{"report_id":"23e9c2bf-c16f-4413-ac6a-dfc3bac3eb32","version":6,"status":"done","tags":[],"date":"2023-12-05T13:25:36Z","url":{"schema":"http","addr":"wap8vosthcwdlesqsqha.manxttrider.com/","fqdn":"wap8vosthcwdlesqsqha.manxttrider.com","domain":"manxttrider.com","tld":"com"},"ip":{"addr":"192.185.113.242","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wap8vosthcwdlesqsqha.manxttrider.com/","fqdn":"wap8vosthcwdlesqsqha.manxttrider.com","domain":"manxttrider.com","tld":"com"},"title":"Just a moment..."},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:00:34Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.250.74.132","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":3,"received_data":203458,"sent_data":1322,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2023-12-05 05:09:58","alert_count":0,"request_count":1,"received_data":28956,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aadcdn.msftauth.net","ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":1455,"first_seen":"2018-11-19 11:50:32","last_seen":"2023-12-05 07:34:10","alert_count":0,"request_count":1,"received_data":17800,"sent_data":525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-12-05 07:37:50","alert_count":0,"request_count":1,"received_data":18682,"sent_data":513,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wap8vosthcwdlesqsqha.manxttrider.com","ip":{"addr":"192.185.113.242","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2018-03-05","domain_rank":0,"first_seen":"2023-09-22 03:21:39","last_seen":"2023-10-19 16:23:01","alert_count":1,"request_count":1,"received_data":123772,"sent_data":505,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"Outlook","trigger":"wap8vosthcwdlesqsqha.manxttrider.com/","verdict":"phishing","severity":"medium","comment":"Outlook","link":"https://openphish.com","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wap8vosthcwdlesqsqha.manxttrider.com/","fqdn":"wap8vosthcwdlesqsqha.manxttrider.com","domain":"manxttrider.com","tld":"com"},"ip":{"addr":"192.185.113.242","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e3c5eb949faa235d4f8cc24f6bb9d44","sha1":"b788b09bca2793165f31c4e081017a1506f581db","sha256":"ba703dc33a8ea1e4f1676e67fa043a6e442a7be6d7f77b09012f79717dd97021","sha512":"975b8e73192ddf7435f569225cfcf9a2571e0703a65e6ef7a2410f8bc8051111c601e352cbef7ce4a5dd7fc54f29483bac2029c8378fc02bfb330b47b92e0b41","ssdeep":"768:8XhjmK51dV9XmeADomulirUxhiMEY4XyO6e7i4ZCajJHtP7s3Wc9KbWp8G5:+9KbW+U","tlshash":"56c3c02c3c14d32f642a1d7f7addb64fa85c7c46aa8d4d4cbc14f9975dd20b8aa200b6","size":122452,"data":"","first_seen":"2023-08-29T15:38:51Z","last_seen":"2024-08-21T07:50:32.929057Z","times_seen":341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-14T03:42:01.01616Z","times_seen":503704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap8vosthcwdlesqsqha.manxttrider.com/","fqdn":"wap8vosthcwdlesqsqha.manxttrider.com","domain":"manxttrider.com","tld":"com"},"ip":{"addr":"192.185.113.242","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0238a2f84082b8fbd2696a0e0656c4cd","sha1":"0ac6c684f756a908c8d7af84fb2c8ec83f764e90","sha256":"320751fbae41fb53dc14eb35f9ad29c8e469c51c73870c108b231582cf0bf6b1","sha512":"b7b9ffafe4146257b692782b4cb7a86956eae4e0ce129f541f8c03c1920422cc36e38eba513f00a9a6c4bed80ea87651f0daf8f90c44c4741894dcb7a61a3400","ssdeep":"","tlshash":"eff002e7310c12c523d85420c63f2b8851ba3af90c2cac54227094803f2a10b65baad9","size":586,"data":"","first_seen":"2023-10-08T13:11:18Z","last_seen":"2024-08-21T05:05:26.603538Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"f48910ef7535639cbf1b256b818d990c","sha1":"d303318fdcfa5de43f2504bf3ced5f2ed9ba8ffd","sha256":"7d55c60fafcec9bc00bce39f105b35f9240bf368f8a5ce2e1c7fad96a155b8b4","sha512":"4c6c42e2a2b1df24c611c8238e251abcd6e20c93dd81c509f56b51d93b75569760757f2ac05306abb166bdc546f3986e97aa8ef7627fcbb6b2457d724d39ad6b","ssdeep":"192:88HlbV2NObfheQq0n+xHCHkZUHKHL8uRf7s3da85fc65HBuDmSyahPCuas7y9MRb:pr08gK0A+hI95xT79VHjK","tlshash":"7472851e56b311852d4396b827fa53492730d007ce09de68bfdea394cf8da546de278c","size":16761,"data":"","first_seen":"2023-08-29T15:38:51Z","last_seen":"2024-08-21T07:50:32.931012Z","times_seen":341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap8vosthcwdlesqsqha.manxttrider.com/","date":"2023-12-05T13:25:25.954Z","timestamp":1701782725954,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wap8vosthcwdlesqsqha.manxttrider.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 13:25:19 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-gu3l02MaQHspitTr_1nFnA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 66474\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=Ackid1T-o7E05tlstwcrAxrWKJZqrcgpOyGUSIljhoCnjO0cQlU2WKA1Cg; expires=Sun, 02-Jun-2024 13:25:19 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=16.SE=VaaRYbzZYRrcgnyd9x3v6RfMUQ-0FsaFYd8UE_S_AF0o0bTyV4eEQC1ZWFp0vchoDPrX7VwXaRkkdDYexoMv0J74UnkDIw2JzcDk-yPnbex2uHU2Ae9aQnmhvYwyKaXjkxhgw8Eet7x9ubu_mJGhrxAgUOVzU29ewDey0z1Vf_c; expires=Sat, 04-Jan-2025 05:43:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\nCONSENT=PENDING+855; expires=Thu, 04-Dec-2025 13:25:19 GMT; path=/; domain=.google.com; Secure\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":66474,"size_decoded":0,"mime_type":"","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12460)","md5":"ebbf5db25be8fdbc3b3ef882a8daa69a","sha1":"2d36329ae1d81d12f2bd07e3aa7af7fdd4d9dd9f","sha256":"5e7fb34bfaa000a64de1cde6077af015a3af48308a2795b646ecc9d6d9e698f1","sha512":"146215f66d77e8c0c95a4caaf160a5ba883e76f68a180bf6234f154d98a43120d5f6b2345a542088633c3ddb68812a083d28fc823ead826b4238f089a60b5c54","ssdeep":"1536:SHoxHae3Y+Fb/xQbUlQxsKBSWv840LZpWQunpDxhCozwhmbeYrsKHsIfSgeHR75G:5JQxsz6TL3pwdr3GU8OWprbMdfjE","tlshash":"71245c303300703bad13d890a4bbae4e31b6941bf84e0af4e5a6d571aef5cf6652674d","first_seen":"2023-12-05T14:25:37Z","last_seen":"2023-12-05T14:25:37Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wap8vosthcwdlesqsqha.manxttrider.com/","date":"2023-12-05T13:25:25.962Z","timestamp":1701782725962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wap8vosthcwdlesqsqha.manxttrider.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 13:25:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27938\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"603e8adc-15d9d\"\r\nlast-modified: Tue, 02 Mar 2021 18:58:36 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 890418\r\nexpires: Sun, 24 Nov 2024 13:25:20 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=W0997zm%2F%2F5TiYuw6rzSs4ndRk%2FQn9Nk3nN8K98TxmPxmmBBNs7mrC6EnIT0PCreSNp098qMYDdbNslrun6RNxNY3h4sVrkdlFOMiSqXPpe8xKd%2BVSyqheqNgKaGAh282mUXFyBln\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 830c9d509e400b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27938,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-14T03:42:01.01616Z","times_seen":503704,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":3,"dns":0,"connect":1,"send":0,"wait":8,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wap8vosthcwdlesqsqha.manxttrider.com/","date":"2023-12-05T13:25:26.396Z","timestamp":1701782726396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msftauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 Dec 2023 00:00:00 GMT","end":"Sun, 01 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B","sha256":"CA:EA:26:E0:08:53:1A:CF:E2:11:03:C4:9E:16:75:E1:E6:E8:F6:5D:84:D4:EC:7A:69:6B:E9:52:FA:83:33:BC"}}},"request":{"raw":"GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wap8vosthcwdlesqsqha.manxttrider.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding\r\nage: 16282212\r\ncache-control: public, max-age=31536000\r\ncontent-md5: EuPayFgGHQiAI7K9SOL6lg==\r\ncontent-type: image/x-icon\r\ndate: Tue, 05 Dec 2023 13:25:20 GMT\r\netag: 0x8D8731240E548EB\r\nlast-modified: Sun, 18 Oct 2020 03:02:30 GMT\r\nserver: ECAcc (ska/F738)\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 003b7cc6-501e-0067-4768-9344ba000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 17174\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17174,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\\012- data","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-09-14T02:34:46.582153Z","times_seen":173963,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap8vosthcwdlesqsqha.manxttrider.com/","date":"2023-12-05T13:25:25.954Z","timestamp":1701782725954,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wap8vosthcwdlesqsqha.manxttrider.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 13:25:20 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-h9vKVAf6MtlKK-GfYhHyLQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 66427\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=Ackid1RHSVMqxDJ7FVF9aJjp_AN4OpE0L4p45vEcL-k9Nr-o_qsgrud4TZc; expires=Sun, 02-Jun-2024 13:25:20 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=16.SE=ibjl3XRvUFjerhkGlPA6dWNbKh0D0XxPRu4nGCMz1-VN7CiGRtKYr3ow0qtjz5735sPm60Z7PgwBwrCdLV_e7dvtF5hkHXyM6pbfjsXL4FIoWDmW9oZdDAq0z_Os-utGsvK1FU96OBow3JYeZ-aZFh4111h6M2kwvs3BrkCJ9NY; expires=Sat, 04-Jan-2025 05:43:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\nCONSENT=PENDING+007; expires=Thu, 04-Dec-2025 13:25:19 GMT; path=/; domain=.google.com; Secure\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":66427,"size_decoded":0,"mime_type":"","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12425)","md5":"f42bdb2ba5d44276c3463da16f98e431","sha1":"7a02f268d9ef984276f3a61ea20b6906b130df2e","sha256":"c47e05b5dc69cc52943f1622e0c12fe37f8a27820fe0f481f4a393f73fd6c741","sha512":"c545f2166db4065d07fc6b9ea89a9611a399ed37f24a1e32f1cbafd656b5e7dbcd0705d025469ca2621c30e7337ef0c881f421a6aec4437163fdfa5937e1eb0c","ssdeep":"1536:eHoxHae3Y+Fb/XQbT/QxsKBSWv840LZpWQuxnw+hCozwh5OeCm/WH3NfmX/c1+dO:tUQxszh8Okpwdr3GUaOWpFMQdfjl","tlshash":"03245c313300b03ba963d8a0a1bbae4e31b6941bf84e0af4e955d5b0aef4cf7552574d","first_seen":"2023-12-05T14:25:37Z","last_seen":"2023-12-05T14:25:37Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap8vosthcwdlesqsqha.manxttrider.com/","date":"2023-12-05T13:25:25.954Z","timestamp":1701782725954,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wap8vosthcwdlesqsqha.manxttrider.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 13:25:20 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-9cW_53Nzv6zxa3tHqkft3g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 66265\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=Ackid1SUD188rJP-Sxq75CyQX7rMKeanr2MxYb4hAOsDEI_q5b-A79wdmA; expires=Sun, 02-Jun-2024 13:25:20 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=16.SE=bmlEKTlxyGw44isovPQ52Pf7y6DNFcQ9jHmJtqglHkWHpYYDIgZolTvw_zAUWZn5yhhBnfFVgCX2tbQWeb7m6IU_ttXN5LA9-U3Mwd2GdgiIiKHCjMz_SyohI_FDfJ9BmNyEQjElSPYJMaAZ4hKDqHjmsYRepHJW3Sg0Vd3gj9w; expires=Sat, 04-Jan-2025 05:43:38 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\nCONSENT=PENDING+870; expires=Thu, 04-Dec-2025 13:25:20 GMT; path=/; domain=.google.com; Secure\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":66265,"size_decoded":0,"mime_type":"","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12425)","md5":"8487980fc9318425be48f40fb5429367","sha1":"d8672e43cfa8cfe9c974dcf9227a698a0e1a3204","sha256":"6317b277c3b3039d34662c89b835220dbc0822b1acf7c95bce8e0a461e86362e","sha512":"8092f20faa9d982f64575f308bfeb669f0c93b175760581eec4a1e9083a76f5c9815f3a55238b20e5ab91846c9f2a4f3f0c91f42d74a88a323382dc21dbdff97","ssdeep":"1536:8HoxHae3Y+Fb/yaUQbn1QxsKBSWv840LZpDQub00+hCgzwhaUex1bMHYjdk/DshZ:ndQxszZYfipwdr3GUzOWpKO3yIfjF","tlshash":"0b245c313341b03ba913dc90a077ae4e3176d01bf80f4ab8a956d5b4aef4cf6562a74d","first_seen":"2023-12-05T14:25:37Z","last_seen":"2023-12-05T14:25:37Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wap8vosthcwdlesqsqha.manxttrider.com/","date":"2023-12-05T13:25:25.964Z","timestamp":1701782725964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wap8vosthcwdlesqsqha.manxttrider.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 05 Dec 2023 13:25:20 GMT\r\ndate: Tue, 05 Dec 2023 13:25:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18052,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression\\012- data","md5":"a9f12ced07e16e7c15a283d1ce655968","sha1":"81589f5e8b7da7090dcbbb681bd7ae70e21e894b","sha256":"fb178630b1854062bfef468508345e2b4b94b484991e884c13a61c5a05c082d6","sha512":"5403d53fa5e2c7f33c7dc4d551e07d918bb1d6d61db62b6e47c8ebc154fd2f76ecf46972e6e393778aeecc961c91a015069744de9b6e220b70e4c601dc03e51a","ssdeep":"48:XdO3jSsg8ZH/oEqYJmJk2fgyyyyyyyyyyyyynzQQQQQO:tO39H/HJJmJlQQQQQO","tlshash":"0182765b2f5f4d81ec0b0db80b121e80c5e45c973854dffbdb66b66888b0364ba845eb","first_seen":"2023-09-15T02:22:33Z","last_seen":"2024-08-21T06:51:42.406066Z","times_seen":46,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":44,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wap8vosthcwdlesqsqha.manxttrider.com/","fqdn":"wap8vosthcwdlesqsqha.manxttrider.com","domain":"manxttrider.com","tld":"com"},"ip":{"addr":"192.185.113.242","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T13:25:24.581Z","timestamp":1701782724581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.manxttrider.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Oct 2023 07:55:00 GMT","end":"Tue, 23 Jan 2024 07:54:59 GMT"},"fingerprint":{"sha1":"10:B9:54:2F:3F:CA:17:0C:B9:A9:AF:CA:93:31:67:C4:C9:B7:7F:99","sha256":"88:6B:4D:63:F3:38:3A:35:B4:97:11:43:A4:26:A0:9A:DE:DC:EE:6E:74:04:52:FD:F2:F8:D9:C0:79:02:16:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wap8vosthcwdlesqsqha.manxttrider.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 03 Oct 2023 09:53:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Tue, 05 Dec 2023 13:25:19 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123542,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators","md5":"273e71fc832e178e017995f62ccce23d","sha1":"92b676a1a33834912231bb2fb94f7bdcb71c440e","sha256":"9f74798d40859839115d8deb4c95a588bd9835a05c401c1ffeb3a814e7fb55ee","sha512":"2cfaacd5619f3b489d6b53af19365723a91e0b9c8db1f8c23ddb5b8ca8bdc3c4ff2a8a7f4e48c1bd967cb06196f6ed1aa2c0538c24914d1ead59aba163b19bcd","ssdeep":"768:gXhjmK51dV9XmeADomulirUxhiMEY4XyO6e7i4ZCajJHtP7s3Wc9KbWp8G7:a9KbW+g","tlshash":"bdc3c02c3c14d36f642a1d7f7addb64fa85c7c46aa8d4d4cbc14f9975dc20b8aa200b6","first_seen":"2023-10-08T13:11:18Z","last_seen":"2024-08-21T05:05:26.594113Z","times_seen":331,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":265,"dns":1,"connect":120,"send":0,"wait":251,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-05","alert":"Outlook","trigger":"wap8vosthcwdlesqsqha.manxttrider.com/","verdict":"phishing","severity":"medium","comment":"Outlook","link":"https://openphish.com","meta":null}],"urlquery":null}}]}