572d9591f697fb573","ssdeep":"","tlshash":"3ab0125db29622aad34e202a342a451120471d9509849124612586e89145b144030ea5","size":90,"data":"","first_seen":"2024-03-28T12:54:33Z","last_seen":"2026-07-16T21:57:18.337047Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"369ab49be86546d0d265dd8d45382bf1","sha1":"f1784dbe8975befa7b49fb3efe1d3b711ebfd1b5","sha256":"7106d673f93d94ce4b12663539e89f94ce3ed7183013dbf346fe5ccbbfaa224e","sha512":"38ba25b02dd897203abb4beeef2d8e86f407fcb305e99e75973f6d0df1f0df6636bdd53d14838e515b70c8efc7d0211e90516331d9f5ba00ed6ac8c85ace60bf","ssdeep":"","tlshash":"03b0125df6d632a9d34e3016342a4511204729d54980e124612586e8a505b184030ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T21:57:18.293939Z","times_seen":294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1d37273922ea74682eb8ddb6eb0a2781","sha1":"71763d4a707fe1a71b01014466b2f22b550b4144","sha256":"c6ee285316b85cff68827971b2fe4af910f5b97e77aa20dae460b5b6beab58ef","sha512":"c9eb647f8d2348d3784419428d3a688929bf9838e216da3430af2b30add303810a529e3562174075b4d293f6a40b0234c1a97fbcd6c45de3213e6b7029175713","ssdeep":"","tlshash":"b0b0125db29622bad34e6016342d4111204715a509849124612586f89106f144030ee9","size":90,"data":"","first_seen":"2024-03-01T11:49:07Z","last_seen":"2026-07-16T21:57:18.465851Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"920d20aa026b068fd8d72f6775d4fc35","sha1":"d7754a27f61e37d859a30e62b679942b396108ad","sha256":"088462ee441c3eb910756c465b112ebebda69091fcd2911ba3cce2ba2194ad53","sha512":"39f5b0152888e109940fe697703aa2e026ccbe787dd9b6269b7c7ff92ea7dff461d5bfc06d35178c3fa8dca195f8624ca69c6a2ad6ab12a7c3b8f1e858ae3308","ssdeep":"","tlshash":"13e0122bf19d143f08cb655b78654921801b46f79c47db25b7321dfd6017a4a808cafb","size":358,"data":"","first_seen":"2025-12-22T12:12:58.094472Z","last_seen":"2026-07-16T21:57:18.206252Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fa84382ddb2cffd10c434a59e2616459","sha1":"5bab924d66c53879e7787fb2f8bbba114926c738","sha256":"746b936e177bd87042445b76e191085fb3fa5695bc92d23bc6fad271581a4e87","sha512":"1cae99b6597b909ab70d8bab5afe1e553a1baa17f7a514fec82d5bed763a79a4996187d3b70e2e8648710a0731c4cc168bb65b8506dd86d6b167f98800488a42","ssdeep":"","tlshash":"76b02b2cf3af3020168a60a514594002b00250640980d112121d00c4501c2840022a12","size":111,"data":"","first_seen":"2024-07-31T16:58:53Z","last_seen":"2026-07-16T21:57:18.549795Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"acbd299b15e85245592c53e40cb63541","sha1":"c1e71455645bbd02d767afe940e61a44916dddea","sha256":"5e0c1f012c2035b01597a000b25ab4c876bb12d126362a31dc9db0804c39ad04","sha512":"6f7b2fe7dea70301a5508a64f8a63243b96d65a3076589484868874471fe4e893e5edab888d69560fa2c41b204f48fa678ad02e0e52517c810474ef095cab37b","ssdeep":"","tlshash":"1be0126bf39d003f08cf615b7cd94911801786f69c87db2573721dfda01ba4a8098afa","size":358,"data":"","first_seen":"2025-12-22T12:12:58.0138Z","last_seen":"2026-07-16T21:57:18.326458Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"862e5d7a42b2b5254ebd0e1b19e0c168","sha1":"b8b1e8c18ad72ac5e98624ba7e72f1fefe0583a0","sha256":"1518aaa74bd30269776a52d1b5fe60b0a84bd2faacbe05d28e04eb36cac17a00","sha512":"c5ea0de8b999a0ef2e73a3e7b5b01c25bb78a44587eb2c1ad109318743b071f1c5c06fc7d7f174b3db6b429783e626a7e2e3bf34d8cb50fe131e6eb063c47c92","ssdeep":"","tlshash":"f6115c1a775c0cfb44ce3d1678c0057124bbc3b359c0ebddbb7955f98c61a025064ea4","size":921,"data":"","first_seen":"2024-08-28T09:32:04Z","last_seen":"2026-07-16T21:57:18.426581Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7bb147d856538cb40ff5542820a7c863","sha1":"773b839a141a694511166d8debebbdbcbcbce873","sha256":"bf414b5d191dd4670072535528fee78e0095b8498528d95b158c31cdb5629b88","sha512":"16f1ed16e8188a6ee4cd041fe74e458da2011878a68e830c9820ae302cf2196d208a933b7fdbd7ec5d4b2495c0805edd39be246c6c283761407814206a9af12c","ssdeep":"","tlshash":"b3b0129eb2a722abd38e20163c6d41152007199509809224a16686e89109b144030ea9","size":90,"data":"","first_seen":"2023-12-19T15:22:50Z","last_seen":"2026-07-16T21:57:18.239477Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5395cf09774389b62820c8a77ab266bd","sha1":"fa771e668db280ca56fb7f9d163a03fc5cc435d6","sha256":"5f07d589dc91cab79ac60be47728d0d78c33aed6abe49cd2c20d3ec2158400c7","sha512":"0699f76d5ceb27f27e80a77dba8f08b94d57e8a4fc051aaae14a78d382ece5fd9bb6ce1a14d93ffbffe945f3e4ff658aa04f97576f91ccff9d6ee7538483e102","ssdeep":"","tlshash":"dbb0125db19623add34e201634298111200719a5098091246125c6e89116b184130ea6","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.583712Z","times_seen":454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0df4ae5e4ce1c883886103376d6c2b6","sha1":"aaec3eaba735e491a1f1b88909dc1b6b6d357def","sha256":"658822b425c3780f1d387330b43ee5c7e7e8aba11686459aa1b4d6bf72f5608f","sha512":"13bdcf5f5aa448a5b7897921df0dde428f21c193aaafbde288d83dc7ded6f1f49988ae396af22b6f7399702c7e712c654df3fbd0de7a37b019a796fe69f2011a","ssdeep":"","tlshash":"4fd02b9ff7ba221b42caa418949b06171069fb8a0b088b93003749ea94254c10137e39","size":272,"data":"","first_seen":"2026-06-13T16:08:39.088717Z","last_seen":"2026-07-16T21:57:18.227028Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c6d0550d61278efa461f23a08bcd43bd","sha1":"21913de7c076cbcbed26e89fc8084c6408b10721","sha256":"177f5af6d4284256f71c1c9f7756e8e59169d1836af5afad71eb699d2b62bb35","sha512":"129518018f419c83efe8c7d879467e4abde209ee5a5d7dfa3d6d1688137fbbf59ee4c25f89b1e45ae4e8822f88c9da16f89cc91d973e197d250fdf9339976720","ssdeep":"","tlshash":"94113a1a765c1cfb44ce3d1a79c0057114bbc3b35ac0fb99bb7956f98c65a024064ea4","size":921,"data":"","first_seen":"2024-08-28T03:37:43Z","last_seen":"2026-07-16T21:57:18.158228Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c240b2a00170e0d3915b8defeaf3c46c","sha1":"06393a9225f460d89c6430e2f05b2ee5b3f2aae2","sha256":"548d317b44c119a230a6d3e59c8ad10593d1cbd698203538f148937b4afe289d","sha512":"6b77bd88e296e599fec95dc856b869b4ea0f074b42354ffc4a168ea793ab8617964726d9d4fb1b2cc02769942510de7afec1f463643f045e6bc64ca6d2fbbbe7","ssdeep":"","tlshash":"49d02b9ffbba221742da641894db06171039bb8a4b048b93003709ead4255c10123e39","size":272,"data":"","first_seen":"2026-03-28T14:02:24.156484Z","last_seen":"2026-07-16T21:57:18.56974Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"df168c18096e124edeef5eb282fb841d","sha1":"634940bdd36f25dc43011dff05cb7c36d48b6667","sha256":"337f109d022330685cde3c235ddc014d5fa86d3dd7a642e82e7a2e912e79b378","sha512":"b3bc46faef380f5d03b682b473a01cd3da288161d9c870275cd7025399cf2a2bdb930afffa9ec5960e09b159a7013fe4daf58fd8cf4492bc9cdc79d4b9567280","ssdeep":"","tlshash":"0eb0125df59626a9d74e2016343941112047159509819124a92586e89905b144034eb6","size":90,"data":"","first_seen":"2023-11-30T16:50:00Z","last_seen":"2026-07-16T21:57:18.220706Z","times_seen":396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"74b277148d84dbe2184cdc8f86581e0c","sha1":"405d7bb213ad1deca0aa50d5acbe9126f46657df","sha256":"7a5a55ec52352912ecab12c3df0810493ebac382ce9440860c4dc58a21e5854a","sha512":"77d14f20ffd88f11c118b43481ccd6f2685b641dc54f64077fa0130cc8baee6a9f19d7879e2b86c31d7eb175bd557e581973e8d23be0d0fa5a0255fc78c55841","ssdeep":"","tlshash":"07b0125db19632a9d34e301634294112204716954a80e124a12a86fcd505b144030ea9","size":90,"data":"","first_seen":"2024-12-10T19:46:18.290361Z","last_seen":"2026-07-16T21:57:18.344098Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e4e583d0395f45fbc3b408113331c2e9","sha1":"b968d757fd0b8a7171999a5e16659d92b631c7d8","sha256":"de3bb9cba4ee8a3c0e299aebfba7b63c206457f0089973254315c6c0b1769a37","sha512":"6384ae2a539426eb37d7c8230aa42cdd895eaeabc5aca187536962c09d8acb06bdaba7c27d508616f73f533d393b552e0df68df0146170aad39747521666882a","ssdeep":"","tlshash":"64b0125db29a22a9e34f20263439411120871a9509c49124612586e89105b144031ea5","size":89,"data":"","first_seen":"2026-05-27T00:11:11.74805Z","last_seen":"2026-07-16T21:57:18.424841Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d44dd666156002c18697c38c3c758ea3","sha1":"d23525edb12774db82713227f125c359b96b5a34","sha256":"21613357b4154e09e25bc584553e744db22352239b1b1d09989cfa6f312f39b7","sha512":"2057d71f557156956917ad132b568341bf6bf8d9a2ac6c2fd46817463efc7cb83c975afc3258b472a1012b4c435c1d2d10589fa04b96241a73cfc1862ebf2f75","ssdeep":"","tlshash":"9fe0122bb19d403f08cb655fb8469a11811b46f79c479b25b2322dfd6016a4a8188afa","size":358,"data":"","first_seen":"2026-06-13T16:08:38.950123Z","last_seen":"2026-07-16T21:57:18.192677Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cbb1220bd2b74fe02df555219f19a60e","sha1":"1892fef5e72096c68d352f84ab31926872aa0416","sha256":"8c856a738ded3ce180985f6b44b45c7e1df36f960d05af1f8e74b19108124d72","sha512":"a969fcbc267f3a659c714aca7c901facd00e324c7b67c3e2bda1f5aa7a9249ef31808285bd8ddf70ee348d30f8c63acd762537649933fecb6f84d4272d3a7f3f","ssdeep":"","tlshash":"eba01219f3853125024b601b602681156003496128018340522644d8400a2454014d65","size":81,"data":"","first_seen":"2025-11-12T06:39:41.483364Z","last_seen":"2026-07-16T21:57:18.207209Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"034838f32f4f6271fa10aded8b302d5c","sha1":"204a4ac8e2b97c5fd42252234ddc8fd9d446baa6","sha256":"3414c5099a6ae1e19fa28a6fbe8fb2fd00da7cc843ace0988047b9a953c9441c","sha512":"2dc54b043e4fc2081ebfe2424096d58c929db4ed9225e5021b538b0be8a3375a855d44ac1cbe45cfbd9542230d75b9febc817fde40815e420887eb8cd1ec1516","ssdeep":"","tlshash":"85b0125db19633aed34e301634294511301715950984a124612586e8a505b144031ea5","size":90,"data":"","first_seen":"2024-07-31T16:58:55Z","last_seen":"2026-07-16T21:57:18.555916Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f546cfa62dd3c6f683cf931c9a0164ac","sha1":"4f6515e5ce58bfd0dee0f8c04e299dcd13139a15","sha256":"a69a27c0b17a57640fbf781fa44790046ad1962824e7158a613e36df2dcf542e","sha512":"18c20698376cc2de94f29c3e0761368ea8a7083490194b4be28592f0acdce0004db18bdd04e0079ec6fe1c4dc0bbc5e33e9412564f77475bb6928a343ad32602","ssdeep":"","tlshash":"31b0129db69733add34e6016342945522007159509809124612587e89506f144130ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.616939Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cb82ab6fd89eedff6ab3820e553c0e5c","sha1":"db8a9f3b8e1ee7bf76d030ded46a38700f6d4830","sha256":"69664bc1600b46ee3490d84d8295db86cea860e910647b14f9b360a6b7fc6526","sha512":"e2f4153c00bdcc6db28ff0b794d82aff03d83155b0431c4781df6c9c2fd8e8e929b3ae274bf726d68400efa510e8f26e5e2ba228785d8b53303e57c65f9a7d79","ssdeep":"","tlshash":"12113a5a769c0cfb44ce391678d0057514bbc3b359c0efa9bf3996f98c61a014068ea5","size":921,"data":"","first_seen":"2024-12-16T06:32:04.138574Z","last_seen":"2026-07-16T21:57:18.496539Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fcb046ade014d60c751f44acbeb4affd","sha1":"8d2109ea889822b657d02de8e8e22d6197a846a6","sha256":"86247a4167c3919bcbbcaed02d5349450c8ed23ff9117c01938ac2afd9566b19","sha512":"0de6145d47b1bd67cd46ee95f2ebbd61cd7b8dea0bf46f51f5ba18c2305ae0da04903f87c6092ba776cc58716888ad25d88fbb332d4c90cf955dc999bb59316b","ssdeep":"","tlshash":"41c0e9abf38c203f05cfb02b38554526515307e75d85f31913721dfc981b6438404af9","size":190,"data":"","first_seen":"2026-06-08T09:34:55.775176Z","last_seen":"2026-07-16T21:57:18.272296Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_identify.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c06adac341baba15f12d0fc47eeb45f9","sha1":"b7246f95ef892327c4de02326bdb4418901620b3","sha256":"5976b13da122502ea6c6be930f0b2e5d5c2c4e65b52754dde03a85a094bbe8b4","sha512":"d995c3321103fe7356c78e58b9fce2c70610396f50d344d9ab269d3a9ff2eef4fd8d9b7b1878f5e4076d0846f51ca3fcf8af55ee8fb251989894b05f02cf119a","ssdeep":"96:XFlKGIsGOGyHpZlpdZTBDoc46/iE3XCIG2It8GWyiH3aGeScJ15GeShMMP9S/1EK:XFNpd/DocnD3tA8FyTU9SNCO","tlshash":"2bc1a5892be7307605a330796f9fe005b63190172d49ed907c8e9244bf6061faa73fd5","size":6125,"data":"","first_seen":"2026-07-10T12:35:59.981204Z","last_seen":"2026-07-12T21:21:00.104776Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7e0e2278f784f86cd74bca8c309ad0c9","sha1":"4951b04f149f6231a29b120cf340549909a8f995","sha256":"63f30860e61aedf643815d13780134f11a910d994afc4c2084609ad0fe5e80a4","sha512":"9443f7e0350f90dda9d2d941d3cf0dc6060840ecb1a09224fe34809c16f3c01422b5f6c24933371b66522bc74a907e10e9c89b33b20d20a1e67f410d2d7a235a","ssdeep":"","tlshash":"7ab0125db19622a9d34e201634294111204716954a80d124b12a86f89106b144030ee9","size":90,"data":"","first_seen":"2023-09-18T22:16:52Z","last_seen":"2026-07-16T21:57:18.46655Z","times_seen":914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"36a4ab73811647be55174b4579fa81f0","sha1":"558d1fbdd94fa6467514ef86dd3e62d17a29f9a3","sha256":"4365d2ae8e4df1a7bd68a00211eb6823a43183882ce5b17c2232d9a91289f97f","sha512":"1d53c7f7e50c9ba92ceaaa760dbe21db716990346a70ee226301f183cccd222ca3327d21e94747522384c56a841a693237d10b6c877017c8f690e777c6605a9b","ssdeep":"","tlshash":"0c115c5a765c0cfb44ce3d1b78c0157114fbcbf359c0eb99bb3955fa8c62a014164ea4","size":921,"data":"","first_seen":"2024-06-04T22:59:01Z","last_seen":"2026-07-16T21:57:18.169844Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"55f5b27d43dd35165bf7577d86c550f6","sha1":"d49fe3bbba8f8c05114dd978ab055b277165f403","sha256":"ee65f808e0172a48e1d0df13985bc02e2954fcff90ba130b58976753a35776f8","sha512":"8dd3c97cf7f31f022c703b2c4daa95782fd971c6f90ac2b11d78e17264e26b07109805c4bf930889df8e8d683e129146302d1237abe2ce9d7712be755e9ab506","ssdeep":"","tlshash":"78e0122bb79d003f08cf715b7dc58911802746f69c87ab2573321dfd901aa4ac088efa","size":358,"data":"","first_seen":"2026-06-13T14:53:10.214848Z","last_seen":"2026-07-16T21:57:18.231417Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ec38a9aa21b5c71d0d9b0a8b3e21cbda","sha1":"cf1ba6c7d39f67e37e34d35645df4cbb086b4d18","sha256":"a72673731a15f21d2d6376d03027eff978fa2790764f8baf56da8580b905fd7a","sha512":"74153762c19963de2423cf29a905c3fe68d4224b16103fa9b8d99184f05c1adde2bfe1d20fd15afb89b4af3cf99c4d0d3c50ce23213abaf537e76a406a276425","ssdeep":"","tlshash":"6fb0125db39622e9d74f60163c694215204725950980a124612586ec9109b144030ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:30Z","last_seen":"2026-07-16T21:57:18.574505Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1743f79d4839c1d10e63e72b4d108a13","sha1":"593908e3fe03789dc27c95ee427baa61e5d7123c","sha256":"ce2d70ab41e153bcc222cfa31b98bab549f3aa1b84d63e91fc175dc3f406ae98","sha512":"6dd548a15591f86e2ee74e10d11f0b87ed179d9038bab873d6a8581282bc8b76fd71228e98b39cfb26e0e44436855619d92229d2c41d6d4d642c76a3bbe91134","ssdeep":"","tlshash":"c2d02b9ff7ba261742ca641998df061b102ab78a0b048b93003709ea94294c10123e39","size":272,"data":"","first_seen":"2026-06-13T16:08:39.056198Z","last_seen":"2026-07-16T21:57:18.259445Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0a2e2c6940c64641d2c38c5869af5dab","sha1":"d639c0b3fc472ee83c16beab7b8da8ce1aa9aae1","sha256":"1d1b10b33e084f5e1c59c9f73113baa613f06b01ab177ebfd0772553d6f58c85","sha512":"199cbc4393d6aba6c75de54d750ff16d4c93f923b3c5371d76308a8eb8237a189864229996828105eb991ff7ba501f77c9bff367feebcd35a0af17b6cb14ca83","ssdeep":"","tlshash":"3ee0c08cf0d7503401d7706734ad8411307fad324068d165b2bec6b44ce554d817b95c","size":358,"data":"","first_seen":"2026-06-18T04:00:49.740532Z","last_seen":"2026-07-16T21:57:18.173072Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff70efbd6ab29daec6ddabb28928b5b6","sha1":"4b2fa2b5b47129559d81271dcd211cd0327d0f27","sha256":"6b1c7b84d8e269dee605a8dca7efb9f456c0fc21c60c10f0c17f7348ef91ee6c","sha512":"1d2f730819a5de2487d21768fd9e04b09c5b44b6e7b5f6a95f5cd5243e78a3d6fc1b8206f8f8898f8902bbb730c1749712a8a43a91aaa9a4a1c5ebf48f9bad3c","ssdeep":"","tlshash":"1dc0e95bf38c203f09cfb02b7895462641030fe74e82f31913311dfd581ba528004af9","size":186,"data":"","first_seen":"2026-05-27T18:49:34.556003Z","last_seen":"2026-07-16T21:57:18.465107Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c2591bbaeafcb40587b973be02b895e5","sha1":"b05f122c429184cf2a810e208e93e673b6d3e966","sha256":"268ec388e528fb29a9e0c1c9dec922dd39f8807a24e75f44cb6497bf683069b3","sha512":"5fdf0586c1cda04b723b1b57a79514bf7ed4f29acc041c8f40f75109147fe02990bbc1b3ca2e001a413baa0fbf90f665bde7862addd8f15fe241b80fb39a901e","ssdeep":"","tlshash":"fcc0c26af38c603a44cfb02b3851491a510307e78e82b215133109ec581b6838004ae9","size":190,"data":"","first_seen":"2026-06-08T09:34:55.791348Z","last_seen":"2026-07-16T21:57:18.16093Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1341fbca601c7adc821a1e727c938080","sha1":"646acfb5bac1b20e85b0fd2a8c0c2cb60a84e8fc","sha256":"d2407fb1b210be5929d59c48e518fc3400128e210c475a0c4ff80586e724fb19","sha512":"5c1f796feef8e54d2c70d8d48d2c1c25c07408ec287868d27f0171559863fe0b2ddceba27eba6185d02daea6af23b8186d7fa12c07be156977321aa191ce72ac","ssdeep":"","tlshash":"35c08c3db23a202f054a504a281bcb10905bfac01e824f2000ea7ed88200a1c51d8da8","size":151,"data":"","first_seen":"2026-01-12T15:19:10.662652Z","last_seen":"2026-07-16T21:57:18.537213Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"129ffca10c76e7a6482d9fa7dc7c2bca","sha1":"bc7aefeba6ac9002a43ecb2bc747d9781183b3a8","sha256":"069340cda89e35d5088a02983ca5b2234cd5557a50edeeef2e235bb7077c7a46","sha512":"bf4fe874782106d0846e040c418117e133bf230bf6e199ba7a28821642683149c2183276d849579d2ed71a2c8a5b00c716c16cca4197bb28a9f429aa67dbb319","ssdeep":"","tlshash":"36b0125db19622add35e20163429411121471595098091246125c6e8d106b184130ee5","size":90,"data":"","first_seen":"2024-03-15T19:21:57Z","last_seen":"2026-07-16T21:57:18.194242Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3082146deb5e761a71156b358e0cfa53","sha1":"dc2f2da9f4efab524061dfe7c583fe16d87df66f","sha256":"667fcb67962eb108b713c129b0cd37e20c3c4f987cb5a71be3ae121048b5b198","sha512":"122ab7602b8354f65448b18697a18fc9a7d3723f263410b500597d00e20665fd5c0089b9d8f76b66076e2091145a8f764a0a1319873cd2f30b149bae0d441c28","ssdeep":"","tlshash":"b5b0126db19623ade34e2016346a4111200715950a809124612986e89106b144030ee9","size":90,"data":"","first_seen":"2024-03-01T11:49:08Z","last_seen":"2026-07-16T21:57:18.436281Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1003b7319da739531b86f127e93f7161","sha1":"8f9c2b9aaf7099a44336a5161f2d89bb4d69e303","sha256":"0272765919e64d1dc8ea3c899ab648f6a2cf036c4f549247b044961fdccc6a87","sha512":"b0ac50a151395915aae14e2c9cf020561d9b761927733f58b09832a5f87c5b389019de5db77c8678eabd1386245ecb9b5d7d6201f838e6646b51757135f93a51","ssdeep":"","tlshash":"deb0125eb29622aad34e201634294111200715a509849124e1268ae89105b144030ea9","size":90,"data":"","first_seen":"2024-03-15T19:21:55Z","last_seen":"2026-07-16T21:57:18.334637Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c689c846214dd460b4a71d3b853ba584","sha1":"1ec56d494eb973e188d7d225d23a2db25cfe4b0a","sha256":"68b6df00a346a5441db03846add8556f697ebf5f22ddf818292767e5aee97269","sha512":"80b256ab6eb85cc1fce0359fbd7b7830eba1f25ec6a06a114c2541288fb92a4f8b032ea3aa748d6a252248aa445024a0d986435379fffdb7abcff616b21f99a9","ssdeep":"","tlshash":"57e0122fb399003f08cb755b78558921801757f79c879b25b3322ebd9016a4ed088efa","size":358,"data":"","first_seen":"2025-12-30T18:35:33.283235Z","last_seen":"2026-07-16T21:57:18.289182Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"75c815e9504064d38d7f9b9b760e7999","sha1":"552f1f4f3c31bb772584b6b6eafbcbde3b5e7cc9","sha256":"226cf846c7419f03d68d79ea90302b440de40d83039c187017b95dca4d4733a5","sha512":"3497fa517c90ae96931d5e66db424cf1e237ceb9667b9c29ac9ee421741dc041ae5cc01d7b2210bd0c546f267ca51db927047b4ba1888b575dd630a1d19ee661","ssdeep":"","tlshash":"48b0125df69622add35e20163c6d4525201b399949c09124612586e8d119b144230ea5","size":90,"data":"","first_seen":"2024-07-03T04:17:15Z","last_seen":"2026-07-16T21:57:18.472156Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"746f80fa61fd1788d0be4df54dc20851","sha1":"59a8f1e7a1982bcdb40f70e00d08a665e0afaaba","sha256":"2529c4f0571890c018e05036540cdf37263ea3cf76cfe3f5fca3c6e3444bd585","sha512":"b23bd87f596f7e98e85608ddcc54115fc2f4e5a288db362ac6ee9980be15a82b5198f1ba706c015721c902951f246d856eade3abb4da7279ef7a53c621eda88f","ssdeep":"","tlshash":"bba0241df3c531350347701f10374135300301734c41d300533744dc444f7454014d75","size":81,"data":"","first_seen":"2026-06-08T09:34:55.238116Z","last_seen":"2026-07-16T21:57:18.558957Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"09e2ed9cb6628658eb964dbbaaece4f9","sha1":"ff8660b59a4d3fb25afebf9ec5b23f4f863fba54","sha256":"17c1baad529357d202996d28ee1dc7b423bda34558dbd310bf5e6c21cea92e4b","sha512":"e34dffddf745d8b7c4f3e4830790e9f3d9712c066d88d42725494356d1d3af78cb982ddbb0731d0198519bff967e4335a50d1943b21f43c5f07980cc2f340827","ssdeep":"","tlshash":"d9e01b2bb259013f08cf715b7cc54915805747f6ac47d715f2321dfd501a6468484dfa","size":358,"data":"","first_seen":"2026-03-17T20:19:48.344234Z","last_seen":"2026-07-16T21:57:18.486832Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1db84a9a0053ad7a65c6194ea0a38cd9","sha1":"040746906aec9872e01aefbfed6b5ff9e759cd2c","sha256":"b397a702e3e47cb3f5c89d8b9f8a646c2982c7661d821209086d697a2709a6c0","sha512":"858e17fbba45c67bbdd942d41df694d4d3801051a4945f217ed24a3eec5da23aab38d73f06c31d38e1036671190b8b7719a0511825d5ca3782fc53460895d212","ssdeep":"","tlshash":"90115c6a7a5c1cfb44cf3d1a78c0057114bbc3b359c0fb9dbb3956f98c61a014064ea4","size":921,"data":"","first_seen":"2026-06-08T09:34:55.307951Z","last_seen":"2026-07-16T21:57:18.341667Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61cd1bb512540edf2d85f588b039c818","sha1":"744943bef3239827b08693e2c1676bda8e71682e","sha256":"fbb8a0c4f11552804d669d538b2e282315000867f666956eafca782edf3a6083","sha512":"846c4dda6f142e61bfe0136723e43b323a147e1c1c94e026f0ab1cb7bc7bde3a373b7138384ce6d17740999342264e08b9f8e9ebdf3cf26c8100ecb0a3ef6b17","ssdeep":"","tlshash":"bec08c3db23a202f0649504a281bcb11909bf6c02e828f2001aa3ed8c101a1c50d89a8","size":151,"data":"","first_seen":"2026-06-01T11:22:03.003417Z","last_seen":"2026-07-16T21:57:18.593389Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9c3e6130ae0335a018f8cc3a21ec3988","sha1":"82a468a9e532e4302f3459a996f8f6e0a0b7d4cd","sha256":"4eff2c9cee6b326a54aca90253a65becbbf9c6a65fe03f7cabdbb1dca3e65b8c","sha512":"904452be4c5f9c89ef2896e193f4192cc5c967d551ddd7c4d93576494c75f0d984f8e466f894c2513566126848bc4bec35dd9ac112f2586a308d6bd2dfb1b124","ssdeep":"","tlshash":"9ec08c3db23b202f05495449681bcb11905bf6c00e824f2000aa3ed8c500b1c51d89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:39.102179Z","last_seen":"2026-07-16T21:57:18.460778Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f7ceba5f6584ef1086bc83240ea2f19f","sha1":"8179c6e556ad39b77c936157670a04771be76670","sha256":"a88d88f5b55e14c81ce9af02bd98b58566b4df053e040576f022068afc12b003","sha512":"1af32736d191e85eba9f9b2749fe510e3640e8fbcdb51e6fd2bcaab3bbbff96ddebf8099e244544733e8f996858aa57661f67a3137ea9e18deb647d96568a9fc","ssdeep":"","tlshash":"89c08c3db23a202f05499449682bdf10905bfac04e824f2000aa3ed88200a1c91d89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:38.721318Z","last_seen":"2026-07-16T21:57:18.271474Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cabfb8add95c6a7ebd2df916d13f5c80","sha1":"2c4ff48d9c279f2faa12385e03f780fcfedbb9da","sha256":"1d0c0f5e4bdde154cfaed31009e9f461e3ad9f216977e1226d611c824506331a","sha512":"41a4e982a87163d01260490eb185ee631a75d7ad3368a9e8fdfd013f88720bca1404d727c27d86feaf424cc15ebbf1985d52aa1ac0018e2453dfd6e02c03f646","ssdeep":"","tlshash":"c2c0e92bf38c503f49cfb02f7895462642070fd75e82e31913310dfd501b6828004af9","size":186,"data":"","first_seen":"2026-05-27T00:11:11.645638Z","last_seen":"2026-07-16T21:57:18.404431Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d6a0d128f91878e73990543bfac6e930","sha1":"bd820c1375e8ae1ee1445331c7a58e85dc4681dd","sha256":"b25c57f02649913b0e55a3c5f87ae4099871901d3bebdf432c0cb009c38982af","sha512":"6c4bbf64f07ab65a5dfff21d9478a3c2d8b99f1b213526b1294aa469c0c5ed3ba3052b4e1279ef140e00e7f77fda9869d34f6799ebf16f33315e9f252c65dc0e","ssdeep":"","tlshash":"9ad02b9ff7ba621742ca6418d49b06172039b78a0b088b93003709ea94254c10127e79","size":272,"data":"","first_seen":"2026-05-27T18:49:34.939511Z","last_seen":"2026-07-16T21:57:18.505375Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5af474fbbca7383c3d8a5f9c31146d35","sha1":"ef0746e9ecc7718fc161c6eb3ff0253f7854ac98","sha256":"1a7f3c2f77aefaf017124a49bbe6b639f160fa8334b35400a2e695474ed137e0","sha512":"ee6a3f622d02b2a9da2191f2aa668c880492aec2cc6f6fb7b7849b01213f2c7df39892454527d7eff2066dc75fbf000c1970b7c200a4145e34899175e453b2bf","ssdeep":"","tlshash":"8db0125db19626ade35f2016343a4121200725960d809124612586f8d105b148034eb6","size":90,"data":"","first_seen":"2024-03-28T12:54:28Z","last_seen":"2026-07-16T21:57:18.570614Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4d56cde1e19a1184724abdcf490fb371","sha1":"8f38d3790429b48a7ad07560f46dbf42018363a3","sha256":"08e01f5ee4bd579e07c7d6c1350475073eca87512c9bec108f597a170d08f372","sha512":"41386ca3711bca2bb9f86b725eeb15b25440ca4a1e47a3d0bb20eaf7a4613837c7c8f9b2ffe36260d67b0ad73340dae2544442601b6cd882dfae44b32f0b1ef4","ssdeep":"","tlshash":"abb0125db29663add34e20163c698115200719a50a8095246125c6e8911ab184030ee5","size":90,"data":"","first_seen":"2023-11-30T16:50:00Z","last_seen":"2026-07-16T21:57:18.439669Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"74df8e7ab3cb0f214db147868024b51d","sha1":"1c24d75df53e789e4c96138df2726157ed440f08","sha256":"e78bed13a1fc7cd7483040630a20f53f364b45fe381e5495c626c2f00b7f88e7","sha512":"82b75ccd2c2bdd6a6fb6b139d8f7f394b847750d27a8be5745a9327ae809680b5f9258b02c00c5e72adba238bc1e1b883945b59fc0cae921cab451ac649ee995","ssdeep":"","tlshash":"efd02b9ffbba221742da6418949b06571029b78a0b048b9300370aead4255c10223e39","size":272,"data":"","first_seen":"2026-06-08T09:34:55.431956Z","last_seen":"2026-07-16T21:57:18.515851Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"967ba1f9ca85a8b08bb7d89646f512e1","sha1":"4d554650b2cb1dc08591a3ad532028244c7eceac","sha256":"eb7a0057a7930c3b6546881ccdc3e5086c9468d421bdc99aea416461cf430c6b","sha512":"187679372782c985584d203535761d65e917f203f144fdf3f5e8346552973f823d44fb9a55a46713d01527f7b20442f5557f7420ef01c28a7a3a2ace4088a985","ssdeep":"","tlshash":"2fd02b9ff7ba221b42da6419949f0617102ab78a0b088b9300370aea94254c10223e79","size":272,"data":"","first_seen":"2026-06-08T09:34:55.391575Z","last_seen":"2026-07-16T21:57:18.532798Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"800c5e17c4fd739559dcc01711ac9cad","sha1":"77d9fa658d410b086297478ab521894e2c963fd1","sha256":"0be2832ba2cc7424b78d4f0c03480455ef42c832a5c87f2b6b9ec4f25d519eff","sha512":"f0c204650c0e7e8bcc76c738fea4f2abb1e67047bff4d62e6914ad158bcca63fc4688c68b7820bbcb2bf073c0682e7b9ba334fcee28a9508ea96763869d1bd58","ssdeep":"","tlshash":"b0b0125db19623add34e2017342941117047159919819128612586e8a507b144030ee6","size":90,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T21:57:18.573272Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"52aa6fe9a9f7ba946f6c44c60fa69bdd","sha1":"afbed806a2502124799ba1a1afe0416f85aa23ff","sha256":"43a098bb170d203bbdc6fdd7881db015c50b43530c1bbd1b459829ea4a5cd368","sha512":"a2485336198884d5a68448beaf24b4c800d02533842300d09adebc515546a08629355e92386ecf279f9a6848b9575d7d136cce95b1cf84b274a8117c943845eb","ssdeep":"","tlshash":"74e0922bb59d003f48cb681bb8858e10811747f79c879b2173321dbc9013a4ac188efa","size":358,"data":"","first_seen":"2025-11-12T06:39:41.42189Z","last_seen":"2026-07-16T21:57:18.440577Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8a39ec08be8f999a489b7f0fad15690c","sha1":"445633026e741a6e8d542388610ff1ca97cde1a5","sha256":"a9bce383b5e3079a41b2995ed4962688a5e71b1f344bf4fd92fb04bd392060f0","sha512":"1d921c8b0b3b59049f8829a555125fa7594772d4db717f71ba7f676864269efb4b956edbbb14d7ecbd70645e1c29106b2ead8c88658c8eef0aab85d843033238","ssdeep":"","tlshash":"2ae09b2bb15d003f08cb681fb8555921811742f75c47971172321dfd500364982489fa","size":358,"data":"","first_seen":"2026-06-13T16:08:38.731014Z","last_seen":"2026-07-16T21:57:18.490313Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"efef9dcba000dadf701f87488bac0d65","sha1":"6a6dd4dc89d846ca412b3eb350020162f2092049","sha256":"541dde45c38a969ae8d63b58d20022e28e808d71965fa738b6e48e922723dce6","sha512":"4e8f2796b450cd39410f10fdf6baf885d38d9e022d3948e76b8281c15760304e37db290b56f547083923088bb2809fa51fbe573783582dfbafcddc09fdb6ad5a","ssdeep":"","tlshash":"43b0125db19722aed34e2016343941112047159509859124a1259be89105b144130eaa","size":90,"data":"","first_seen":"2024-04-24T13:59:12Z","last_seen":"2026-07-16T21:57:18.246769Z","times_seen":616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2faf78c70faac8363a8ba9eaf57595f9","sha1":"dbf29f49fd4b4012bce885385bf5f1eccec74d7f","sha256":"e4b19a3abb9d902e0c150587b4f4d265c9843e00f860acb808f08323ad640daa","sha512":"8af956c7244c680bbcc67ae01cf642d4684537e23467ec886a37b443823e90d1ae91410381c707e71367b6de9d863564c7deae6b2e6708912e5ae667cedd9cd8","ssdeep":"","tlshash":"be119c1aba9d0cfb04cf3d1638c0057110bbc3f309c0ebd9bb3856b98ca2a010164ea0","size":916,"data":"","first_seen":"2026-05-27T18:49:34.936157Z","last_seen":"2026-07-16T21:57:18.475926Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"71314d39effd197f7cf7b1549435292b","sha1":"52d4dc672fdea6adecd68e521e42d4f887290af5","sha256":"5693e7a48a73290d66e60bfbb0b6ddb159fa309bced1b1f41b55f71f3de04a22","sha512":"f05406608f7fd0c85e319c48e5fbd16905598247e6df782f98ffad6946a752575fad02b5695cf1c7b56948bc9cc5a04b163fe699ef9a5e5bd45afd52fba01269","ssdeep":"","tlshash":"20c0c21af388503e058fb02b38554a1a461707e79e82a215133109ec501ba428004eea","size":190,"data":"","first_seen":"2025-10-11T09:00:05.378157Z","last_seen":"2026-07-16T21:57:18.533632Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"45e8e4bfd156c28c9037688167c10155","sha1":"14d29cf9231e532d180257f8914710b6b777c45d","sha256":"e7dadcdf96e86de1e5aeb013a6384f1e412284c2211cad94481bab90739f5871","sha512":"8e130a92f3359e35feb0704960f4310da27c3aa05e6e10e452ae98f39cf4001cf28f0c99b69f30c7e65d66370905eaa2c514c23760f50ebd04c33ff696ae1e00","ssdeep":"","tlshash":"dbb09269f3afb1256a8761aa226a8522b016a5658981d252622e45d8602d3886022e66","size":111,"data":"","first_seen":"2026-05-27T20:46:36.804824Z","last_seen":"2026-07-16T21:57:18.495145Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"31b39ebc38d09c6ef68ad4d6d5e22bec","sha1":"7909eba6e80bb6e91ade328a1b78c0ac0ff520b6","sha256":"a4b7cc7fccc34204c0acffc94c1f993095c8618cf982e54cfba49f56229aae36","sha512":"83e32a543f01a532a515e5cce847d422832b64b3970339cca694997bb894351beca352d6300e172f42f1753a83229aa28f32dbcf7adb24ce1e7190c7ef06a470","ssdeep":"","tlshash":"fae0c08cf0d7503801d3306734ac8412307fac328068d164b2bed6b44ce558d817b95c","size":358,"data":"","first_seen":"2026-06-18T04:00:49.736124Z","last_seen":"2026-07-16T21:57:18.409138Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2ec9f02efa5df3642cffc61801080df9","sha1":"14922cc84b576ec8fe6eca761dc4985ac25bb824","sha256":"b48ec11b24e596b178831017256d6a7d979375f173ba3ea1f9b221d00427e147","sha512":"c99811cf634bc2541e16247ee0c13b27c05716b391e445e0d802e14d0225f5cfac35612afcafc5644a69801760771e5c9c6799338a6f8423b078a2712304b2a3","ssdeep":"","tlshash":"3cc08c3db23a202f054a604e381bcb10905bf6c00f824f2000aa3ed88200a5c51d8da8","size":151,"data":"","first_seen":"2026-06-08T09:34:55.155485Z","last_seen":"2026-07-16T21:57:18.514687Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0db4bbad71c0c31e6d5fa23d1520c39b","sha1":"705e9f05440059eb6a038490afd5d18d3b1f360e","sha256":"099f5ad2ed3af3a9acf955c115aee30995ce2400dc63bea83dc01882afd63aac","sha512":"c79134d9b3b966b50047a3ed29298031a8d74a1624cdaa51b61139709a9981e96712466033bd5965b0f2b1059abbbfb7770cc1adb627088d4daad81600eb9e31","ssdeep":"","tlshash":"c1c08c3db27a202f05495049282bcf20d05bfac00e824f2450aa3ed88100a1c51d8da8","size":151,"data":"","first_seen":"2026-01-12T15:19:10.647404Z","last_seen":"2026-07-16T21:57:18.608742Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"75960f9f59db93b93d07f2a15a37e293","sha1":"f7e3bb12e5fc19b8cf38d7a7c309e0b40ee00015","sha256":"6906219713b58bac47b91ba3f284224368030ca79737c563060a1c464f85ba32","sha512":"641513987314b3613340e7a231c243d183b11e74f43cc2330a3b35700343014309b6948894747677acf6e853211d281cbf0ccf41941794955b85745cba012a57","ssdeep":"","tlshash":"49e0122bb199003f08cb715b78494911811747f6ac479b25b3322efd6017b4a8088efb","size":358,"data":"","first_seen":"2025-11-12T01:43:51.813471Z","last_seen":"2026-07-16T21:57:18.255614Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"838c88466ca7ce834e2b71918ca5d064","sha1":"76e208dd78a83a62856514fb5801ae2dcedda519","sha256":"03c106a60223dcfa7196e07c9839b7580e1c5c86bb7815056cb1c22e8bfb9cf1","sha512":"950b344007b15a3340b1531c7d4322e10b72e81f310c77cc5db29c879b4328842837dd76b283f97f5908c3fae0aa35bfa40d26d2b98599c01629829bd9281cd2","ssdeep":"","tlshash":"85e0122bf19d003f48cb615b78854911811b47f7ac47db2573721dfd6017a4a8088afa","size":358,"data":"","first_seen":"2026-06-02T02:17:13.960334Z","last_seen":"2026-07-16T21:57:18.319409Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0eb380b7037b8b84314bfc71c5503eb7","sha1":"d3334a0d98834044841b9ff9a787eece8ecbd710","sha256":"4728a5cd8bc3e1513978735366539cd66cbe5eb41f1e799ab69391cd32c71d87","sha512":"52f4498b5c59f905d4d4d3293d21d7a8f0ec2183ab961353465244bc53ebc53661c19e5ab06083ec5d7c78f0c47ea09a2e961f1e6c4acde0d054dee83f750095","ssdeep":"","tlshash":"4cb0125db1a622add35e2027342945116087259909809124a22586f8d105f148030eb5","size":90,"data":"","first_seen":"2024-06-03T13:34:31Z","last_seen":"2026-07-16T21:57:18.305894Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"187f24dd882f4d37a93a373569a19089","sha1":"107011ba872daf0115b6ba2692ec46c763d69ce5","sha256":"a8570ed30ec95d2c92b640d7286845da5c04deb0d9bbdccb085c8557158a959d","sha512":"3304780820211cc81fea54d6fc03610b841bd5a93c91233ca388ddcb725bac4d2e6ffd8778b1449ac54f437887da3350b8693576ff058e0d2c7f73dc9f56ea72","ssdeep":"","tlshash":"c5e0122bb19f403f08cb615b78454a11801756f69c479b25b2322efd6016a5a8188efa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.826758Z","last_seen":"2026-07-16T21:57:18.450093Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6433dfc60ba2453338703dfdfe3170ab","sha1":"000dbb116cdf036262d6ddae9396d63561ecf639","sha256":"c3ed73a1c20f53b215649b567307b369351d13e75b47f10a76a0fc18c3005a1a","sha512":"dab64ec1caaa2e50e127b2f45054fe3c0bf8d972e7aa8abc2cce8c4578e9e638c33e51ddd992b21bbe9bffddacf75c0c63d7f729b1c7fc0a1bc997181de00213","ssdeep":"","tlshash":"43e0922bb19d003f08cb645bb889491180174af69c879b21b3322dbc9013a4a8188afa","size":353,"data":"","first_seen":"2026-05-27T18:49:35.214725Z","last_seen":"2026-07-16T21:57:18.523821Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"53108043e3683010a1d9616a6f9bd4cd","sha1":"2e0282e743f15ec6fe579c78d98fbeb5e11affae","sha256":"49435c4eac83617ec97a538d6f9671a5662e6f5bdc342aa09d101d86b3f535a2","sha512":"3ab0ef4ff547e3fc29769746ae84a0af6cf92bd278a89a0017551472f579db37d3ad812f03657d63872af41ca494a0be0f7d0d18b57c130a8c20ed04c7ce260b","ssdeep":"","tlshash":"1ac0c21af388103e05cfb12b28954726561307eb5e82a219233209fd511b6468004efa","size":190,"data":"","first_seen":"2026-05-29T14:30:57.202321Z","last_seen":"2026-07-16T21:57:18.380313Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2db498c02c8afc9fbed123282416f8a7","sha1":"f09891c354195baa078942a9741df8dd3c8e052c","sha256":"ec20e647a0f5c09ec527884f3bcd932dd151c7a2cc11ddb3407c4dbe82b413c6","sha512":"bb348e9f65b9efe2ca76b8096b941d761024dfe9c5a7c6b46f02868a78df5370088bf14ad29864ead75692b24f0c90896aa264188cea0ed54b0eeed4007048f3","ssdeep":"","tlshash":"e3b0125eb1962aaad35e201734398111204725950a849625a12586e89105b144034eb6","size":90,"data":"","first_seen":"2024-03-20T22:00:47Z","last_seen":"2026-07-16T21:57:18.52047Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0fed8da9947017b1478e47dfb8ed1857","sha1":"a0201c6a03d6ffa19aa22fe68264bb280cc0b9d3","sha256":"a7ef0099495e5f5ec33ea17f853ba5c0f87c67e9502347d07f5e27b421a3c272","sha512":"43e342ac6c78be6558f3259c2ede17a0b55b4576305e69e7bcb7513f8f5964ac1cb33fb4a1b172755f28c0c37da9e717e71139348881d2c97bec0b09683bdab6","ssdeep":"","tlshash":"a6b02b18f3afb020168720a521194011b00261104441c102221d40c4101c2840022e12","size":111,"data":"","first_seen":"2025-11-25T20:18:14.86946Z","last_seen":"2026-07-16T21:57:18.488718Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b34f97b09e795791cd38ec944a76d4d1","sha1":"beb5ff641b4a763d0442ba50c72a2085c7892219","sha256":"357182dcea7eced94d69e75274eb15523d80569ca2f43e263d8ae415e2c79af1","sha512":"3f9f16e4968ba062021a00e03fe02a33dae9bbfad2eed921fab68b7bbd8d7d45ee6d38d05a47286ac64c332999f1210c903d7a394ea15a520e7edb446283422c","ssdeep":"","tlshash":"2c115c1aba9c0cfb44ce3d2a78c0057114fbc7b759c0ebd9bb7955f98ca2a014064ea4","size":916,"data":"","first_seen":"2026-05-27T18:49:34.747409Z","last_seen":"2026-07-16T21:57:18.368615Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3039f30dd5064abcd0d289e7d855fa1d","sha1":"5246ded12f9a47cf5caf6c24441fe2900d7df740","sha256":"9494b41ee27e1e89e6cdad535b85ea552555651f187de62b7f6764720147ab74","sha512":"493cac875ff49b9fb37bd22a0ca466189e1ef31e14583fb3968374a05ad8ec274988410e816577ce335a72b4c278aff380ca5705db2cfb3271825f19c478d76e","ssdeep":"","tlshash":"2cc0c21af38c203a088fb02b28514a2a41070bdb8e86f215133119fc581b6428004ae9","size":186,"data":"","first_seen":"2026-05-27T18:49:34.475773Z","last_seen":"2026-07-16T21:57:18.613947Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ad961668d56379e9081b9d5ce8c571ea","sha1":"5d2bd4a1003bdfe17f711334daf1c7c7c5d9cc8f","sha256":"440f03b8d45a1a7cbb853eae6eb430952cdfa398dfdd68033df4aeca7bcabdaf","sha512":"7de29be52650fccaa2d69b3c45e3d9b2ffddae07b13eb49de426a378bc80732caeb1ef7d48b2eac770d31a3f0169312e4732c740e23c9855dc462300408fb374","ssdeep":"","tlshash":"dde0122bf19f003f08cb615b78c54911801b8af79c479b25b3321efd6017a5a8288efa","size":353,"data":"","first_seen":"2026-01-19T14:11:45.661729Z","last_seen":"2026-07-16T21:57:18.491085Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b41bf906f0f1f70846fb3674ceec648","sha1":"ae6b3641a12e6f648ca797ec4d0312d843e54b7f","sha256":"e85084a0e17d731b0f2132b01c9b60ed2eb8bc503af83f11f5680c9f00a76e95","sha512":"92c0831a94de8e1a190a3d63dceb8d323e0ce1cebfa82e9e29d2857a8b0164481bf19569072f2bc470c0c036d922c47caa4a6bcc16c9213a772cc190c7e75484","ssdeep":"","tlshash":"8cb0125db19623aed34e202635294511204715950d809124616586e89106b144030ea5","size":90,"data":"","first_seen":"2024-06-04T22:59:01Z","last_seen":"2026-07-16T21:57:18.403064Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7e98efed31bb6ef3bcf0cdd502e18cf7","sha1":"e505b7765f3aa6aba31f630faf10f5ada6102630","sha256":"d744face904b08b9b0842435bf5fcd404df99fc12790eeb15732ce9690e310b1","sha512":"1796067487cfed715f4ad6649c72464ccd5aaef6976e0a195262f0242110f4993a75b425c2cacff12ba862874161abddce19fa2e4eecd2fb5f017260f86b2bd6","ssdeep":"","tlshash":"71c0c21af38c503a588fb02b28514a1a42070bdb9e86a215133109fc501b6828014ae9","size":186,"data":"","first_seen":"2026-03-25T19:58:20.768123Z","last_seen":"2026-07-16T21:57:18.617645Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"75099e739bd9a2ce8e313375c7c7836b","sha1":"1227c7389e8fe5a182731fbb15ec04dab96bb0cb","sha256":"3c1c3fca22be2a912eb8657cde4e136428b24f4a472b278ebcd828d9de4bd32c","sha512":"638e8604228921f56c6fcf0588218cf4c3a02c55d00633860f00e0304a36b1b7efc0034e916a45b140e5cf839c3c12d6472dc47319aead6547ca122478cfedca","ssdeep":"","tlshash":"78d02b9ff7ba221742ca6418949b06171029b78a0b048ba3003709ea94255c10127e79","size":272,"data":"","first_seen":"2026-05-03T18:34:19.825492Z","last_seen":"2026-07-16T21:57:18.41965Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5fb503b7c41756c9fef8c9b5b87a426c","sha1":"24785e88900c3f88ca461b9c2ae9ea1b6f3f0a64","sha256":"424ab017434c129e6350325da84eab1954899b8694f86d5d737c98b4a73d0363","sha512":"60dc5f03f5b5a738d1e4872d6c0536ad54663b140b3f47b26be9d696dd1926aa9c37758e430144054cf74f2fd36e12592ee7a329e4946f2b9f78d7d4205cd1fe","ssdeep":"","tlshash":"a1b02228f2af30202a8a20aa202a8002f002a8200880e202222e00c8202c2880022e22","size":111,"data":"","first_seen":"2025-11-12T06:39:41.503824Z","last_seen":"2026-07-16T21:57:18.21346Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e52911f5cffbc49ac3a4406ba0a06caf","sha1":"56fa98258638c1fea5efe3cfc9ece13fbeb9b8a9","sha256":"52f152c388036d9dade2bfc621deab5ffffc3502a27f69732ed1973b0ffc2e79","sha512":"fc395fb9a80c731e808e752fa9be151e6e9d8d4c99af7f829b9a02b8b4594e2895b06f16c0de0b0af9c320705e1a145cc228ad4b7e97da4e7196a44cebebc0b0","ssdeep":"","tlshash":"a2e0922bb19d003f08cb641fb88599018117c2f79c479b2172321dfd6003a4a9298eff","size":358,"data":"","first_seen":"2026-06-13T16:08:39.037319Z","last_seen":"2026-07-16T21:57:18.383376Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"914818b2c89ac4f655ea53d4ee44c2aa","sha1":"4a6b12fa5e5720fd228c1886f37dad4d20d8b75e","sha256":"06b08bee2267237b27158fa36b8655a3906d728e56a2ca3209a45fcef261da8f","sha512":"988c652b5eec0fcfc3c2094179c0783bea73222c7bc2a71211847ba7506fb6b7b8da86ce009a332c0924498d9398174f88b1ad01658c21f57ae045d5cf4b21a1","ssdeep":"","tlshash":"4fe0922bb19b003f08cb711b78454914809752f7ac479b21b2321efc9012a4a8188efa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.715126Z","last_seen":"2026-07-16T21:57:18.58581Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"64e3c94372761b572a1df8481a4dbf9b","sha1":"1b5054391e1c1d64cc823735905155e176485c8c","sha256":"0a63fa29c6a8dfc3ee2bd54966e8c977aab28202e0566f61993bd0018620b966","sha512":"f35ce97a9585e02aaf17e7b2c96b52a141511e8412bd1c79ee55470a7f40bb3a2d449b1a7f38e671f75f4544ef3c6ff7ffeaa10e4b0c208b770ea0dbdca8b186","ssdeep":"","tlshash":"30b0129db29623add74f2016342942152007159509819124612986ec9106b144030ea5","size":90,"data":"","first_seen":"2024-03-15T19:21:59Z","last_seen":"2026-07-16T21:57:18.270753Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"34662a18cc2b093dbcc12e1c837ccd5d","sha1":"34890f3f33e85c116189c270ba3e2207ccacccf0","sha256":"8c7b4f2e2971285f93e090910d7495077c9c98ba0f0e1cc86e5f6ade3e4318e6","sha512":"2fc8ab3a40f1db25c359f4ada02282b44884e5518a2a3a637309da539760b2084d869343c72450a38da68594743ba725fa274b5b166e7c9bc25c756854938466","ssdeep":"","tlshash":"6bb0126db6a623a9e34e301634694111200716950a80a128612986e89105b145030ea5","size":90,"data":"","first_seen":"2024-12-10T19:46:17.932421Z","last_seen":"2026-07-16T21:57:18.445799Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9ef52d1c65053938d1976faafd39ee5f","sha1":"7f96eed8077215c6f1ca7182f949b8aab863191c","sha256":"8339fbc1f0a551289136675a618e63c14e063ec86cffd4ffaf6f114dc6acf5ef","sha512":"fe9e405c0df43c8ea1fbec9f866c8db3abc02af8f9dd8bbf5c37f1449395054f652d6d22916261d6ba7bd9bd889944f0aba98f67eeb8f32a980653b45788ddac","ssdeep":"","tlshash":"35c08c3db23a202f05495049281bcb10905bf6c01e824f2000aa3ed88101a1d50d89aa","size":151,"data":"","first_seen":"2026-01-28T18:40:40.594712Z","last_seen":"2026-07-16T21:57:18.445038Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cb16c1e6c9c783950d3a3e88ed796114","sha1":"7463856fd20086a3ca6df5002df827c7943a1291","sha256":"f52cd28d3d39e03a46c4129162018691e876ae0d50a5dc15bb5da6fa7333795c","sha512":"36c37b3784e7fd832cea90ee3a9bb4f8da85baf62bbd7058250b6564cde98a5e449c4386cbdd635f2a68330ced6b42bdae6098103c38a685cdc90195a2b667a4","ssdeep":"","tlshash":"96b0125db29722abd34e20163c6941152057159509809224a16586e89109b144030ea5","size":90,"data":"","first_seen":"2024-08-06T16:04:06Z","last_seen":"2026-07-16T21:57:18.524654Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1c6253e578ac22e09f2a99ae0063d192","sha1":"17710ff7219ef30c81bd45e80f1f37a243560a73","sha256":"b9f50879f005c0756b0b5a986c0e06e3ca594a4118c775fcfb967d6d10985825","sha512":"5277e9430e88cdc889116ef05198d994755f61df7b636ddfd226b022ac78fb0277bcfd2cf014474a77f3f07567ed00152a87cac6126139e351a7598c052a1aac","ssdeep":"","tlshash":"30b0125db19632ade35f201634694121214b259509809124612586e8d106b148130ee5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.491739Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"754780bebe53681e3a3ddcaee57c2286","sha1":"b61060547d3e052570627e60dad90ff382152b5b","sha256":"4ba6f7a86071d8eb5bf9d1d8aaba68f97b2ff402912c7c44bba53ed2244ef366","sha512":"385e688f1792422ecd433d5f4869e22db7e3ee5ac607391e4f8da30cda5486e8a7f37d897cb73ef81c4e82b5718ced9e85904c1cc57b225c36f3839f82d8559c","ssdeep":"","tlshash":"36e0126bb69a017f48cf615b7cc54b11801746f79c879b2572322dfd601ab4a8088efa","size":358,"data":"","first_seen":"2026-06-13T14:53:10.033278Z","last_seen":"2026-07-16T21:57:18.534419Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"28361d104730a1c9b3342242d9586e93","sha1":"8b68fe9cb226836f6297980ddc8851ce0b3ef881","sha256":"97d196c442111bdd5584bb85fe05a9eb61f4b2a9455a7b86a8dbbb6011d427a9","sha512":"0f2b873dd418a443c4362eef3ec414a2ca669509b6af429913b1753447080bcd742bb68fec13096f50898e7b29ba0fc49f4f41cd5632f5b1a632b97956052df6","ssdeep":"","tlshash":"69c08c3db23a302f058a5059281bcb10d09bf6d01e824f2001aa3ed88540b1d50d89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:38.792852Z","last_seen":"2026-07-16T21:57:18.576722Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8cd3311926663af7204f5075e4082e73","sha1":"114452f93d78642b0d133d6019f73371ce5421b8","sha256":"24939a48df071351de1b375e46be8670a815c4266d929851d6f07665a2360120","sha512":"dccf71d7888f366d8606c5f1723a0227cb4dd50ad322bb1acdb9eb4f6949a3471d303612c8c448c4f9c7338c0b5fab4bdba985421445316a93e2fce5308640f9","ssdeep":"","tlshash":"44b02228f2af30202b8230ba202a8002b002a02008c0e202222e00c8282e3888022aa2","size":111,"data":"","first_seen":"2026-06-08T09:34:55.434148Z","last_seen":"2026-07-16T21:57:18.460029Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b9e0f88befea0a387f0dbbcdb0cda853","sha1":"8df61796e9e5d554c3a150111d77972ce10bf869","sha256":"ec781b6ac04ff9f86c231b092db44fd2c2dcbc5f8439bf55d3a570ed5b7b25c2","sha512":"d4c6c27fa4eb7f9f398d35e54ff6eb0eba2f5fd199348860c64347b51f57fa77e09cb44b02c12cb40b68db01dfe53f9d2f78b2d02d2275484bfcdfa3b5cef699","ssdeep":"","tlshash":"76d02b9ff7ba261742ca641894ab06171029bb8a0b048b93003709ea94254c10127e39","size":272,"data":"","first_seen":"2026-05-29T14:30:57.0743Z","last_seen":"2026-07-16T21:57:18.539628Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a8cf6bf0d302cc731adda48a3a585600","sha1":"48d0e4c574fabf61107d409225a8c7c06e95da73","sha256":"24b004b03eff177d392a818d69130fd1735c93b3f567be302b0a54b3e0331400","sha512":"c28e16e5a11dd031f8fbea69b6090a97686be83f1b8a8b4d0b204415c02216c814f1dde4e79c805840a736ab4a64d09b7ff4ae035293f859a0d74a8362b6fc2e","ssdeep":"","tlshash":"14b0125db19632a9d34e301634294112204715a50a80a124a12987f8a505b154030ea5","size":90,"data":"","first_seen":"2023-11-30T16:50:00Z","last_seen":"2026-07-16T21:57:18.599399Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/202604.1.0/otBannerSdk.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"923e2982a99225d07a2aadaece8c7a4e","sha1":"6890a7d31129ba4611fc6cc5ce979a9a5768f45c","sha256":"8792de1e018ac8499769a13bc7b80dcf1c0126e6009f7712807f4994734d1203","sha512":"ae7b243cb6f4bee3956b9d00d6c3cd47222d7ff3da1be36cddb296a973746aae9429ee0a968e6c574387528855f28b3668a5cae3cb58f51f96e2cdcf5c9b8c68","ssdeep":"6144:eDLxvLEQyS3m1me9rgeNC5g5j5AZ3vtxDZ6aaeUi31xp567ExExdXrN8Dq6Zhj:eDNIQyS3m1mF3RbUiN5fExdXrNB6Zp","tlshash":"d0c43a8d7590753547e762b9c02b514ab63534acac85806cb41cc4f90bf9f862ea3fbb","size":552369,"data":"","first_seen":"2026-04-15T01:04:59.905492Z","last_seen":"2026-07-16T21:57:18.056746Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"941ce6bb792f810149144c77262f22de","sha1":"0b77a796cd49b05fe29eff0440beddc70be984ea","sha256":"a8b2c9be12e5b4ff312e67f9d345660ae8bb7c7f14a24ce47c0738d8ad947ccf","sha512":"9e3938be24d0a727609fe3544dc5f7fb4732affe33b941508df24180bd28622a5679fcc4d615f11c7bd78541c561741048bb045c800eb788ca10e58cb2dab96b","ssdeep":"","tlshash":"09b0125db19626add35e2017343941116047259609809124612586f8d105f14c034eb6","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.614666Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ac9d2f586fe50fa2b734ee5225b5db3f","sha1":"3c1183a6eebd8b6313417e1f9ae8829f5fe86ffd","sha256":"4ba3b89d84de15b353c0b85af28968ef1a067fa91cf774e3f1bb6b260e059572","sha512":"99151a08c16dd86c17a7282ad6849bb5082d36143a0b2e3e3529aad132ed429ce7e967dde20f396b607b1f4ceb5a1f044c73a3a6e3cebed4e1ffbc12b3f9a392","ssdeep":"","tlshash":"29a01219f3893125024b601a502641152003117148068200622644d841092454018d65","size":81,"data":"","first_seen":"2025-11-25T20:18:14.830981Z","last_seen":"2026-07-16T21:57:18.224347Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"137539519f637f3ecc722a5d115ea7d9","sha1":"08b1492e451e5bae0f1caca483b06e570d7bdcf5","sha256":"555a0a341f6dfd33c68bd973121d8664c07fc8e8a86f877658b50f470e150c80","sha512":"3501ed2aea2d1e9862b5bae2ddb7f1692e5dfb3522a2ef03fd506b3bac1d107fb5b335fff90f0bbee25489aba9974816151de09a262811468a301f4d46e0f398","ssdeep":"","tlshash":"9cc0c21af389103b048fb42bb851951a521787d74e89a21513310aec501b6a28108ae9","size":190,"data":"","first_seen":"2026-06-13T16:08:38.770938Z","last_seen":"2026-07-16T21:57:18.603018Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff7b4e03675817b530ad096df1e23e58","sha1":"15da0d919e34315a97b13af05b6605a35280c2e3","sha256":"efa174ccc76fcc74d99cfc31124b0709c1e4250aae45bc0a63c5b0777a290bb6","sha512":"76485c53e0d880e68ce332474c5c4945515a7cb4927077e8d63e4a4f0afe207d9cecba559f430dc6816becb69d516899acf63eed2078ca54fcc7e5cc7a9bccf6","ssdeep":"","tlshash":"e8e0922bf299203f08cb711b79894910801782f79c47eb2573722dfca413a4a8088afa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.879354Z","last_seen":"2026-07-16T21:57:18.273094Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"27818d79ee8dd30da24f9ceeee659ca7","sha1":"febee1b369f1930ec344a008e126723e56e6acdb","sha256":"f3ad621b350741fc6065b420015149d01b6972449be33cfc1bcbd4ca772c869e","sha512":"8aa14aae4c57e92856897f8658cbc7220db5d39f4ab0a1bd683b80af041c17eba13665bdd34786420474d57ec57799287d9c4b21fd4668a18e4c55391215e8fb","ssdeep":"","tlshash":"a7d02b9ff7ba621742da6418d49b06171029b78b0b048b93003709ead4254c10223e39","size":272,"data":"","first_seen":"2026-06-13T16:08:39.036401Z","last_seen":"2026-07-16T21:57:18.5968Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e102552b019e4c0cbcbc525702f095e","sha1":"413a9dfed984c17c5815d33d51eeacf15c226ec8","sha256":"a1c612aef3e0462406b5861605ae733df6f84e369f264c288782344666d88673","sha512":"598e2013a8e5dba35cfaa3e4c045865c1538790ec0ebb07cc7e2c0c4033cfd16b3ad19b3545f0fc8e1d06b8598407fc599a3af197458a7fe03aa0b6fc1d12087","ssdeep":"","tlshash":"4cd02b9ff7ba621742da6528949b06171069b78a0b048b93003709ea94294c10123e39","size":272,"data":"","first_seen":"2026-06-13T16:08:38.997577Z","last_seen":"2026-07-16T21:57:18.188407Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c5f50435e421e6648bbd4cd37e91247d","sha1":"cc496edcde6ff619324a07aa8a53d25989c65f15","sha256":"179ea1fef695a7db1db6806e530148b7d3dc38b39c7f9d53a84c47d3e52cc25c","sha512":"8bf07fe71439f4c1d8611c72ac302730ec7919a86fc2e5bb136f99040e5033a1edb3ba54ad2a48496941b198d71e9897a29d986f41b60deef8f8f7c98f2735ac","ssdeep":"","tlshash":"79c08c3db23a202f0549505a281bcb11909bf6d01e824f2000ea3ed88140a6c90d89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:39.071223Z","last_seen":"2026-07-16T21:57:18.589758Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3001921afb4b099d7145f374598a3dac","sha1":"2e62a84a1736de9be56f483f488ffc1b3ff3fb65","sha256":"59214c89af1febdd14b5cb8da45199900b5d8852f37dec5a34ab7d3fd36a95f9","sha512":"2049b1e1f5a0975fc59e5ccb6b9a9a56ae5b0160c60786268398c426aad6a05e753d172996698c9dfad2227e3d03da4001fc74fbb03dbab1ec2ee1ce814eb6d2","ssdeep":"","tlshash":"f5e0122bb599203f48cb715b78554b11801747f79c87ab2572321dfda416a4a8088efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.528354Z","last_seen":"2026-07-16T21:57:18.372954Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aa74ad40659ce2631f28e9ad51b3ca2e","sha1":"1d5eb5af135e25056ca6a9248b046cc503b6e7f7","sha256":"e37bdf04ba4f94d806cb8a706d92930a7db461ac3dd06c5ba9f0f83392303096","sha512":"8f50f5c441e419d45e3043f6a2789f1f1ae6b11ec84def67eb1cdf59ca2e248d8c514a6bc1fd7ff28877f9b3e432ccb34da39d09cc46794fac32f1a8df1234f1","ssdeep":"","tlshash":"86115c6a7b9c0cfb44cf3d1a78c0057114bbc3f359c0ebd9bb3955b98c62a015064ea4","size":916,"data":"","first_seen":"2026-05-27T00:11:11.741302Z","last_seen":"2026-07-16T21:57:18.204532Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2d90f6042298c44053e364ce5108daa4","sha1":"167145dd26b1abd075d737f58dad378b16cda1c9","sha256":"5a8be330d8dd95d510b91e572103f9dac6ba680e369b53fd6b24b85394410ec8","sha512":"84e4c8bd96c118e938a515f94c18bd012737a62f397053085628032a966fff45729766838f66adc83a1725590378ed9b523b150b1b146f214aca74fa1d5a8317","ssdeep":"","tlshash":"29c08c3db23a202f054a504d281bcb10d05bf6c01e864f2000aa3ed88101a1c50d89a8","size":151,"data":"","first_seen":"2026-05-28T10:31:18.665974Z","last_seen":"2026-07-16T21:57:18.333792Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2da9c1cce005922f087a6b565c49eae0","sha1":"89c6d2529b58078cb100e320b71af56dc3cddd63","sha256":"64e7ab78f98216a6986c33a7c773a4b6cb8520fe75a55cc462bcbd484a7ca549","sha512":"cf61e1fd221d20acdf80b855ccf8497b85d65f28c5dc00a5c0f2c3144c3760a1aac3b9450f92ac4dc80992dcf91c96b632a894f883708842deabc8b0cdfab530","ssdeep":"","tlshash":"85e0122bb199083f08cb715b78b54911801b46f79c47db2576b21dfda117a4ac09cefb","size":358,"data":"","first_seen":"2026-05-29T14:30:57.084131Z","last_seen":"2026-07-16T21:57:18.545545Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b3334b9818737b286131d7d4b07afb7e","sha1":"130b04a837c45c3e6ab407531d9297a05a214a97","sha256":"f427efd22d76155c25d87d0c0fa06517d58c2742cdce868f5670f2a829695958","sha512":"1b898ddd1be6540c51e94de7ccaf2d20cef6c9a83561d38719cfa1739077c2a52ba9c7f10d3e777f84307bdb0aa7c432f148cea412117f57902dc1d9ec7c6f83","ssdeep":"","tlshash":"1ab0222af3af30222a8220aa203a8002b022a0200880c202222e00c8202c3880032ab3","size":111,"data":"","first_seen":"2024-12-16T06:32:04.51148Z","last_seen":"2026-07-16T21:57:18.358609Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c9df068d0e744aa347aa0f26be9215bb","sha1":"9de31f62d426bcb0f04fe8de37c3cbaf1cf9128b","sha256":"02ceb4ce0dece0925eaaf2ba5e746356074121a65f8ebafe24ace1ec10e8ab7a","sha512":"f5dfe8f3b262179e970a7e908b1712d5337f2d0dc4e39f888ff30891ee9adc3a24b1e038da3137fd4dd6f86125c002bdff8258c7b96f9315cb0d87d1df281c69","ssdeep":"","tlshash":"94b0125eb29663aed34e20163c694115200715950984d124612586e8910ab144130ea5","size":90,"data":"","first_seen":"2024-03-20T22:00:40Z","last_seen":"2026-07-16T21:57:18.304925Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/ot-ext.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec2ebd9471d050e3de19a04896b7d664","sha1":"cfae4a849ba4638c23b31a2a15e97384cbb0d15f","sha256":"14510c2d32e480903eff33dc4b7bf2ad5b1bcd315f50980858bf227d9bdd5e9c","sha512":"b4303f3ae985be40e5165bd2de0611103e361aeba11f60db9733e3f3c08b577daf8826099af23e9ba8c078a983ce79c46d98df5d044dc7ef0498b79cc318516e","ssdeep":"","tlshash":"2531d7f436a80f3417fc66b9f29991c2b03e61b2791f4836f58f9da170248c20c5eb65","size":1836,"data":"","first_seen":"2026-07-10T12:36:00.018123Z","last_seen":"2026-07-12T21:21:00.129818Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/nunjucksFilters.426f86e3c82cc4d676f4.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb201a927e0155d6119423560ad87f20","sha1":"b0e3f22dd0ade295bd73af0ca94c0875fbcf7190","sha256":"d6ad9a0d69b3b684189ffe8292369e43cc789f73feaeb64172bf70b236084bf1","sha512":"d8edf46dbb0fc27d478607f7d82f700e9c53e574ecf84367d4d742e9dce39fd78cc7c4ad5fef05b35cdda3e72204ac655de68518497417e02d5b46e79e578b8f","ssdeep":"768:pC6CgCT/Hick0CrhJec+UcHt7Vn+zECGDgZ/CpDFOf:wHickBhJejtZu/CDY","tlshash":"c7f2eac8b2c1f263db6732b5509f710bf23d641a988c9484d216dc9578f994a8273ffa","size":37455,"data":"","first_seen":"2026-07-10T12:35:59.997569Z","last_seen":"2026-07-12T21:21:00.176279Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"985279d90344eaf1b7443d47fb563826","sha1":"2db71af4612d1c6d991a4fc88dc4361acba7aae5","sha256":"fec40a218b86a58e56b3760c9e74694e5046401a862588747093131b616d80cc","sha512":"6c6c4329126a95252fbd165be5bb2464236c0fcfa1e532f18b9742e6f06083138aaec633cb9d107e5aee0f7496aa1796a361702cafcd20bacedc66019855b1be","ssdeep":"","tlshash":"10c08c3db23a242f054a504d686bcb10d05bf6c00e828f3000aa3ed88100b5c50d89b9","size":151,"data":"","first_seen":"2026-04-22T06:12:44.26189Z","last_seen":"2026-07-16T21:57:18.406633Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bb591eb38e1b4e1879da3c24c6a800fe","sha1":"71fd48cd0aa1c24b92fb2b8d64d4985a1f63b98c","sha256":"60f4f8d4104cbadb2beb8bef165dc9e80dda533ed13fe7d4b5dd18da354c830c","sha512":"7af864b007b7fa13b19b7aa0bc3e967f2d7b8d2dd76386822ba3bb8da52c3543cca1025873b817e42016ef97478197b035dcd6455c62502dab08b8dff615f2ca","ssdeep":"","tlshash":"66c0c22af788103a048fb02b3c919916810307d74e82a226273109ed981f6428415ae9","size":190,"data":"","first_seen":"2026-06-13T14:53:10.161161Z","last_seen":"2026-07-16T21:57:18.546345Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d0f0e3ca5e7f4aa75790d51c14fbb742","sha1":"e6e5556b8317d0779ef98883aaa893b747202cbe","sha256":"970202a009b0c6413ee54f7a5bcab0f8e425cb21735a94784b24c23629b2ba7e","sha512":"3b2cf36b3984c51214c0a6d8f3f7a9cbdad161a15e4f4ae04bc5f1365be4cf05c6babc308c0ff78be37e415c00cc366965939af2ee22e8e72ff94650ef6483b9","ssdeep":"","tlshash":"6d115c5a7b5c0cfb44ce3d1a7cc0157124bbc3b359c0ebd9bb3965fa8c66a014064ea4","size":921,"data":"","first_seen":"2024-12-18T23:19:35.360193Z","last_seen":"2026-07-16T21:57:18.183385Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"04d20da0affb88aaa8adb3b8bae07c07","sha1":"28f1a58cf7889c05c2f66414960b35825d677571","sha256":"699562d6f433f5f7035a21281eb9e541e01c9c149e499c4f0f0d565d86360677","sha512":"f504155abd75591709ee12b56aa683276473e02cda11de0dbac5e88bbf266c6aca62547b5672e9452cec2145d5a20e869019de1bfec9fcad3715d1ad979cad17","ssdeep":"","tlshash":"a6b0125db19623ede34e2016343941212007159609809124712587e89106b144130ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.228827Z","times_seen":436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5a73af446869fea8a9e864d3cd75ed26","sha1":"10a570c6fc66f5db6b4c933370bac6ae858fa834","sha256":"afe8f1131dc8b530000cdd8d8e51aec9756d5010ce11644fa6d8f38902882f65","sha512":"23d4ade843e313bd6f438837c3bf771cb67c9a473a1fec3a3cee811620f39de05b0e93f1682de303069e858eafb24d42942569a79713b4c8d42281998b9f59b9","ssdeep":"","tlshash":"3dc0e96bf38d103f05cfb42b7855591a43030bd75e85e31553720dfc901b6828114af9","size":190,"data":"","first_seen":"2026-06-13T16:08:38.938422Z","last_seen":"2026-07-16T21:57:18.32858Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1ebec48f142f90f896bddaa34a16afa2","sha1":"56de8aa59fb25322f2a387bf182832279dfbceee","sha256":"5f848067f3a711c46d4842218434da27bacbb680f72c0d425d87592b9c306979","sha512":"aa032bd13733bffe63933acf471190add16eeadc700bf810135e613d9f2311b07366671f367bb66e3c37e9240fa7ed15143d1c10c9ef4ff4f9f4bce0a60ce97e","ssdeep":"","tlshash":"13b0129db69622a9d34e602634294511204715950980d125623586e89909b154070ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:33Z","last_seen":"2026-07-16T21:57:18.243147Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/analytics.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b0743b6fa3b85b1add5bce3e76f93b36","sha1":"79c0bf44f6e2d5194b7b3eda380b530d9edbcffa","sha256":"41088dceef55b132a870669325a59e8fa1256737ce16526460f7b2dbf9731749","sha512":"8cdc9de5c292d5e4dac359fb6c0e32e01fc1401d140e92cb95ac09c1ce675861b7ae19a6f2424d63f83c5dd37438e380841728b21c93fa3f12c4bc72832ce791","ssdeep":"384:DYHZSxbB7QdjZMSjnxuoeHFhTU5Ktpstc26:c5BfxkfU5KHan6","tlshash":"e862e6d19a63d97403e9add9981d5154f60aac7947cdb850ff4eee88700ac0a30e1ff9","size":15360,"data":"","first_seen":"2026-07-10T12:35:59.93379Z","last_seen":"2026-07-12T21:21:00.171814Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c948b0838a0c73a872001a83dbd67224","sha1":"4f0bdcf6e80ac6448204b1a6280d3d905f7e7aea","sha256":"b9cd54ba86143db89036e685a675c0826dc1b58ce0d0b53c95bde156b4c0af42","sha512":"350dd8ad001e2c35b30cebef9f47f52c83361e45458278b774a39cb200a4ea3adf17ee0653e4708ed6ca7951f1872bc530e2456537099eff51213820fac2ce37","ssdeep":"","tlshash":"5fb0125db19632a9e34e241634694121200f159509809124b12686f89106b144030ee9","size":90,"data":"","first_seen":"2024-04-24T13:17:48Z","last_seen":"2026-07-16T21:57:18.40131Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a31bc14a6d75de2a5811993f96c19733","sha1":"035142a457b64924c601b96e05187b4e1ad2bf15","sha256":"68f81eb229214d500f37fd6d09b2315cad167ccafe8ff674f4543681b6445e02","sha512":"1ccf15a7e4d3b92647e85e864e2936b9327d3af19117ca288be624aee1be17f18f5e92ae46efc49675aa1377c1d44da1127987ea7ee343833833dfa98cdb15b5","ssdeep":"","tlshash":"eeb0129db29a26a9d34e201b343941116047199509809134612686e89109b148034eb6","size":90,"data":"","first_seen":"2024-03-20T22:00:42Z","last_seen":"2026-07-16T21:57:18.265215Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"79f6b8e82a1650ff5242277cefdabd94","sha1":"57686add15c83f0ec83805658704af9eba369116","sha256":"f01c1fe7cb780c368b119f44f043259aabdc9b30bf65dfe1131a45b5761c356f","sha512":"90a693f4ffa6dc961aae8fe65d4e3506d8a38bc4dc8bed03e7fab7635b9d5908b6e60987bbc684faffb4f41d541690e44a8d02f2ceff3449ffbf281f8c274146","ssdeep":"","tlshash":"77b0125db19a26a9d38f2027342d4511208715950a849524a12586f89105b644031ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:30Z","last_seen":"2026-07-16T21:57:18.170762Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dc4b3eb169d00d8dd7984de34f92d844","sha1":"02d799c2650004ba3da9c97317df3bea2cbea6ee","sha256":"7355b22ca94659ec4f260a0aa6871a53a608eeeb6392d2b6440e8021e9fb3409","sha512":"a117454bddc855194d754fc50593faa432cdfa12dc5b3407408b3677706a56f4aa1b9877646d65afde1ace3cc2e1f6e8a3d0d0a44c39171ce07df68de284201f","ssdeep":"","tlshash":"19b0125db19627bdd34e301634394111200719d50a849124612986e8d106b144130ea5","size":89,"data":"","first_seen":"2023-07-12T03:58:20Z","last_seen":"2026-07-16T21:57:18.595111Z","times_seen":863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"32b30bd0ddecbef1384ae4915ee8bbe2","sha1":"0a92674984c901b655e888ec84274d60fd1ce508","sha256":"804295e13d1f43bd605a2e60125a251a432b253f3630a5345d31b69efdfccf1a","sha512":"03062417e1c5df446c1e1a8c07caef06c375a42fb15ec1e7882a34d33ff4cca6b81c1e3c542963a1360cd70af4227ffd30adedb8699275797c8e0e4443709f01","ssdeep":"","tlshash":"dfb0125db19622a9d34e2016342a4111204715950a809124a129c7e89106b144130ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T21:57:18.309028Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e8d34d822f2771ddfddadd3ae6d25f10","sha1":"0dad0d5854cc2c8debc54d6806d43edee745579b","sha256":"c12bccd112421dc449cfdb3f642d7d881910bff8768132f056ded934e2d4fcd5","sha512":"e1194027963abea1528cf80ee3b98491362ec4a036e30ced32320015f780b633b429590c3e2d6dba0dee50279cbb133301aaa3163be4323b9db67cfbb2c7b9fe","ssdeep":"","tlshash":"dde0922bb19d003f08cb606b7c858a41805742f79c4b9b21b2321dfd6446a4a8088efa","size":358,"data":"","first_seen":"2025-11-04T09:03:29.600745Z","last_seen":"2026-07-16T21:57:18.528642Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"663a7f24fff91d1ea3764cf6bbeb6a01","sha1":"d47613ce5655148c9a4fae4545f3ce7e8aef645b","sha256":"83ac5f027aeb173dc74025143778c870da2769863593ab9cdc3b9b463c39acb2","sha512":"5a85b9295001e2befcd07ff5689230b15cc08a65f176e05a941a2963b4fec478cc933644b82895765b5572cc2dacd4ee224787f2e7a948aa4a58be726f46c2b7","ssdeep":"","tlshash":"e7a01219f3c631250347601a202642152003416108018240526649dc40492454014d6a","size":81,"data":"","first_seen":"2024-12-18T23:19:35.371871Z","last_seen":"2026-07-16T21:57:18.378485Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/ext/v1-stable/gdpr.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ed10bc90a74a91dfb9ebbebf2d70ba2f","sha1":"3b82b2eebd740f1e1a71265bb7b5d1ed32247057","sha256":"d2bb902ab169e35913be24976a7dd7a51613acdcdcd87d35e4593758bd9675ad","sha512":"4c33b85bac5af7a56c57390b160e5f57a6e4f5162f5a5194bba3adfb19945a200d7e4923aea21b9522a5526572cf22df965bd69717b5ba84a0adfc0d8d398f65","ssdeep":"","tlshash":"9971a5ba73b8f33a53d534edd4688180bd0c197b974d4419f06e69a21016b4227fbfb2","size":3642,"data":"","first_seen":"2026-07-10T12:36:00.022552Z","last_seen":"2026-07-12T21:21:00.121181Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"db1cc2a43b56ee6b1c6ef6f1eb309962","sha1":"de18f300e1a8caa9889f414531d9ace3466aadaf","sha256":"da426e8731acb272b39e78b88780d0ff4159b424466b100cf57b622dc375d629","sha512":"bd5995993341ea3ab81d494885d56504c48140e1ca7162db0b65e9bb78b8a98b927b3c09a3d4c20c88851079088e6052be7980aa612e0f2b3427c39791bca5b4","ssdeep":"","tlshash":"b5b02228f2af30202ac320ba202a8202b002a8a00a80c202222e00c8202c2c80022a22","size":111,"data":"","first_seen":"2024-04-24T13:17:47Z","last_seen":"2026-07-16T21:57:18.605007Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b43ed64e2aa2f89effbdcb76e105c1b3","sha1":"d0b4e20a220d215fe86669200b4f1c3816ae59ba","sha256":"f6fb2c24fe6ecf23eb757f1e913f5be553bad08b3f7a53e40b291ff7cb75433f","sha512":"16dad591cacce70b4519a55142e765d16a2fd314155f782798bdd40b8861003aa7f24481fcde1690657e88a31556017e64d6224de2248db598f45ece8bbb4adf","ssdeep":"","tlshash":"11b0125df59633a9d35e3016346a4511300739d64980a124612586e89505b144030ea5","size":90,"data":"","first_seen":"2023-11-30T16:50:01Z","last_seen":"2026-07-16T21:57:18.384993Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dcb20c35d1264ea73125a4f579ade3e2","sha1":"3f57452649d27097a8f62d3b3b7a90591af222ee","sha256":"a1e6b602443ca589e27738e70d0d7059cafb01d3783da8daecc4d49d11abddb9","sha512":"80e3741eb545aae200de0591a99abcffb77713ce21ce1ec1b109093e0d2ab5b9720b1aca5e204691a10c3f1e5640d83f8103f470b684615061ffc5313843af33","ssdeep":"","tlshash":"1ec08c3db27a202f05496049681bcb10909bf6c00e828f2000aa3ed88200a1c60d89a9","size":151,"data":"","first_seen":"2026-05-28T10:31:18.692109Z","last_seen":"2026-07-16T21:57:18.577679Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9a4e9d596325fdbc8120e78510b16c41","sha1":"a07dd330d35d2bd0d8d6c549ac21e97853d3c5e0","sha256":"230b3b57687b7039bafedfbf5f80fcddcd35f9b1cbc11c24a4188d52a264235e","sha512":"53a16550e67e7338a67e89c8e67b0be3cdc7c055a8cc692d18e9f8272df11544f411281c84e5896c50215e9f2f576752fc90b600727cd99492a1f420794af1c4","ssdeep":"","tlshash":"32b0129eb29622a9d34e20173c694119605715950980d124e12686e89209b144030ea9","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.221807Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"059dc7110a21a7face0ef86815f816bf","sha1":"be95561074cd0aac018aa5adae0d205fc7206bb0","sha256":"38d6c06e4af24cc4ee485b23cba4e87cca2a652eeaecdf258c535c62e748f959","sha512":"652d93a1ef12e44c0acc95c6d3c8ab7cb1e7a12157386eb147b51aba39b081f6b2fce0847644bc1d62954f1dd9e4397980220c9a7eb1c535961212ff9a1d6811","ssdeep":"","tlshash":"8bb0125df19633add34e701634698111204719a50980a1246125c6e89516b184034ea5","size":90,"data":"","first_seen":"2024-03-15T19:22:01Z","last_seen":"2026-07-16T21:57:18.470709Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2d3f7cb9ce19bb33d2ddb64945715b8f","sha1":"8990f8c2ed1f9ae201381a1e5c85dcccfde46bf9","sha256":"8534fbc09633ffade1b81c74b628364ed34676d164ee3ec4401e11466ffe9d9c","sha512":"ce9e6daee0db1f774b3010f613d5b1c5e63061cac0af95c9cead7cfd047de3be3688fee39e2b0237979d9c004631b0af8eb0888e71fcb4e5efaafb236c3597a4","ssdeep":"","tlshash":"6dc08c3db23a242f054a5049382bcb20d05bfac00e824f2000aa3ed88140a1c54d89a9","size":151,"data":"","first_seen":"2026-05-13T09:00:16.950014Z","last_seen":"2026-07-16T21:57:18.163961Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"146f5084e7731714ce6ba08dec910c75","sha1":"154d1555047e65b5099c69caea88232b4bf24b60","sha256":"d5989eb406b21d9baad1967689e8e2cddd1091204e2b1d789ecfaf6158f5850d","sha512":"f9ca48d565588f294c7e4e453f4946ce3aa72de0ac9317945e2e8c72890a4a9211c0053e97a8f2bca51b23d0fa2e6824c10085ae72e1d39609e9647a0eb50b1a","ssdeep":"","tlshash":"a6e0922bb99d003f08cb785fb8499910811782f79c879b21b3331dfc6403a4a8188efa","size":358,"data":"","first_seen":"2025-10-24T16:46:54.399133Z","last_seen":"2026-07-16T21:57:18.19915Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"404f5ed863b6798c19182268771b6922","sha1":"3c59cec94d108f2f83bd020bc398b3541a4462f2","sha256":"e519a69d9738b950ca007475cd79467dd8242224fcea02aab6989d8a1f1d71a7","sha512":"aff50916e69718d2673b9b8ff5015a540b32951bebac99baa50f843145940110cbddf4e00e79894eacd987181628fc5241932d17232fe6a3faa3ad236a647b8d","ssdeep":"","tlshash":"ecb0125db1a632bad34e3016352d4111200719950980a124a17686ecd505b144070ea9","size":90,"data":"","first_seen":"2024-03-15T19:21:56Z","last_seen":"2026-07-16T21:57:18.389139Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f3a8445511ce6b84dee9684e2e66d2f7","sha1":"ec1eab60d3aa71c48b1ab136c739e9cf501dbc8c","sha256":"06888330e751787409e8d984129235e71df07ecdc21ed7371a2186a76ae42487","sha512":"dd21e792e27bc349aa532d969204ce70e6b5e8f85aaceef1b443bbc685af423fe24ec39e16204fbb3996fcb94d8241e8de843d26470a08eae84b205ba0c6c998","ssdeep":"","tlshash":"03b0125db19623add34e201734294111608715a91981a124612586e89107b144030ee5","size":90,"data":"","first_seen":"2024-12-10T19:46:18.281138Z","last_seen":"2026-07-16T21:57:18.600286Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b08b6a73cb3df3c5202021883d974e94","sha1":"d1e7040ae7740d34ed9b003de5edfcc5646e5ff4","sha256":"7b103afbb10dbcb689118b8d57ed4c0378288324cead435caec9e9f92b1d2a25","sha512":"a1e00d86a5b433db9994999d954ffa5da2be5c2992a45203d8f869d216bc5a811126010d44dfaea0a8f64507b644ca73f38157c36b842f24246e3742fc99ccef","ssdeep":"","tlshash":"6fc08c3db23a202f05496049281bcb20a05bfac00f824f2000aa3ed89100a1c60d89a8","size":151,"data":"","first_seen":"2026-05-28T10:31:18.721343Z","last_seen":"2026-07-16T21:57:18.210122Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ef7f17bfe94aa47dc47f2f68ea55f38f","sha1":"196dcd41d55bb802f76431cf97f46dd5a3578083","sha256":"6e296d04175e8a69d6a57b82acf8cdd235e895197a4dfcf1873864c0301c0031","sha512":"c00111758bba1c486e4bdb1a28227cd1067c764cb1c87bb1fbd575e52cad137d4bab9ef98b7f37b8ff073812f360fb675b5eb12c3f1ff97eb70635c041ffae41","ssdeep":"","tlshash":"b1d02b9ffbba221742ca6418949b46171029b78a0b048ba3003709ea94254c20127e39","size":272,"data":"","first_seen":"2026-05-27T18:49:35.156963Z","last_seen":"2026-07-16T21:57:18.548863Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c8cb4f4a34e27621b8f138d452327b5c","sha1":"6ffee45829bd2f4ef7d32125aebed3db4947422f","sha256":"1db341efce2f3a2478b2c891f1379dc695f19116b8d85dffe559630d690deb40","sha512":"9c1c74143d57cb4e3a3374a16c1f83e584d73742296cf26c5602cd081a41cb364cfe8e7ac4463d3294dbdbcd3b64c6ec1c2ea3767d7fbf15306001d6e7c55a9d","ssdeep":"","tlshash":"7cd02b9ff7ba621742ca6418949b06171029f7ca0b048bd3003709ea94269c10127e39","size":272,"data":"","first_seen":"2026-05-18T11:46:28.327611Z","last_seen":"2026-07-16T21:57:18.616205Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"59f941af75a9b71a7fffb5104a70ae10","sha1":"82129fed7eb4e27b02248a323f7770b94df29248","sha256":"05e4d77a89ad1e8e28a034361e8a3637e05407413d7d3813ae85603ed981bd4e","sha512":"dcc8f5ed24d7ae9e7815260542b20782962ac99d8a6a21a99eeab4df4307fdb7c9e5df9bffa37667269edaa1d48bba15fd00d037edaa94c0a0024922e2471590","ssdeep":"","tlshash":"eeb02228f2af30202a8230aa202a8022b00aa0208880e202222e00c8a02e3880022a22","size":111,"data":"","first_seen":"2026-06-08T09:34:55.514616Z","last_seen":"2026-07-16T21:57:18.422672Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"09cfc03f899bc51f539dcba33ccea738","sha1":"305c0d054cc0fe9b3e770dfa4448413f01af9ffc","sha256":"83da7bbcca9ef955fd67a5151f8b9c7b298c35ea50599a847f25c75858cc7a2e","sha512":"e26faf54d630da860b45bce3c1e03f17c7ff70f601f7f34e72b0ff1cc9f9cd27c01dcb74f8c82d842838cf920bf44a2b02ff29a793fad75763ef02600f9c17e6","ssdeep":"","tlshash":"12b0125eb19726aad34e201734294111204725950980a524a165c7e89105b148130ea5","size":90,"data":"","first_seen":"2024-03-15T19:21:57Z","last_seen":"2026-07-16T21:57:18.501082Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3a9cf8fd5fa4f87898a62e532f8d9d5b","sha1":"ed5a70397d1e51318715ca3ba225c8af82c221bc","sha256":"f8b87b291b841efd3a4aa98d4facfbcff261cd8df03b073e5af8713febd6ce92","sha512":"0c173ac41802e183658ffc75629561bce6eae898fe5ddc72dcd5ac9766db36d003c0d6a05284fb1ae356701f6f375f37362c852ddbe2d72780a511e2c828347d","ssdeep":"","tlshash":"c3b0125df69623add34e20273469451120072995498091246129c6e89106b184030ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:30Z","last_seen":"2026-07-16T21:57:18.381943Z","times_seen":857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a57190c596710dc3d21632f821006968","sha1":"c08825e8e1ba8faa7ffbce934f2e8df77fc66dcc","sha256":"77852d3854b775b2e4d5518cf6c18eb5acd705a56e6aeb0df81a73a37a4484ac","sha512":"bba2ebe004c9105dcb02f65c636edfc721966377c4e299902dd7ccf539b17678caea3087f4479e84336745ef543a3f1283637b625331f9f4320df4321ca952d4","ssdeep":"","tlshash":"39112c6aba9d0cfb44ce3d1b78c0097114bbc3b359c0eb99bb7955b98c66a014064ee4","size":921,"data":"","first_seen":"2026-05-29T14:30:57.149739Z","last_seen":"2026-07-16T21:57:18.381138Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9604da8a6cbd43b34193d3483df1acb6","sha1":"8ad5efa5e4e094d9a3dc65cc6e66421ac3975ff3","sha256":"ebeae32127ea7be5db829f87c71b7009eef57219f821fb1fe4a1cf592184b3c5","sha512":"d4718800007e1144053c75a5503f507ebdcf671d4e90b08b9f300f218f583e757e68b305fdbd966813068bc059ead8724c92fef3e46b56a6fb8db61867c21c0c","ssdeep":"","tlshash":"a5c08c3db23a202f054a9059281bcb10d09bf6c00e824f2000aa7ed88140a1c50e89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:38.879737Z","last_seen":"2026-07-16T21:57:18.384257Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5f878818a264d84bffb71f7ef8412dd2","sha1":"daaac156e89c928159b3d862c6f5a5c7170825d6","sha256":"f1605045fa3608f91a45f64e40c9b749755c383742e4eec0b7a173fc884619d8","sha512":"6478206360431b723c27d2e3c67ca1011ee742ba6629a5fdc4b916b6d51996ca024ec8e65758e0e96c51d8772860b43b0144e2e309854f2d936b235559bbf342","ssdeep":"","tlshash":"bab0125eb39622bad34e20163c694115204715950984e124612586e89109f144030ea9","size":90,"data":"","first_seen":"2024-05-03T20:33:10Z","last_seen":"2026-07-16T21:57:18.451653Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d7d08d276f7bb3a6d0a8252044ae880f","sha1":"0586caec14db5d60446d92a14ed744fd58e92187","sha256":"c220da728734d132c9423bac8a546ef186ec9ab35bde3b355c917d85c6c91f87","sha512":"d4f7098a3b711031d51dcce2f9d823bb311a81f530ff37ec91a65e269db777a6bf047258ef8772806715dd9ff38949a2da5f1e987001283b4bfcbc9e65d793be","ssdeep":"","tlshash":"c0d02b9ff7be221742ca6418949b06172029b78a0b048b9300370aea94254c10227e39","size":272,"data":"","first_seen":"2026-06-01T11:22:02.903632Z","last_seen":"2026-07-16T21:57:18.321327Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/otSDKStub.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c61c9212d44a276e276a64be0104e5b4","sha1":"2a0300f8224b9f13020106f9fda1aabc362603fb","sha256":"4f0bbc6b255b6ff7eb55d7a5c3ec7199e7dec005b41f0577ab236f4756c69f6a","sha512":"cb5406f4074f47de426647588ecbb8aa77767629e85dccd2d3e0c15a825150891c9a9e20410994822ce79866fda3b6bdeac2b985795f58a745f49a36568d0c9e","ssdeep":"384:MLIi8k7hI3RzMABwXeU9LH6rlIgknE8eEaRgCyu8LcwLKvTJ9x4AaHKJx686W7rk:M0izIBAABwXb9wvknECPCJ8gJ9ugwW7o","tlshash":"bae22a99b140ef3447d251dc993be25ab23a746d348ac028f868dce0247dd4b6673fb6","size":31452,"data":"","first_seen":"2026-07-10T12:35:59.963347Z","last_seen":"2026-07-12T21:21:00.127957Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e1948af313df3b5d7fdd738656728f2d","sha1":"26a868406b86450bd347f4331f6baa9d1404c474","sha256":"2a92e9abf0cccc10b5664972a19d1e296a506488879a2de535402b045b593a10","sha512":"3183cecf2fb9d3adcb747d5f8265810082230be9087c7040b6b27670b06f7f26373f5862dedf046ba61d4062f9cfe68c81e916efd53f0604caded551b0815dff","ssdeep":"","tlshash":"84b0125db19622bad34e201634294111200715950980d1256125c6e89515b184130ea6","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.548095Z","times_seen":420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"27a4d77c3570f2bd332ff6aa33e23211","sha1":"1d3e46f270d20d6b14c5046b2dcba32255b6b87b","sha256":"c14b262a2f8b718c5304b17a8f44558d00d1ed2a94f21cbd4c68b88efd55e258","sha512":"0effa46a4badf828e6fc7d852400277e2f91be639749420eb737f8342369b87b7804de522bd97bb3038fda8530f8464061771ee60e806246c03a997e3fa580a0","ssdeep":"","tlshash":"5fe0122bb59d103f48cb715b78654e1180174bf79c479b2576332dfd5016b4a808cafb","size":353,"data":"","first_seen":"2026-05-27T00:11:11.687201Z","last_seen":"2026-07-16T21:57:18.618334Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a8618e1e07b144f26b59a4a890f2dda5","sha1":"9c64fb304b2e3f14b485adde1710516a1fc9a650","sha256":"6b280244236bc0426895adab0c51626dbfe1f505f58cbbafd278663ae0cab5d9","sha512":"ce635b1c390723ff83082fb13d8dd6693cea75b6275e8cacb34efe39e84c818e0345b30b267bf2e9a3a177156dc7545d6710f826555684bed59178fe75d2823f","ssdeep":"","tlshash":"7de0126bb199043f08cb715b78494911815b57f6bc879b2573331dbd9017a4a8088afa","size":358,"data":"","first_seen":"2025-11-13T17:17:19.730374Z","last_seen":"2026-07-16T21:57:18.456197Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e38e7b103df4f49e69e7c17f11db2a2d","sha1":"f17cbb1785d286139d9c46c75f71bd7c1e512a4c","sha256":"9c43bd3e57c2f2548551df75649fd9b71771549a2d1501143f0ffd10bab9429b","sha512":"eaa2b5f4dc338f44e4541f3a4fccb01207065833fb6486dcd7be87a52306dd1ae8d1fd7c2dab180380230d339dbfa24bafeca01a00b1a87535436ca881a6c849","ssdeep":"","tlshash":"3cd02b9ff7ba221742ca751994df0617102ab78a0b048b93003709fa94255c10137e39","size":272,"data":"","first_seen":"2026-06-08T09:34:55.778528Z","last_seen":"2026-07-16T21:57:18.180818Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"96d1ed667bb61215e6a4818493418f2d","sha1":"53c41b8f3c15cbf83172e79710430329d608f36c","sha256":"503d809bfe6b3482f62e03a4c38e416dfe12aafc7db803b8555ea1070f5e5c98","sha512":"ff3a1f54c09bdab366aaa70c01de90d461babbcf1a02c41537016cff17479bc8f38d748f3add2073609a6e76694bb63acab849858b7b2903d52c071494b9ebde","ssdeep":"","tlshash":"2ae0922bf59d003f08cb602b78854900806b42f79c4b9b2173321dbd6057a4a8089afa","size":358,"data":"","first_seen":"2025-10-22T22:31:41.665748Z","last_seen":"2026-07-16T21:57:18.217303Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"191c4c31c1435141368b63d1ae611e94","sha1":"f2c35bf6258388d90a1f3cef349127c50043b9f3","sha256":"1dce7d0adf4cf5c107e69b78a8f2b26e358c6a214083dfa5c30b3e985f7584a8","sha512":"8d460b714619160dc85f46bbb738e0f4e34dd8decc1c72e9de0fba30afc993f795e756aad8ed2ec70117ee6464b7205c1f0ccb17670916e04ec418cee07347f7","ssdeep":"","tlshash":"f2e0122bb1df403f08cb655b78554a21801b56f69c479b25f2321efd6016a4a8188efa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.790156Z","last_seen":"2026-07-16T21:57:18.448472Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94a60820ba313f9cca7f64b9113be7fa","sha1":"60b06878aefd028374a57bcd7becbb8d95818fc6","sha256":"57dc5f8a5b78ab244b01fa49ae0471bc2b2dfca7dbd3233b6f5d920aa99dc556","sha512":"0c64a99938172f1fdeab1931ad5a83b3093edf10d1903aecc11e6dfe398a3a160f0f616c5eb2014cc99cb1a5d3c0a86dc9b675fcbd86c1323e8504789ae3274f","ssdeep":"","tlshash":"64d02b9ff7ba221742ca6518949b06171029b78a0b048b93003709ea94264c10137e79","size":272,"data":"","first_seen":"2026-03-04T18:14:24.848834Z","last_seen":"2026-07-16T21:57:18.363253Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0affc80c1e9e8e955dc629a02e0b2004","sha1":"fd99cf8b52da7e1e97c424f8bef3d61e4f81283d","sha256":"7e2be672986451f0c4c974800423c66a94c86bf77c89fea4d573e708e2e5cffb","sha512":"9003ea2de0ef8d6d6d657ede18d86929dbd55a60bcdbbade20c5b5484ec159ab7ede78014dacbbf7a6c3bea5ca8ff2144a9188ca600b164dc114429c9edb0314","ssdeep":"","tlshash":"34b0125db29622a9e34e2016342d4121204725d509809524a12587e89215b184030ea5","size":90,"data":"","first_seen":"2024-04-24T13:59:13Z","last_seen":"2026-07-16T21:57:18.382689Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b545b5cff3ae9f5b0bb01b27ca2d5bc1","sha1":"8571aba530c6ce0b4c216015bcb75d033efb6206","sha256":"4dbb18054aa7a008c639a1dd76a14c4d61cef8889a83952e0c78a8b8e66dcb21","sha512":"14d654e6b3d59573fe900d04b88265e59114dabcdef798a4957ceee5cc51b37d3614993442828d29d4eea86898e3cfbd6881e6572343e3bccb5b18af391c482c","ssdeep":"","tlshash":"77b0125db19a26e9d34f201634394111200715950980d135612586e89505b154034efa","size":90,"data":"","first_seen":"2024-03-20T22:00:45Z","last_seen":"2026-07-16T21:57:18.356612Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf76346975fc1b57e906a9e7dec044e8","sha1":"d2b49489db2c6ccdfb655438ca26496a5662dd30","sha256":"0b04e5969d4e9abdad0f7e712bd3539915ec7a738708686ac671081f729bad94","sha512":"8f4468475085cab34890f56b4b7ca63736d2d53ff8a2d6cea7ddf66a9a3e13b4a08fdac279e93dda998302c348686dcf11cc19990d3b118a1a9db6f37db14910","ssdeep":"","tlshash":"e9b0125db2a622add35e20173c6941196047259909c0d124a12586e8d109f148130ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.266011Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c9d0fb25fa5efb6d398d9a8c6dbe43e6","sha1":"5afe41acaf8d0a21d7f5f20cb1e3f01a796e4fee","sha256":"54b747de8ec7523935f3f44b946db1b83aa7565743a08918f98e5ab2713247cf","sha512":"af45191a6645695bba10d703f7bc558b94ea3c4e76942d6399de49c368bbac32adea413a1116d067308760be147ae8a15e3b4ffd7003dfb454abf5875bf61a5e","ssdeep":"","tlshash":"3be0922bf59d003f48cb605b78498910811742f6bc4b9b2173321dfd9413a4ac0c8afa","size":358,"data":"","first_seen":"2025-12-29T18:56:15.929311Z","last_seen":"2026-07-16T21:57:18.542513Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e4a5c8674ca48c59595b277799706eb4","sha1":"baee600f5e7274563c57760723a14cd7bc31e887","sha256":"2f7ee2a420fbd41051c9e1e79e6b5c60dae736756094afc5b0708aed7f4487d9","sha512":"379213f3f93cf5f41e994febd2c25ab18f781b4030d9b2fc6b343bde86d27bcc1a1aa6c86430a0f94118b357ae8afb4990388e0bee68ab9d8a24280fd80d3fcc","ssdeep":"","tlshash":"71c08c3db23a202f458a504e281bcb12905bf6c41e824f2001aa3ed88101a5c50e89a8","size":151,"data":"","first_seen":"2026-05-28T10:31:18.741822Z","last_seen":"2026-07-16T21:57:18.444247Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a3d3d5112c27a8c989438b60364b2115","sha1":"a6f4aa79a46ce6edb5b291e68390f2283382ca5b","sha256":"1fa51c913598ca70bcdf64deae988b262679a9c58c0fa70621e973676baa56aa","sha512":"4d335f29fc28ed21b0d80536b8e260ffa25bb79f5ef4dcf2fa087d289e864e824b1c18ff76ea403aa80e892d39757347285da66bab46ffd7538c5b5725cc3d56","ssdeep":"","tlshash":"67b0125db19623a9d74f2017347941112047199519809124612586e89105b248034eb6","size":89,"data":"","first_seen":"2026-05-27T18:49:34.443994Z","last_seen":"2026-07-16T21:57:18.454143Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e8bdc9aba704a864719ed226dc48461d","sha1":"ad6f7a269f5d739d0766861366c5e5498f05ceae","sha256":"9a0d6a4385928b2e5364035fcdbe8cc5cd297f001703472bfb6a7dcbaf9a3ed4","sha512":"8363f07efc7ce41e0467d090d77243df08678697bb8af821455d4d5c107fe5cd35a5d7bdd2c619ea5956e50e5991a4675009a6cf4f77e60260aceceb0589c4f7","ssdeep":"","tlshash":"97c08c3db23a202f05499449781fcb10905bf6c00e864f2000aa3ed88900a1c51d89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:38.973043Z","last_seen":"2026-07-16T21:57:18.575626Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0eb0478b5a84ce7ed196470eb0266ffa","sha1":"87616b052092656e37ac29856546a26e2677ea75","sha256":"465dabe7bf1c22ca32f9b9bff929c14489be1a2eb3401f8a2df2acae19c89113","sha512":"0e6d103aad799d1dd8d6d4fef5eadc3a42e80c3dd7acf2a26ce01f9c5df8ef9018dba20a06c9faf6ae88a5e08f5ecd6828bdb68d24ea1606904f7b1d513e5178","ssdeep":"","tlshash":"43b0125db19633a9d75f301634694211300716961980b124613586ec9505b144030ea5","size":90,"data":"","first_seen":"2024-07-31T16:58:53Z","last_seen":"2026-07-16T21:57:18.571478Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d879b36301a3ce6468d70fca478042f0","sha1":"e106a8104860ab14e3f183aafc3f3c836743da75","sha256":"5723b32a8730edc7d3d41a03cfcb8769d38ec1c42a079b39a4c3bccd1ff23343","sha512":"48e0263ad27605b59e7765df89379781cad3620f692cdee4b19653ddaf8ea08e08fe37fcd6a361d98675a3c51b244cc24c12b3345a62eb8737c345339a8e09d8","ssdeep":"","tlshash":"b7e0122bf199243f08cb715b78c549118017c6f79c47ab2572325dfda456a4a8098efe","size":358,"data":"","first_seen":"2026-03-06T00:02:06.014466Z","last_seen":"2026-07-16T21:57:18.342512Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/jslibrary/LoginHint208.js","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3da3701e2fd3986eb5c25e74aa745a3a","sha1":"325a30f7add1a32d7efb730e14681e953d07cb00","sha256":"c707383ddb643c1b3f7f59100f89b02aa93a1e2bd39bd26cdffc6ba9a0d36cbc","sha512":"abf4daa1b3a59fdf470cb57564fdd57990e869c7a8f487a3b6ceff9912b4c1e5bcc9afac4aafd8825b108a1fa0dfc952e3d532638f5f72ecc353471ce426e3e8","ssdeep":"384:pgyMp3LSjcy1R7NiGoyn1K7a1suIb7IxsL5JPZZTuFWyGQgzTMoBUBKxwEvFWpIn:9Q3+gy1Ln0cxk6nGQgzTjBUBKqmFaIn","tlshash":"4992b8b732421a3579ef14eba87a97cdb8b085217c01d8a2841ccd15b538fd264fbe69","size":21183,"data":"","first_seen":"2026-02-13T01:58:22.102298Z","last_seen":"2026-07-16T21:57:18.062799Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-ogs/v1-stable/sdk/interactions-core.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2526a49f34b0d243909904b998c23915","sha1":"3ff5ec59125544082c9664ac20f801a0a52793b9","sha256":"ff5619c79f44d01990f71a2373c49df0b90ccc924673ed5f7fcc31693eebb164","sha512":"d61ef9bc69e1ec6afafb7df23b0851a630a9730bf0cd16580d7de02b326b9a102c85b9f40a075b5aec2849cd6b097dfbf339c25b9fb5915406b8fe44f0790cd1","ssdeep":"768:RHHkfN4VBn09Ybe9JDSwWJsqPcLiXqdLg1QzuLdX05LckI/+k2Op9z+HUB8OuZAi:Rnkl4VB4YbenSdJsqPcLiXqds+yq5Lkg","tlshash":"bc13e6971f6a413e93baf06cb01d3149b81cae885549d888e36c6d2a33c4d0971bdfbd","size":42849,"data":"","first_seen":"2026-07-10T12:36:00.000382Z","last_seen":"2026-07-12T21:21:00.138376Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4bb1ea930fa6785788f7c55159470a82","sha1":"5027c8a3f7721e64e98a5e3379c8c982b3ed885b","sha256":"35c98dab23fe38304421a06994be5839599f146c14d2d75e8bef590d0de39470","sha512":"449d3a23cb03be066f63600306c1f2541f746a7f5677c9420ab63c04e9537d60e86772e0ff0892e3c02099decc73b80a9891791e59f2752b7105830abadedebf","ssdeep":"","tlshash":"34c08c3db23a202f05496449781bcb20905bfac10f824f3000aa3ed8c100a1c51d89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:38.77229Z","last_seen":"2026-07-16T21:57:18.499553Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b0c5d03a26e8bcb1515b6791815ba427","sha1":"fa600d47aa9201aa9b2a42772e1329a983d1bd83","sha256":"a128c66ce63ae492d07494cb20323dd76875ad6113d368aff4a09551d3c68957","sha512":"64f935d48e8bdaea87b8bb77b54ad8ad6fc48be352ac5361db6601eaed40f224f32a76a1a10b7d68f772ede572970a75a6d93c30393f49c9be426fcfade5f2e0","ssdeep":"","tlshash":"3ec0e95bf38c203f05cfb02b38514a1a514307e75e82f31513321dfc981b6838804af9","size":190,"data":"","first_seen":"2026-06-08T09:34:55.368782Z","last_seen":"2026-07-16T21:57:18.442552Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b8c4e77904b58db4700fab092a00518","sha1":"848d8df2f43e1e5db586a2a7fa300706ace63604","sha256":"382e069ae5e81ca737a5ebefd7f55771930fddb36f18e996d6f8189f4049fd23","sha512":"d0b694aa921c2632f49acf22c364cc685e805ba40b210211846a58ba52ce5a2ed0a52c97b8e601f71ac8bda80018138a44f6381b33170f39f9f4faf8d3ca886a","ssdeep":"","tlshash":"dac0c22af78a103a058bb02b38554e2611130bd78e81a21513310afc901b6428104ee9","size":190,"data":"","first_seen":"2026-05-21T21:16:29.606952Z","last_seen":"2026-07-16T21:57:18.308111Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"171eaf319d52d523d0f586263081ad6d","sha1":"8e1200878f6051e2b77e2181b9d5f79a9236ebbe","sha256":"d2670c441eba2bc33d9ac832af08db5a7b026dd84528cf30393ab854103add38","sha512":"c06d73bbfc6a0750b6b5acccf91b88408590704b80850c2dc5354da80560a21d3a2b1fde5ad7eccec7486daad302acab29f2599536280ed3d933a920886fd22c","ssdeep":"","tlshash":"b3112c5a7a6c0cfb44ce3d1a78c0057114bbc3b759c0ebd9bb7956f98cb6e014064ea4","size":912,"data":"","first_seen":"2025-12-22T06:43:29.862506Z","last_seen":"2026-07-16T21:57:18.263185Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d1f4ab85ce0d582ded253c2771ac0904","sha1":"dde044e1cde5aff28c53fee0efb4320ce6b863e5","sha256":"5a846a6a8e67f576c1919a719354229df4744afcffa6e7ac9006c9393a51e768","sha512":"5cccb858cc6961429b8cc60751b60300793704ccfeb888deaff2a9274f7bbdafefdd7e015a37872e27963a669c4a4e6dea336008392eb82d8ef30454e7a9fe2c","ssdeep":"","tlshash":"87d02b9ff7ba221b42ca6418d49b061b1029bb8a0b448bd300370aead4254c10237e39","size":271,"data":"","first_seen":"2026-05-27T18:49:34.609058Z","last_seen":"2026-07-16T21:57:18.336174Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fa018234a077b27e9e4c1c10683d9f1b","sha1":"af42aaf72b13786a9b728a0047d8a59665fa195a","sha256":"37b4f2fa23b0845cbf354754e18cd3c603a3233928c83da9484b72f63143be4b","sha512":"d7c1ef2feccbd53cd86c6b098790d1d7baacd6deb927bdc11a463bbd3cf46097c1338ed0b70bb991d819be6060386503ecf4d6c5490914f313ccdc9229d92420","ssdeep":"","tlshash":"63b0125db59622add35e201634294111214715950a809124612586e8d506b148170ee5","size":90,"data":"","first_seen":"2023-10-25T20:02:32Z","last_seen":"2026-07-16T21:57:18.567726Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ffc3694c37c402d45a096a958480e1ea","sha1":"d2002c8c205a48d58bbbef3ca9d07e64ac56f82a","sha256":"21f5d204d3e6052da29bf29322cc93737b2d2e4a14a2ad39ed2384b353765442","sha512":"3231321f71dc32f822b878e351a6d440795d35b696cf0dda568b58557945c682967bd811956ec1033bbe3ae539e0e26d7707018aaab1ba774e8f176d36048a93","ssdeep":"","tlshash":"0ed02b9ff7ba221742ca6518949b06171029f78a0b048bd3003709ea94264c10233f79","size":272,"data":"","first_seen":"2026-05-27T18:49:35.000622Z","last_seen":"2026-07-16T21:57:18.339192Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1f960c73477593dc9c3096993a290edc","sha1":"5e56e4e5e0c17f3b845c5c78c676f6403f3e3cbb","sha256":"078049e2050a3ad3520a2eb65c4668c4c0e313d38dfa1c4f17e469d72347e353","sha512":"9f5b3d187f4b615132c783cc9feb55eb799ed4ce126d52c7170a275e69e88c863e95a719a1f789747642c1b20df8f3c3f96938e2a72532a557e40380ba51464c","ssdeep":"","tlshash":"22c08c7db23a202f054a904d281bcb10d05bf6c02e828f2000ea3ed88101a1c50d89a8","size":151,"data":"","first_seen":"2026-06-03T14:26:58.49363Z","last_seen":"2026-07-16T21:57:18.234684Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"22b66f05643293c428e65082f16bdbea","sha1":"09c8040d891073eefdd005b86392fd661b706242","sha256":"8a920ccce350a678ff118c6cb67119a9f5dca3ad0ffc98f011d4ff81f25c4a43","sha512":"dac63cf9000a717b59a67f4c49d3b68924b56895e7d27c24aca41d021ea3d179871f80a28ff0bb1b494e489310db968b87148b817e1f67820bd6de3c0d9e224b","ssdeep":"","tlshash":"1ae0122bb69b003f48cb615b78558e11801756f79c479b25b3322ebd9016b5ac188efa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.684416Z","last_seen":"2026-07-16T21:57:18.367778Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www-emu/page-builder-client-server-components/v1-stable/static/js/login-promo.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"805c248cb96457017547f9b3307d3e98","sha1":"fefa7c78f6b158ce85015f350b0e89efd0e11df5","sha256":"57024ac988f409dd69c3ae79a536b06cc961929873f4d5496273f61b5fb675aa","sha512":"b4a5c412c8420c8acb86a439d4aec6f785c73b56861ed00845a939cff1aa62b67cc7517570b63951c286aaf9774d1aff7f3d8623699bf44b0b5414f4b194efb1","ssdeep":"","tlshash":"9811633573465131d2f34bd7b199f3c366700b897c402185f06c0d4739a9867baa5ad3","size":908,"data":"","first_seen":"2026-04-16T20:03:25.364286Z","last_seen":"2026-07-16T21:57:18.081219Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d1b8cf8db40446dcfe7e12e95a50c84","sha1":"ecabad3e0f57376a5a6e34b4416e95345ed01cbf","sha256":"6f9cd79d38fb121d55b89b99fb35c19fe28add8c2b2eb3f51156f57e039509c8","sha512":"dfe6b5b3c451b9dbc01a7d77acc26ec167f2da4cfbfa7e9a5ee848fc886854475788b4fa94b2d0588067a77ab4945b3b3bec37175357218bb59febefafd10104","ssdeep":"","tlshash":"df113a6a765c1cfb44ce3d5a78c0057114bbc3b35ac4fbd9bb3956f98c61a014064ea4","size":921,"data":"","first_seen":"2026-05-20T05:55:48.979058Z","last_seen":"2026-07-16T21:57:18.430415Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cb67278f36688bcd1eddf2734e8bb022","sha1":"d458175fc39c410a08d8d1be67302033ae01ff84","sha256":"ccd570cb7ccc67068ffac3d1ce7f31429746bee143737b16bc481bf2f0c167a8","sha512":"a5aeb2b343c0bcaf309ebc6013a98e1d794ed03790003ccd918044e7224f862a7e495b19be1f8ac0a70504a3f216b3f9af5fa8df8dfc5391bf012f3bbadc93f1","ssdeep":"","tlshash":"8cd02b9ff7ba621742ca6418d49b06171029b78b0b088b93003709ea94258c10233e39","size":272,"data":"","first_seen":"2026-06-13T16:08:38.928634Z","last_seen":"2026-07-16T21:57:18.375482Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bf1cb12269d80ecf06fb046d9461fbca","sha1":"a2d0a921df87edda2ca3b52739ab789563259b25","sha256":"23d4d90db7596e1bcc2d49c283f92ec31e68a87e5ddffb3ca6de153cf82007ed","sha512":"f8ee3347424088df699ce0efb9b12a302e7a5b75d02d51ddbacf001979865caa776d36d3e218e3be42153b79e95706a9732bb14a5f7c2c441049b6bdb20536d9","ssdeep":"","tlshash":"2cb0125db1a622aed35e2026342a45116047159509849524a12586e8d105b144030ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:30Z","last_seen":"2026-07-16T21:57:18.256923Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/scripts.3e6c58394308c0d5ebc4.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73364fb111159b3b427f8251098f4afb","sha1":"50e3acb384bb907a1230ccfeb69e712519a1deb5","sha256":"5a37bee2798d78c27cc67cfccdbbf9682197f3e8c553dcd7dce8fd3220da4fa0","sha512":"28386e02a732faa56670e964a70485dd3b69fb05ba3e6e2af66cfba64e79371190d4a37905f3dff1110ec9879ec4aa33b4852f8fd4935ce50d1e27794de4998f","ssdeep":"3072:ebkdxHwTslFlx652lXWcIfxkA5HDBL3hq2b:ebkrQO5g1xkA5Hh3kc","tlshash":"7b34e88cb2d5f03102e7a176906f120bf336385aa04ac098f539ddd56db898e6277f79","size":236467,"data":"","first_seen":"2026-07-10T12:35:59.998992Z","last_seen":"2026-07-12T21:21:00.133019Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d49ae21638505e70352c1e04663b92b1","sha1":"90e52df5558074fc20e4130165e60cc1966ac0bf","sha256":"9eef800a85ac102775b050c3d46c77b51494d58f72cb0af0188ac6e6e611343b","sha512":"9a40bb76f25866294314a29511c0aeffa9bfe5c811f25ebe221791f1807b9f3e24075a087d35b9cc37cc01c4f775da26bbb30d69d5a5f0c73de012b5c5b97f09","ssdeep":"","tlshash":"c2b0125eb19627aed34e201634394111300715a509809124616586e8a205b144034eb6","size":90,"data":"","first_seen":"2024-04-24T13:59:13Z","last_seen":"2026-07-16T21:57:18.510877Z","times_seen":379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"99b847bdfa1b06f6858379a63998357a","sha1":"8be94fee7832548b308f668d1ffb807965dcc15f","sha256":"ac2bd56d335d5bedc0d93d28b69d19fa9487f534c31956d574da1cc6494665b4","sha512":"d56e8b10faab580e693f650b4742f67dc10cec5ac585ad01c26312a8da650f225b2d5af2a09ec7a5b72bdec369ef00f003e801dfa16ba669a9507b8a3895e599","ssdeep":"","tlshash":"82e0ed2bb79d043f088f715b6c894a1180175af69c479b25623219bd501aa4a808caea","size":353,"data":"","first_seen":"2026-05-27T18:49:34.572459Z","last_seen":"2026-07-16T21:57:18.503968Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c24f71b96916cd42ca58d0c2d27ca432","sha1":"0419009145575e50efc1915a6377cb9b3b05ad69","sha256":"7cde1b28661de72bd5ef977917d04d475389ff2c9a2eae9b365c9b028d274200","sha512":"18af0ddf48e630432826a335282fd573d089c4fcf2b9ca5225d2a034e296a67f2c4b9f964e267323b33e1fe2ffe945fc2a084df20c6003cf0ec76fc299863ed5","ssdeep":"","tlshash":"4cd02b9ff7ba621742caa41894ab06171029b78a0f048b93003709ea94258c10127e39","size":272,"data":"","first_seen":"2026-05-13T09:00:16.933972Z","last_seen":"2026-07-16T21:57:18.227935Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"100c3999721848c0e623cf63ac84cbb1","sha1":"6094e971e06ecdde5b921b4060201189a40594e3","sha256":"241da4628322872eaa2708d194a2375534aeffac300aa8e271a5f71cab2666ea","sha512":"f88476ec5049669a146cb205a36af4f4a6fc37281e940255474bc3f348a6a41fea2549f3470e1b7a17a4addccb446290184b4aaf0cdbc50153b70c54720dcd4b","ssdeep":"","tlshash":"75b0125db59626a9d35e202734294521608715950a809524a23586e89505b654030ea5","size":90,"data":"","first_seen":"2024-07-03T04:01:18Z","last_seen":"2026-07-16T21:57:18.262246Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"da6d7f790b539c89eb3c717fc223987b","sha1":"4474bfd442a114d44d643b8e835e34647222d2e0","sha256":"13198d8b7edb004958b2c5d1b08ebe2a258f421743f7b2638c041e1199ef53ba","sha512":"e96c620a3a2893b45251f7a324921a4f67553311edc380aa95d66bcfc094238251e7d2fdb37fb207ffc7bdfd7254804970945a3b44ce2581a5a48b93bcb729d5","ssdeep":"","tlshash":"e6e0122bb59d003f08cb616b79454a11809746f69c4b9b25b3322efd9056a4a8089efa","size":358,"data":"","first_seen":"2025-10-22T22:31:47.465572Z","last_seen":"2026-07-16T21:57:18.477349Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2cbe8fd6ffab32f01f2d7d8dcdf0671f","sha1":"bd8d65ca4263208448a895a05b7d6495c25324da","sha256":"0f8fcae5e9d0215080c5cd99b957d8f91a1d77430dbf168ebbfc05be88b9c3fb","sha512":"a72cc6e52036d14a98e8ad044e4c09b074957db85598579f3201ee09bdae2bf4833170a3d1be5bb03711a440c6a3ea7b8d8ade6507b812e4fe225c1e768e8cee","ssdeep":"","tlshash":"fab0126db19622add35e201634294111214715950e809124612986e8d106b144130ee5","size":90,"data":"","first_seen":"2024-03-28T12:54:32Z","last_seen":"2026-07-16T21:57:18.595978Z","times_seen":863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"300385b335c2d7092fc60ea3f9f9dc62","sha1":"1c83c8b1cdddf42ce0b335680e236d48a2cb6a12","sha256":"759f76233c7754e5f89086507fd983c1997b194af60495e464fe548d2130bc24","sha512":"b20cfb862125a7f093964196a0d51fdd6dda388db30364d33a462e6ba94653e12cd573fcb5a59d8144aa940a5fb71b2456602727f6aa0cab5fe73ac4a6546f87","ssdeep":"","tlshash":"1fe0122bf69d013f08cf655b7c89491180175af69c479b25b3721dfd9016a4a8098afa","size":353,"data":"","first_seen":"2026-05-27T18:49:34.943625Z","last_seen":"2026-07-16T21:57:18.557344Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d41a4fb24966b39248a793641718c116","sha1":"ac949c67fc37482dc6952438d93ee8dee3e7dca8","sha256":"abfb628c64afcde7600dd45736e5240869678319a9d78d882b63952995844331","sha512":"56aa3172b9fd1bcaad3572ae33c4bfd29af686c394452c222479c5b5028319ec8e43f5586b47f2d33ba62666fdfea8e965ca14f1ffb361a7ded2c90ecc8ffaec","ssdeep":"","tlshash":"e9e0923bb69d003f48cb601b78894901812743f6bc47ab2173321dbd9003a4a8098afa","size":358,"data":"","first_seen":"2026-05-28T10:31:18.746278Z","last_seen":"2026-07-16T21:57:18.344885Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fd1a1909c468c8798e0640009a175c45","sha1":"7cb7fa7e6e4e8fcb0936ad001bf7e07f29912ea5","sha256":"1f94df8e8087d4ab550d6acaab496723ce21b4269f192e503ef01e9e1255cf55","sha512":"20d88b8543edbd4a7a0d94218fa81bd71dc077c24b207d902fd9f0470b29829cd1ac8cf54e807f518745745c92b84e47fd886f3dbdbfcccb65e8e5890aa59efe","ssdeep":"","tlshash":"43e0122bb199083f08cb755b78654911805b47f6ac47db2576321dfda016a4ac48cefb","size":358,"data":"","first_seen":"2025-12-22T12:12:58.076193Z","last_seen":"2026-07-16T21:57:18.365081Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a4e368a241d81515ec6dc9c367a4dc6f","sha1":"c8d11f4a9bbfd77c107eb7bccd64d513aa2daf98","sha256":"1231285a7d115a57ad30b97508b21c5cca3e34cb66ed3b5ff297bc3f0c85a38e","sha512":"9ad9c431dc5d8fb403e1414b179ce10aecb8ffe75dcd1c4a29040514a94294fc825545fe827fb269f74e55702f2e49a7e300f881ccfea8994cffa0edfb29b589","ssdeep":"","tlshash":"75b0125db19626a9d34e2017343941116047159519809124a12686e89205b148034eba","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.464335Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c7ccfe24c89854980ace99f89246dcdb","sha1":"40bbb64d889392ff6fd7ac582668f2c7aca819d1","sha256":"fc764726b5a3f5c01eef50e55740c50c21be97493d8b685f718a38bbcd334b91","sha512":"53703c3ec0d3688b464890de32b377e122c7850faa8a0dcdf851baa44dc855cf024fd9a219e18e95c2f22cef57325b0cea5fd3f35f1a77237a0a5a1cb6aa4243","ssdeep":"","tlshash":"ece0c08cf0d7613401d7705730add512301f3c72806cd0a8b2bec6e48c6564e817795c","size":358,"data":"","first_seen":"2026-06-18T04:00:49.688421Z","last_seen":"2026-07-16T21:57:18.362303Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8c21e09cd070b94f6fba390a0361b702","sha1":"8f1305689e003f7c93e0380fd88007fa575f252e","sha256":"49299448eb037640de7d12e5a2833696cd7669a4e70d97819c3969b5e2115e42","sha512":"99f71d102b757a30049bf737cb6e04f3cdfa6a76cb63660bdbb06aae9476b0b9886e23dc0efb16a6feb80c1aa961d643ec1e747aeafc7326f7817080281c3f9a","ssdeep":"","tlshash":"b4b0125db19a23add34e201734794111204719950980d124613586e89125b684030ea5","size":89,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T21:57:18.276498Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5627fc3470388bf5c17c69be3affc350","sha1":"72073f8da49dc5d041271873264baa7719f9bdfa","sha256":"5541cbd7482138808c14437a25976252b6560cc51eb44c315289b1a6fcc69404","sha512":"583042686a09fdb983f61cd1205e7e8524bf1ce84dca7efc9f189252f96ab998bb58154c9fdec35a07c486a4f196a9e7c62f4200d79082714da5e22e35db278a","ssdeep":"","tlshash":"54c08c3db23a202f05495159281bcb20909bfac00e824f2000ea3ed88180a1d50d89a8","size":151,"data":"","first_seen":"2026-06-13T16:08:39.058121Z","last_seen":"2026-07-16T21:57:18.541623Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d22f9ccede0507239a5395fa243fd461","sha1":"21fa13e8b2ac278743124d45ef21f6aff76249fd","sha256":"4606dc3ee7e54e50b4ef54efd1fec100b8bed73388346fb8ffad04569f7377f3","sha512":"6223c4aae4fe8e651fa9eca5497ef0106311da67e9939eb9cfddfebc32ecd043c188a99723aac944c2b369d654d58a0df3ad23ef8cf2f2f46b81f75737cde40e","ssdeep":"","tlshash":"a4a0241df3c531350347743f50374115300311710c01c300533744dc400d3454014df5","size":79,"data":"","first_seen":"2025-12-22T06:43:29.945026Z","last_seen":"2026-07-16T21:57:18.594242Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"20141ca89b04fa5484ea62addbf2547f","sha1":"c51641da1ef489f45690a2af03cd843967f742e5","sha256":"17b333ed44e4e8d06b39d778e96ad661c45aa02ea285d38f7dbb89596e24d94d","sha512":"e5c79678c3df2488fde9f23fd1a8a527e05c8161f463d4f110da3fa0d2a16617db13c4957f6eda9baa91972e4e26c468f12f0c5ea786bf7fd9ea7d01b25f8571","ssdeep":"","tlshash":"5de0122bb59d103f08cb715b78494e1180174bf79c47db25b2321dfd6036a4a8098afe","size":353,"data":"","first_seen":"2025-12-22T06:43:29.910526Z","last_seen":"2026-07-16T21:57:18.160063Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"sfdcsession::getIdentities Error: Invalid domain to get identity","filename":"https://login.sf.tumee.com/jslibrary/SessionServer212.js","line_number":43,"column_number":188}]},"http":[{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_identify.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.805Z","timestamp":1783891221805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_identify.js HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317684c37783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"df8b22f19c089482eeac4e0f8d23e70f:1781646330.361227\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Tue, 16 Jun 2026 21:45:30 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nakamai-grn: 0.a44d2417.1783891222.1d3d93dc\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=5, ak_p; desc=\"1783891222030_388255140_490574812_429_14447_32_36_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6125,"size_decoded":2589,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c06adac341baba15f12d0fc47eeb45f9","sha1":"b7246f95ef892327c4de02326bdb4418901620b3","sha256":"5976b13da122502ea6c6be930f0b2e5d5c2c4e65b52754dde03a85a094bbe8b4","sha512":"d995c3321103fe7356c78e58b9fce2c70610396f50d344d9ab269d3a9ff2eef4fd8d9b7b1878f5e4076d0846f51ca3fcf8af55ee8fb251989894b05f02cf119a","ssdeep":"96:XFlKGIsGOGyHpZlpdZTBDoc46/iE3XCIG2It8GWyiH3aGeScJ15GeShMMP9S/1EK:XFNpd/DocnD3tA8FyTU9SNCO","tlshash":"2bc1a5892be7307605a330796f9fe005b63190172d49ed907c8e9244bf6061faa73fd5","first_seen":"2026-07-10T12:35:59.981204Z","last_seen":"2026-07-12T21:21:00.104776Z","times_seen":5,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/xsf-nav/v1-stable/nav/www/prod/en_us/prospect/config.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.010Z","timestamp":1783891222010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/xsf-nav/v1-stable/nav/www/prod/en_us/prospect/config.js HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317698c660731-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"77d3ca79104bcf538ed0de0a2c0d4b48:1783724479.026231\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Fri, 10 Jul 2026 23:01:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nakamai-grn: 0.844f2417.1783891222.71794db\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783891222087_388255620_118985947_43_4064_28_32_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97089,"size_decoded":18164,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (65482)","md5":"56865a02d72acea7c1846b55ba3d8e96","sha1":"dc650cde3600b1f6c03322e35ffe9f47391cc142","sha256":"87b028d9b5e34c260ded7207b069ac8f13684242718e93a35e7c9ec75f03da4f","sha512":"cbfe4fcb80e96181699f2a93fe4d0964f0cb88cd19d5ee67b3949a4c63f15387d82d842bcfde850b335c48b14f6b1c7ec8f6c5811f5b7e67459cbfa5ddc5a611","ssdeep":"768:6oCzjTPbroZrT/hnF95L9LYhfr3pWz0GPBK+eFI7b7kCxIyozR8Q7cF8gDQxlWFh:DCXTPtapF7ACzj61viXAjN6Af2L","tlshash":"379347af0f684633dfa47fd554a7e29fe44e128aca419eccf5909d0952d03d92e2b0e1","first_seen":"2026-07-12T19:53:38.776562Z","last_seen":"2026-07-12T21:21:00.105428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/geo-data.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.195Z","timestamp":1783891222195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/geo-data.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/bottom.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a3176abc70783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"8a20280cac70d598c157b9376abe4ae1:1781683757.440887\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Sun, 12 Jul 2026 05:22:57 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783891222.d8183bb\r\nakamai-grn: 0.cb37cb17.1783833776.8dc53157\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11567,"size_decoded":4181,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11529)","md5":"5df6c43ea2c3c6ffa4ca6674ea90c1e8","sha1":"18554be278362ee9f9627eb0e83c0e408ff84b63","sha256":"88c4c34efbfa446ce1bb7fcd32147fca46d563478d75d60bed07130ded65ba77","sha512":"b4be03a222dd67baec158d6c6d34d2286bddc63ed45362908988e1272527374436edb0b3f4a8f27ebb3d01dbbfc004f69f000cb8d85bc30df77eed9ab9640394","ssdeep":"192:KUPzwLz2BoEzwU6yNaKWiLby1ldfM7lthVang+d//Ts2VIk:Kb2Be6aKH6130lTAnNJQ2VIk","tlshash":"f932d7e26996da7403e5adcdc8196295f50a9d3843cd78a4fb4efdc0b506c0530e2bf5","first_seen":"2026-07-10T12:35:59.937849Z","last_seen":"2026-07-12T21:21:00.106315Z","times_seen":5,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/logos/static/ot_guard_logo.svg","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:23.273Z","timestamp":1783891223273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw; gtm_session_start=1783891222679; OptanonConsent=isGpcEnabled=1\u0026datestamp=Sun+Jul+12+2026+21%3A20%3A22+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202604.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026consentId=94243c91-c460-49b6-857c-f3832f57b8e5\u0026interactionCount=1\u0026isAnonUser=1\u0026prevHadToken=0\u0026intType=7\u0026hosts=\u0026landingPath=https%3A%2F%2Fc.sf.tumee.com%2Flogin-messages%2Fpromos.html; webact=%7B%22l_vdays%22%3A-1%2C%22l_visit%22%3A1783891222172%2C%22session%22%3A1783891222172%2C%22l_dtype%22%3A%22SFDC%20Network%22%2C%22l_page%22%3A%22SFDC%3Aus%3Alogin-messages%3Apromos%22%2C%22counter%22%3A0%2C%22pv%22%3A1%2C%22f_visit%22%3A1783891222172%2C%22d%22%3A%2270130000000sUW0%22%2C%22seg%22%3A%22non-customer%3Aus%22%7D; OTSessionTracking=8e783e8c-0ad0-475d-8fca-4a03afa0a02a; sfdcConsent=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:23 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a1a317717b08783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"b57c99c9d1e3c50b2114c6db053d7ff0:1780914965.434407\"\r\nexpires: Mon, 13 Jul 2026 01:20:23 GMT\r\nlast-modified: Sat, 11 Jul 2026 15:01:33 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.874f2417.1783891223.2a6c3291\r\nakamai-grn: 0.15361302.1783782093.10b29067\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":868,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-07-17T10:42:39.608064Z","times_seen":172077,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/logos/ddb906c9-f57b-40fc-85a1-c8bcbc371b0d/6a33a761-886e-4860-8e17-abc0832f7a62/corporate_logo_big.png","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:23.300Z","timestamp":1783891223300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/logos/ddb906c9-f57b-40fc-85a1-c8bcbc371b0d/6a33a761-886e-4860-8e17-abc0832f7a62/corporate_logo_big.png HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw; gtm_session_start=1783891222679; OptanonConsent=isGpcEnabled=1\u0026datestamp=Sun+Jul+12+2026+21%3A20%3A23+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202604.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026consentId=94243c91-c460-49b6-857c-f3832f57b8e5\u0026interactionCount=1\u0026isAnonUser=1\u0026prevHadToken=0\u0026intType=7\u0026hosts=\u0026landingPath=https%3A%2F%2Fc.sf.tumee.com%2Flogin-messages%2Fpromos.html\u0026groups=1%3A1%2C3%3A0%2C4%3A0; webact=%7B%22l_vdays%22%3A-1%2C%22l_visit%22%3A1783891222172%2C%22session%22%3A1783891222172%2C%22l_dtype%22%3A%22SFDC%20Network%22%2C%22l_page%22%3A%22SFDC%3Aus%3Alogin-messages%3Apromos%22%2C%22counter%22%3A0%2C%22pv%22%3A1%2C%22f_visit%22%3A1783891222172%2C%22d%22%3A%2270130000000sUW0%22%2C%22seg%22%3A%22non-customer%3Aus%22%7D; OTSessionTracking=8e783e8c-0ad0-475d-8fca-4a03afa0a02a; sfdcConsent=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:23 GMT\r\ncontent-type: image/png\r\ncf-ray: a1a31771ab88783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\netag: \"58ce4d66b1c7f253e02d4caebec650a5:1780914965.889893\"\r\nexpires: Mon, 13 Jul 2026 01:20:23 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:36:05 GMT\r\nserver: cloudflare\r\npragma: no-cache\r\nak-uuid: 0.874f2417.1783891223.2a6c32a2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5450,"size_decoded":5887,"mime_type":"image/png","magic":"PNG image data, 398 x 279, 8-bit colormap, non-interlaced","md5":"58ce4d66b1c7f253e02d4caebec650a5","sha1":"b791ce5f8fac2168cbdf0b46e630d7129c51f83f","sha256":"4abcda617812df2679c50d148ffe64cc5d8fb5afd9296e5cbd8970175625fe36","sha512":"61b74c4b3f46a14d88de3b3b35e0e0f792c6efb8a3725f4b9568b3a68fd2ca47506b8c757fbad1b4af5cb1e0c873a46a0e87d17fd204757f284602b921f29384","ssdeep":"96:iGjlDAdJwWd263bo85TrKzkY3h9zpWKt2C8EioOVV95JGqDnKWFtWA8oax:edJPo8lmDzpWT/oOz9TG4ftmoax","tlshash":"32b18e0de6031e43d491dbe6ce12a1486c4cf3e5ce7653d92fa3dab5c2842654e05ec6","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-07-16T21:57:18.097441Z","times_seen":1916,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/login/sessionserver212.html","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.259Z","timestamp":1783891221259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /login/sessionserver212.html HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncf-ray: a1a31764f903783d-OSL\r\ncf-cache-status: DYNAMIC\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public,max-age=86400\r\nx-content-type-options: nosniff\r\nexpires: Mon, 13 Jul 2026 21:20:21 GMT\r\nlast-modified: Wed, 23 Aug 2017 20:39:30 GMT\r\nserver: cloudflare\r\nset-cookie: CookieConsentPolicy=0:0; path=/; expires=Mon, 12-Jul-2027 21:20:21 GMT; Max-Age=31536000; secure\nLSKey-c$CookieConsentPolicy=0:0; path=/; expires=Mon, 12-Jul-2027 21:20:21 GMT; Max-Age=31536000; secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":869,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"f1375ef84643a5974d735836e66d3829","sha1":"a8ea06a865b284d2965aeb5108c445ff53e5a285","sha256":"db743dbd91a699d36f6a755ad2c8eec5ce0d1b3715df50a651b7c24de11c1811","sha512":"23a5641b009cfdc0b0bfd0abf913ed9f0a1835fc94fa0884e0c4cf6e1537fe10e25e0840cf7e186bad3a28dca96c35845448f5f0965a94d6e11f4d3060daae86","ssdeep":"","tlshash":"13b011ca2e8ac8a880c088c0a8f0e00c822e8020c222cc0003e888ba2b83b8c0c20288","first_seen":"2023-04-05T16:54:26Z","last_seen":"2026-07-16T21:57:18.129118Z","times_seen":1016,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":0,"dns":7,"connect":1,"send":0,"wait":212,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/fonts/avant-garde/AvantGardeForSalesforceW05-Dm.woff2","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.780Z","timestamp":1783891221780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/fonts/avant-garde/AvantGardeForSalesforceW05-Dm.woff2 HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a3176849130731-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 210551\r\ncache-control: public, max-age=2592000\r\netag: \"9c63b3c7d486337425fd8eba72f19b2a:1666632161.138976\"\r\nexpires: Tue, 11 Aug 2026 21:20:21 GMT\r\nlast-modified: Mon, 24 Oct 2022 17:22:41 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.39e61702.1783680670.6b04119\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670103_35120697_112214297_73_7426_19_22_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68020,"size_decoded":68629,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 68020, version 0.0","md5":"9c63b3c7d486337425fd8eba72f19b2a","sha1":"3b55caf7071e741d43f0979643bfc9903eff19d5","sha256":"c9e4fa78c0c98df6a1903d28156534861220ffabdc6491a028b2d77184b20abc","sha512":"0649a10393c1204e5054629681412db781ade27f6cd40a5a72d532ce7aba4f4b4859245cc34f1fee62272e4daaec1794d40bc5c9019a3351df1bfe9fe57973d4","ssdeep":"1536:KOuzDEoBQDk2LehAE0HXmg7vpcvS5yaLy7JQ7aPUfP16jQo9NKByO:KB3RBQD/QA3XHhq/xtEN18Qo9NJO","tlshash":"606301866e354c48e1d8f810c8b6431327655a1d2974c46323d320bdb973afbfafd86a","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-07-17T03:04:56.332347Z","times_seen":2849,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":5,"send":0,"wait":83,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wp.sfdcdigital.com/en-us/wp-content/uploads/sites/4/2025/04/PHP-login-free-trial-BG.jpg?resize=768,240","fqdn":"wp.sfdcdigital.com","domain":"sfdcdigital.com","tld":"com"},"ip":{"addr":"23.36.77.170","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.038Z","timestamp":1783891222038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.sfdcdigital.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Aug 2025 00:00:00 GMT","end":"Wed, 12 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:77:77:C9:C2:B6:87:4E:17:34:C9:CC:37:0A:B5:3B:72:02:EC:A6","sha256":"B5:D0:F5:B3:33:2A:89:B4:D9:45:B6:63:6C:9A:0A:5D:21:5F:48:DB:C2:13:95:2C:AC:31:61:D7:83:15:8A:01"}}},"request":{"raw":"GET /en-us/wp-content/uploads/sites/4/2025/04/PHP-login-free-trial-BG.jpg?resize=768,240 HTTP/1.1\r\nHost: wp.sfdcdigital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/webp\r\ncontent-length: 1070\r\nlast-modified: Tue, 23 Jun 2026 15:39:33 GMT\r\netag: \"fcdc8ab353f3bb67\"\r\nx-bytes-saved: 41442\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-rq: arn1\r\naccept-ranges: bytes, bytes\r\nstrict-transport-security: max-age=31536000;includeSubdomains;preload\r\ncache-control: public, private, max-age=3775189\r\nexpires: Tue, 25 Aug 2026 14:00:11 GMT\r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783891222045_388255142_177572646_407_12126_1_0_11\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1070,"size_decoded":1717,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7c43dcd804b4d02b1e97d1f130f251cd","sha1":"5ef249cdcde861022d709b006d54697bd347d701","sha256":"68d996bfd92aa77497755c92e71b3b77e5608cc16763eb1181712fa5a55cb67b","sha512":"9abe04d6e4f44650ef9af9e8a95c0a9a6715d9774d47fea0b937ba8ac7361bd25b35f83e960b2b961c874be1b22298c46b309622ac8457a4adbaf77b1ff5e546","ssdeep":"","tlshash":"3b11215c56343698d32e53f6502051fb431eb36f0677921cd26c98b3405574d2f1e6ac","first_seen":"2025-10-11T09:00:05.263181Z","last_seen":"2026-07-16T21:57:18.132721Z","times_seen":108,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":5,"send":0,"wait":19,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/fonts/salesforce-sans/SalesforceSans-Bold.woff2","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.777Z","timestamp":1783891221777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/fonts/salesforce-sans/SalesforceSans-Bold.woff2 HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a31768490e0731-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 210551\r\ncache-control: public, max-age=2592000\r\netag: \"68a71533d08ff9251d6f179043a4781b:1616101752.180704\"\r\nexpires: Tue, 11 Aug 2026 21:20:21 GMT\r\nlast-modified: Thu, 18 Mar 2021 21:09:12 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.39e61702.1783680670.6b0411d\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670132_35120697_112214301_41_6098_9_18_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27648,"size_decoded":28256,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27648, version 1.655","md5":"68a71533d08ff9251d6f179043a4781b","sha1":"48bd2035de99b4477d6a2624bd52fca362394105","sha256":"13873c462325bd5d2b2bbb385fe971e1ced14d0d698e2eabb917fdf7a4af438a","sha512":"d149072e304887e0d0c77c3804da904bac177018b0142036f63bcfdb07be0ecaec825e7c6ddd9daf0ced0763d5f2aa42dfa1e259fbd993a50c76b19f20a4cc3f","ssdeep":"768:9Q0ocbdBOOvZmBALA5aSayVude/CT0BkNYm66:95tZDvZmAWKywUQ0MR66","tlshash":"f3c2e1e426e94be3d5a0aa477f2c96ef311dc49ec3512e88b2ac0d66c095e74120ad8d","first_seen":"2023-04-24T21:29:35Z","last_seen":"2026-07-17T03:04:56.330999Z","times_seen":5993,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":84,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/js/public/nunjucks-slim.min.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.799Z","timestamp":1783891221799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/js/public/nunjucks-slim.min.js HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317684c30783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 210551\r\ncache-control: public, max-age=1714789\r\ncontent-encoding: br\r\netag: \"78fc369d6fdd305de0b0a3eaea038d1f:1626391003.414164\"\r\nexpires: Sat, 01 Aug 2026 17:40:10 GMT\r\nlast-modified: Tue, 26 May 2026 23:42:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nakamai-grn: 0.25ad2c17.1779838935.83431b74, 0.39e61702.1783680670.6b04116\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670104_35120697_112214294_36_3465_10_15_15\";dur=1\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33478,"size_decoded":11309,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (33432)","md5":"78fc369d6fdd305de0b0a3eaea038d1f","sha1":"05d6127f3bf2918323989a8c043f7378b386c887","sha256":"2a99120b93dc55bc88954cc7f5c193533bc18510a105232cf3d6bfdaf07f660f","sha512":"04b7b475b6b1c281b24c9688fd976df884915a0ee0c9e1eeccec7013f97ffbfc2a05716d5bfad99d3220d445c4194f2a4b56921e43358463fc41373f09e63104","ssdeep":"384:usERpZZk9UOuxriJ0okPky/N4RpAdHRksFTdz/5vVocg5IQMywtpdr3mOB7NdOlP:ck9UOdBOJNcKHdJqc2WeiE5","tlshash":"3fe263dcf2d2f06543a3a5b5822f500bf33e6999344e9068a259d4e6bcb954e8037f7c","first_seen":"2023-06-30T17:49:22Z","last_seen":"2026-07-16T21:57:18.127205Z","times_seen":582,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/ext/v1-stable/gdpr.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.178Z","timestamp":1783891222178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/ext/v1-stable/gdpr.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a3176a9c10783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"4158e00287f236ba5af2f02fc8847cd1:1745301939.005293\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Tue, 22 Apr 2025 06:05:39 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783891222.d8183c3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3642,"size_decoded":2277,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3608)","md5":"ed10bc90a74a91dfb9ebbebf2d70ba2f","sha1":"3b82b2eebd740f1e1a71265bb7b5d1ed32247057","sha256":"d2bb902ab169e35913be24976a7dd7a51613acdcdcd87d35e4593758bd9675ad","sha512":"4c33b85bac5af7a56c57390b160e5f57a6e4f5162f5a5194bba3adfb19945a200d7e4923aea21b9522a5526572cf22df965bd69717b5ba84a0adfc0d8d398f65","ssdeep":"","tlshash":"9971a5ba73b8f33a53d534edd4688180bd0c197b974d4419f06e69a21016b4227fbfb2","first_seen":"2026-07-10T12:36:00.022552Z","last_seen":"2026-07-12T21:21:00.121181Z","times_seen":5,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wp.sfdcdigital.com/en-us/wp-content/uploads/sites/4/2024/12/php-login-free-trial-bg.jpg?resize=768,960","fqdn":"wp.sfdcdigital.com","domain":"sfdcdigital.com","tld":"com"},"ip":{"addr":"23.36.77.170","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.039Z","timestamp":1783891222039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.sfdcdigital.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Aug 2025 00:00:00 GMT","end":"Wed, 12 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:77:77:C9:C2:B6:87:4E:17:34:C9:CC:37:0A:B5:3B:72:02:EC:A6","sha256":"B5:D0:F5:B3:33:2A:89:B4:D9:45:B6:63:6C:9A:0A:5D:21:5F:48:DB:C2:13:95:2C:AC:31:61:D7:83:15:8A:01"}}},"request":{"raw":"GET /en-us/wp-content/uploads/sites/4/2024/12/php-login-free-trial-bg.jpg?resize=768,960 HTTP/1.1\r\nHost: wp.sfdcdigital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/webp\r\ncontent-length: 2724\r\nlast-modified: Tue, 23 Jun 2026 15:39:33 GMT\r\netag: \"567231824c7b3647\"\r\nx-bytes-saved: 4551\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-rq: arn1\r\naccept-ranges: bytes, bytes\r\nstrict-transport-security: max-age=31536000;includeSubdomains;preload\r\ncache-control: public, private, max-age=3775189\r\nexpires: Tue, 25 Aug 2026 14:00:11 GMT\r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783891222055_388255142_177572649_88_10822_0_0_11\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2724,"size_decoded":3369,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6ca877bf7cfcb32105a9f855418b8cfb","sha1":"34a1151ecc34926ca76e6b801557dabe33a887fd","sha256":"1566e96dcce6d0b8fb530d8e618cfd5ac377b6af1681764a43afcfd83169edb1","sha512":"882e43fe05e26124d6ee42ef6b174ea66851f73cfd8fc2c97b3c9300813684ac7c535c6c0716314b22a04a841aef694824cb0c092c4ef32142790e952445b75e","ssdeep":"","tlshash":"a9514d33a2acbe2be1e9322fbe74a504a55163a74486540d15e39153301dba77d5b3c1","first_seen":"2025-01-10T07:49:08.952939Z","last_seen":"2026-07-16T21:57:18.074678Z","times_seen":181,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":14,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/8e783e8c-0ad0-475d-8fca-4a03afa0a02a.json","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.216Z","timestamp":1783891222216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/8e783e8c-0ad0-475d-8fca-4a03afa0a02a.json HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a3176adcd6783d-OSL\r\ncf-cache-status: DYNAMIC\r\nak-uuid: 0.874f2417.1783891222.2a6c2fd1\r\ncache-control: max-age=0, no-cache\r\npragma: no-cache\r\nexpires: Sun, 12 Jul 2026 21:20:22 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:35:57 GMT\r\nserver: cloudflare\r\netag: W/\"87cbef0e2ab647c178b7e5614b36a17a:1780914957.905185\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8615,"size_decoded":2743,"mime_type":"application/json","magic":"JSON text data","md5":"1730fdc1170cc2de64c7c9c7724a5184","sha1":"59d7e162b129f2bacc2f4817c028e7fe61739495","sha256":"d2b960e1ddfe897a64c553d6645f5a801057834ec64eeeee4bb3de487796fbcb","sha512":"c5d10acb4318e918c729188811018688363f2549bda5d56d5bf77d51ed5619834d7003be61b7809a298af25d0845065f0789f69aeda9c54e5b9a4d65f63a2e48","ssdeep":"192:3X5Aj3ymnnr2Gu4l7weKgQPdJhChf3BX3BH8Hs09xD:ijCmnnr2Gu4l7wOQnYfBHBH8Hp9R","tlshash":"1a02530aa68c523ddf5e83d8d01ebd090bdc18722689f804d54b5d6c57afbf218a3997","first_seen":"2026-07-10T12:36:00.001744Z","last_seen":"2026-07-12T21:21:00.12287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geolocation.onetrust.com/cookieconsentpub/v1/geo/location","fqdn":"geolocation.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"172.64.155.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.258Z","timestamp":1783891222258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geolocation.onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 21:41:59 GMT","end":"Sat, 22 Aug 2026 22:41:56 GMT"},"fingerprint":{"sha1":"93:76:32:53:5C:65:90:46:51:92:D0:F8:89:F5:35:43:B6:35:EA:49","sha256":"82:42:EB:F6:6E:80:5B:80:5B:27:44:7D:D9:E6:17:06:14:D4:93:89:9A:FA:F2:1C:12:D6:AD:C5:7F:B0:2F:5B"}}},"request":{"raw":"GET /cookieconsentpub/v1/geo/location HTTP/1.1\r\nHost: geolocation.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a3176b3a5875ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":444,"mime_type":"application/json","magic":"JSON text data","md5":"8d896eded71ee5fc863cf1ec1485da75","sha1":"b36c99cd02aa88e94a55b028381d9c5cb61cbbef","sha256":"3dddf5b1f3c0e76d359e7fe585b61f721980981a612e17d7ebfedfc3e6fc3b3d","sha512":"a216a2ec987ed8aa509d4bf88075844374819f15767190c2f9fc1b7dc05436cb33ac0fa3466bd207bd3104e455cd3c72fb8622dd0759ab64f197ac216850382e","ssdeep":"","tlshash":"3da0025864599d1d9dfd824a530e726a1244a309828751c6c6c9ed75c5812c9b05c480","first_seen":"2025-06-02T14:25:58.002399Z","last_seen":"2026-07-17T10:42:39.53678Z","times_seen":161940,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":18,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:20:20.202Z","timestamp":1783891220202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a1a3175e6fe5c272-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache,must-revalidate,max-age=0,no-store,private\r\nx-frame-options: DENY\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nserver: cloudflare\r\nset-cookie: CookieConsentPolicy=0:0; path=/; expires=Mon, 12-Jul-2027 21:20:20 GMT; Max-Age=31536000; secure\nLSKey-c$CookieConsentPolicy=0:0; path=/; expires=Mon, 12-Jul-2027 21:20:20 GMT; Max-Age=31536000; secure\nBrowserId=fOQYDX43EfGgrD0qcDRkxw; Domain=.sf.tumee.com; path=/; expires=Mon, 12-Jul-2027 21:20:20 GMT; Max-Age=31536000; secure; SameSite=None\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests, frame-ancestors 'none'\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' *.sf.tumee.com 'report-sample'; style-src *.force.sf.tumee.com 'unsafe-inline' 'self' *.sf.tumee.com *.visualforce.com:*; img-src *.force.sf.tumee.com slack-imgs-mil-dev.com a--static--lightning--force.sf.tumee.com *.slack.com 'self' *.slack-imgs.com slack-imgs-gov.com *.salesforce-experience.com *.slack-edge-gov.com *.my-salesforce.com slack-imgs-gov-dev.com *.slack-edge.com *.cloudinary.com slack-mil-dev.com static--lightning--force.sf.tumee.com blob: *.slack-edge.mil b--static--lightning--force.sf.tumee.com slack-imgs.com slack-gov-dev.com static--sandbox--lightning--force.sf.tumee.com *.sfdcstatic.sf.tumee.com *.sf.tumee.com *.twimg.com slack-imgs.mil data:; media-src 'self' *.sf.tumee.com; frame-src *.force.sf.tumee.com *.quip.com *.arkoselabs.com 'self' *.youtube-nocookie.com *.youtube.co.uk *.cybersource.com *.youtube.com.br *.youtube.es *.salesforce-experience.com *.salesforceliveagent.sf.tumee.com *.adis.ws *.sfdcfc.net *.youtube.ca *.youtube.ie *.cloudinary.com *.vidyard.com *.vimeo.com *.youtube.jp bcove.video *.youtube.fr *.forceusercontent.com *.brightcove.net *.youtube.com *.wistia.net *.sf.tumee.com *.youtube.nl *.youtube.pl; font-src *.force.sf.tumee.com 'self' *.sf.tumee.com blob: data:; connect-src 'self' *.amazonaws.com *.sf.tumee.com https://cdn--cbweb--code-builder--platform.sf.tumee.com api.sf.tumee.com wss://*.api.sf.tumee.com *.api.sf.tumee.com wss://*.slack.com wss://api.sf.tumee.com; report-to sfdc-csp-ep; report-uri https://csp-report--force.sf.tumee.com/_/ContentDomainCSPNoAuth?type=login\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12316,"size_decoded":6224,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5835), with CRLF, LF line terminators","md5":"27808426455797f52cb97eb6bb75122b","sha1":"ae9eb98795afe8b04019d56723dacf47da0a4996","sha256":"07c312472beed514b3ab41aa1073136a293b506d2fb63c58f16114c9f537f7ab","sha512":"45b102fa24ef653ec184f59d9ce1c96a8751d2aaa9b83652a849179e4b6d9ed3db553049ed493f382361f8074abf3849b1df8a25dd789c666409d89847bf5cd1","ssdeep":"192:m3zAgJaPEHs3PGFoaRMiFmqvBZ/e5MmvJ6Rr3pVfyK:g3JaMMup3mCw5MmvJcr3XaK","tlshash":"b14293b719049c366243c9feb8d2fa9c60afc22f47859d4cb7ac292367c7e19097046d","first_seen":"2026-07-10T12:35:59.953778Z","last_seen":"2026-07-12T21:21:00.124431Z","times_seen":5,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":0,"dns":4,"connect":1,"send":0,"wait":724,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/jslibrary/baselogin4.js","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.136Z","timestamp":1783891221136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /jslibrary/baselogin4.js HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317641f39c272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 211044\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Fri, 23 Aug 2024 01:29:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3694,"size_decoded":2290,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (511)","md5":"a5c862f98f1364f73bf0233d6e16fe5c","sha1":"ca45e4c6f41cba54314b739495d59a7d26a25381","sha256":"189f242883a88d98ed5da5366f6518a62c537a9883395ab484753c3f0b49652e","sha512":"07ff1ee304a50bf97376e0082b792aca9d1659a2790b9b72abed98afe5c8b14181460408f334949291842f3378219151b2f513a81a5b9d73248a8f12e1c1a065","ssdeep":"","tlshash":"3671f9877134b4316833249121af4a8fb1bd8f689488b4c4dbd8dce165b1d871775f5a","first_seen":"2024-10-11T09:18:50.381887Z","last_seen":"2026-07-16T21:57:18.136334Z","times_seen":296,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_ga_tracking.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.807Z","timestamp":1783891221807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_ga_tracking.js HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317684c45783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"896b537ab40c719676b181b6f375ee1c:1781646331.760887\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Tue, 16 Jun 2026 21:45:31 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nakamai-grn: 0.a44d2417.1783891222.1d3d93a9\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=12, ak_p; desc=\"1783891222012_388255140_490574761_1238_20086_28_33_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3929,"size_decoded":1938,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"896b537ab40c719676b181b6f375ee1c","sha1":"394d45b85af419d70f2df9a0bd05a0c09d22d02e","sha256":"90fcea0618e9842c88c2955fee356f94d4a236f4ace217ff1d3bc91e6a49cb7d","sha512":"0f917e771bd7d7c6f94799e5ddd12fa68aa9f3b49cf1d516a9120c8cb7e5b5133fc67d28f1f4c45cb5254a13d089f56bfe45da34274a47df598c71e501385c6d","ssdeep":"","tlshash":"978114692bf7203305a3a039579fe149777a601b291bf9643ece02845f9806e4775fd8","first_seen":"2026-05-21T21:31:36.391154Z","last_seen":"2026-07-16T21:57:18.141841Z","times_seen":89,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www-emu/page-builder-client-server-components/v1-stable/static/js/login-promo.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.007Z","timestamp":1783891222007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www-emu/page-builder-client-server-components/v1-stable/static/js/login-promo.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a31769887c783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"805c248cb96457017547f9b3307d3e98:1783507692.200792\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Sun, 12 Jul 2026 11:23:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783891222.d81835f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":908,"size_decoded":943,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (908), with no line terminators","md5":"805c248cb96457017547f9b3307d3e98","sha1":"fefa7c78f6b158ce85015f350b0e89efd0e11df5","sha256":"57024ac988f409dd69c3ae79a536b06cc961929873f4d5496273f61b5fb675aa","sha512":"b4a5c412c8420c8acb86a439d4aec6f785c73b56861ed00845a939cff1aa62b67cc7517570b63951c286aaf9774d1aff7f3d8623699bf44b0b5414f4b194efb1","ssdeep":"","tlshash":"9811633573465131d2f34bd7b199f3c366700b897c402185f06c0d4739a9867baa5ad3","first_seen":"2026-04-16T20:03:25.364286Z","last_seen":"2026-07-16T21:57:18.081219Z","times_seen":70,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wp.sfdcdigital.com/en-us/wp-content/uploads/sites/4/2025/04/PHP-ELF-Trial-fg.png?resize=768,489","fqdn":"wp.sfdcdigital.com","domain":"sfdcdigital.com","tld":"com"},"ip":{"addr":"23.36.77.170","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.036Z","timestamp":1783891222036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.sfdcdigital.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Aug 2025 00:00:00 GMT","end":"Wed, 12 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:77:77:C9:C2:B6:87:4E:17:34:C9:CC:37:0A:B5:3B:72:02:EC:A6","sha256":"B5:D0:F5:B3:33:2A:89:B4:D9:45:B6:63:6C:9A:0A:5D:21:5F:48:DB:C2:13:95:2C:AC:31:61:D7:83:15:8A:01"}}},"request":{"raw":"GET /en-us/wp-content/uploads/sites/4/2025/04/PHP-ELF-Trial-fg.png?resize=768,489 HTTP/1.1\r\nHost: wp.sfdcdigital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/webp\r\ncontent-length: 151292\r\nlast-modified: Tue, 23 Jun 2026 15:39:33 GMT\r\netag: \"0dfdd49e748af49e\"\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-rq: arn1\r\naccept-ranges: bytes, bytes\r\nstrict-transport-security: max-age=31536000;includeSubdomains;preload\r\ncache-control: public, private, max-age=3775189\r\nexpires: Tue, 25 Aug 2026 14:00:11 GMT\r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783891222054_388255142_177572648_167_11154_0_9_11\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151292,"size_decoded":151919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb49112ee973c254241049fc1b283299","sha1":"03a78b22f7e63a68b3c609c1c68df14b6638bf7f","sha256":"6a2c094d61fb8efdf3703f40add516e9813a1ba6e327177431ffce8cae8f0289","sha512":"d59ecf30d6bca7d0dc8fb94830cc3260164d73eba32c9785e729fe2ad3f70abad8f32b2ff895e3fb809f35228c87953fa4338190933f1c33a989e83206bde503","ssdeep":"3072:Z1kJD8bkAGQnEdY5Pzr4Vx+xnx2LTIsH0wBozQxeujAhMmqn:ZmJDSkwnEdYVzrExGxod0RQIwC0n","tlshash":"e9e3127e4fee79e6929db9c7943503f6b133dd8bd8124f9d2e4c47a921a8153022a4b0","first_seen":"2026-06-12T02:45:02.557087Z","last_seen":"2026-07-16T21:57:18.105058Z","times_seen":28,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":14,"receive":4,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/otSDKStub.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.785Z","timestamp":1783891221785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/scripttemplates/otSDKStub.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317683bf6783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"bae7feef66893a6d54817f5e03d56ec1:1780914944.374662\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:35:44 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.874f2417.1783891221.2a6c2f1f\r\nakamai-amd-bc-debug: [a=88.221.128.27,b=103171838,c=c,d=1783622777,h=200,k=17,l=0,n=SE_M_BROMMA,o=20940,r=17,p=31456]\r\nmpulse_cdn_cache: HIT\r\nmpulse_origin_time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31452,"size_decoded":11081,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31429)","md5":"c61c9212d44a276e276a64be0104e5b4","sha1":"2a0300f8224b9f13020106f9fda1aabc362603fb","sha256":"4f0bbc6b255b6ff7eb55d7a5c3ec7199e7dec005b41f0577ab236f4756c69f6a","sha512":"cb5406f4074f47de426647588ecbb8aa77767629e85dccd2d3e0c15a825150891c9a9e20410994822ce79866fda3b6bdeac2b985795f58a745f49a36568d0c9e","ssdeep":"384:MLIi8k7hI3RzMABwXeU9LH6rlIgknE8eEaRgCyu8LcwLKvTJ9x4AaHKJx686W7rk:M0izIBAABwXb9wvknECPCJ8gJ9ugwW7o","tlshash":"bae22a99b140ef3447d251dc993be25ab23a746d348ac028f868dce0247dd4b6673fb6","first_seen":"2026-07-10T12:35:59.963347Z","last_seen":"2026-07-12T21:21:00.127957Z","times_seen":5,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/bottom.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.786Z","timestamp":1783891221786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/bottom.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317683bf8783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"dc6a7cc71c41648477149493f1f18b06:1781683757.154656\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Sat, 11 Jul 2026 06:22:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.874f2417.1783891221.2a6c2efc\r\nakamai-grn: 0.d7386368.1783750931.69f8af2\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15693,"size_decoded":5909,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (15657)","md5":"8db122cea9be6f9e55ee75e9db2dc4e2","sha1":"0864984f0a123e31f1bfbc52fd84b5052bf74905","sha256":"afc0886603db1ed4ad2cc6b5bdc3c4ae7e7ce680461773331f7dfc4211e6ecc8","sha512":"f292da69d9736567fbda96bb141adf6f50e7a545eff96adf58005f7b8d2b726166c56b68518ba4b37e5797ff56803bc631546c662b82d7ae2e262f6d2fbb6ad6","ssdeep":"384:DirtSUV2zQ5tM5k3ZLbQ3euj/DEksBcfgch0A:O50u4klEEdBcYM0A","tlshash":"8562f5d1aa63e97403e9a8d9d81d4145f606ac79479db860ff8dfe88700ad0930e2ff5","first_seen":"2026-07-10T12:36:00.043031Z","last_seen":"2026-07-12T21:21:00.128501Z","times_seen":5,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/ot-ext.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.790Z","timestamp":1783891221790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/ot-ext.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317683c01783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"b41813295cdb4142b92632c976cced77:1781683759.844816\"\r\nexpires: Mon, 13 Jul 2026 01:20:21 GMT\r\nlast-modified: Wed, 17 Jun 2026 08:09:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.874f2417.1783891221.2a6c2ebf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1836,"size_decoded":1627,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1800)","md5":"ec2ebd9471d050e3de19a04896b7d664","sha1":"cfae4a849ba4638c23b31a2a15e97384cbb0d15f","sha256":"14510c2d32e480903eff33dc4b7bf2ad5b1bcd315f50980858bf227d9bdd5e9c","sha512":"b4303f3ae985be40e5165bd2de0611103e361aeba11f60db9733e3f3c08b577daf8826099af23e9ba8c078a983ce79c46d98df5d044dc7ef0498b79cc318516e","ssdeep":"","tlshash":"2531d7f436a80f3417fc66b9f29991c2b03e61b2791f4836f58f9da170248c20c5eb65","first_seen":"2026-07-10T12:36:00.018123Z","last_seen":"2026-07-12T21:21:00.129818Z","times_seen":5,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/page-utils.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.193Z","timestamp":1783891222193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/page-utils.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a3176abc5f783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"2c504c86cfd900cb534a519f25794532:1781683759.386195\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Wed, 17 Jun 2026 08:09:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783891222.d8183cf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11083,"size_decoded":4700,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11043)","md5":"396161a46dbbfc784e6b7a758fccf4a2","sha1":"56fc5254139c79ec38631194cb6df6cd34a6c5e3","sha256":"1f8d43153b0a4d8fabc1651c26a0363bec785505208e3cee748a7f7c6d79d6e5","sha512":"9087630a4ed09304fd213e14f37f5bdf0e4298834569185ff7116422cdf24c8fe5eb4e14fc2af68cea0f447b42eb58a8922b51dfbbb332994b8e71694229fae6","ssdeep":"192:2zgVUM1jzhWYSSBZH6mrLghegVek3eclt+bS8:Bn1DBZ9rLYzXeq+b/","tlshash":"ba32d5c19943ceb503e96dca8c295295f649ac384389b894ff5efcc17606c8a30e1bf5","first_seen":"2026-07-10T12:36:00.015839Z","last_seen":"2026-07-12T21:21:00.130399Z","times_seen":5,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookies-data.onetrust.io/cfw/cmp/v1/session","fqdn":"cookies-data.onetrust.io","domain":"onetrust.io","tld":"io"},"ip":{"addr":"172.64.155.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.933Z","timestamp":1783891222933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 05:48:43 GMT","end":"Sun, 06 Sep 2026 06:48:23 GMT"},"fingerprint":{"sha1":"14:E1:42:63:83:13:F8:43:46:D5:18:4F:40:FC:D4:99:E4:3B:78:AE","sha256":"07:C2:1B:4E:62:34:0F:F4:1D:F9:87:A2:B1:6F:15:40:9B:E4:36:BB:B6:8E:72:BA:BE:B5:49:E8:4E:4E:55:B2"}}},"request":{"raw":"POST /cfw/cmp/v1/session HTTP/1.1\r\nHost: cookies-data.onetrust.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nContent-Type: application/json\r\nContent-Length: 51\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":51,"data":"{\"domainId\":\"8e783e8c-0ad0-475d-8fca-4a03afa0a02a\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/json\r\ncontent-length: 16\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a1a3176f7a721525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":328,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-07-17T10:40:43.881627Z","times_seen":175706,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privacyportal.onetrust.com/request/v1/consentreceipts/anonymous","fqdn":"privacyportal.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.938Z","timestamp":1783891222938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 23:56:45 GMT","end":"Tue, 25 Aug 2026 00:56:41 GMT"},"fingerprint":{"sha1":"C9:CF:D5:82:20:E4:3C:8E:93:0C:23:4A:84:47:8B:9E:D8:DC:41:3D","sha256":"B4:81:5F:D3:A8:70:D4:91:CC:77:29:81:DF:82:FC:65:34:A8:46:CD:3D:25:6F:86:32:99:AA:46:88:A7:CE:40"}}},"request":{"raw":"OPTIONS /request/v1/consentreceipts/anonymous HTTP/1.1\r\nHost: privacyportal.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:23 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a1a3176f7e4db51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":429,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":134,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/otCenterRounded.json","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:23.051Z","timestamp":1783891223051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/otCenterRounded.json HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw; gtm_session_start=1783891222679; OptanonConsent=isGpcEnabled=1\u0026datestamp=Sun+Jul+12+2026+21%3A20%3A22+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202604.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026consentId=94243c91-c460-49b6-857c-f3832f57b8e5\u0026interactionCount=1\u0026isAnonUser=1\u0026prevHadToken=0\u0026intType=7\u0026hosts=\u0026landingPath=https%3A%2F%2Fc.sf.tumee.com%2Flogin-messages%2Fpromos.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:23 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a317701e2c783d-OSL\r\ncf-cache-status: DYNAMIC\r\nak-uuid: 0.874f2417.1783891223.2a6c31b9\r\ncache-control: max-age=0, no-cache\r\npragma: no-cache\r\nexpires: Sun, 12 Jul 2026 21:20:23 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:35:46 GMT\r\nserver: cloudflare\r\netag: W/\"e19b43ebdd1a5ede4a814d671ef093a4:1780914946.363942\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10478,"size_decoded":3078,"mime_type":"application/json","magic":"JSON text data","md5":"e19b43ebdd1a5ede4a814d671ef093a4","sha1":"4aa6b57c52d77f3c57cb16b14425426b89c1b4c9","sha256":"17caef0a24465473c69b4ca85ff22b5bf77a3a97163d847893020090e0f91c50","sha512":"eb7366c4b421c225d0e0bebf87383aee52e9a0535b7f8c73d657ff6a57dd3bbebc04c00894f3a5570d0d1493e56971e9b74e3c351cd892c795b5f20aa6c39b58","ssdeep":"192:ZqCYyAQgtNBIWguxw68uCZItctpFwhTwfTh3fYwuoOE5YBTi+Q+Qsf1POyj/0PpH:C4rsCJ9OO51N","tlshash":"fe22a8167e101b2cf1ebcbad9d9275c834226d8ffd3389dc8259a77482ad2f20e65710","first_seen":"2026-06-18T15:47:34.301017Z","last_seen":"2026-07-16T21:57:18.133619Z","times_seen":46,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/img/icon/capslock_blue.png","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.566Z","timestamp":1783891221566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /img/icon/capslock_blue.png HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: image/png\r\ncf-ray: a1a31766ce79c272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 210551\r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Tue, 04 Apr 2023 21:01:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\norigin-trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549,"size_decoded":1286,"mime_type":"image/png","magic":"PNG image data, 33 x 43, 8-bit/color RGBA, non-interlaced","md5":"0b76cfe389e0720a22e73e9a1f63351f","sha1":"c3f0a7e6547e3997f8c9574a011005de748181ee","sha256":"1f21e5aca5794286008ff7bd98038e525e047e36490747681a6ea396a52fd24b","sha512":"03c7a7ebad681a4f86a242eb67532c0a406216b2d29e58020fa0589234c5a65cb9b7d39859b21df9f99efb896365a5c5075f33afde6b486469f40043bb4d304d","ssdeep":"","tlshash":"f4f02094b7e20fa1c64b8a9225b8bf1dc43c38420a6c2bcc301a6c6a530738be11db51","first_seen":"2023-05-30T01:19:07Z","last_seen":"2026-07-16T21:57:18.096624Z","times_seen":1245,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/scripts.3e6c58394308c0d5ebc4.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.804Z","timestamp":1783891221804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /c2/public/exp/pbc/server/scripts.3e6c58394308c0d5ebc4.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: a1a317684c35783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 210551\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\netag: W/\"39bab-19f1a7ecf10\"\r\nexpires: Wed, 22 Jul 2026 21:20:21 GMT\r\nlast-modified: Mon, 06 Jul 2026 16:15:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nak-uuid: 0.16e61702.1783680670.11517ae\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: master-only\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236467,"size_decoded":44913,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"73364fb111159b3b427f8251098f4afb","sha1":"50e3acb384bb907a1230ccfeb69e712519a1deb5","sha256":"5a37bee2798d78c27cc67cfccdbbf9682197f3e8c553dcd7dce8fd3220da4fa0","sha512":"28386e02a732faa56670e964a70485dd3b69fb05ba3e6e2af66cfba64e79371190d4a37905f3dff1110ec9879ec4aa33b4852f8fd4935ce50d1e27794de4998f","ssdeep":"3072:ebkdxHwTslFlx652lXWcIfxkA5HDBL3hq2b:ebkrQO5g1xkA5Hh3kc","tlshash":"7b34e88cb2d5f03102e7a176906f120bf336385aa04ac098f539ddd56db898e6277f79","first_seen":"2026-07-10T12:35:59.998992Z","last_seen":"2026-07-12T21:21:00.133019Z","times_seen":5,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/legacy.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.792Z","timestamp":1783891221792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/legacy.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317684c19783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"d8766acc6d24eb8f040b1cece9807c8f:1781683757.574933\"\r\nexpires: Mon, 13 Jul 2026 01:20:21 GMT\r\nlast-modified: Wed, 17 Jun 2026 08:09:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783891221.d8182e8\r\nakamai-amd-bc-debug: [a=23.36.77.198,b=275065320,c=p,d=1782344440,h=200,k=2,l=0,n=NO__OSLO,o=20940,r=2,p=9180]\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9188,"size_decoded":3887,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (9152)","md5":"373a30f1c10381c1a9b6f7cf75abc104","sha1":"eb2b224bd1577f2e112b44ec75d86a9f40617c1d","sha256":"e39b971c57f741685ce756b372ba5bd987279161949ce44c0e87fc749c7f54d6","sha512":"d160b33e50fbf2d18ee830078ec25d0c314e18857d014f22fdc8146540946872a3eb64da5b7f5d092fae82c9d23bc3ff3266c5fb144d9a14b78500dedce56a5d","ssdeep":"192:F+z64zbZ1QKzSPzOnwNsSvorlWvye8BRUb:FA6KQBPNpJvqBqb","tlshash":"fa12c8d6a963d9a402e4adcacc195299f6069c3803ddb894ff59fdc17406c0e30e2bf6","first_seen":"2026-07-10T12:35:59.968618Z","last_seen":"2026-07-12T21:21:00.137838Z","times_seen":5,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-ogs/v1-stable/sdk/interactions-core.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.180Z","timestamp":1783891222180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-ogs/v1-stable/sdk/interactions-core.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a3176a9c18783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"ec4097c311d03feccdf4af2121e5c9e7:1782836532.616981\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Tue, 30 Jun 2026 16:22:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.874f2417.1783891222.2a6c2fd8\r\nakamai-amd-bc-debug: [a=23.63.30.73,b=1074952506,c=c,d=1783477712,h=200,k=3,l=213,n=US_TX_DALLAS,o=20940,r=216,p=42861,j=[[a=23.45.117.133,b=1074952506,c=o,d=1783477712,h=300,k=105,l=49,m=7,r=161,p=1259]]]\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42849,"size_decoded":17009,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (42802)","md5":"2526a49f34b0d243909904b998c23915","sha1":"3ff5ec59125544082c9664ac20f801a0a52793b9","sha256":"ff5619c79f44d01990f71a2373c49df0b90ccc924673ed5f7fcc31693eebb164","sha512":"d61ef9bc69e1ec6afafb7df23b0851a630a9730bf0cd16580d7de02b326b9a102c85b9f40a075b5aec2849cd6b097dfbf339c25b9fb5915406b8fe44f0790cd1","ssdeep":"768:RHHkfN4VBn09Ybe9JDSwWJsqPcLiXqdLg1QzuLdX05LckI/+k2Op9z+HUB8OuZAi:Rnkl4VB4YbenSdJsqPcLiXqds+yq5Lkg","tlshash":"bc13e6971f6a413e93baf06cb01d3149b81cae885549d888e36c6d2a33c4d0971bdfbd","first_seen":"2026-07-10T12:36:00.000382Z","last_seen":"2026-07-12T21:21:00.138376Z","times_seen":5,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/v2/otPcTab.json","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:23.052Z","timestamp":1783891223052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/v2/otPcTab.json HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw; gtm_session_start=1783891222679; OptanonConsent=isGpcEnabled=1\u0026datestamp=Sun+Jul+12+2026+21%3A20%3A22+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202604.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026consentId=94243c91-c460-49b6-857c-f3832f57b8e5\u0026interactionCount=1\u0026isAnonUser=1\u0026prevHadToken=0\u0026intType=7\u0026hosts=\u0026landingPath=https%3A%2F%2Fc.sf.tumee.com%2Flogin-messages%2Fpromos.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:23 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a317701e32783d-OSL\r\ncf-cache-status: DYNAMIC\r\nak-uuid: 0.874f2417.1783891223.2a6c31bd\r\ncache-control: max-age=0, no-cache\r\npragma: no-cache\r\nexpires: Sun, 12 Jul 2026 21:20:23 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:35:53 GMT\r\nserver: cloudflare\r\netag: W/\"a8dbeec2b5827a10192b857fa487e659:1780914953.056582\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69091,"size_decoded":14146,"mime_type":"application/json","magic":"JSON text data","md5":"a8dbeec2b5827a10192b857fa487e659","sha1":"924c1139849270a3886d7b764df5b5525924f6f8","sha256":"d71caf79e94e94761e7557f6575e0b7968a901713cc994ab4ffb84f742a3c487","sha512":"7c52b8ed6865740a3a9fb7d1bba034c1107643de3e68603b4720bbf7f0758ab54cc8382ebd714ab92312a6381a1844abbf4d6c22711f89f0091673ebafa832b5","ssdeep":"768:6pl23MgWAuuZSWGhsHpZXKTq3wOdCPcU85xJ:N+7MVR3PdvU8HJ","tlshash":"b263d99b7aa1530afee38b1deb926de97120c81fbc335dedf1024678868d3e18d51509","first_seen":"2026-06-18T15:47:34.333353Z","last_seen":"2026-07-16T21:57:18.091754Z","times_seen":46,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/s.gif","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.244Z","timestamp":1783891221244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /s.gif HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: image/gif\r\ncf-ray: a1a31764c8ecc272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 210551\r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Tue, 27 May 2003 18:28:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\norigin-trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":780,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-07-17T10:40:01.628532Z","times_seen":77841,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/fonts/salesforce-icons/salesforce-icons.woff2","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.778Z","timestamp":1783891221778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/fonts/salesforce-icons/salesforce-icons.woff2 HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a3176849140731-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 210551\r\ncache-control: public, max-age=2592000\r\netag: \"19f7e7ae24cb975b40ecc602f06f1e0b:1616101776.144644\"\r\nexpires: Tue, 11 Aug 2026 21:20:21 GMT\r\nlast-modified: Thu, 18 Mar 2021 21:09:36 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.39e61702.1783680670.6b0411b\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670114_35120697_112214299_54_10475_18_24_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15056,"size_decoded":15666,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15056, version 0.0","md5":"19f7e7ae24cb975b40ecc602f06f1e0b","sha1":"ef70ecc2e8e950748ad0f58740893d68e7aacacc","sha256":"e86f5ad3afdd08d69278cc7e5203407aed8a8069c92bfb04988f8a859990c692","sha512":"d33c3e1aaaf2e5edced4cc37239790cdf1f4e2d926497dba22ccefd5a091d08f8adf7e3d31e6437e1a86d46de70f27c44e5f169daceb297acc0aca3dbd6c77a0","ssdeep":"384:RUufvvH1bsf44UiIIQpy/3RBP3f1/fymWFbacQAeAVOTR:Rn/VbsA4UZIQ0RBPfEm+We+R","tlshash":"4762c0325716b1d1c1b282aa81c361dba70736d9633d44c35ebd179a8e16478e24ccf7","first_seen":"2023-05-03T23:44:13Z","last_seen":"2026-07-16T21:57:18.13825Z","times_seen":3155,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":5,"send":0,"wait":145,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/favicon.ico","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.289Z","timestamp":1783891221289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: image/x-icon\r\ncf-ray: a1a3176509a5c272-OSL\r\ncf-cache-status: HIT\r\nage: 5241\r\ncache-control: public, max-age=86400\r\nexpires: Mon, 13 Jul 2026 21:20:21 GMT\r\nlast-modified: Sun, 12 Jul 2026 19:52:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5430,"size_decoded":1250,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"ccda8df05e9a37b3131afd4d451b44ec","sha1":"ed9d0f9c4224fbd4c768be237b4b59f27f1b718c","sha256":"92842fc6c2f66b46f69458c14621fc2eca5d6c02d7937f9124fe8a3a9a55bc91","sha512":"a91f53c07b327c35864fe903acfe30afe2de3c26fdce1bdbf65842598b3a7b2fb19e54de27495519bf1e2a2bf7358561da16e931324e5b1112da4fe7efe4bc7e","ssdeep":"48:uZY/S81C1A58ZrvB0Ze/kPm3Cn8GaxOcBXmD:lSRu8ZrvBj/kuXG9","tlshash":"48b18900d99da8d2c0c976f6c655e5b12d2a2d3c6e2002260135ba7fad71e93ff6c1cc","first_seen":"2023-05-01T19:13:19Z","last_seen":"2026-07-17T00:17:42.496162Z","times_seen":3658,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/fonts/salesforce-sans/SalesforceSans-Regular.woff2","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.773Z","timestamp":1783891221773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/fonts/salesforce-sans/SalesforceSans-Regular.woff2 HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a3176849090731-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 210551\r\ncache-control: public, max-age=2592000\r\netag: \"aa41afdaceb8b78c56529555448bcf44:1616101752.085331\"\r\nexpires: Tue, 11 Aug 2026 21:20:21 GMT\r\nlast-modified: Thu, 18 Mar 2021 21:09:12 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.25e61702.1783680670.2db04e7\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670180_35120677_47908071_31_3943_25_29_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27684,"size_decoded":28292,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27684, version 1.655","md5":"aa41afdaceb8b78c56529555448bcf44","sha1":"03d934b119785f6130103507ecff57eb19f05be9","sha256":"6f2251079db9fde7d456ba66a9294899f3024dac928bec71b3ce42e1568f304f","sha512":"d2dd37566d4cff30102b565fee5d10889509c493061331cc64f01450694d2d2a264fb3a7d8e47beb25d38260faa26a627b16ac9fc7e0ed656da0e44db1423999","ssdeep":"384:Pw3MIlCSXNMQxZJcEeMrYuyhKbJSYU9GeRGoYh98muYjWlaaGQ/jhzP4GSWL:TQCSXNBFcEeMrYAJhw69iYjWuQ6lg","tlshash":"0ec2e1394e82eb05d02db776042b6467be592086d08f6bc54e7f6c627fd2638870b7e4","first_seen":"2023-04-24T21:29:35Z","last_seen":"2026-07-17T03:04:56.343332Z","times_seen":6234,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":2,"connect":3,"send":0,"wait":83,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/css/style.32425e6504689dd1936d.css","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.782Z","timestamp":1783891221782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /c2/public/exp/pbc/server/css/style.32425e6504689dd1936d.css HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: a1a317683bee783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 210551\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\netag: W/\"b4e1c-19f385cf520\"\r\nexpires: Wed, 22 Jul 2026 21:20:21 GMT\r\nlast-modified: Tue, 07 Jul 2026 15:03:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nak-uuid: 0.16e61702.1783680669.1151745\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: master-only\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":741310,"size_decoded":63290,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bef4c3d58ffcca47837fc6e787c565d4","sha1":"0fcbbdaa6a70488e0490b09653b9d6d26f34a6f2","sha256":"69608657dbd99776093e65a8e49039ea0d004f67c89f0fdba65dda476512db39","sha512":"1bac76bb809b859304539fafb03a461ac5946e3700576e5d049c4190cd006d8c1e8aba6a9e63f30a37a96eea2ea73f66fdec69c0d221bc6378d6125931680863","ssdeep":"3072:h93wg6WK3m7RnQZUrPzNoipzoIwbevLb1FhWhfeTzCn3Q/Ie3W6NB2afNW31lxaB:LTTpIIfErj+ZjMOyE6qoNe","tlshash":"63f44412d562727ee59b4cbfb6a9f53ee53575334b03c2fd9a84b00486ca9d31321a2c","first_seen":"2026-07-10T12:36:00.035451Z","last_seen":"2026-07-12T21:21:00.15894Z","times_seen":5,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/xsf-nav/v1-stable/navs-ssg.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.011Z","timestamp":1783891222011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/xsf-nav/v1-stable/navs-ssg.js HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317699c680731-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"00f9fe4c67bcf75f3c598a27f1c904aa:1783724472.154122\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Fri, 10 Jul 2026 23:01:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nakamai-grn: 0.a44d2417.1783891222.1d3d9518\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783891222240_388255140_490575128_43_3622_29_34_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":534753,"size_decoded":115001,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"185319741a3fb824d2c36e4d44d6f5e8","sha1":"861830c9171ed0c9ef7c562d0686d3ac43153f7d","sha256":"e3b92adc41ee954f2c622731200d3a5b0017ef3f13e06cdde9abf459fc97fa77","sha512":"44109299a8d4de86a559d92da478b0498092747bdec4720278d51be80c0931cfecb97c2b7a70e9f309ac957b7e42c8459f7b64aafa5e69c1557867fa7c2ffb32","ssdeep":"12288:p13dpryCVJQ72azkhE6X0do49QCe3YIa2/8adXFth7D+anFBeLSMN6Gqv9:p13dpryCVJQ72azkhE6X0do49QCe3YIn","tlshash":"9bb44a59b352503a62f707f9e0675c03f35c3851a40ad4d8b2aa5afa5fce59b2022f3d","first_seen":"2026-07-10T12:35:59.986097Z","last_seen":"2026-07-12T21:21:00.162783Z","times_seen":5,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/202604.1.0/otBannerSdk.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.310Z","timestamp":1783891222310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/scripttemplates/202604.1.0/otBannerSdk.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a3176b7f08783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"923e2982a99225d07a2aadaece8c7a4e:1780914945.779965\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Sun, 12 Jul 2026 15:21:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783891222.d8183e3\r\nakamai-grn: 0.4cdbd217.1783869663.172c1e0b\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552369,"size_decoded":117828,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"923e2982a99225d07a2aadaece8c7a4e","sha1":"6890a7d31129ba4611fc6cc5ce979a9a5768f45c","sha256":"8792de1e018ac8499769a13bc7b80dcf1c0126e6009f7712807f4994734d1203","sha512":"ae7b243cb6f4bee3956b9d00d6c3cd47222d7ff3da1be36cddb296a973746aae9429ee0a968e6c574387528855f28b3668a5cae3cb58f51f96e2cdcf5c9b8c68","ssdeep":"6144:eDLxvLEQyS3m1me9rgeNC5g5j5AZ3vtxDZ6aaeUi31xp567ExExdXrN8Dq6Zhj:eDNIQyS3m1mF3RbUiN5fExdXrNB6Zp","tlshash":"d0c43a8d7590753547e762b9c02b514ab63534acac85806cb41cc4f90bf9f862ea3fbb","first_seen":"2026-04-15T01:04:59.905492Z","last_seen":"2026-07-16T21:57:18.056746Z","times_seen":2019,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-ogs/v1-latest/sdk/interactions-core.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.518Z","timestamp":1783891222518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-ogs/v1-latest/sdk/interactions-core.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/c2/public/exp/pbc/server/scripts.3e6c58394308c0d5ebc4.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a3176cbb5f783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"014a26717b3270405c543a5f7be6e25a:1783610662.696332\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Thu, 09 Jul 2026 15:24:22 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.874f2417.1783891222.2a6c30cb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45188,"size_decoded":17675,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (45141)","md5":"09caaebb93ae4155b32b3233238f288d","sha1":"4e98fea1b45f3363a571ecc208dfd32710888213","sha256":"3fbb451f6e842bbb73581fa1be9cd7c5daba01bcf981076cf8c3d566bb37a524","sha512":"ff3d2dee7afc45e6c5fdca66826c06da57285def5036afddc3d58368037aae9596adf3eaace475249caeec164df9b28c36a0ca7dc499e936ec3e740989898479","ssdeep":"768:yMMnVOgQBo/H8myCaVqJPCC1Wg1QzuLdX05LcD1Jk2Op9z+HUQf3ZFbt83:yRcgQBOH8mZPl17+yq5Ljp6UW3ZRu3","tlshash":"3113f8971e5a413e93baf06ca01d3149f81caed40549e898e76dad6a33c4d0970bdfbc","first_seen":"2026-07-10T12:35:59.921645Z","last_seen":"2026-07-12T21:21:00.166918Z","times_seen":5,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookies-data.onetrust.io/cfw/cmp/v1/session","fqdn":"cookies-data.onetrust.io","domain":"onetrust.io","tld":"io"},"ip":{"addr":"172.64.155.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.935Z","timestamp":1783891222935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 05:48:43 GMT","end":"Sun, 06 Sep 2026 06:48:23 GMT"},"fingerprint":{"sha1":"14:E1:42:63:83:13:F8:43:46:D5:18:4F:40:FC:D4:99:E4:3B:78:AE","sha256":"07:C2:1B:4E:62:34:0F:F4:1D:F9:87:A2:B1:6F:15:40:9B:E4:36:BB:B6:8E:72:BA:BE:B5:49:E8:4E:4E:55:B2"}}},"request":{"raw":"OPTIONS /cfw/cmp/v1/session HTTP/1.1\r\nHost: cookies-data.onetrust.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a1a3176f6a511525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":388,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T10:40:22.983927Z","times_seen":17312174,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":2,"connect":2,"send":0,"wait":6,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/jslibrary/SfdcSessionBase208.js","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.133Z","timestamp":1783891221133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /jslibrary/SfdcSessionBase208.js HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317641f2bc272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 211044\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Fri, 21 Nov 2025 00:12:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16274,"size_decoded":6481,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"8e2870fbac46a1cb8236be77c9994949","sha1":"8ff7c8444655613a742d035a29e78ace56bb9f24","sha256":"3472427f067f8339f37000e07b9f7e9ff0bbd4adad5be419e65b2640970f06ec","sha512":"5b76917441dec93fff73c53e95cf4ca8ff2a80074b6e5a8e6b1a247737c890ff872ee8973e9a335604f59e6d27ee5f98f6446695400cbe70ec22c0b5db3522b5","ssdeep":"192:wUPZL9Q5pKURHiMtKKJBEOcjSNOIchZG6F1fqLpISpW7ZUCK4sp5l+NZxIucVwvD:wQL9QHBOjSNOIWgZH8sp5kNZxx2w37","tlshash":"8872d6c2b6c2746289b6b0eb503f1046e57ccd5ab86c4dd1d0e9c6c47fb48aa417bf28","first_seen":"2026-02-13T01:58:22.085082Z","last_seen":"2026-07-16T21:57:18.102199Z","times_seen":154,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/img/logo214.svg","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.145Z","timestamp":1783891221145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /img/logo214.svg HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a1a317642f5fc272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 211044\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Thu, 22 Mar 2018 19:27:56 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6696,"size_decoded":2947,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2833432dbcd3a500a9b32628c5d91d0d","sha1":"18ae542c01a2a81eb8b4c0f676ccf2e01bfb8a8e","sha256":"a48f997fa23140662c20f7a46e93cefcef071fbf81ce038067582f2d822d86d5","sha512":"c03512164c8e5125c480626e4ed175d6271f111d273ba36c581ca344b3f1d41e3a71f2914fe307f96e184ac55597a427cdf7390391c99d88f188a05100c4b370","ssdeep":"192:mBgoKjaCfeCaSNlXajN5taR1Vr4arRNrx4arRsPSSbi6BAQo7Vwv:mBIeRylKjQ/NntA6Fwv","tlshash":"ecd1042b4309dbd9bfad042ce944288db5a4e9e794a4f1c0fb6b5401e48c4e9f94c7ed","first_seen":"2023-05-11T12:50:23Z","last_seen":"2026-07-16T21:57:18.094077Z","times_seen":426,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/img/gidr/email.svg","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.149Z","timestamp":1783891221149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /img/gidr/email.svg HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a1a317643f85c272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 211044\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Wed, 23 Oct 2024 22:30:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":908,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb1daad344464b615bf8fd92d67bce42","sha1":"7ba55659ae73be32ce944ec6966d8b6482ae1a7d","sha256":"4843ae7de226f06120cf76ac1c48aedf756de67706c7b7168407b03276e72a57","sha512":"dbf86ab6e356b26141cd97de9c74b6788809fcccb3af3d81b2571d5431d794c4eac883fbfcf42ef41487e53c9c368db71505670406f92aa813aab67107dbd604","ssdeep":"","tlshash":"3701d5b297d4e4e0d403873dd6335ed43ddf30bb578901cdd9949d0718082e28c09e21","first_seen":"2025-05-23T22:28:24.539024Z","last_seen":"2026-07-16T21:57:18.052435Z","times_seen":49,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/login/assets/fonts/SalesforceSans/SalesforceSans-Light.woff2","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.256Z","timestamp":1783891221256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /login/assets/fonts/SalesforceSans/SalesforceSans-Light.woff2 HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sf.tumee.com/css/sfdc_210.css?v=7\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a31764d922c272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 204318\r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Fri, 24 Jul 2015 20:32:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27736,"size_decoded":28238,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27736, version 1.0","md5":"f4c092cda9a56b8e26cc307f208949b4","sha1":"dac76c1196988545bc7c7609d609fdc58cf079e5","sha256":"b7df2d6cb9d0ecda707a1de1302b3c9d9bda16247dc382e696579a8308d49771","sha512":"8d482a592f4a7874351e5879f56fd5df06ee268f469a608b1b746486f590834bb3f86a71b9fe273d9c043e929c38eaf571216d6332f154626571f375606b832a","ssdeep":"768:uG994gZ31ZyJicxFisGOMdzIjYXDBZ40Q54N/YifwyIBbzAu:X94gZLyJicxFdMaYBS0i+/BoyKzAu","tlshash":"72c2f1650942c7af851e13b2e5fa656124d894bd20d9facb48f8edccf85000f5e9a3cc","first_seen":"2023-05-11T12:50:23Z","last_seen":"2026-07-16T21:57:18.106868Z","times_seen":1433,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.563Z","timestamp":1783891221563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /login-messages/promos.html HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: a1a31766cf0e783d-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=0, no-cache, no-store\r\nx-xss-protection: 0\r\nx-sfdc-page-render-type: nunjuckspbc\r\nexpires: Sun, 12 Jul 2026 21:20:21 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.874f2417.1783891221.2a6c2e4b\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: master-only\r\nx-sfdc-agent-cohort-apply-experiment: false\r\nx-sfdc-agent-cohort-decision: \r\nx-sfdc-agent-cohort-source: none\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19112,"size_decoded":5627,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4578)","md5":"468235db058d0ac0809b865ebc7eb0db","sha1":"93ba3226305be5208cef04d746648761015c2a0d","sha256":"2b03a7336722262cd6a903d6f77fdc6d9b8fe1ec83fed55e70d84ed7bcbed534","sha512":"eee59df09f4efa5f1e64e222cdc273cdacc524ed1701815a24fa6b7aaa19c4ca1870c2da665442078611df11d659dd28e56fb79b66e2afd9f0b62d1881a6dc66","ssdeep":"192:2Gm352bIZ+jNPWsWkpWOWXWsw+0+yJxzy3k46L4pT8jo0eh7tC4THd/dTKa:2Gm3JZ+5uBkcXGJjzCkRsw6tCgjP","tlshash":"af82d77b8b94a536161065b2d3e5f609e88de117da09dddcf6ec4cdcefc03a90e61288","first_seen":"2026-07-10T12:35:59.907232Z","last_seen":"2026-07-12T21:21:00.17025Z","times_seen":5,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/analytics.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.192Z","timestamp":1783891222192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/analytics.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a3176abc5b783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"4bd7d2a9c164e738a1e54a8c509232f8:1781683756.775186\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Sat, 11 Jul 2026 07:53:21 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.874f2417.1783891222.2a6c2ff8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15360,"size_decoded":5772,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (15321)","md5":"b0743b6fa3b85b1add5bce3e76f93b36","sha1":"79c0bf44f6e2d5194b7b3eda380b530d9edbcffa","sha256":"41088dceef55b132a870669325a59e8fa1256737ce16526460f7b2dbf9731749","sha512":"8cdc9de5c292d5e4dac359fb6c0e32e01fc1401d140e92cb95ac09c1ce675861b7ae19a6f2424d63f83c5dd37438e380841728b21c93fa3f12c4bc72832ce791","ssdeep":"384:DYHZSxbB7QdjZMSjnxuoeHFhTU5Ktpstc26:c5BfxkfU5KHan6","tlshash":"e862e6d19a63d97403e9add9981d5154f60aac7947cdb850ff4eee88700ac0a30e1ff9","first_seen":"2026-07-10T12:35:59.93379Z","last_seen":"2026-07-12T21:21:00.171814Z","times_seen":5,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/otCommonStyles.css","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:23.054Z","timestamp":1783891223054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/otCommonStyles.css HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw; gtm_session_start=1783891222679; OptanonConsent=isGpcEnabled=1\u0026datestamp=Sun+Jul+12+2026+21%3A20%3A22+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202604.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026consentId=94243c91-c460-49b6-857c-f3832f57b8e5\u0026interactionCount=1\u0026isAnonUser=1\u0026prevHadToken=0\u0026intType=7\u0026hosts=\u0026landingPath=https%3A%2F%2Fc.sf.tumee.com%2Flogin-messages%2Fpromos.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:23 GMT\r\ncontent-type: text/css\r\ncf-ray: a1a317701e3e783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"74999a213b8f98e68a3d640ff2735c26:1780914952.107937\"\r\nexpires: Mon, 13 Jul 2026 01:20:23 GMT\r\nlast-modified: Sat, 11 Jul 2026 01:57:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783891223.d8185d7\r\nakamai-grn: 0.3d411002.1783735058.1e2dbff2\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79957,"size_decoded":11413,"mime_type":"text/css","magic":"ASCII text, with very long lines (37823)","md5":"74999a213b8f98e68a3d640ff2735c26","sha1":"8c5b4d2c9a47eb930231929080296c1714f5fa35","sha256":"06dbe12e6e0df8343b9902746dafca54bc1ed233575233a8bce286dd1a1ea10a","sha512":"7f4fac6ce989b35604524f3ca944ec1c8998ae883a9c49b6ff5a7f011cbb4dd57a0c8acbad91991961bcb32e6315628d5e516483a6b84b7e4e6c9b4a3b45f11b","ssdeep":"1536:KYnpWPnBIK4zIKRmhz5CPct7xxUYDJgcAtatzRD9jSDxQ+iFy53otE+tGi13QO9R:4nBIK4UKRmhz5CPct7xxUYDJgcAtatzZ","tlshash":"cd73cc47f9a1562bf5d74bbd4126aeb6b8a06826bd2359ddf10a233499cc3f30c23315","first_seen":"2026-06-18T15:47:34.373108Z","last_seen":"2026-07-16T21:57:18.123095Z","times_seen":46,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/img/clear.png","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.147Z","timestamp":1783891221147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /img/clear.png HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: image/png\r\ncf-ray: a1a317642f69c272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 211044\r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Thu, 21 May 2015 20:40:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":477,"size_decoded":928,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"1cc6ffea5ac6b5c6e7d7b6b9b1a01e9f","sha1":"a4fd54cc5e6cac7e5fee6f9832c817d5e58c7c10","sha256":"dd464055be78eadee2d5d3ecc5380600b788883e462d9e77372877dc04110e6d","sha512":"0989837e455a24c73304ff95557ac76f432ead28c903f677d037e29adb89a9bee32c042ad7f5c7356f3e99a2ae3422476f612633977c7fc25502ec2c92d22dac","ssdeep":"","tlshash":"84f09ebea359d9bee6644473004a229dabc59530321db94a1da78d7196d6c00d0d5b05","first_seen":"2023-05-02T11:35:03Z","last_seen":"2026-07-16T21:57:18.071154Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/identity.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.788Z","timestamp":1783891221788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/identity.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317683bfd783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"0621c7a1adf257859311b66cf891eb8b:1781683759.504043\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Wed, 17 Jun 2026 08:09:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783891221.d8182fd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8375,"size_decoded":3398,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (8337)","md5":"fca56bdfe3e31efaa975c1714ebf3468","sha1":"077ae0ee618bffbe45ea62885f16bb6def5111a4","sha256":"1afa9703700f948aa56e1ea8cb30c0b3d9e8af0a9cd8c2df38bc62eaaa80f504","sha512":"da51719e05780c11df513b41a2c63b79f9633fbf56892e2034cd566442b6e4f09b269503d49caac0c66aafc21ba0aa5c91a1815df394247ea30d2feb489838f3","ssdeep":"96:iyKV//kWYy4wHMT8n1YzZQy4/bzKykL9SGm/wLbYN4moE6dKDWA5yjjs9nix:YmpzwHM+gQz3fkL9bCwwN4qiye","tlshash":"930282c29857daa802d5adcacc1a22a8f7459c3853cab894ff4efdc5b506d4930d0bf5","first_seen":"2026-07-10T12:36:00.010685Z","last_seen":"2026-07-12T21:21:00.173595Z","times_seen":5,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www-emu/pbc-core-analytics/v1-stable/comp-data.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.794Z","timestamp":1783891221794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www-emu/pbc-core-analytics/v1-stable/comp-data.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317684c21783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"d950ae4f16f725be4e73d41a19b3c6d4:1776450181.447061\"\r\nexpires: Mon, 13 Jul 2026 01:20:21 GMT\r\nlast-modified: Sun, 12 Jul 2026 17:35:21 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783891221.d8182d2\r\nakamai-grn: 0.6b0f3417.1783877721.8f67dd6c\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15601,"size_decoded":5959,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (15562)","md5":"e19f22dbce44152b3bcd6a030d6a97d2","sha1":"64f825cf774e0ee7571878bf24d85e3e905142f0","sha256":"e6fa0d5861bf241e0e0cb1834252dbeb6bb8c6be3307bb018474e829baec9753","sha512":"23a5d3bf8fdec1bb9a870cafe6e90b43efd6ebb816b3b2df3d5e010467d1abc0f2350f8229d6107c8d1ec50918eb0f90c2d0e953d20e9cb6311b1043fe5eac7f","ssdeep":"192:N7+zDrAtrzxg68LRkwUVRLcBjTAF6ejxpzDU77BaafkXOgOQCYF29qrncgxas2of:NPt8LxU3LGEfU/Baatg1VnMs34ZNSrv","tlshash":"4262e8e2a612c6b903ed95cad8189145f9592db8064ef548ff4decd6219fc0270e2ff2","first_seen":"2026-07-10T12:36:00.038992Z","last_seen":"2026-07-12T21:21:00.174059Z","times_seen":5,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/login/assets/fonts/SalesforceSans/SalesforceSans-Regular.woff2","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.227Z","timestamp":1783891221227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /login/assets/fonts/SalesforceSans/SalesforceSans-Regular.woff2 HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sf.tumee.com/css/sfdc_210.css?v=7\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a31764a8aec272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 204318\r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Fri, 24 Jul 2015 20:32:56 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27580,"size_decoded":28082,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27580, version 1.0","md5":"3ccb7b03c77bb2a3e91f6a2fb4c211f8","sha1":"ac4c4df3c4bcc636190e4f94c7a80b81158d0517","sha256":"1f1752651aca663f40e45c60e182172fc426a40df042098f6e68a56db2c459f3","sha512":"0fd58d53f8590ea25a4f5dde4c4a16bee27fccda4ec94604a3a559790f3f3f9e49c748483b3037fd098abc656c56c8d283abe3435f7d2edb6e7074943459f90c","ssdeep":"768:qE6X22YZZE5bi18M7S6RwILPQy+KAiSjcz0:qPXdxQhjwILPqKAHjcz0","tlshash":"52c2f141c44f6a84af0838c7ff2d9181afa8165bb5b3d98114b89806d7fc791812e9fe","first_seen":"2023-05-11T12:50:23Z","last_seen":"2026-07-16T21:57:18.126084Z","times_seen":1473,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/fonts/salesforce-sans/SalesforceSans-Italic.woff2","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.775Z","timestamp":1783891221775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/fonts/salesforce-sans/SalesforceSans-Italic.woff2 HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a3176849060731-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 210551\r\ncache-control: public, max-age=2592000\r\netag: \"afa7774ce458bd2fc11c0f838f95a920:1616101751.986621\"\r\nexpires: Tue, 11 Aug 2026 21:20:21 GMT\r\nlast-modified: Thu, 18 Mar 2021 21:09:11 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.39e61702.1783680670.6b0410d\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670088_35120697_112214285_32_3384_10_14_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28344,"size_decoded":28953,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28344, version 1.655","md5":"afa7774ce458bd2fc11c0f838f95a920","sha1":"f68b970baf81b04ede146804b1daafa83ff146dd","sha256":"ebe5756120946b9fbab10ce9abc04c7b196966aac60b85a582c87c983b4725a8","sha512":"0da24d27b80860ab29bb938e544b34d6e419d8306ca638a58195e26470a7138d90c3afbc3ae1a1d53277aa2079c40f94eace7ce74cece1f2ebd6c6d9ac315745","ssdeep":"768:VkvR+FrTsH+kyFcEUQGl5YI7Kf0DMh9fK2R:wtekyrtGBKcDMh93","tlshash":"ccd2f115265bf815f80f9e9e4a9dd4d2058bd010620ff317f2ced278ba12a735a2c1be","first_seen":"2023-05-20T00:08:51Z","last_seen":"2026-07-17T03:04:56.340512Z","times_seen":1301,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":83,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/nunjucksFilters.426f86e3c82cc4d676f4.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.802Z","timestamp":1783891221802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /c2/public/exp/pbc/server/nunjucksFilters.426f86e3c82cc4d676f4.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: a1a317684c2b783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 210551\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\netag: W/\"9267-19f3ed2f300\"\r\nexpires: Wed, 22 Jul 2026 21:20:21 GMT\r\nlast-modified: Wed, 08 Jul 2026 01:58:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nak-uuid: 0.29e61702.1783680670.567159e\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: master-only\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37455,"size_decoded":11350,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37455), with no line terminators","md5":"fb201a927e0155d6119423560ad87f20","sha1":"b0e3f22dd0ade295bd73af0ca94c0875fbcf7190","sha256":"d6ad9a0d69b3b684189ffe8292369e43cc789f73feaeb64172bf70b236084bf1","sha512":"d8edf46dbb0fc27d478607f7d82f700e9c53e574ecf84367d4d742e9dce39fd78cc7c4ad5fef05b35cdda3e72204ac655de68518497417e02d5b46e79e578b8f","ssdeep":"768:pC6CgCT/Hick0CrhJec+UcHt7Vn+zECGDgZ/CpDFOf:wHickBhJejtZu/CDY","tlshash":"c7f2eac8b2c1f263db6732b5509f710bf23d641a988c9484d216dc9578f994a8273ffa","first_seen":"2026-07-10T12:35:59.997569Z","last_seen":"2026-07-12T21:21:00.176279Z","times_seen":5,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privacyportal.onetrust.com/request/v1/consentreceipts/anonymous","fqdn":"privacyportal.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.937Z","timestamp":1783891222937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 23:56:45 GMT","end":"Tue, 25 Aug 2026 00:56:41 GMT"},"fingerprint":{"sha1":"C9:CF:D5:82:20:E4:3C:8E:93:0C:23:4A:84:47:8B:9E:D8:DC:41:3D","sha256":"B4:81:5F:D3:A8:70:D4:91:CC:77:29:81:DF:82:FC:65:34:A8:46:CD:3D:25:6F:86:32:99:AA:46:88:A7:CE:40"}}},"request":{"raw":"POST /request/v1/consentreceipts/anonymous HTTP/1.1\r\nHost: privacyportal.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nContent-Type: application/json\r\nContent-Length: 13382\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13382,"data":"{\"requestInformation\":\"eyJhbGciOiJSUzUxMiJ9.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.ev7LMGuqRFMp54zWbtyEYy3Mzazw79iHmZwa4iGg4MPlsYMTRff5gpqNztfSC3CAJRlYW-BhUCo0Tz3GZ_fsojJPDQMQYIkC5fWGcsltXpX7utXADreATZ5KlzrK0xBNpNiGMIsUevMXxAljq78lAxv0D1kOrk8diORxix847tk2Ox_g66i9ELu8CdRO3s3vyTlEhIXqan67Quult4Iv9r9gBWie8ZOrdzp7a4ldsZTY-TM84QXTfoDY0HSelCvlQ-vYjBn2CSQFmjyIU72tltOzx7O4T4MlMFQofaodAgEIdNmm7tO8FbaHLgwS61pMDPHrTFg_LMNZg7i5pvRIfCZ-YivRgp8C3ISKhBfEm7LedV11Q0IIbLgQwiY9x8nuPQZ2oEVUpHLtkLRK44Dnchny5SeHtokPdQxu-x4j3YBKoted_KJIzb6EINLk98nmhtSQl5AORLItvqwHHjsRlOpL8thlKywkELjPfMO-rS1QRCZrM-bhWZbPFJxx0tR4zbNCLZ6KSzQLG_HPOEYLTKEMGiq0Im-zohmNlXHxPScZ7bRxw67Cgbhep7rsY5oXcsnAguMT14OBd2zRrm_h-Ti0LH7IyiMCHt2UHRaCwIMmAoVH1hHwSzETq-4ToPk0-Z_PPFFygc66553iqLaJWdqa3Gz3Yh3SnyN4CqxOlCY\",\"identifier\":\"94243c91-c460-49b6-857c-f3832f57b8e5\",\"identifierType\":\"Cookie Unique Id\",\"customPayload\":{\"Interaction\":1,\"AddDefaultInteraction\":true},\"isAnonymous\":true,\"test\":false,\"purposes\":[{\"Id\":\"6A400F2E-1CA5-4BB9-9CDE-5C1EC2F6C255\",\"TransactionType\":\"OPT_OUT\",\"PurposeNote\":{\"noteId\":\"7e7ff8a7-f724-4e0a-b1fe-3e834c081045\",\"noteType\":\"UNSUBSCRIBE_REASON\",\"noteText\":\"Opted out due to GPC signal.\"}}],\"dsDataElements\":{}}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:23 GMT\r\ncontent-type: application/json\r\nx-onetrust-receiptid: 019f5833-e290-7315-ab90-e438695135d3\r\nvia: 1.1 turnstile\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a317704f2eb51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2455,"size_decoded":2035,"mime_type":"application/json","magic":"JSON text data","md5":"6057aebfe9c2b6ec3b42495163954dcd","sha1":"452305b39496ce1d609646baa4e80a35de31337a","sha256":"b64f4737c5fe3c93ea2d499da6cf7746a29a9e7b841634fa8b3a05e955a30def","sha512":"889d2ca3023af1fd2ade1781a371cb16ed0b903f8258655989cd8e6e9a1127ecdecd1b9f47cbbc1503ee6073a7cc59709a31c15788f0e0cd5e5ecab4ad757679","ssdeep":"","tlshash":"e651c74f982317dcba15ad8228f0915683152d821ec36cdee76dbdc3a8b12dbf4d064d","first_seen":"2026-07-12T21:21:00.176904Z","last_seen":"2026-07-12T21:21:00.176904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/jslibrary/LoginHint208.js","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.134Z","timestamp":1783891221134,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /jslibrary/LoginHint208.js HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317641f31c272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 211044\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Fri, 21 Nov 2025 00:12:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21183,"size_decoded":6893,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (561)","md5":"3da3701e2fd3986eb5c25e74aa745a3a","sha1":"325a30f7add1a32d7efb730e14681e953d07cb00","sha256":"c707383ddb643c1b3f7f59100f89b02aa93a1e2bd39bd26cdffc6ba9a0d36cbc","sha512":"abf4daa1b3a59fdf470cb57564fdd57990e869c7a8f487a3b6ceff9912b4c1e5bcc9afac4aafd8825b108a1fa0dfc952e3d532638f5f72ecc353471ce426e3e8","ssdeep":"384:pgyMp3LSjcy1R7NiGoyn1K7a1suIb7IxsL5JPZZTuFWyGQgzTMoBUBKxwEvFWpIn:9Q3+gy1Ln0cxk6nGQgzTjBUBKqmFaIn","tlshash":"4992b8b732421a3579ef14eba87a97cdb8b085217c01d8a2841ccd15b538fd264fbe69","first_seen":"2026-02-13T01:58:22.102298Z","last_seen":"2026-07-16T21:57:18.062799Z","times_seen":133,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/SessionServer212.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.sf.tumee.com/login/sessionserver212.html","date":"2026-07-12T21:20:21.521Z","timestamp":1783891221521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /jslibrary/SessionServer212.js HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/login/sessionserver212.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw; CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317668e0b783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 211044\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Fri, 21 Nov 2025 00:12:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26707,"size_decoded":9472,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (583)","md5":"027be6574d025500127f526bcfa2665d","sha1":"97d37e63f4bf5af2ed1f60d1cbd6ef6da4d1c0b5","sha256":"b722a6e2fea947f99f4a25e026e51554b7e30c9735fa1549f2fbce941a4c10c8","sha512":"818c82d1ef30f4188ff5f35ff881abdae15edaddc6c38d7ab87cd4b8fe89cca6c659775dd5b98dc1caacffa894780652263956559143a9222b12dd2f13a1a6e4","ssdeep":"768:w6kuSAIWgJW6SSO5kNnhnE4kk7NoX1aIfQiw:hkqF6VTc4kqOFaiQiw","tlshash":"4ac209c636d2755986f230e9206f105af03d8e9eb86c9dd0e09ac4d17eb4e97807bf19","first_seen":"2026-02-13T01:58:22.210836Z","last_seen":"2026-07-16T21:57:18.1006Z","times_seen":108,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WRXS6TH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.188Z","timestamp":1783891222188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:35:29 GMT","end":"Mon, 14 Sep 2026 08:35:28 GMT"},"fingerprint":{"sha1":"4E:CE:B0:5B:5A:94:F2:15:05:64:F7:63:8C:23:58:95:2F:72:74:7B","sha256":"16:29:FC:E9:EC:BC:FF:2E:2F:4D:FB:5F:6A:E5:8F:51:7A:25:FE:6D:73:E4:66:1E:AE:DF:5B:F6:06:F3:36:E9"}}},"request":{"raw":"GET /gtm.js?id=GTM-WRXS6TH HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: https://c.sf.tumee.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\nexpires: Sun, 12 Jul 2026 21:20:22 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 12 Jul 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 220804\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":850833,"size_decoded":221483,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65316)","md5":"e9b02c1a9ad67b30b2f755e47f2ca943","sha1":"dc660437a0eaf3322e2dcbc2809c194879694c9d","sha256":"1d9450f876bea3eca5686123271f9d0fea5e92ff4af45d7c45461393fa41a913","sha512":"948aac60939aa275f06f3e8a54004818ae068167c6dcfbf0cc32d06a983294943e44d6a0fbeeedb1c3d69c5c74875147eaf841df7819ec70ebb970ed512d02a8","ssdeep":"6144:XGUPBCfuwQMi8VPPTvRse4WBXuYF5KTZeGXo0Jf7wozbF3V512qp6q0Zci0SJGW+:bQftmZeGbZFp2IUtnSkAC7++XK","tlshash":"c905fb8df2c56836c3a69564a83f014a663d34f2b28c58a1f0d9ccd42eb85756193fef","first_seen":"2026-07-12T21:21:00.178619Z","last_seen":"2026-07-13T03:08:48.900986Z","times_seen":2,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":2,"connect":17,"send":0,"wait":71,"receive":53,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/images/pbc/icons/check.svg","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.521Z","timestamp":1783891222521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/images/pbc/icons/check.svg HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a1a3176ccb6b783d-OSL\r\ncf-cache-status: BYPASS\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=14400\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783891222590_388255140_490575871_27_4645_29_39_15\";dur=1\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Tue, 19 Dec 2023 20:48:53 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.a44d2417.1783891222.1d3d97ff\r\netag: W/\"8d13fbb5e47df294a844f370641ecdff:1703018933.776628\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":884,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d13fbb5e47df294a844f370641ecdff","sha1":"fda34cba121908d603ce94f68d338f8d8d28586f","sha256":"0c997ead6e38bf80c08f52a0be0bbba70db8d56ae37540f86b233be266b9dde0","sha512":"40f7508e7533d90007d7972817a61a01d92b9d893751c75a460ff2041f3f24612e4aeaaae4fedfea7dc610961052f9106b310d88668ae39635d174bcab348724","ssdeep":"","tlshash":"38e02b9786c15cde6da5c83ce078688a6586f433443880c19f9a741ed9dd0d418ee648","first_seen":"2024-02-27T19:14:42Z","last_seen":"2026-07-16T21:57:18.128194Z","times_seen":248,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/css/sfdc_210.css?v=7","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.131Z","timestamp":1783891221131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /css/sfdc_210.css?v=7 HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: text/css\r\ncf-ray: a1a317641f24c272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 211044\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Wed, 05 Nov 2025 17:03:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29065,"size_decoded":6627,"mime_type":"text/css","magic":"ASCII text","md5":"65ead91845215fa8276588de1e8d725e","sha1":"ba4adc4999e6412e31d58ab7c53bd8a0dda47bf2","sha256":"e48e663b72a4aef93a4bab74718fefeed852ab4c21563437bc5e4ddf01776b71","sha512":"9668d7b1527921df3df76b409987f941aa535ead1d0e295d72bd901545008a7e64df47a17d047adbdbb4dbd45d7a6d881b416a87037e95ee5f019c29139cb6cd","ssdeep":"384:axtBlwIBeS2FqZSQiV20JUPugDyf1Op5n0CwyYdwuQzu:IwewYCJUPugDyf1Of0/nOZ6","tlshash":"86d2a663ab81280ab21b90a9ffa5a7d5532d80179f0e4dbef955313cef840d401b2bdd","first_seen":"2026-02-13T01:58:21.956078Z","last_seen":"2026-07-16T21:57:18.10588Z","times_seen":179,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sf.tumee.com/jslibrary/LoginMarketingSurveyResponse.js","fqdn":"sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sf.tumee.com/","date":"2026-07-12T21:20:21.138Z","timestamp":1783891221138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 23:51:02 GMT","end":"Fri, 09 Oct 2026 00:50:46 GMT"},"fingerprint":{"sha1":"86:E4:54:18:35:00:E2:4E:4C:0F:B8:7B:F6:A2:64:50:0A:DA:FE:BB","sha256":"C4:98:28:72:BC:F2:76:F6:52:AD:5B:41:D5:35:48:97:29:2C:C0:9E:FE:C6:33:93:1C:66:BC:3C:83:57:58:4D"}}},"request":{"raw":"GET /jslibrary/LoginMarketingSurveyResponse.js HTTP/1.1\r\nHost: sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:21 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317641f3cc272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 211044\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 21:20:21 GMT\r\nlast-modified: Fri, 23 Aug 2024 01:29:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1175,"size_decoded":1118,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (559)","md5":"02bc0d2087326d4b0fbdfc0a80ec1f1d","sha1":"2878b53a2bf784c212f89d7593a660c93f3e2f90","sha256":"51c7fa0719e80398c74a788208999a9e92398a740e4850ea456e2ada18fe4879","sha512":"ed17248eb726618ac637f3d893531f0d097fe7322413b5d580c48a6916e3c7202bdc02c8706b503b266bf0aa42634ea0d0072f387f01f325e550203b09d87b6a","ssdeep":"","tlshash":"b721fec9ba907094675a38908a3f9b0cb06a8069ba00d581e514c4e0bd3565f803ee9f","first_seen":"2024-10-11T09:18:50.387359Z","last_seen":"2026-07-16T21:57:18.13732Z","times_seen":296,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.784Z","timestamp":1783891221784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a317683bf5783d-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"f6526294d846e88395151672a72cdb01:1781683760.197415\"\r\nexpires: Mon, 13 Jul 2026 01:20:22 GMT\r\nlast-modified: Sun, 12 Jul 2026 06:27:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783891222.d818331\r\nakamai-amd-bc-debug: [a=2.16.64.148,b=347358555,c=c,d=1783737347,h=200,k=2,l=456,n=ES_MD_MADRID,o=20940,r=458,p=17276,j=[[a=23.211.15.137,b=347358555,c=c,d=1783737347,h=200,k=7,l=445,m=4,r=456]]],[a=23.59.215.137,b=519832514,c=c,d=1783737347,h=200,k=24,l=426,n=ES_MD_MADRID,o=20940,r=450,p=17276,j=[[a=23.193.57.40,b=519832514,c=o,d=1783737347,h=300,k=277,l=109,m=38,r=424,p=1257]]]\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17292,"size_decoded":6658,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (17259)","md5":"f43b73cbfac0a6ea618295d65a23591c","sha1":"255aa6fb02e3ce0190985255aa464e6180e27d1e","sha256":"98df6e935ef2d14dce377f16c1707fad159d5ed377cacd92feb6a18b1eda72ac","sha512":"088b0ddbce09d3364d9b3605ffc663f3441314b336a0046af2dc058f9e922c2afdb3c4eeadb9160ccb29f1294c24113e3ad803e572cbc6f3229466c339c4d63f","ssdeep":"384:aoA97P5RskmQLz6KpcXacSo9nYugy86OJvSRX5di:a9aSz6azo9nYuz75di","tlshash":"2e7207d1a65aca7403f869ddd42e9245f21a1d79438db450ff8efc90201ad4a30e6ffa","first_seen":"2026-07-10T12:35:59.988075Z","last_seen":"2026-07-12T21:21:00.180839Z","times_seen":5,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/en.json","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:22.693Z","timestamp":1783891222693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/en.json HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw; gtm_session_start=1783891222679\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a3176ddefe783d-OSL\r\ncf-cache-status: DYNAMIC\r\nak-uuid: 0.874f2417.1783891222.2a6c30f6\r\ncache-control: max-age=0, no-cache\r\npragma: no-cache\r\nexpires: Sun, 12 Jul 2026 21:20:22 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:36:02 GMT\r\nserver: cloudflare\r\netag: W/\"387f6fbe9d9d8a13971fdce6a10d2caa:1780914962.395596\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338758,"size_decoded":55782,"mime_type":"application/json","magic":"JSON text data","md5":"274487ef889465c7600f0f8fc2534da8","sha1":"af1cafca240aa8ae95b3c3bd469fdd404aa799d9","sha256":"c936bab92661d989014656f2e11a5267426749c4144583cb8e3bcc0228fe5e4a","sha512":"9134b5450b4e28768ffcec50497a239135a755956621d5a9c870b8a5750f250c62153d35062908d63a5a38d969d3962185ab07d3274fc7db455edd0688811152","ssdeep":"6144:HDDpUQCVCdCbCBCtCHCiCJC8C0CKLCyCdRXO1Vk2krkUjB2Y3uy7Z:jDPRXO1Vk2krkUjB2Y39","tlshash":"6e7476059ba45cf84b0f039118a1bb8de33c4667eb50de9eec4c4e3ac293be55977186","first_seen":"2026-07-10T12:35:59.924793Z","last_seen":"2026-07-12T21:21:00.18132Z","times_seen":5,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/templates.ecefdc8932e79bab8e8a.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T21:20:21.797Z","timestamp":1783891221797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /c2/public/exp/pbc/server/templates.ecefdc8932e79bab8e8a.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=fOQYDX43EfGgrD0qcDRkxw\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:20:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: a1a317684c23783d-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 210551\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\netag: W/\"c59dd-19f3ed2f300\"\r\nexpires: Wed, 22 Jul 2026 21:20:21 GMT\r\nlast-modified: Tue, 07 Jul 2026 23:49:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nak-uuid: 0.16e61702.1783680670.1151797\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: master-only\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":809523,"size_decoded":78371,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"d4364a6ebf5a66c56b717244b97e0dfb","sha1":"c448162eb695356780463adb159ece61af89dd52","sha256":"49a011be8bed7991b1fb6197f87bedf0e1dc86eb34f5b62ea4462b3c21116b5b","sha512":"16589a0092992dd02144508b4fbbae818b9c84e6ed8aeba926c70c784ad352cfb0ebd18370223b7fc4f2b3704c32495304fea026f3b234d2d4bb74c931cb1c5f","ssdeep":"3072:vGwYx6TR2iYYTbYi7rUa7WmSrnmecEPf7luiTUs:eY0ijTn9fSrnmecEPf7luiTUs","tlshash":"65054464ca6874b0b7f6b2ccd91751163a78bb15e410caa8fa4c85ed0bdcc5335a7b2c","first_seen":"2026-07-10T12:35:59.995692Z","last_seen":"2026-07-12T21:21:00.182429Z","times_seen":5,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}