{"report_id":"1bdec932-55ee-411e-a90d-f1f3e1f2def1","version":6,"status":"done","tags":[],"date":"2026-03-17T07:28:35Z","url":{"schema":"https","addr":"tangerine-crisp-b3cb52.netlify.app","fqdn":"tangerine-crisp-b3cb52.netlify.app","domain":"tangerine-crisp-b3cb52.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"tangerine-crisp-b3cb52.netlify.app/","fqdn":"tangerine-crisp-b3cb52.netlify.app","domain":"tangerine-crisp-b3cb52.netlify.app","tld":"netlify.app"},"title":"Download Complete","dom":{"size":3481,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a7f92c52514761d6c10e4edd696f7225","sha1":"2b045c0ffc178fd33626e01ab8a555b3cb387e3e","sha256":"35476f97586b76e52485d126d1d67c41bd50eb1072516a796acc0f47acb21a55","sha512":"0b0513f2e2e696b5a05bca0d0e5f0d907b32cbb7801a4aca82f31fb9395f26004eb7b27430512388b0fbc608e3851a99227bc9db7154fe9912a266b0ce1af8a4","ssdeep":"","tlshash":"ab71fd9b6af3054a7d5364701fb767922594d407d24ec8a53e8cb26ccf856d68cb338c","dom_hash":"domhashefe1cbb4f85280dc04e0bdb832d5e816","first_seen":"2026-03-17T07:28:37.672731Z","last_seen":"2026-03-17T07:28:37.672731Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tangerine-crisp-b3cb52.netlify.app","fqdn":"tangerine-crisp-b3cb52.netlify.app","domain":"tangerine-crisp-b3cb52.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T07:28:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-17T07:28:14Z","timestamp":1773732494,"ip_dst":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":59990,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING Suspicious Netlify Hosted TLS SNI Request - Possible Phishing Landing","source":"{\"timestamp\":\"2026-03-17T07:28:14.225182+0000\",\"flow_id\":1988589228308817,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":59990,\"dest_ip\":\"35.157.26.135\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032760,\"rev\":1,\"signature\":\"ET HUNTING Suspicious Netlify Hosted TLS SNI Request - Possible Phishing Landing\",\"category\":\"Possible Social Engineering Attempted\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_14\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2021_04_14\"]}},\"tls\":{\"sni\":\"tangerine-crisp-b3cb52.netlify.app\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3503,\"start\":\"2026-03-17T07:28:14.178513+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"tangerine-crisp-b3cb52.netlify.app","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-05-08","domain_rank":0,"first_seen":"2026-03-17T07:28:35.481676Z","last_seen":"2026-03-17T07:28:35.481676Z","alert_count":0,"request_count":2,"received_data":4126,"sent_data":978,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bitbucket.org","ip":{"addr":"185.166.143.49","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"domain_registered":"1997-11-24","domain_rank":3104,"first_seen":"2012-05-21T19:07:59Z","last_seen":"2026-03-11T15:55:06.53509Z","alert_count":0,"request_count":1,"received_data":9053,"sent_data":571,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Zipkin","description":"","website":"https://zipkin.io/","common_platform_enumeration":"","icon":"Zipkin.png","categories":["Analytics"]}]},{"fqdn":"bbuseruploads.s3.amazonaws.com","ip":{"addr":"16.15.191.94","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2014-05-24T15:44:20Z","last_seen":"2026-03-11T03:39:12.579258Z","alert_count":0,"request_count":1,"received_data":2619,"sent_data":1674,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tangerine-crisp-b3cb52.netlify.app/","fqdn":"tangerine-crisp-b3cb52.netlify.app","domain":"tangerine-crisp-b3cb52.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5e488db2b41791f7a7d3ad435af150e","sha1":"b722fa71631241f091d517ddd40398166c9e57cf","sha256":"4a95ba02f5e895f0f2bfbf36031c968659e3a03438ab2af9b9b02ac6cd763dc9","sha512":"6ee4fe87c8cd39b2cab02fceab37ecf6a459b07733b173d67107b23448268eff25b5c3821ca6f4c0041319b4b1c833375dcae4a9a485731055ddee259182876b","ssdeep":"","tlshash":"24b02b6650914104033825d0c80fb1007023014f404a444080008714f63071f8006dcf","size":122,"data":"","first_seen":"2026-03-17T07:28:37.681125Z","last_seen":"2026-03-17T07:28:37.681125Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tangerine-crisp-b3cb52.netlify.app/","fqdn":"tangerine-crisp-b3cb52.netlify.app","domain":"tangerine-crisp-b3cb52.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T07:28:14.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tangerine-crisp-b3cb52.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 160\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 17 Mar 2026 07:28:14 GMT\r\netag: \"16f43a7d94fc2084b416a4590d26e239-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KKXB3YYH15YD03B31QS02TNP\r\ncontent-length: 1074\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3645,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"2b00e7c07f4410f3db60373489337e65","sha1":"d423d9e8385898bf586f3ad7bf1a085cafbfb53a","sha256":"c19edd5ac22951cbb5d8d9f54562be7662dba77cb5977de100755653516df1e8","sha512":"4e4027d4d3c258659da97f7ff0d3cea2ae46ab715f1c08393fc877a692c98c63bcb7ffd047ea0b4528e7dd032c3031ae031b999d79fd898da5a4cda0c4cf5be1","ssdeep":"","tlshash":"c371312be94604063573a2709f736396fb818017934642763ecdb2669fb5919c9b3fcc","first_seen":"2026-03-17T07:28:37.673756Z","last_seen":"2026-03-17T07:28:37.673756Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":107,"dns":19,"connect":23,"send":0,"wait":23,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tangerine-crisp-b3cb52.netlify.app/favicon.ico","fqdn":"tangerine-crisp-b3cb52.netlify.app","domain":"tangerine-crisp-b3cb52.netlify.app","tld":"netlify.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tangerine-crisp-b3cb52.netlify.app/","date":"2026-03-17T07:28:14.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tangerine-crisp-b3cb52.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tangerine-crisp-b3cb52.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bitbucket.org/xazcf/vbm/downloads/zoom_update.vbs","fqdn":"bitbucket.org","domain":"bitbucket.org","tld":"org"},"ip":{"addr":"185.166.143.49","port":443,"asn":16509,"as":"AMAZON-02","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T07:28:14.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bitbucket.org","organization":"Atlassian US, Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Thu, 14 Aug 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:D2:AF:A3:B2:AF:72:92:F1:20:AD:BF:AD:56:E6:54:A7:3F:B0:21","sha256":"10:6A:99:09:22:72:DC:8D:B5:1A:76:C3:52:96:BB:44:42:2E:41:BB:A6:E0:8F:3A:73:F6:DD:92:60:24:5F:D8"}}},"request":{"raw":"GET /xazcf/vbm/downloads/zoom_update.vbs HTTP/1.1\r\nHost: bitbucket.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tangerine-crisp-b3cb52.netlify.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 17 Mar 2026 07:28:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nserver: AtlassianEdge\r\nlocation: https://bbuseruploads.s3.amazonaws.com/5e58e9d6-0be2-477f-b379-5f3852b01ed4/downloads/b7ac7bc8-a2b9-40cd-8760-5095c9af55fb/zoom_update.vbs?response-content-disposition=attachment%3B%20filename%3D%22zoom_update.vbs%22\u0026AWSAccessKeyId=ASIA6KOSE3BNI7HRJB3V\u0026Signature=0BXEow7gBN2y0cbgAkrwb6iDJYE%3D\u0026x-amz-security-token=IQoJb3JpZ2luX2VjEB8aCXVzLWVhc3QtMSJHMEUCIFWqqJHZ4w5mdLh%2Fkdlz4Ce0FLYh8cyoxzzDRc96kG1uAiEA8cnv3FYPhqz%2BYV%2Br9%2FiXjq%2Butl2rR8fqLhlCmW7LPNsqsAII6P%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FARAAGgw5ODQ1MjUxMDExNDYiDFzh6ZMFqsSGIZM8riqEAv28gh5%2BcWwI3hC%2FDBbw0IEEktXd2%2BxNxyx617%2BnARVz9g6rAhJP2ERkIq7CuJWWRPd661t1wbNfzeb4AifnEcI2VZfKiF9gCbmKuwU%2FR440WvxoS6pAU0jRpKR6ruAB%2BGajj4JdFw1CtSPn%2BRJTQsb4T0SRNvBNeihV8rjn3ZPnAdwjppd%2BVCOLDFgcxRY%2BkKWcqwe7KRLi9dVJ4zBgQRDAksbzTa7lpuFC4YxQUX9q20U47ZT7HmI0wqwHWcUncdYukpDZIbBkMYyZJ6FmoAVq8kMsrVkqQfXV7tq4RkoZfL9B5ekyta2UBe1K%2F1MtW7JbLO2oSw8Ken0yisIsRJClrMQFMMnv480GOp0B6mEjr14qGbsKIhdu4XZwProC%2BY7rvAwxOUrA9%2BjBugJrnANfSNXaHzgVMI5dBQW7Blj8cgqkA9JSqcA9DdfcWfISYNlXB07QFoUjk6s4Ti2l1hNU1cpZmWJl3Ntkr9GvBPvIvuGwyn3qijdDokpb1ILgBVOtcRC56ZhXsUnY77lJYXh9c0jDcpeOfNf56g30%2FY0vVyh%2BIQsaNVbyUg%3D%3D\u0026Expires=1773733953\r\nexpires: Tue, 17 Mar 2026 07:28:15 GMT\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate, private\r\nx-used-mesh: False\r\nvary: Accept-Language, origin\r\ncontent-language: en\r\nx-view-name: bitbucket.apps.downloads.views.download_file\r\nx-dc-location: Micros-3\r\nx-served-by: 9d06e8c14aaa\r\nx-version: 85ecf0d61432\r\nx-static-version: 85ecf0d61432\r\nx-request-count: 2244\r\nx-render-time: 0.10412907600402832\r\nx-b3-traceid: d4ac2a1be8b841dfaff20873868f8e92\r\nx-b3-spanid: 9b91d8396c8f6415\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: base-uri 'self'; script-src 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' http: https: https://remote-app-switcher.stg-east.frontend.public.atl-paas.net https://remote-app-switcher.prod-east.frontend.public.atl-paas.net https://bbc-frontbucket-static.adev.frontend.public.atl-paas.net https://bbc-frontbucket-static.stg-east.frontend.public.atl-paas.net https://bbc-frontbucket-exp.stg-east.frontend.public.atl-paas.net https://bbc-frontbucket-static.prod-east.frontend.public.atl-paas.net https://bbc-frontbucket-exp.prod-east.frontend.public.atl-paas.net app.pendo.io cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com pendo-static-6291417196199936.storage.googleapis.com https://bbc-object-storage--frontbucket.us-east-1.prod.public.atl-paas.net/ https://bbc-object-storage--frontbucket.us-east-1.staging.public.atl-paas.net/ https://bbc-object-storage--frontbucket.us-east-1.prod.public.atl-paas.net/; frame-ancestors 'self' start.atlassian.com start.stg.atlassian.com atlaskit.atlassian.com bitbucket.org app.pendo.io; style-src 'self' 'unsafe-inline' https://aui-cdn.atlassian.com/ https://cdn.cookielaw.org/ https://bbc-frontbucket-static.adev.frontend.public.atl-paas.net https://bbc-frontbucket-static.stg-east.frontend.public.atl-paas.net https://bbc-frontbucket-exp.stg-east.frontend.public.atl-paas.net https://bbc-frontbucket-static.prod-east.frontend.public.atl-paas.net https://bbc-frontbucket-exp.prod-east.frontend.public.atl-paas.net app.pendo.io cdn.pendo.io pendo-static-6291417196199936.storage.googleapis.com https://ds-cdn.prod-east.frontend.public.atl-paas.net https://bbc-object-storage--frontbucket.us-east-1.prod.public.atl-paas.net/ https://bbc-object-storage--frontbucket.us-east-1.staging.public.atl-paas.net/ https://bbc-object-storage--frontbucket.us-east-1.prod.public.atl-paas.net/; connect-src bitbucket.org *.bitbucket.org bb-inf.net *.bb-inf.net atlassianblog.wpengine.com id.atlassian.com api.atlassian.com api.stg.atlassian.com wss://bitbucketci-ws-service.services.atlassian.com/ wss://bitbucketci-ws-service.stg.services.atlassian.com/ wss://bitbucketci-ws-service.dev.services.atlassian.com/ analytics.atlassian.com atlassian-cookies--categories.us-east-1.prod.public.atl-paas.net as.atlassian.com api-private.stg.atlassian.com api-private.atlassian.com xp.atlassian.com atl-global.atlassian.com cofs.staging.public.atl-paas.net cofs.prod.public.atl-paas.net fd-assets.prod.atl-paas.net flight-deck-assets-bifrost.prod-east.frontend.public.atl-paas.net intake.opbeat.com api.media.atlassian.com api.segment.io xid.statuspage.io xid.atlassian.com xid.sourcetreeapp.com www.google-analytics.com sentry.io *.ingest.sentry.io statsigapi.net fd-config.us-east-1.prod.public.atl-paas.net fd-config-bifrost.prod-east.frontend.public.atl-paas.net micros--prod-west--bitbucketci-file-service--files.s3.us-west-1.amazonaws.com micros--prod-east--bitbucketci-file-service--files.s3.amazonaws.com micros--stg-west--bitbucketci-file-service--files.s3.us-west-1.amazonaws.com micros--stg-east--bitbucketci-file-service--files.s3.amazonaws.com micros--ddev--bitbucketci-file-service--files.s3.ap-southeast-2.amazonaws.com app.pendo.io data.pendo.io pendo-static-6291417196199936.storage.googleapis.com bqlf8qjztdtr.statuspage.io wss://bitbucket.org/gateway/api/bbc-aps/subscriptions wss://bitbucket.org/gateway/api/graphql/subscriptions https://bbc-object-storage--frontbucket.us-east-1.prod.public.atl-paas.net/ https://bbc-object-storage--frontbucket.us-east-1.staging.public.atl-paas.net/ https://bbc-object-storage--frontbucket.us-east-1.prod.public.atl-paas.net/; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *; font-src 'self' https://bbc-frontbucket-static.adev.frontend.public.atl-paas.net https://bbc-frontbucket-static.stg-east.frontend.public.atl-paas.net https://bbc-frontbucket-exp.stg-east.frontend.public.atl-paas.net https://bbc-frontbucket-static.prod-east.frontend.public.atl-paas.net https://bbc-frontbucket-exp.prod-east.frontend.public.atl-paas.net https://ds-cdn.prod-east.frontend.public.atl-paas.net https://bbc-object-storage--frontbucket.us-east-1.prod.public.atl-paas.net; object-src 'none'; report-uri https://web-security-reports.services.atlassian.com/csp-report/bb-website\r\nx-usage-quota-remaining: 997858.121\r\nx-usage-request-cost: 2171.40\r\nx-usage-user-time: 0.062187\r\nx-usage-system-time: 0.002955\r\nx-usage-input-ops: 0\r\nx-usage-output-ops: 0\r\nx-envoy-attempt-count: 1\r\nage: 0\r\nx-cache: MISS\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\natl-traceid: d4ac2a1be8b841dfaff20873868f8e92\r\natl-request-id: d4ac2a1b-e8b8-41df-aff2-0873868f8e92\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"endpoints\": [{\"url\": \"https://dz8aopenkvv6s.cloudfront.net\"}], \"group\": \"endpoint-1\", \"include_subdomains\": true, \"max_age\": 600}\r\nnel: {\"failure_fraction\": 0.01, \"include_subdomains\": true, \"max_age\": 600, \"report_to\": \"endpoint-1\"}\r\nserver-timing: atl-edge;dur=219,atl-edge-internal;dur=2,atl-edge-upstream;dur=218,atl-edge-pop;desc=\"aws-eu-central-1\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Zipkin","description":"","website":"https://zipkin.io/","common_platform_enumeration":"","icon":"Zipkin.png","categories":["Analytics"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T14:37:28.899243Z","times_seen":17956565,"resource_available":true,"data":null}},"time_used":1296,"timings":{"blocked":526,"dns":11,"connect":23,"send":0,"wait":243,"receive":0,"ssl":491},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bbuseruploads.s3.amazonaws.com/5e58e9d6-0be2-477f-b379-5f3852b01ed4/downloads/b7ac7bc8-a2b9-40cd-8760-5095c9af55fb/zoom_update.vbs?response-content-disposition=attachment%3B%20filename%3D%22zoom_update.vbs%22\u0026AWSAccessKeyId=ASIA6KOSE3BNI7HRJB3V\u0026Signature=0BXEow7gBN2y0cbgAkrwb6iDJYE%3D\u0026x-amz-security-token=IQoJb3JpZ2luX2VjEB8aCXVzLWVhc3QtMSJHMEUCIFWqqJHZ4w5mdLh%2Fkdlz4Ce0FLYh8cyoxzzDRc96kG1uAiEA8cnv3FYPhqz%2BYV%2Br9%2FiXjq%2Butl2rR8fqLhlCmW7LPNsqsAII6P%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FARAAGgw5ODQ1MjUxMDExNDYiDFzh6ZMFqsSGIZM8riqEAv28gh5%2BcWwI3hC%2FDBbw0IEEktXd2%2BxNxyx617%2BnARVz9g6rAhJP2ERkIq7CuJWWRPd661t1wbNfzeb4AifnEcI2VZfKiF9gCbmKuwU%2FR440WvxoS6pAU0jRpKR6ruAB%2BGajj4JdFw1CtSPn%2BRJTQsb4T0SRNvBNeihV8rjn3ZPnAdwjppd%2BVCOLDFgcxRY%2BkKWcqwe7KRLi9dVJ4zBgQRDAksbzTa7lpuFC4YxQUX9q20U47ZT7HmI0wqwHWcUncdYukpDZIbBkMYyZJ6FmoAVq8kMsrVkqQfXV7tq4RkoZfL9B5ekyta2UBe1K%2F1MtW7JbLO2oSw8Ken0yisIsRJClrMQFMMnv480GOp0B6mEjr14qGbsKIhdu4XZwProC%2BY7rvAwxOUrA9%2BjBugJrnANfSNXaHzgVMI5dBQW7Blj8cgqkA9JSqcA9DdfcWfISYNlXB07QFoUjk6s4Ti2l1hNU1cpZmWJl3Ntkr9GvBPvIvuGwyn3qijdDokpb1ILgBVOtcRC56ZhXsUnY77lJYXh9c0jDcpeOfNf56g30%2FY0vVyh%2BIQsaNVbyUg%3D%3D\u0026Expires=1773733953","fqdn":"bbuseruploads.s3.amazonaws.com","domain":"bbuseruploads.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"16.15.191.94","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T07:28:15.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /5e58e9d6-0be2-477f-b379-5f3852b01ed4/downloads/b7ac7bc8-a2b9-40cd-8760-5095c9af55fb/zoom_update.vbs?response-content-disposition=attachment%3B%20filename%3D%22zoom_update.vbs%22\u0026AWSAccessKeyId=ASIA6KOSE3BNI7HRJB3V\u0026Signature=0BXEow7gBN2y0cbgAkrwb6iDJYE%3D\u0026x-amz-security-token=IQoJb3JpZ2luX2VjEB8aCXVzLWVhc3QtMSJHMEUCIFWqqJHZ4w5mdLh%2Fkdlz4Ce0FLYh8cyoxzzDRc96kG1uAiEA8cnv3FYPhqz%2BYV%2Br9%2FiXjq%2Butl2rR8fqLhlCmW7LPNsqsAII6P%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FARAAGgw5ODQ1MjUxMDExNDYiDFzh6ZMFqsSGIZM8riqEAv28gh5%2BcWwI3hC%2FDBbw0IEEktXd2%2BxNxyx617%2BnARVz9g6rAhJP2ERkIq7CuJWWRPd661t1wbNfzeb4AifnEcI2VZfKiF9gCbmKuwU%2FR440WvxoS6pAU0jRpKR6ruAB%2BGajj4JdFw1CtSPn%2BRJTQsb4T0SRNvBNeihV8rjn3ZPnAdwjppd%2BVCOLDFgcxRY%2BkKWcqwe7KRLi9dVJ4zBgQRDAksbzTa7lpuFC4YxQUX9q20U47ZT7HmI0wqwHWcUncdYukpDZIbBkMYyZJ6FmoAVq8kMsrVkqQfXV7tq4RkoZfL9B5ekyta2UBe1K%2F1MtW7JbLO2oSw8Ken0yisIsRJClrMQFMMnv480GOp0B6mEjr14qGbsKIhdu4XZwProC%2BY7rvAwxOUrA9%2BjBugJrnANfSNXaHzgVMI5dBQW7Blj8cgqkA9JSqcA9DdfcWfISYNlXB07QFoUjk6s4Ti2l1hNU1cpZmWJl3Ntkr9GvBPvIvuGwyn3qijdDokpb1ILgBVOtcRC56ZhXsUnY77lJYXh9c0jDcpeOfNf56g30%2FY0vVyh%2BIQsaNVbyUg%3D%3D\u0026Expires=1773733953 HTTP/1.1\r\nHost: bbuseruploads.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tangerine-crisp-b3cb52.netlify.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: avCIHqzwRrn8WgVl/QLayNWRjwSHHGI7kvCzs6ZeZ9VqWVFDpGqR/whltq4JfkLMeMQNoaUF8M0QwQg5xzIN1wWwIfB+UJwk\r\nx-amz-request-id: 09X5DXKP5V17JKWZ\r\nDate: Tue, 17 Mar 2026 07:28:16 GMT\r\nLast-Modified: Sun, 15 Mar 2026 14:30:35 GMT\r\nETag: \"0905823610d78d4f67f211f9095d4548\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: b81TkKnAR35vtvYyNk1mDcyslTe.9O2O\r\nContent-Disposition: attachment; filename=\"zoom_update.vbs\"\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 2076\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (2076), with no line terminators","md5":"0905823610d78d4f67f211f9095d4548","sha1":"df0e6cea37351419f3e5b40aa6b5baf84bd6d0a2","sha256":"dc7b0384292fc416877c3cbfe84c0fac257c1dc084ea33f6e7b59c72f24121fc","sha512":"9538590aa67fb43a697f1a29decc75dcd48f9babe7919f64baf2cf112af631e8e667f84012e49d782935446d3d6764bd10afe41ecce7b31e1c65d135c3b0567b","ssdeep":"","tlshash":"de416b9333d80fa9b54419e510a9311784f6e92e3f362589ebe3166bf83d5b17ca8730","first_seen":"2026-03-17T07:28:37.679998Z","last_seen":"2026-03-17T07:28:37.679998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":275,"dns":42,"connect":96,"send":0,"wait":140,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}