{"report_id":"3ca48057-709e-4c44-b18c-4cdd86b73be0","version":6,"status":"done","tags":["salesforce","phishing"],"date":"2024-05-30T06:05:58Z","url":{"schema":"http","addr":"secret-source.softgarden.io/sign-in?0\u0026l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":0,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"secret-source.softgarden.io/sign-in?0\u0026l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"title":"Sign in"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T14:58:40Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"static.softgarden.de","ip":{"addr":"5.199.137.201","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":432213,"first_seen":"2014-01-20 14:48:53","last_seen":"2024-05-28 16:14:06","alert_count":0,"request_count":4,"received_data":37257,"sent_data":1973,"comment":"","tags":null,"fingerprints":null},{"fqdn":"consentcdn.cookiebot.com","ip":{"addr":"104.110.3.72","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-01-21","domain_rank":5676,"first_seen":"2018-05-23 07:13:43","last_seen":"2024-05-29 18:12:04","alert_count":0,"request_count":1,"received_data":1028,"sent_data":542,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mediaassets.softgarden.de","ip":{"addr":"51.195.89.142","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2017-07-29 12:41:54","last_seen":"2023-04-25 09:26:41","alert_count":0,"request_count":2,"received_data":51961,"sent_data":1195,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imgsct.cookiebot.com","ip":{"addr":"104.110.3.72","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-01-21","domain_rank":0,"first_seen":"2023-11-22 14:44:39","last_seen":"2024-05-29 18:12:11","alert_count":0,"request_count":1,"received_data":723,"sent_data":488,"comment":"","tags":null,"fingerprints":null},{"fqdn":"secret-source.softgarden.io","ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"domain_registered":"2014-08-18","domain_rank":0,"first_seen":"2023-12-22 19:39:17","last_seen":"2023-12-22 19:39:17","alert_count":8,"request_count":8,"received_data":440485,"sent_data":5045,"comment":"","tags":null,"fingerprints":null},{"fqdn":"consent.cookiebot.com","ip":{"addr":"23.36.79.16","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-01-21","domain_rank":4972,"first_seen":"2014-02-26 15:48:42","last_seen":"2024-05-29 18:12:04","alert_count":0,"request_count":2,"received_data":35523,"sent_data":945,"comment":"","tags":null,"fingerprints":null},{"fqdn":"app.softgarden.io","ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"domain_registered":"2014-08-18","domain_rank":588683,"first_seen":"2014-12-17 17:07:22","last_seen":"2023-05-23 14:38:30","alert_count":0,"request_count":2,"received_data":104347,"sent_data":1086,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Salesforce","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Salesforce phishing","tags":["salesforce","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"secret-source.softgarden.io/wicket/resource/com.softgarden.staffit.webclient.webfrontend.pages.main.js.JavaScriptReference/modernizr-ver-14E640C2A9179201E1B5D1130097E1B0.js","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"14e640c2a9179201e1b5d1130097e1b0","sha1":"de9a5cf6ac34d94d67180bb5ee1bc8e283b141dd","sha256":"39e7167975faccbd341313d379e02a19b050663d9bc2c613025e0b97ccfbf624","sha512":"980ebb4b81814e0c6eb8de4bbd2186c2410056ef7026f921653c7fa27951d7389c022b41e508a8de7fba976e596ddf942efa8c2221f334d2c400eca705458841","ssdeep":"96:O4kpKlQw/lcuHAGVkW6UZKek6iH5uXJby2saglbqG:wYlauHAGGoZKe5i5uX42wqG","tlshash":"a591e9ebb2a3b522c389115a613f0009f27d2e4d59450805a251d8fcbd30ef552fbe7d","size":4238,"data":"","first_seen":"2023-12-08T17:15:27Z","last_seen":"2024-12-27T22:08:35.507558Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/sign-in?0\u0026l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"65c558d5e05f04b5d5975cc1894f449e","sha1":"030e71130be72f01ae9687c1c1789d84e1f17fe9","sha256":"f36cac3f20f3be8830b7db5514184bcf82c240b65b4911f5a415f89471431576","sha512":"5fac5ebf4e947fccfdd98ac85e78ef2b045fdeda5284f60d6df9b783437a6cac6c25f21d7c26605038dfd240cf7421d9f2c0d6a91f157291f6b4a2bd548217ce","ssdeep":"","tlshash":"ec11ed71705140320a6e62fbe257174db877008dfc03194409dc90482e28cdba76dd5b","size":908,"data":"","first_seen":"2024-08-19T21:18:13.930163Z","last_seen":"2024-08-19T21:18:13.970549Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.cookiebot.com/uc.js","fqdn":"consent.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"23.36.79.16","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"09af9bddeb67e33ceb3e55308aaaeb5e","sha1":"0b44c9b86518a37351103d6fdc9875bfd37bd160","sha256":"88c87349d2bf113f3589ef89169acec4a0dde633f817506189bd0c2f7a68b892","sha512":"4e6ff759baa01c35a211574a4ea863b9e6d42d8461ee9d03f6ffccf024156c906bd58aecce8aa7867de58355d166cb929d8c29050a36eb13049e56bf8e72f8cf","ssdeep":"1536:eb6I3l3okfYD8EvKDJ5b1Q39FyfzRJtunPG0b2BJrMdXq41nEqZUgJeW5QKF9xFP:M3okfYD8P9un/buVYEMwFK","tlshash":"fbb3c4a67189a7791bea11f57a2b1759363223912845c17ca838ecf01424f873877ffb","size":111824,"data":"","first_seen":"2024-05-15T12:30:30Z","last_seen":"2024-08-19T22:53:49.955393Z","times_seen":851,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/sign-in?0\u0026l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"339fbe14ebf5c7fe7780fe2abf60b8b6","sha1":"bc79e1e35e7cbafdc7a23b9bb3dbd14a49653602","sha256":"78790cf5063ac63adab97c3ed9227452cbf655ebddd2d2839fa3fb9db054e6d9","sha512":"0bb3bd6ddb00512d12b0bde8d0240aaf9e2da43780f97c82ea78bb26890503ca3043b350939cdaa17cda5383af53441d6593577338daa5b3fdc9cf18b4a285d0","ssdeep":"","tlshash":"f49004000040105100f005ffd0d5d400d7c7010cc7f54705470f471d0c014c50154f51","size":42,"data":"","first_seen":"2023-12-08T17:15:27Z","last_seen":"2026-02-25T08:56:34.342829Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/sign-in?0\u0026l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"18d93ee4ec8c01f9857fad62d485326c","sha1":"3e7a7a6a33a4c98dfc2d624f93caa7b93d07fe08","sha256":"8348499b18232f6345b17c17ff071d7abda4a8074413a177681528179a9fc65a","sha512":"5b5d8bdea61882fd5a6b087b2186a12dd525fb255012be6a86d4140b4fb98779dcafada0235782f91e8527c5b0151525e669e25ca632ad85f41844634fae0456","ssdeep":"","tlshash":"5cf055e404b7083561bb1a4acb6e3626b1a37323a1054c207e8cb6097f95b1f6f349a4","size":466,"data":"","first_seen":"2024-08-19T21:18:13.931686Z","last_seen":"2024-08-19T21:18:13.971769Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/sign-in?0\u0026l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f54d55387056af52bedf53ca36670053","sha1":"9ae073812575e6d2a8b61363aa4579f03ad4c785","sha256":"94532bd756ec655ab53a1f7d1d03c3f6f2c711c27d18d4f25a2a756b983db3fb","sha512":"83b82d434c1c267d86b7fbc50cb266fd4e2714c4c1ae26c7509190258086fd7996e07709790746f82f3bdefab98a20b0651cb242964ac3ab5b1cf98f294338ee","ssdeep":"","tlshash":"38a02200c0000082a3a20e3c0008a203a322080cc8c302032b020008028080fa3f0aa3","size":65,"data":"","first_seen":"2024-05-14T21:56:07Z","last_seen":"2024-10-26T04:30:20.102087Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/thirdparty/friendlycaptcha/0.9.7/widget.module.min.js","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"31a177ce7dcb1f0e9f9b4d22aba94b8b","sha1":"435d96b69a03d793e18c7c3cd4f9bc11b1aae502","sha256":"a7fbb89acd591517582eecadc8cabd21c15f4f756fbe321c08f767fcc644a7de","sha512":"f6cca855c1aa3c6257b3edd751347acbef62f8a84532b9744bd30a9b20c5616878eed14ce06f82036dd5fdab06704ab223a932d13012ba1082106937cde62563","ssdeep":"768:2vdSWy2jMPjgI5rLflmvUBVn2G4iD6stEKK9me47SnrxFpMJhqinSOzUBXPHI5/:2XySMJNflmv+shdDMJ4i9oo/","tlshash":"5f033a6492684e331791c6cedf1b3304a8684e7d2d10d1ccbf8ee4fb83e5151a96ea36","size":39975,"data":"","first_seen":"2023-12-08T17:15:27Z","last_seen":"2026-03-31T07:00:03.700514Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/sign-in?0\u0026l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9dc99b73ae106db97b79973e23067c63","sha1":"82d322414e28c43780e92bbbd5196c348bf19196","sha256":"c9d42cb2c7bcd083c5779b1b1396353a8d31c00b610ec5ec93c130f26c7f4f3c","sha512":"ca23f9e8c3667203d733b7dc222489d600d309cdd956497af137be26f502c6498beed36e58cdfa806291e7c1f905841f23b313b414525f52b9b5cd268eec2c46","ssdeep":"","tlshash":"5ed0a575d5e11051856734b64c0751187653a6d492ed5f1e3d0d524c2f7cd71730c717","size":235,"data":"","first_seen":"2024-05-14T21:56:07Z","last_seen":"2024-10-26T04:30:20.106682Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.cookiebot.com/c35b88c8-94d0-47e0-9766-97b85eb47618/cc.js?renew=false\u0026referer=secret-source.softgarden.io\u0026dnt=true\u0026init=false","fqdn":"consent.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"23.36.79.16","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a22b2fbd946ec497ae08be474c2add9","sha1":"80152d3e90548d97864d85f2fef1de1ac44b9641","sha256":"d50b942be920b827bad3eb2efed528461b8eeb70823adf22548ff4b209e381bd","sha512":"c4310c1bbb2ae9b209ae3bfffb10cded32ee5688c2dea8140553023e68c4c8f57e84be13ed1f7415b51180b5dc8f3219a74d0521ea10d0717a38f6c0a535670f","ssdeep":"","tlshash":"cbe06878336d023921e6d3ecbc1e6067f1a0f8ac11a9a53802489139145201acfb28ae","size":383,"data":"","first_seen":"2024-08-19T21:18:13.920869Z","last_seen":"2024-08-19T21:18:13.964436Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/wicket/resource/com.softgarden.staffit.webclient.webfrontend.core.WebFrontendApplication/core-ver-70405C063325902335A500C4469245FE.js","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"70405c063325902335a500c4469245fe","sha1":"c853172e61aa017c15c735981f5e26deb3b5e215","sha256":"0fbd2972318e427fccc6ef7c11ce6e7b6b0414f55f47063f2bcedd16d5b75213","sha512":"d67072aaadb2c65a778d4b48dbfd1bf9ee297323a1f28ca44d033ea3766501cf39b1bad90a956278d2568285e8fa04b5a57e3e394a0a0adea075b4ceda3d840f","ssdeep":"6144:dH+49Nria5I0JPTPtY6zqN296wgcBCoGKFvfKxLWYpyk4MPMxZn7GmvkcAbb3j3e:d5GqTPt4NDwgcBCoGKFvXApPMOmv1Ab2","tlshash":"177409d9b1c6202a837370b9e46f530dfabe965562088068f21d94d43e78c6952fbf7c","size":344809,"data":"","first_seen":"2023-12-08T17:15:27Z","last_seen":"2024-08-20T16:21:16.767925Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/sign-in?0\u0026l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef339cdf3d3df6f1bb133165265b3526","sha1":"b157a4ccc23cb8ce443527f876dd1c1fb89558aa","sha256":"404396d0a195bcda08e41f0f294fe511cc9252eb95acb152e5852c5bae2f6f7d","sha512":"a8dffffdafcf9cc715f53128e90a57313d8d58a67adb206e0ceece1be2997e128e8b4c0a61ed1d276b5e338b78a1d3b1f7fcdc90b962166a2a5859ac9def277c","ssdeep":"","tlshash":"b1a02280003c003882320838000ea883c0a30f2fc00e820e23ce880038ca02e3230b82","size":72,"data":"","first_seen":"2023-12-08T17:15:27Z","last_seen":"2026-02-25T08:56:34.352635Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/sign-in?0\u0026l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"99859f5244e57a43ad5218dcb9a08cf6","sha1":"c6ac7ec5c8fbe8ad897758679de6cf7baddd71bb","sha256":"1ec9b593fbbc029e466211bcb90b5bc4ac20ebd926ef2baa3fba8d2009db61d4","sha512":"2c6d4165879a0b2b0bd2ba821e240dcb06907544dcf669517eb8213d0174f92af3702c68e8351217bc7bb8b2c3c34c0a173819d09613978216c4da7826566499","ssdeep":"","tlshash":"0ee07289c408639883f3f8389e0b8982b91929f823c1290008023ce838cd80b6349abb","size":304,"data":"","first_seen":"2024-05-14T21:56:07Z","last_seen":"2024-10-26T04:30:20.11151Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consentcdn.cookiebot.com/sdk/bc-v4.min.html","fqdn":"consentcdn.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"104.110.3.72","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"019b8aaa9f25d986d68395a8c6277be0","sha1":"4d07e0b8c06f0a26b5be2caaf5c03d72b7c3d630","sha256":"9ba37511ff74e293467e2c283d7045d2d63d999a1e700a41467f6bcf845329a2","sha512":"51d7e2f89a8bd94f735f0a34b2a1ff27217c4d2c4f9904e8db474f47de38af39ffab67fede4a820579c8b585631a4598847ef034008556730962bfbd7aaa7a82","ssdeep":"","tlshash":"3ef0ac0a75c92f189b60c2f9784b373824690120a8594de42196d290ada9ac79673bc6","size":585,"data":"","first_seen":"2023-04-05T07:33:45Z","last_seen":"2025-03-02T03:53:51.586498Z","times_seen":11999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"secret-source.softgarden.io/sign-in?0\u0026l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-05-30T06:05:32.346Z","timestamp":1717049132346,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 May 2024 21:14:14 GMT","end":"Fri, 09 Aug 2024 21:14:13 GMT"},"fingerprint":{"sha1":"4E:B6:47:9A:1B:7C:0C:28:8F:03:1E:F0:E9:60:87:C5:CD:39:88:77","sha256":"A1:58:57:31:9E:E9:1C:57:BE:EE:DB:7C:0C:5D:A3:AC:FE:AB:DE:C5:A1:7C:4F:B9:73:16:B0:68:CB:08:D3:69"}}},"request":{"raw":"GET /sign-in?0\u0026l=en HTTP/1.1\r\nHost: secret-source.softgarden.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:32 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nvary: sec-fetch-dest,sec-fetch-site,sec-fetch-mode\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nlocation: https://secret-source.softgarden.io/sign-in?l=en\r\nx-ua-compatible: IE=Edge\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":102,"dns":0,"connect":19,"send":0,"wait":34,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Salesforce","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Salesforce phishing","tags":["salesforce","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/sign-in?l=en","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-05-30T06:05:32.523Z","timestamp":1717049132523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 May 2024 21:14:14 GMT","end":"Fri, 09 Aug 2024 21:14:13 GMT"},"fingerprint":{"sha1":"4E:B6:47:9A:1B:7C:0C:28:8F:03:1E:F0:E9:60:87:C5:CD:39:88:77","sha256":"A1:58:57:31:9E:E9:1C:57:BE:EE:DB:7C:0C:5D:A3:AC:FE:AB:DE:C5:A1:7C:4F:B9:73:16:B0:68:CB:08:D3:69"}}},"request":{"raw":"GET /sign-in?l=en HTTP/1.1\r\nHost: secret-source.softgarden.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:32 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ncache-control: no-cache, no-store\r\npragma: no-cache\r\nlocation: https://secret-source.softgarden.io/sign-in?0\u0026l=en\r\nvary: sec-fetch-dest,sec-fetch-site,sec-fetch-mode\r\nset-cookie: JSESSIONID=naN0pWfF6d2f6n8C0CJFmI_VDLrPUtFylqOjHhcl.sfe1-55486587b9-4zgrh; path=/; secure; HttpOnly; SameSite=Lax\r\nx-ua-compatible: IE=Edge\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Salesforce","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Salesforce phishing","tags":["salesforce","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"consent.cookiebot.com/uc.js","fqdn":"consent.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"23.36.79.16","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.071Z","timestamp":1717049133071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"consent.cookiebot.com","organization":"Usercentrics A/S"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 Feb 2024 00:00:00 GMT","end":"Thu, 27 Feb 2025 23:59:59 GMT"},"fingerprint":{"sha1":"9C:D0:2D:35:87:79:5D:86:02:35:BA:C6:AD:A9:15:00:B1:92:EF:03","sha256":"7A:60:B9:F0:07:AB:0B:91:2F:D7:73:60:6C:37:B0:3A:A7:BE:93:04:CB:2E:42:06:78:2B:48:BE:E7:46:DB:6D"}}},"request":{"raw":"GET /uc.js HTTP/1.1\r\nHost: consent.cookiebot.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 15 May 2024 08:37:48 GMT\r\naccept-ranges: bytes\r\netag: \"32674b2aa3a6da1:0\"\r\nvary: Accept-Encoding\r\nrequest-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef\r\naccess-control-expose-headers: Request-Context\r\ncontent-length: 34250\r\ncache-control: public, max-age=404\r\nexpires: Thu, 30 May 2024 06:12:17 GMT\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34250,"size_decoded":111824,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65499)","md5":"09af9bddeb67e33ceb3e55308aaaeb5e","sha1":"0b44c9b86518a37351103d6fdc9875bfd37bd160","sha256":"88c87349d2bf113f3589ef89169acec4a0dde633f817506189bd0c2f7a68b892","sha512":"4e6ff759baa01c35a211574a4ea863b9e6d42d8461ee9d03f6ffccf024156c906bd58aecce8aa7867de58355d166cb929d8c29050a36eb13049e56bf8e72f8cf","ssdeep":"1536:eb6I3l3okfYD8EvKDJ5b1Q39FyfzRJtunPG0b2BJrMdXq41nEqZUgJeW5QKF9xFP:M3okfYD8P9un/buVYEMwFK","tlshash":"fbb3c4a67189a7791bea11f57a2b1759363223912845c17ca838ecf01424f873877ffb","first_seen":"2024-05-15T12:30:30Z","last_seen":"2024-08-19T22:53:49.955393Z","times_seen":851,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":5,"receive":2,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/thirdparty/friendlycaptcha/0.9.7/widget.module.min.js","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.066Z","timestamp":1717049133066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 May 2024 21:14:14 GMT","end":"Fri, 09 Aug 2024 21:14:13 GMT"},"fingerprint":{"sha1":"4E:B6:47:9A:1B:7C:0C:28:8F:03:1E:F0:E9:60:87:C5:CD:39:88:77","sha256":"A1:58:57:31:9E:E9:1C:57:BE:EE:DB:7C:0C:5D:A3:AC:FE:AB:DE:C5:A1:7C:4F:B9:73:16:B0:68:CB:08:D3:69"}}},"request":{"raw":"GET /thirdparty/friendlycaptcha/0.9.7/widget.module.min.js HTTP/1.1\r\nHost: secret-source.softgarden.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/sign-in?0\u0026l=en\r\nCookie: JSESSIONID=naN0pWfF6d2f6n8C0CJFmI_VDLrPUtFylqOjHhcl.sfe1-55486587b9-4zgrh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 39977\r\nlast-modified: Tue, 20 Sep 2022 13:29:49 GMT\r\nvary: Accept-Encoding\r\netag: \"6329c04d-9c29\"\r\nexpires: Fri, 30 May 2025 06:05:33 GMT\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39977,"size_decoded":39977,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38449), with no line terminators","md5":"ae307d6e85e3319cd568960458f333e7","sha1":"28912417a36640d3271cfdc206a3477db912ae5a","sha256":"4fdb1cc1b694e21ebd4f49c262c2531ac011a867ab4987363787aa689a066ace","sha512":"df087599ef43ac23480f80b6cefe9ab42f392e7a1c4ce926d1b7ba25db656c13774ecdfb49de30f58f24fea3d78ff57b547ed5dad5d81d16b46453371e21c64a","ssdeep":"768:2vdcWy2jMPjgI5rLflmvUBVn2G4iD6stEKK9me47SnrxFpMJhqinSOzUBXPHI5/:2RySMJNflmv+shdDMJ4i9oo/","tlshash":"f9033a6492684e331791c6cedf1b3304a8684e7d2d10d1ccbf8ee4fb83e5151a96ea36","first_seen":"2023-03-10T10:27:02Z","last_seen":"2024-10-11T08:18:25.331738Z","times_seen":7,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Salesforce","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Salesforce phishing","tags":["salesforce","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.softgarden.io/assets/public/media/get/706c347f-993f-4ff3-8579-269aa97a0e8f/1611571514330/0x45/Secret_Source_Symbol.png","fqdn":"app.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.079Z","timestamp":1717049133079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 May 2024 21:14:14 GMT","end":"Fri, 09 Aug 2024 21:14:13 GMT"},"fingerprint":{"sha1":"4E:B6:47:9A:1B:7C:0C:28:8F:03:1E:F0:E9:60:87:C5:CD:39:88:77","sha256":"A1:58:57:31:9E:E9:1C:57:BE:EE:DB:7C:0C:5D:A3:AC:FE:AB:DE:C5:A1:7C:4F:B9:73:16:B0:68:CB:08:D3:69"}}},"request":{"raw":"GET /assets/public/media/get/706c347f-993f-4ff3-8579-269aa97a0e8f/1611571514330/0x45/Secret_Source_Symbol.png HTTP/1.1\r\nHost: app.softgarden.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1256\r\nexpires: Thu, 27 Jun 2024 21:43:26 GMT\r\ncache-control: public, max-age=2592000\r\npragma: cache\r\ncontent-disposition: inline; filename=\"Secret_Source_Symbol.png\"\r\netag: W/\"1256-1611571514330\"\r\nlast-modified: Mon, 25 Jan 2021 10:45:14 GMT\r\nx-ua-compatible: IE=Edge\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1256,"size_decoded":1256,"mime_type":"image/png","magic":"PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced","md5":"724114787dd4cec68e0bf226d839695b","sha1":"17d35a6fa1ce84e4a54df0c262efa7dac2203e99","sha256":"8a258a0a3e4375c173f0cfbf5fdab6b53ddb3176ca61a94fca39de1aa66d96fd","sha512":"fc9509debe017eedaf73f6545d61187ae1fcd0a51115a2dac222c7ad733515d99957a5881a7db91d1f207a50515271295c57b72913ad93fc2910a528841e003f","ssdeep":"","tlshash":"4b21e7fa845dd80469378937139d0472ff1fc246c644fde8086a5d3819107d6920ca83","first_seen":"2024-08-19T21:18:13.915675Z","last_seen":"2024-08-19T21:18:13.960099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/wicket/resource/com.softgarden.staffit.webclient.webfrontend.pages.main.js.JavaScriptReference/modernizr-ver-14E640C2A9179201E1B5D1130097E1B0.js","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.069Z","timestamp":1717049133069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 May 2024 21:14:14 GMT","end":"Fri, 09 Aug 2024 21:14:13 GMT"},"fingerprint":{"sha1":"4E:B6:47:9A:1B:7C:0C:28:8F:03:1E:F0:E9:60:87:C5:CD:39:88:77","sha256":"A1:58:57:31:9E:E9:1C:57:BE:EE:DB:7C:0C:5D:A3:AC:FE:AB:DE:C5:A1:7C:4F:B9:73:16:B0:68:CB:08:D3:69"}}},"request":{"raw":"GET /wicket/resource/com.softgarden.staffit.webclient.webfrontend.pages.main.js.JavaScriptReference/modernizr-ver-14E640C2A9179201E1B5D1130097E1B0.js HTTP/1.1\r\nHost: secret-source.softgarden.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/sign-in?0\u0026l=en\r\nCookie: JSESSIONID=naN0pWfF6d2f6n8C0CJFmI_VDLrPUtFylqOjHhcl.sfe1-55486587b9-4zgrh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4238\r\nexpires: Fri, 30 May 2025 06:05:33 GMT\r\ncache-control: public,max-age=31536000\r\npragma: cache\r\naccept-range: bytes\r\ncontent-disposition: inline\r\nlast-modified: Thu, 02 May 2024 11:22:02 GMT\r\nvary: sec-fetch-dest,sec-fetch-site,sec-fetch-mode\r\nx-ua-compatible: IE=Edge\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4238,"size_decoded":4238,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4237)","md5":"14e640c2a9179201e1b5d1130097e1b0","sha1":"de9a5cf6ac34d94d67180bb5ee1bc8e283b141dd","sha256":"39e7167975faccbd341313d379e02a19b050663d9bc2c613025e0b97ccfbf624","sha512":"980ebb4b81814e0c6eb8de4bbd2186c2410056ef7026f921653c7fa27951d7389c022b41e508a8de7fba976e596ddf942efa8c2221f334d2c400eca705458841","ssdeep":"96:O4kpKlQw/lcuHAGVkW6UZKek6iH5uXJby2saglbqG:wYlauHAGGoZKe5i5uX42wqG","tlshash":"a591e9ebb2a3b522c389115a613f0009f27d2e4d59450805a251d8fcbd30ef552fbe7d","first_seen":"2023-12-08T17:15:27Z","last_seen":"2024-12-27T22:08:35.507558Z","times_seen":11,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Salesforce","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Salesforce phishing","tags":["salesforce","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"app.softgarden.io/assets/public/media/get/f7b81446-e4be-46bc-a377-61cd20599ad4/1611588136196/1100x0/Secret_Source_Header.png","fqdn":"app.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.080Z","timestamp":1717049133080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 May 2024 21:14:14 GMT","end":"Fri, 09 Aug 2024 21:14:13 GMT"},"fingerprint":{"sha1":"4E:B6:47:9A:1B:7C:0C:28:8F:03:1E:F0:E9:60:87:C5:CD:39:88:77","sha256":"A1:58:57:31:9E:E9:1C:57:BE:EE:DB:7C:0C:5D:A3:AC:FE:AB:DE:C5:A1:7C:4F:B9:73:16:B0:68:CB:08:D3:69"}}},"request":{"raw":"GET /assets/public/media/get/f7b81446-e4be-46bc-a377-61cd20599ad4/1611588136196/1100x0/Secret_Source_Header.png HTTP/1.1\r\nHost: app.softgarden.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 101911\r\nexpires: Thu, 27 Jun 2024 21:43:27 GMT\r\ncache-control: public, max-age=2592000\r\npragma: cache\r\ncontent-disposition: inline; filename=\"Secret_Source_Header.png\"\r\netag: W/\"101911-1611588136196\"\r\nlast-modified: Mon, 25 Jan 2021 15:22:16 GMT\r\nx-ua-compatible: IE=Edge\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101911,"size_decoded":101911,"mime_type":"image/png","magic":"PNG image data, 1100 x 264, 8-bit/color RGBA, non-interlaced","md5":"6a9e7740001839a07df31b7c9cc12efe","sha1":"e0b3bafdc884aacda732e1efdaf477c005187d7d","sha256":"d63ee87d3481bb0489aa0e1232a653f6d070ee1e7193491e818f6207dafa5ba1","sha512":"98bb7296b3608d1c9a3e79093de24f8314bfbe794d0ec1e9d5e42ecf88573d75cfaaafb049ab639a5a25ff1d649d074e81b8cef090912aaae68fa1476933f45f","ssdeep":"1536:U0WxNiPkyWjx5QPdh8Mw46n2f1h6JPGfazkZWXZfVOgNECyF+PdV8etXuc:UxxN2koD8w6Eh6JOfaPTOGE/F+L8OXuc","tlshash":"53a312c5498fd1aff2af4eda08271096a832ad6846b415b71b84a21c7cf40c7d7d3e67","first_seen":"2024-08-19T21:18:13.914954Z","last_seen":"2024-08-19T21:18:13.961295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/wicket/resource/com.softgarden.staffit.webclient.webfrontend.pages.main.css.CssReference/webfrontend-v2-ver-B2B7018189B46162648CDC7367EF730D.css","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.077Z","timestamp":1717049133077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 May 2024 21:14:14 GMT","end":"Fri, 09 Aug 2024 21:14:13 GMT"},"fingerprint":{"sha1":"4E:B6:47:9A:1B:7C:0C:28:8F:03:1E:F0:E9:60:87:C5:CD:39:88:77","sha256":"A1:58:57:31:9E:E9:1C:57:BE:EE:DB:7C:0C:5D:A3:AC:FE:AB:DE:C5:A1:7C:4F:B9:73:16:B0:68:CB:08:D3:69"}}},"request":{"raw":"GET /wicket/resource/com.softgarden.staffit.webclient.webfrontend.pages.main.css.CssReference/webfrontend-v2-ver-B2B7018189B46162648CDC7367EF730D.css HTTP/1.1\r\nHost: secret-source.softgarden.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/sign-in?0\u0026l=en\r\nCookie: JSESSIONID=naN0pWfF6d2f6n8C0CJFmI_VDLrPUtFylqOjHhcl.sfe1-55486587b9-4zgrh\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 30941\r\ncontent-encoding: gzip\r\nexpires: Fri, 30 May 2025 06:05:33 GMT\r\ncache-control: public,max-age=31536000\r\npragma: cache\r\naccept-range: bytes\r\ncontent-disposition: inline\r\nlast-modified: Thu, 02 May 2024 11:22:02 GMT\r\nx-ua-compatible: IE=Edge\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30941,"size_decoded":170074,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"34204cbb6dc7524940680f711c906d70","sha1":"8216d6404e8ad0dce301ded9e8c939bbe59161af","sha256":"6234bf5a3ac9deb51f645564b8a43a030e54c2411780b6a691a343436467339e","sha512":"621be32cb6609a6df0db31b1c7c09ddc53dfcce86f2befa8a108eebe898e673709fa1b45f5e4bf718f010abbb36c2db48cff39db1a0762aa699881a41bf271d2","ssdeep":"1536:K/mValdfZdiXknM1ISNMLlbLAkRvSwKZM0TLdVRl:HValZi2SqGeqLTLP","tlshash":"77f3b6a2e990306eb6b3c17d78c0bac575255552d7938ffaf82760a8cb854ce1723f18","first_seen":"2024-05-14T21:56:07Z","last_seen":"2024-08-19T22:58:00.810533Z","times_seen":5,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Salesforce","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Salesforce phishing","tags":["salesforce","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/wicket/resource/com.softgarden.staffit.webclient.webfrontend.core.WebFrontendApplication/core-ver-70405C063325902335A500C4469245FE.js","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.083Z","timestamp":1717049133083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 May 2024 21:14:14 GMT","end":"Fri, 09 Aug 2024 21:14:13 GMT"},"fingerprint":{"sha1":"4E:B6:47:9A:1B:7C:0C:28:8F:03:1E:F0:E9:60:87:C5:CD:39:88:77","sha256":"A1:58:57:31:9E:E9:1C:57:BE:EE:DB:7C:0C:5D:A3:AC:FE:AB:DE:C5:A1:7C:4F:B9:73:16:B0:68:CB:08:D3:69"}}},"request":{"raw":"GET /wicket/resource/com.softgarden.staffit.webclient.webfrontend.core.WebFrontendApplication/core-ver-70405C063325902335A500C4469245FE.js HTTP/1.1\r\nHost: secret-source.softgarden.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/sign-in?0\u0026l=en\r\nCookie: JSESSIONID=naN0pWfF6d2f6n8C0CJFmI_VDLrPUtFylqOjHhcl.sfe1-55486587b9-4zgrh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 344809\r\nexpires: Fri, 30 May 2025 06:05:33 GMT\r\ncache-control: public,max-age=31536000\r\npragma: cache\r\ncontent-disposition: inline\r\nlast-modified: Thu, 02 May 2024 11:22:04 GMT\r\nx-ua-compatible: IE=Edge\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":344809,"size_decoded":344809,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"70405c063325902335a500c4469245fe","sha1":"c853172e61aa017c15c735981f5e26deb3b5e215","sha256":"0fbd2972318e427fccc6ef7c11ce6e7b6b0414f55f47063f2bcedd16d5b75213","sha512":"d67072aaadb2c65a778d4b48dbfd1bf9ee297323a1f28ca44d033ea3766501cf39b1bad90a956278d2568285e8fa04b5a57e3e394a0a0adea075b4ceda3d840f","ssdeep":"6144:dH+49Nria5I0JPTPtY6zqN296wgcBCoGKFvfKxLWYpyk4MPMxZn7GmvkcAbb3j3e:d5GqTPt4NDwgcBCoGKFvXApPMOmv1Ab2","tlshash":"177409d9b1c6202a837370b9e46f530dfabe965562088068f21d94d43e78c6952fbf7c","first_seen":"2023-12-08T17:15:27Z","last_seen":"2024-08-20T16:21:16.767925Z","times_seen":6,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Salesforce","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Salesforce phishing","tags":["salesforce","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"static.softgarden.de/thirdparty/fonts/css/dosis-vietnamese_latin-ext_latin.css","fqdn":"static.softgarden.de","domain":"softgarden.de","tld":"de"},"ip":{"addr":"5.199.137.201","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.074Z","timestamp":1717049133074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.de","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 May 2024 21:08:03 GMT","end":"Fri, 23 Aug 2024 21:08:02 GMT"},"fingerprint":{"sha1":"2A:14:FB:8C:20:A2:9B:4C:07:04:78:6D:BC:71:AC:D8:4E:95:19:E1","sha256":"FA:82:7F:E8:CF:80:16:6D:28:51:55:5E:4C:B3:24:FD:A7:D3:E4:60:20:79:C9:E0:46:A7:4C:A3:04:77:69:7B"}}},"request":{"raw":"GET /thirdparty/fonts/css/dosis-vietnamese_latin-ext_latin.css HTTP/1.1\r\nHost: static.softgarden.de\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Tue, 25 Aug 2020 14:14:03 GMT\r\nvary: Accept-Encoding\r\netag: \"5f451cab-18d\"\r\ncontent-encoding: br\r\nexpires: Fri, 30 May 2025 06:05:33 GMT\r\ncache-control: max-age=31536000, public\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":397,"size_decoded":5608,"mime_type":"text/css","magic":"ASCII text","md5":"78247bde602dc31b7a4806cc10b91989","sha1":"5d36e7fc24bed66d01294603c349c905a50cfacd","sha256":"e0ae6da2df1b16513ab0ff570ad9d9619d10346fc2094a25ef00339c0384590b","sha512":"991d55800c0e7fc15bd7b4b752172ec23d9ee4739fe669fba39069ad10c59f831b8e953f7e41f7568d8b3c512f944588e9bdfa48e202d19f141a48a80c90ea66","ssdeep":"96:iBOJiLaOVLa5ME5+BOWisaVVLasVdgpBOLila0VLa8Y8xOEeMBOgiiaHVLaqjrCZ:iiiLaCu5MEglisaXusVdIkilasur2OEx","tlshash":"28c10641cba93d530a2203ba36fc89d69b1c922c301419737c3c845b9ffac54ab08f87","first_seen":"2023-12-08T17:15:27Z","last_seen":"2026-02-25T08:56:34.323812Z","times_seen":21,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":128,"dns":1,"connect":18,"send":0,"wait":18,"receive":1,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.softgarden.de/thirdparty/fonts/css/dosis.css","fqdn":"static.softgarden.de","domain":"softgarden.de","tld":"de"},"ip":{"addr":"5.199.137.201","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.073Z","timestamp":1717049133073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.de","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 May 2024 21:08:03 GMT","end":"Fri, 23 Aug 2024 21:08:02 GMT"},"fingerprint":{"sha1":"2A:14:FB:8C:20:A2:9B:4C:07:04:78:6D:BC:71:AC:D8:4E:95:19:E1","sha256":"FA:82:7F:E8:CF:80:16:6D:28:51:55:5E:4C:B3:24:FD:A7:D3:E4:60:20:79:C9:E0:46:A7:4C:A3:04:77:69:7B"}}},"request":{"raw":"GET /thirdparty/fonts/css/dosis.css HTTP/1.1\r\nHost: static.softgarden.de\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 398\r\nlast-modified: Tue, 25 Aug 2020 14:20:23 GMT\r\nvary: Accept-Encoding\r\netag: \"5f451e27-18e\"\r\ncontent-encoding: br\r\nexpires: Fri, 30 May 2025 06:05:33 GMT\r\ncache-control: max-age=31536000, public\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":398,"size_decoded":5069,"mime_type":"text/css","magic":"ASCII text","md5":"572a3051f8b4e1391f748cc1d5f6adcb","sha1":"89b31f76421969fc52e3457a0740f9775c852583","sha256":"68af6745bc9fcb0187fdda249c1333b91f508688341676dc6e7aec48c5955e0e","sha512":"0ce847bcf2c4a6661ed3c7225dc8345bb1d16ba4fd9b9a81f551e332e7c72de6bf7fc571d32292e93ed00080881b71926f76a58fa9854f22cb0eebd00670f7af","ssdeep":"96:qOJanVLOeOWZQVLC5OLAhVLPZReoOgDuVLirOxTObVLOtOw6SrquVLq18UZaOCTq:laVZZwDALHVDi3OBPSrqiW18UYTB7QV","tlshash":"0ba12746c7a63813475247be36ed89c6af2da22d300818737d3d98599ffec548348f49","first_seen":"2023-12-08T17:15:27Z","last_seen":"2026-02-25T08:56:34.321292Z","times_seen":17,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":130,"dns":1,"connect":18,"send":0,"wait":19,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.cookiebot.com/c35b88c8-94d0-47e0-9766-97b85eb47618/cc.js?renew=false\u0026referer=secret-source.softgarden.io\u0026dnt=true\u0026init=false","fqdn":"consent.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"23.36.79.16","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.195Z","timestamp":1717049133195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"consent.cookiebot.com","organization":"Usercentrics A/S"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 Feb 2024 00:00:00 GMT","end":"Thu, 27 Feb 2025 23:59:59 GMT"},"fingerprint":{"sha1":"9C:D0:2D:35:87:79:5D:86:02:35:BA:C6:AD:A9:15:00:B1:92:EF:03","sha256":"7A:60:B9:F0:07:AB:0B:91:2F:D7:73:60:6C:37:B0:3A:A7:BE:93:04:CB:2E:42:06:78:2B:48:BE:E7:46:DB:6D"}}},"request":{"raw":"GET /c35b88c8-94d0-47e0-9766-97b85eb47618/cc.js?renew=false\u0026referer=secret-source.softgarden.io\u0026dnt=true\u0026init=false HTTP/1.1\r\nHost: consent.cookiebot.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private, max-age=60\r\ncontent-type: application/x-javascript; charset=utf-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nrequest-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef\r\naccess-control-expose-headers: Request-Context\r\ncontent-length: 371\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":371,"size_decoded":383,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (383), with no line terminators","md5":"5a22b2fbd946ec497ae08be474c2add9","sha1":"80152d3e90548d97864d85f2fef1de1ac44b9641","sha256":"d50b942be920b827bad3eb2efed528461b8eeb70823adf22548ff4b209e381bd","sha512":"c4310c1bbb2ae9b209ae3bfffb10cded32ee5688c2dea8140553023e68c4c8f57e84be13ed1f7415b51180b5dc8f3219a74d0521ea10d0717a38f6c0a535670f","ssdeep":"","tlshash":"cbe06878336d023921e6d3ecbc1e6067f1a0f8ac11a9a53802489139145201acfb28ae","first_seen":"2024-08-19T21:18:13.920869Z","last_seen":"2024-08-19T21:18:13.964436Z","times_seen":2,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consentcdn.cookiebot.com/sdk/bc-v4.min.html","fqdn":"consentcdn.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"104.110.3.72","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.290Z","timestamp":1717049133290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cookiebot.com","organization":"CYBOT A/S"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 26 Feb 2024 00:00:00 GMT","end":"Wed, 26 Feb 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C5:D6:6A:4A:59:31:39:1F:61:62:EE:67:A5:86:C9:58:0D:82:69:6B","sha256":"B2:2F:BF:35:5A:C7:70:6B:C3:3E:94:43:76:1E:F2:C4:27:3D:BF:AB:F8:7C:62:80:FE:01:2A:33:13:41:8D:F3"}}},"request":{"raw":"GET /sdk/bc-v4.min.html HTTP/1.1\r\nHost: consentcdn.cookiebot.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: text/html\r\netag: \"3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163\"\r\nlast-modified: Mon, 04 Apr 2022 07:23:49 GMT\r\nserver: AkamaiNetStorage\r\nx-akamai-transformed: 9 - 0 pmb=mRUM,1\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=31536000\r\nexpires: Fri, 30 May 2025 06:05:33 GMT\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-length: 392\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1717049133290_388255644_61995270_26_648_1_8_21\";dur=1\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-resource-policy: cross-origin\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":392,"size_decoded":627,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (627), with no line terminators","md5":"3d08665fa4c7bcf9fa2dcbbc7efe1d0f","sha1":"ba57ecee011a4b99d4bb56707325c8e4d0fb8a2b","sha256":"738e5435f2d18427d291a0d6289eee0ebbc87b596d6003919f255760ac293104","sha512":"e86fc61d20680f6f486c61e3730aca4cdebee3ad0670c69ec177691ae979f81951dbd409f8cda648ab2ebed13c5a2bfb57174fb5167eecb15300b807fc7bbf3e","ssdeep":"","tlshash":"3ff0dd4a20891b2ccb70c2f97ccb333821695110a8198de42197c2e02ca1ec69962fc6","first_seen":"2023-04-05T07:33:46Z","last_seen":"2026-04-03T18:10:02.269049Z","times_seen":49864,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/img/sprites/thirdparties_300.png","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.292Z","timestamp":1717049133292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 May 2024 21:14:14 GMT","end":"Fri, 09 Aug 2024 21:14:13 GMT"},"fingerprint":{"sha1":"4E:B6:47:9A:1B:7C:0C:28:8F:03:1E:F0:E9:60:87:C5:CD:39:88:77","sha256":"A1:58:57:31:9E:E9:1C:57:BE:EE:DB:7C:0C:5D:A3:AC:FE:AB:DE:C5:A1:7C:4F:B9:73:16:B0:68:CB:08:D3:69"}}},"request":{"raw":"GET /img/sprites/thirdparties_300.png HTTP/1.1\r\nHost: secret-source.softgarden.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/wicket/resource/com.softgarden.staffit.webclient.webfrontend.pages.main.css.CssReference/webfrontend-v2-ver-B2B7018189B46162648CDC7367EF730D.css\r\nCookie: JSESSIONID=naN0pWfF6d2f6n8C0CJFmI_VDLrPUtFylqOjHhcl.sfe1-55486587b9-4zgrh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 2146\r\nvary: sec-fetch-dest,sec-fetch-site,sec-fetch-mode\r\nlast-modified: Thu, 02 May 2024 11:20:10 GMT\r\naccept-ranges: bytes\r\nx-ua-compatible: IE=Edge\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2146,"size_decoded":2146,"mime_type":"image/png","magic":"PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced","md5":"10ed356be522884337dff328c47c066e","sha1":"584d4e2b2b93ef8e76908c20a44a7b32e876dd74","sha256":"1d4879367f12693055daca312d3641b551031722f357bf61c254498c6a5b8f13","sha512":"47f666d428d8fb1117681f9d4fec47e02a12b68ee09c2c1c89a22d923472396af36648a254e582e3e34fdc7f9c27a094cd780494090c761e2b222b1f27c99bb9","ssdeep":"","tlshash":"","first_seen":"2023-12-08T17:15:27Z","last_seen":"2026-02-25T08:56:34.303567Z","times_seen":14,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Salesforce","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Salesforce phishing","tags":["salesforce","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"secret-source.softgarden.io/font/open-sans-v15-latin-regular.woff2","fqdn":"secret-source.softgarden.io","domain":"softgarden.io","tld":"io"},"ip":{"addr":"5.199.137.200","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.304Z","timestamp":1717049133304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.io","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 May 2024 21:14:14 GMT","end":"Fri, 09 Aug 2024 21:14:13 GMT"},"fingerprint":{"sha1":"4E:B6:47:9A:1B:7C:0C:28:8F:03:1E:F0:E9:60:87:C5:CD:39:88:77","sha256":"A1:58:57:31:9E:E9:1C:57:BE:EE:DB:7C:0C:5D:A3:AC:FE:AB:DE:C5:A1:7C:4F:B9:73:16:B0:68:CB:08:D3:69"}}},"request":{"raw":"GET /font/open-sans-v15-latin-regular.woff2 HTTP/1.1\r\nHost: secret-source.softgarden.io\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/wicket/resource/com.softgarden.staffit.webclient.webfrontend.pages.main.css.CssReference/webfrontend-v2-ver-B2B7018189B46162648CDC7367EF730D.css\r\nCookie: JSESSIONID=naN0pWfF6d2f6n8C0CJFmI_VDLrPUtFylqOjHhcl.sfe1-55486587b9-4zgrh\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 14048\r\nvary: sec-fetch-dest,sec-fetch-site,sec-fetch-mode\r\nlast-modified: Thu, 02 May 2024 11:20:10 GMT\r\naccept-ranges: bytes\r\nx-ua-compatible: IE=Edge\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14048,"size_decoded":14048,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14048, version 1.0","md5":"cffb686d7d2f4682df8342bd4d276e09","sha1":"2c07a9656f1e38da408f20f1cf11581a15cbd7a2","sha256":"3b98b0dc3bed9d40f43e64adba5de47c76895338a96f0a5a314676cd6287eca9","sha512":"a869b3812e53a644eff8172b2995812ae56e4bf45da21eb6f735ce0d14bbdd215d7ebfce970a21454555fcae28c9dcc41f2b478070ca604a332d5bc081e13bed","ssdeep":"384:rim+UGnrgFdIZGzg6MjaHWWBGE62eLLF/0eked:em+Brg8ZGzgLIWuTed","tlshash":"6e52c03ec18a56e0fa0c837ae452b8f019f33ba977e431b596522bc4275ce1417692b5","first_seen":"2023-04-07T23:35:47Z","last_seen":"2026-04-03T05:45:45.234891Z","times_seen":15960,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Salesforce","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Salesforce phishing","tags":["salesforce","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"static.softgarden.de/thirdparty/fonts/fonts/dosis-v18-vietnamese_latin-ext_latin-500.woff2","fqdn":"static.softgarden.de","domain":"softgarden.de","tld":"de"},"ip":{"addr":"5.199.137.201","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.335Z","timestamp":1717049133335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.de","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 May 2024 21:08:03 GMT","end":"Fri, 23 Aug 2024 21:08:02 GMT"},"fingerprint":{"sha1":"2A:14:FB:8C:20:A2:9B:4C:07:04:78:6D:BC:71:AC:D8:4E:95:19:E1","sha256":"FA:82:7F:E8:CF:80:16:6D:28:51:55:5E:4C:B3:24:FD:A7:D3:E4:60:20:79:C9:E0:46:A7:4C:A3:04:77:69:7B"}}},"request":{"raw":"GET /thirdparty/fonts/fonts/dosis-v18-vietnamese_latin-ext_latin-500.woff2 HTTP/1.1\r\nHost: static.softgarden.de\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://secret-source.softgarden.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.softgarden.de/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34040\r\nlast-modified: Tue, 25 Aug 2020 12:14:16 GMT\r\nvary: Accept-Encoding\r\netag: \"5f450098-84f8\"\r\nexpires: Sat, 29 Jun 2024 06:05:33 GMT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34040,"size_decoded":34040,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34040, version 1.0","md5":"5ec70e8ce4f734db8c38e4152c712ecb","sha1":"b0027d95af5b80cdfd534f6629458edb399ef1e1","sha256":"c421e51f36d6ad98a729246ece519f600a899171b297f4be90eb5813e2e5d2f1","sha512":"956ce25ceb5ca377d14a164e2da678721db491f7f680cb80725fa1434521ec889dcd3e384359ec22c152cbd6821a5d6da2cb817548438a888a632cd5c1339ad1","ssdeep":"768:/0AvJGvHpHS/ocFP5OclBXEHXcl43SWHWNmyB443AwAsPj9Ay:MKJkY/oqP5OclBXsXw4C0khBb3LAy","tlshash":"23e2f1948638e993a3ccb75932d85811f363a980bfb6e07ff144b295d5bc444cb62e72","first_seen":"2023-12-08T17:15:27Z","last_seen":"2024-08-20T16:21:16.774727Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediaassets.softgarden.de/customer/SecretSource/scangraphic_digital_type_collection_-_europagronr2sb-lig-webfont.woff","fqdn":"mediaassets.softgarden.de","domain":"softgarden.de","tld":"de"},"ip":{"addr":"51.195.89.142","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.296Z","timestamp":1717049133296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mediaassets.softgarden.de","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Apr 2024 10:53:53 GMT","end":"Mon, 22 Jul 2024 10:53:52 GMT"},"fingerprint":{"sha1":"48:46:4C:F1:96:C0:4E:4C:7F:0E:EF:9D:0B:9B:62:EF:94:97:7C:C1","sha256":"34:0B:B8:DA:AA:18:05:54:DC:F6:F2:8B:F9:E5:6C:F2:5C:60:94:99:3A:21:94:3B:A9:75:E5:67:05:FA:1F:1F"}}},"request":{"raw":"GET /customer/SecretSource/scangraphic_digital_type_collection_-_europagronr2sb-lig-webfont.woff HTTP/1.1\r\nHost: mediaassets.softgarden.de\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://secret-source.softgarden.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28776\r\nlast-modified: Fri, 29 Jan 2021 08:19:05 GMT\r\netag: \"6013c4f9-7068\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28776,"size_decoded":28776,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28776, version 1.0","md5":"400f68ddc81b758aa33f46033ce4d063","sha1":"24ae25b42d59cef6416013c4adde8649d202f783","sha256":"1feeeb76b546396d37b33faeb4f4dab7002a6740d80536585a65d0f6fbc6a235","sha512":"ee9d5e1c8dffd7d9a9e2a66f48a37a3f08fc41e0276142caef0e1f8a804116e958563d1d971bac1bb7d56baa61510c059ca4425d97a916c55116e8273f3ee05f","ssdeep":"768:aPev43C7lyEZBLZzhjjTeRh6T0jjjqIVRvI3c2jREew/:aP+n/jy6y/l3IvjTw/","tlshash":"56d2e1c987c45c2fe419f0b9a1540ecff08b498ab958107e3b21ac5bed253997914fde","first_seen":"2024-08-19T21:18:13.927793Z","last_seen":"2024-08-19T21:18:13.967776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":79,"dns":3,"connect":28,"send":0,"wait":28,"receive":30,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mediaassets.softgarden.de/customer/SecretSource/scangraphic_digital_type_collection_-_europagronr2sb-lig-webfont.woff2","fqdn":"mediaassets.softgarden.de","domain":"softgarden.de","tld":"de"},"ip":{"addr":"51.195.89.142","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.298Z","timestamp":1717049133298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mediaassets.softgarden.de","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Apr 2024 10:53:53 GMT","end":"Mon, 22 Jul 2024 10:53:52 GMT"},"fingerprint":{"sha1":"48:46:4C:F1:96:C0:4E:4C:7F:0E:EF:9D:0B:9B:62:EF:94:97:7C:C1","sha256":"34:0B:B8:DA:AA:18:05:54:DC:F6:F2:8B:F9:E5:6C:F2:5C:60:94:99:3A:21:94:3B:A9:75:E5:67:05:FA:1F:1F"}}},"request":{"raw":"GET /customer/SecretSource/scangraphic_digital_type_collection_-_europagronr2sb-lig-webfont.woff2 HTTP/1.1\r\nHost: mediaassets.softgarden.de\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://secret-source.softgarden.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22668\r\nlast-modified: Fri, 29 Jan 2021 08:19:05 GMT\r\netag: \"6013c4f9-588c\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22668,"size_decoded":22668,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22668, version 1.0","md5":"a809685c7ba0837fe78ba2b1f83f4158","sha1":"58151b16f260d60d413eed7163159dbf8e595622","sha256":"57810aafd0616b7ea70b6eade55765caf4a7ab92c7e67d05b93862c05a807b5d","sha512":"962bbf40f1396994fe0b6f9853fab69e87f4f8cc73c867667346797dd4403da301d447c4a7dfd51e87f1790e02a4267c11acd9dab80188700e0cb1c3d44ca943","ssdeep":"384:2t8yUFQsvZ7r2RqwiLjpdtwmomH1e1XBxFsYnMo9YmWZMD9tF3O4dvylm2t8osjD:gEhvZ4qNzomVEgnuWZMD9H98m2tPI","tlshash":"f0a2e1d2849690209a902bbbb95cc1755e7f0f06ba7765d343e33e28a797ad0bbc1940","first_seen":"2024-08-19T21:18:13.926981Z","last_seen":"2024-08-19T21:18:13.968319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":78,"dns":1,"connect":31,"send":0,"wait":83,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.softgarden.de/favicon/favicon-32x32.png","fqdn":"static.softgarden.de","domain":"softgarden.de","tld":"de"},"ip":{"addr":"5.199.137.201","port":443,"asn":24961,"as":"myLoc managed IT AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.488Z","timestamp":1717049133488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.softgarden.de","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 May 2024 21:08:03 GMT","end":"Fri, 23 Aug 2024 21:08:02 GMT"},"fingerprint":{"sha1":"2A:14:FB:8C:20:A2:9B:4C:07:04:78:6D:BC:71:AC:D8:4E:95:19:E1","sha256":"FA:82:7F:E8:CF:80:16:6D:28:51:55:5E:4C:B3:24:FD:A7:D3:E4:60:20:79:C9:E0:46:A7:4C:A3:04:77:69:7B"}}},"request":{"raw":"GET /favicon/favicon-32x32.png HTTP/1.1\r\nHost: static.softgarden.de\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 945\r\nlast-modified: Fri, 07 Dec 2018 17:11:40 GMT\r\nvary: Accept-Encoding\r\netag: \"5c0aa9cc-3b1\"\r\nx-ua-compatible: IE=Edge\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: upgrade-insecure-requests\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":945,"size_decoded":945,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"8a9fca14ca6784c96687dbef919effce","sha1":"d6355dd23ff4afdb129d69da741bd9c53c71a01c","sha256":"6fbb888f37b9c2c629dda3e2541124b49f306773078a6cef9461567f95cac105","sha512":"600b7505baf15d3360aac7d04997dfd39afc670f4e306e6ce12a2decf4e422cd1a02b151d282fc7bfca97c89d288a95789d702419205e4094c0ae695aa893201","ssdeep":"","tlshash":"","first_seen":"2023-12-08T17:15:28Z","last_seen":"2024-10-26T04:30:20.192241Z","times_seen":10,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imgsct.cookiebot.com/1.gif?dgi=c35b88c8-94d0-47e0-9766-97b85eb47618","fqdn":"imgsct.cookiebot.com","domain":"cookiebot.com","tld":"com"},"ip":{"addr":"104.110.3.72","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret-source.softgarden.io/sign-in?0\u0026l=en","date":"2024-05-30T06:05:33.505Z","timestamp":1717049133505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cookiebot.com","organization":"CYBOT A/S"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 26 Feb 2024 00:00:00 GMT","end":"Wed, 26 Feb 2025 23:59:59 GMT"},"fingerprint":{"sha1":"C5:D6:6A:4A:59:31:39:1F:61:62:EE:67:A5:86:C9:58:0D:82:69:6B","sha256":"B2:2F:BF:35:5A:C7:70:6B:C3:3E:94:43:76:1E:F2:C4:27:3D:BF:AB:F8:7C:62:80:FE:01:2A:33:13:41:8D:F3"}}},"request":{"raw":"GET /1.gif?dgi=c35b88c8-94d0-47e0-9766-97b85eb47618 HTTP/1.1\r\nHost: imgsct.cookiebot.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret-source.softgarden.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-goog-generation: 1698061172769999\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 35\r\nx-goog-hash: crc32c=rX4K2g==, md5=whlt6LpBLGDCKrSRr3sUCQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 35\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nx-guploader-uploadid: ABPtcPq9U-FHbZ5LgXtRN1cmOZkDvkhKOTv04u0vODDiFoMovAIbDVRM7Ea5NYsd0_NoD2k_8CRkR6EDhA\r\nserver: UploadServer\r\nlast-modified: Mon, 23 Oct 2023 11:39:32 GMT\r\netag: \"c2196de8ba412c60c22ab491af7b1409\"\r\ncontent-type: image/gif\r\ndate: Thu, 30 May 2024 06:05:33 GMT\r\ncache-control: public,max-age=1800\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":35,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"c2196de8ba412c60c22ab491af7b1409","sha1":"5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b","sha256":"6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992","sha512":"84e24a70b78e9de9c9d0dfeb49f3f4247dbc1c715d8844471ee40669270682e199d48f5fbec62bd984c9c0270534b407c4d2561dd6c05adec3c83c1534f32d5c","ssdeep":"","tlshash":"d4800003e280c002c2a2c0300e0ccb802b88b0208a28030fb0ec2baeec3a2a00c02000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-04-03T18:27:01.406188Z","times_seen":150639,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}