{"report_id":"40a19382-b12f-419f-b00f-9a088e106aff","version":6,"status":"done","tags":["phishing","microsoft","outlook"],"date":"2025-02-14T22:25:25Z","url":{"schema":"http","addr":"liquiddepth.site/?ljrayemt=575827f4e94bdee679a79d7187fa3627b049729f0bea3e04548b8a97474f26897a76ea1664b4fc9287f80c668d2879cd957f35da0ed7b417aad8886a371a448b\u0026qrc=christianhulme@slurpmail.net","fqdn":"liquiddepth.site","domain":"liquiddepth.site","tld":"site"},"ip":{"addr":"108.165.64.23","port":0,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hoferpuff.store/?qrc=christianhulme%40slurpmail.net","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"title":"thr33cpio"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-04-25T22:25:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"3p-udc.yahoo.com","ip":{"addr":"188.125.72.139","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"domain_registered":"1995-01-18","domain_rank":5700,"first_seen":"2021-02-27T13:46:52Z","last_seen":"2025-02-14T14:49:31.166906Z","alert_count":0,"request_count":1,"received_data":590,"sent_data":663,"comment":"","tags":null,"fingerprints":null},{"fqdn":"csp.yahoo.com","ip":{"addr":"188.125.72.139","port":0,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"domain_registered":"1995-01-18","domain_rank":8923,"first_seen":"2015-01-04T05:48:56Z","last_seen":"2025-02-08T04:26:15.094774Z","alert_count":0,"request_count":1,"received_data":206,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gpt.mail.yahoo.net","ip":{"addr":"87.248.119.252","port":0,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1996-11-04","domain_rank":0,"first_seen":"2023-09-06T06:02:57Z","last_seen":"2025-02-13T07:14:46.867224Z","alert_count":0,"request_count":2,"received_data":4206,"sent_data":1180,"comment":"","tags":null,"fingerprints":null},{"fqdn":"consent.cmp.oath.com","ip":{"addr":"143.204.55.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1996-02-24","domain_rank":6390,"first_seen":"2018-04-13T15:05:59Z","last_seen":"2025-02-11T08:34:36.287223Z","alert_count":0,"request_count":1,"received_data":263528,"sent_data":415,"comment":"","tags":null,"fingerprints":null},{"fqdn":"liquiddepth.site","ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"domain_registered":"2025-01-29","domain_rank":0,"first_seen":"2025-02-12T22:40:38.717139Z","last_seen":"2025-02-12T22:40:38.717139Z","alert_count":4,"request_count":4,"received_data":4529,"sent_data":3108,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hoferpuff.store","ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"domain_registered":"2025-02-06","domain_rank":0,"first_seen":"2025-02-12T22:40:38.725261Z","last_seen":"2025-02-12T22:40:38.725261Z","alert_count":10,"request_count":10,"received_data":419867,"sent_data":16021,"comment":"","tags":null,"fingerprints":null},{"fqdn":"guce.yahoo.com","ip":{"addr":"52.215.129.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1995-01-18","domain_rank":2064,"first_seen":"2018-03-16T21:40:34Z","last_seen":"2025-02-09T03:08:21.579913Z","alert_count":0,"request_count":1,"received_data":309,"sent_data":488,"comment":"","tags":null,"fingerprints":null},{"fqdn":"services.addons.mozilla.org","ip":{"addr":"151.101.65.91","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"1998-01-24","domain_rank":6161,"first_seen":"2012-05-21T14:03:02Z","last_seen":"2025-02-12T07:06:19.184113Z","alert_count":0,"request_count":1,"received_data":1879,"sent_data":695,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aus5.mozilla.org","ip":{"addr":"35.244.181.201","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"1998-01-24","domain_rank":2548,"first_seen":"2015-10-27T07:06:24Z","last_seen":"2025-02-12T02:15:42.739128Z","alert_count":0,"request_count":1,"received_data":489,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-02-12T02:32:29.360585Z","alert_count":0,"request_count":8,"received_data":313462,"sent_data":5183,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.yimg.com","ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1997-05-14","domain_rank":375,"first_seen":"2012-05-20T22:45:00Z","last_seen":"2025-02-12T10:10:52.777519Z","alert_count":0,"request_count":3,"received_data":77126,"sent_data":1486,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"consent.cmp.oath.com/cmp.js","fqdn":"consent.cmp.oath.com","domain":"oath.com","tld":"com"},"ip":{"addr":"143.204.55.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"286fbb8385e48697dc5f956d4825ed84","sha1":"65029ee73290cc73a6d28ab509e8f15e9c0c8540","sha256":"6f9418768f10357fdf2acb67e82fa2c5312aa8d7f4e2825feb0070a15ee59c23","sha512":"646edbddf9baac718bc2d07faf347522c253f36eb5c318ca7b351005f76434d4562673fd3a0aad32f3404af8908477ecd3289b0ae4fe9eaa3998f24eaf8de902","ssdeep":"3072:RWmz6sWYV/JnX+7n8PrCReoMrlDO5LDdNN4BQExyJIdIsC:RWsWYV8nkrlMSi","tlshash":"2544d84932a0f4e543db95f2042b0406e7bd7264682ca0f8fbb599d35454bcba2f6fb4","size":262888,"data":"","first_seen":"2024-11-18T12:42:07.637345Z","last_seen":"2026-03-13T11:20:38.287772Z","times_seen":2770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/s.yimg.com/~/wm/mbr/4d7e1df106276f14e7f9c7f68448e92dfc08911c/bundle.js","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d266bd72917037efcb6a1d67980a5b22","sha1":"235910193b7cd12c332b3ab876ba1c8be0435763","sha256":"22c9352b2f93ace637f5e027f3db91797bc2a7bc9125a983dc73bf100cda1561","sha512":"e0a71a697b08c1cfc265cb89ad4434152e0c6aa405fb8762fc839366d293dac081365ef94979e4e3eaa26aec8fb3d1f1d27bca39b8e860faab71e99770c6416d","ssdeep":"1536:CE9TaOeZnqw1/AN8nRw/6sTrxOpsUTrZ3Msnfzr8TrEPQPT7LlVKoeiRcF2GjNM9:Z9Tfe5R4WULlV6i6McFW0UC0nsnbn2f","tlshash":"7714faaa72b0347b15db3bba726f660976734da0790a5840582cc8e12d78c875137ffe","size":193070,"data":"","first_seen":"2025-02-14T22:25:29.811188Z","last_seen":"2025-02-16T06:15:16.701769Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX0pKTtkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuc3R5bGUuZmlsdGVyPSJodWUtcm90YXRlKDRkZWcpIjtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImciXX0pKTtzZXRUaW1lb3V0KGMsMWUzKX19YygpOwo=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6f18bfe02b31db3664d5d27f03ea142","sha1":"aae6f850e8ea4ff74dcd6213ad6a4565cbd6802e","sha256":"90682803943448f3acffc81014c87fdd71f30d8cf97335fcea451fac1e568221","sha512":"14f9c4d885a7d33f59dc40de520e82ba8dfbc28eaf3d004ae5f3dcb91145902b76d42dc1c6847b1dbb0065def3fd79295b79c26fdb6228db335ca0f252b8f1df","ssdeep":"","tlshash":"30e04f3421b1d978885d058a30b8d7e8bdf4256db85270a544af886ed861fe51b50991","size":341,"data":"","first_seen":"2023-10-02T01:17:43Z","last_seen":"2026-05-04T17:12:06.477343Z","times_seen":42966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/?qrc=christianhulme%40slurpmail.net","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"70b7932ac4ad60392325970768f4d889","sha1":"62d3f7ff07275bace1a996e44023d8d41461754c","sha256":"82b5d59b3c13f095b346337bcf8070ffd841561ca4efc9b9924ee23a32c70b0a","sha512":"8b597cbe86ae50642756e2d68c0a89bf2674e8b8e14b0b4e66edff98408c3f68a1cbc831fdf5934bca56dcce1c28d003e3e8f98bd25c24620fd7547b7ed3fd00","ssdeep":"192:AqMw1Up8gzdXnki8bXAti24Bznhu6EKdom6yx4OMdjeQ54t82SL9QIcuM:A0idXykqVK1yN","tlshash":"ade10e0745b92c317870a892d79aba309d370e47b502bd8e71dc9cc1f74a4a7238276e","size":6921,"data":"","first_seen":"2025-02-14T22:25:29.813789Z","last_seen":"2025-02-14T22:25:29.813789Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/?qrc=christianhulme%40slurpmail.net","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e24ff5dd951aa477a86a9b86bacca6bb","sha1":"d1ec3b3e9ec64fb1ac9e071190a249c50a4b37f2","sha256":"513e2a238038748e2c62eeb32ce5a73cd62e1e92ee23f72329ad291a01662987","sha512":"799f4a778628471e82b1a72d3be3d620324dba808ec718e8ad54f0437fb0209857a9f9c8a80a7a7822794650f63ad5a12506b58831b6eb0fd604927e0a4c79f6","ssdeep":"","tlshash":"b5d0802d745205655a9f30ac726e52543d7420437103be03742ce1461f30e554f43f4c","size":230,"data":"","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-05-16T17:34:00.778057Z","times_seen":2948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/?qrc=christianhulme%40slurpmail.net","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1000c000d59b4d9c777abd386a0e2e05","sha1":"7697ea065d13cefe6850264e3b10feda42bf6908","sha256":"2d48de2519b6e42ea8809190a486b06c03d07d55b46b4959857a3137f0461240","sha512":"982007492a36e1c501795ead9dbe05284bdf1507d297b493f1320049a715291eaedfdf2b14a0b797ffac91d017c7ec5c85ab89c18e0dae37fc4206f17811feaa","ssdeep":"","tlshash":"67a02223c3020cc3080b20c3e3efe882383000030880c02f382ef8080f020aaa08c0c0","size":68,"data":"","first_seen":"2023-03-07T01:02:39Z","last_seen":"2026-05-16T17:33:53.02952Z","times_seen":2891,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/s.yimg.com/~/ss/rapid-3.53.39.js","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ad90205296656e070371a83d5201160","sha1":"2a9abd973c356f4dfdc318ba3b7b1b45d304f0d6","sha256":"322863efdb222250f660a04127f8ac343cc74ded9ee6dea49e88605c80f46ee1","sha512":"4846d786a517eb1e91eae0c4f824516c3c9cdd9fc4f9f8ac9a932cd830db48a7e125f10c2580081a2ce2241b0de5907c92421889fefa753f475ef377e4dd018c","ssdeep":"768:DC6LVVI4DFtXHdj9b1pbNUoLrsQInWw4IpdIp9FL92ed8HysJm9Sf2TDN:Ph+4bHd5b7qoLwLh4Ip2p2Q8HyWmF","tlshash":"f53318e871d1707242eb2475613f620a72371a622c4e5840f66cedd46878edf6337ead","size":51141,"data":"","first_seen":"2023-10-28T14:39:56Z","last_seen":"2026-03-15T14:44:07.809691Z","times_seen":508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/?qrc=christianhulme%40slurpmail.net","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e9062a7a243d814a3bed9af198f850e","sha1":"1b3fca8147d03783158f2e0da2f5608e6c9ef3b4","sha256":"9ea8a76bafa07c72a55a39e9ada12378ce897fc1a2a8c38cb7c7801088f4fd13","sha512":"74d333d9824b4181bd91bcf5dc70dfc143f32ff09fb217992bff946f6612b5d975d183c887aa7918dafe9a93047e4ca5f219fa46b3e525f2a81115b973149236","ssdeep":"","tlshash":"94c08caaa9b2012400cb30b51b9e064a3930500b21052a457c3c42408f948601221e1d","size":187,"data":"","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-05-16T17:33:53.0393Z","times_seen":2832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"2c03433c214ab6f186fdf126a056176d","sha1":"46393c2f3de0f22009607a8787ffd36caa518c96","sha256":"5790054ceaba5ab6ca936e667c91d48a981fe3dd6d2f5e3f3167a5e8a5961a40","sha512":"062e7b407561ce90d69dbf35c917c805e9bfc7f1c0551bfa8c2790ec64ca6927c0b4a80d41cb04fe71facade9c01d9376120198ad1d685634dac154934d2ea85","ssdeep":"3:N/BKL1XyQdWn:eL1CQdWn","tlshash":"e45504c4544030745c10c400f154143d5105041110170413705d54d4d7301043410540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.817728Z","last_seen":"2025-02-14T22:25:29.817728Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4444f8a5e2a71f9b7afe0be3185a57c3","sha1":"e8a7fe5f445c485ccedba9f179007ff67e6ae757","sha256":"58b14f667804768a6e2dd7c44e1d5ccc22f8234f46e0ae3043678bf55682e169","sha512":"6099a01599a3e15ae648d1c50b3edab4db612e0bb097e3779f25468314a9045cd99f6ac62d1b0fd5ab30ef34d3144aa63ffd004976bf0689bbc904fd6b7a5bcc","ssdeep":"","tlshash":"02a0025eb43e58495602913079372405352e395844845a91676609a72b61387a449e65","size":61,"data":"","first_seen":"2025-02-12T13:22:34.395053Z","last_seen":"2025-02-17T11:35:46.797883Z","times_seen":1320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ca897fb253cc8807c5aafc947eb02fb6","sha1":"25137d68712ada7d3ad424c80bc0d688a696f7bb","sha256":"57f9c536daa79c4d770534dbafbe2e7b2b2aa48b9eb2617b4e670b8a78a4a4ce","sha512":"187200763128b83b777932b28834f8a21adf5824c5b9f8635249168aaefcc2451885b26da07411ccd56a52146f9b8cc2524647ebf2df4c1474f80d219d893f64","ssdeep":"","tlshash":"d96000030c00cc300033000c0003003f30f00c3003cc300c033003f003c030c0000030","size":16,"data":"","first_seen":"2024-12-12T23:50:40.144885Z","last_seen":"2026-05-01T12:56:59.005936Z","times_seen":261656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f47389d2f1abd47dbebeef3e2d3ae8a7","sha1":"dde5aa75f9a647e73d3e2d3fdda68898f850f72d","sha256":"30893b81b3c71cdbd5cf34b54fb52f8eef50b27d8a3f2498a28d2b89bd987fda","sha512":"3524a8ed2b83fe9d62a0708424707959d6cc8e89a918407da7c46540b5982fea9230792acffc47517cf5d009231375b00d5ec2ff5689bfb74ea6a3c926653318","ssdeep":"","tlshash":"56b0028869e5a404e21975a5495fd144f12cc802148a0515658885515f114294167868","size":94,"data":"","first_seen":"2024-12-12T23:50:40.522517Z","last_seen":"2026-05-01T12:56:59.043697Z","times_seen":261167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2c02a867e43bcaf172c4f48fe939b55b","sha1":"9c62263f3d66f4c16b5b5b1661e0562d90a4e148","sha256":"c2e0e21943ae0463c19130b118cc1c1d4d4a3b24d19e6bd2623cf7c871b05fcc","sha512":"f5d0f0e89f09f00db622db89b7aa94d51efcf1c38013858458b383dac063c114be60638f634f2023c9e481cb59a10ec8231676f2fe3655619d1bc9d0e015293a","ssdeep":"3:N/BKL1XyQcfn:eL1CQKn","tlshash":"435504c4544031744410c410d5d01d355045040110170403715d44d4df301043531540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.82091Z","last_seen":"2025-02-14T22:25:29.82091Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bae77c3533b6e97da0ba1f484b90f848","sha1":"e446d00160d497be51efcad373b568df2505b354","sha256":"66d9a2a4599a507d897b9883fa68c556e97a4b78c915a3c58ba5893bd628619c","sha512":"626f3bc8aef5f4a1eb67853cc50b4fe20c6edd4025e51e1ef4132990dc7f4436670f3dbfa8d77287a14e7809726d69cb92839cacbcfc7d56c8cc7a94329af73e","ssdeep":"3:N/BKL1XyQcrc:eL1CQYc","tlshash":"d05504c4744033744410c410d1501537d015040f10171403735d44d4d7317043430541","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.821985Z","last_seen":"2025-02-14T22:25:29.821985Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"64c58b0fd118d1926ad863bc7e03518d","sha1":"0d218240895eeae4c2e7e34d49ec11ccf00b3401","sha256":"5e69dbf3be7309605c11787b3ff02fd3090b7176e07e556cf23b048597dd6abc","sha512":"85978c69357e1bf1f5c0adfcfbf74f32a80dc7c273a53dc95ed52e2478848b04487d11d235c58596b38b94c85f349291a85b517857ec9e97419afd5809f255c4","ssdeep":"3:N/BKL1XyQcqn:eL1CQH","tlshash":"b75504d4544031744410c410d150153550c504071017044371dd44f4f7301043434541","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.823472Z","last_seen":"2025-02-14T22:25:29.823472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"dfdcfe96ba4e6e5a45a07b639a44ea9a","sha1":"4f1aba838ce43267f5aec993e06850a1c8c1b905","sha256":"2b5fa52cbedc544a8676cb06ce8d3b05f7441460dff38085e4f1a00da9f6f148","sha512":"1d274f6490d10cc8dc92372c3a4af457b264324672eff0bb3d25d8c88ad16f91282a588aa5c01981d1d89f9fd6975facf25b1729832a0136a6f05c2dcc00a110","ssdeep":"","tlshash":"85a01206b1e15ca80800514c302434041c1863044104f1a08169878613547c40128712","size":74,"data":"","first_seen":"2025-02-04T18:44:35.466624Z","last_seen":"2025-02-20T12:28:23.202748Z","times_seen":2311,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b0c65ae52610d7b94f7765c0c91157f2","sha1":"17d09ff5214ed843e8610f8733f0761527a62ca1","sha256":"c5c38e74bdff3b74cad6d153e6e264ca01dbd115eb8390b2f0ea26fb9413c65c","sha512":"839293657edf1b7d6c38f2fb19e77db7e542fcc27dffee040d690b163b7302857f94955cb1dce791d22f6a3cfe4d1de24cc0b850bb4977a564a5bc46c7b86e04","ssdeep":"3:N/BKL1XyQdLQ:eL1CQdk","tlshash":"595504c4544430754410c410d15414355015040510170403705d54d4d73110c3410d40","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.825315Z","last_seen":"2025-02-14T22:25:29.825315Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0d8c554599563394a2f7794dcda3ce36","sha1":"d8c5619c7d32958edbebc29217140ea005e1603d","sha256":"c1d61d2db9f977d358d4eab74c81923183cacc6ed30c0d24f7aafaeed0d47465","sha512":"05c23929e9d72b3e6a6dc23038728813971a496cc91e2835688d688c7db0174302ab667e9136e0c4c064e1b2c1ba4c7912d439444d7757e7557d560443a0915d","ssdeep":"3:N/BKL1XyQdxc:eL1CQdxc","tlshash":"295504c4544035744410c400d1d535755005041110170403707d54d4d7301043510540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.826495Z","last_seen":"2025-02-14T22:25:29.826495Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"992444873f222f31766cc7c7d47d443e","sha1":"7faa8c9d40081d21050a127338b3903cdfd694e3","sha256":"639072c1f3809f31b5c8888f3d70a6032bb6c46efe39ef79f40d1199f6d0d255","sha512":"68b6500953e4e0d6ee747d60981cfcd52dfd6eb6058818f8ad5ef826765f45ce862c3f78eee85bc52f54ff4f86f9b8429968c3915dcfb87298fdfc7b68aff684","ssdeep":"3:N/BKL1XyQdEU:eL1CQdEU","tlshash":"565504c4d4c030f44410c400d15414355045040110170403f05d55d4d7301043c10540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.82761Z","last_seen":"2025-02-14T22:25:29.82761Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1206e00552399d60b2578d9938196447","sha1":"7686bde05ce2b657f378a3c967eedbc430e04c4e","sha256":"fb1632764e92e9b0193f706f94ad07bd9dcafd7845c7b3efae6e6e891ac4a6c8","sha512":"cbdb106afd1ea70435da3927e0b871f38ea283b2cc07d6a2129ec11edc250dc3eb225891016a80e1141ef52c08f873f2ceb581c0841a3947b764a43fd14ea932","ssdeep":"3:N/BKL1XyQcvU:eL1CQUU","tlshash":"5f5504c4544031744450c410d15015375005440550175403715d44d4f7301043c30544","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.828767Z","last_seen":"2025-02-14T22:25:29.828767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bf8763b465b3c3cfed2a46c657a9f940","sha1":"3354615e45f4b50edc40802bf64d395af97a2062","sha256":"7d2b15420bc013bd252d8467158dc9d8f4cb552a0ac288a1807f257363ccb5af","sha512":"159ea48b15834514df90da3d0a0588da3353b96f4b21b95b7cb94b6836eadd823f34b88b2af5d0602d2eb1ab4014b103e021479f6cc4f03f18e85c8b2a29c31d","ssdeep":"3:N/BKL1XyQcFQc:eL1CQBc","tlshash":"915504c4544031fc4450c510d35015355107044110170403715d4cdcd7311043430541","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.830226Z","last_seen":"2025-02-14T22:25:29.830226Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ff03fc8f0c3179fb4dcf4389f88a1c16","sha1":"05ff911d7ddf2d7c14b4316a87fd08f42c618f9f","sha256":"025229ec6bb50e915572750c5045d22c5fe16851fd077f1411f41b19aa1dfece","sha512":"4acb3551ec49556a2a64f4a47e480df29f611f67d0ef4b2474e90f7b86caed3dedb0b56eba12e577f1401d4d701c9a4f0898a06eee8f6d7dbe3b4b5283a854e8","ssdeep":"","tlshash":"4f60000000c000000000030cc00300003cc0003300fc0300c30c003000cf3cc0000000","size":14,"data":"","first_seen":"2024-12-12T23:50:40.182598Z","last_seen":"2026-05-01T12:56:58.912641Z","times_seen":262850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fc392155080f59fcaed9e209de1ec8a9","sha1":"149afc1409358716f1b2a9f36e7be4243a21a174","sha256":"bbc76c42a26d35fbd6cf082b4912175d8f9c1a7fe9364f72841c8fb8fc795cf8","sha512":"c3256c8dbe260b0718071157af0cc578552a46d59f1f1a91dbf61d6f4addb64d9cc6b4d9f0c7b4a18f8c5874727eef139f6f26a4150958f4ab4524ef4da4dd22","ssdeep":"3:N/BKL1XyQci3n:eL1CQf3","tlshash":"485504c4544031f54410c410d1503535500544011017040371dd44d4d73410c3430545","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.832071Z","last_seen":"2025-02-14T22:25:29.832071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"591ee3a4b94433885ede92245e1cacaf","sha1":"7c2ab25cc03b75117a928fe8e6a29369e65a081d","sha256":"4e1324f025f34dfd3e77ca280d0e90b8d394ef2e9e4d3a019a8c55d51ee44487","sha512":"5777f3a6c2da661629a6951fcc2c4c7fbddc37675c96cf39909d9f53dfa96c3e04512243e127f72988c0ea2cce7f32834c6e9ca9fa469c1aa6745891876b1358","ssdeep":"3:N/BKL1XyQcDUX:eL1CQ/X","tlshash":"ca5504c55440317c4410c414d35015355045040110170443755d44d4d7301043430540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.833264Z","last_seen":"2025-02-14T22:25:29.833264Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2c7b4e39b1518b7b2c229ad15510d13c","sha1":"21fbc1516e33f0e3b9b82100584ed5e7ad04e554","sha256":"a37b906b9ff2e305c0e317283dd1ef46fd9ee6368f5aeb0bb0d8d2396ad8e113","sha512":"c81a55898c972b18129fbba773020434da40ce3892fbd2d3d08a99dc04da7494d3f87a66b9cb81a353e76445ffd9478f7e1c009dd73017f126211503547045a3","ssdeep":"3:N/BKL1XyQc3L:eL1CQi","tlshash":"9c5504d4544033745410c550d1501535514d0411101f0403715f4cd4d7301043430544","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.834387Z","last_seen":"2025-02-14T22:25:29.834387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-05-16T23:13:27.891737Z","times_seen":708270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"abee6970646f3abbe14c54afacec7832","sha1":"237f90721021843f0287e4ce080797d93bd0c150","sha256":"fecf3eb85d4942cba7d6aee2a891ef56caed7012e4c3f183a26b50f119726852","sha512":"b6ea07e33f894ebca69c6bf6e198c0633da4b526dee3ab990ac7da46610902374240c9ea0d7caf15e2185bc13033d025006b82aacb74aab818418d06200ecd2d","ssdeep":"3:N/BKL1XyQdY:eL1CQdY","tlshash":"0d5504f45440307d4c10c440d35414355405040514174403715d54dcd7301043410540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.836616Z","last_seen":"2025-02-14T22:25:29.836616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"33ff6022e88df59f8dfc9eb546435e9c","sha1":"7f2ad96c0a1276fbc858c652a6e2d0b3c9d4d3e4","sha256":"a1c845cab782ea7dec04543ec72e0b354cb8e9aae23acc02ee02b1832e3acd9a","sha512":"99820974c649620d8dfd487054edee4863ca41025de5a87fcd6fddfafbecb53668799fdde6f7b809112fec178b18f28a9ff8e190d298aff5a29c6795ad639c25","ssdeep":"","tlshash":"0c600000c0303003000f3000f00000033cc000f0cccc3003030c00f000c000c0cc000c","size":14,"data":"","first_seen":"2024-12-12T23:50:40.556614Z","last_seen":"2026-05-01T12:56:58.96029Z","times_seen":264119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d7458caf6a8e800261e675025ee93fc9","sha1":"7e411c61433a45f1a04ab4ec1d6b78ac7c623bbc","sha256":"a449f42782b77eda0111fab0fc572e1c7076e4fb93eddbec589b2848138e6a86","sha512":"e30b8a43375138af24b4a167a07553af182f07468710bc3fa442dc7f2ae556925b751766e5c0394e8397e30e284766592884326ae66ddc5ff6360e6b97f4fcbe","ssdeep":"","tlshash":"1e51eae17a142370e37105d31d0b08af48be66309b5de556c307d8f55d55ee8607ef16","size":2815,"data":"","first_seen":"2025-02-14T22:25:29.838348Z","last_seen":"2025-02-14T22:25:29.838348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1bc981d8c2d686196e3243464bd9bef3","sha1":"099f8826ded96fd947eb52c3d94bb508d0c626f8","sha256":"d5c1dcf1da87a976e5b03d82fd075938d695c17edea132b83af6c47ece36730e","sha512":"95b2abad9e2fb09162aaa5200277074d7598dcfc40aaffcbd3130a383d293fefafff5da2d0639061d377c2b2e30ea95bde766fb9357510c7b51eab0e68424430","ssdeep":"","tlshash":"92b0128027b22000c313d034484b8944f05c034234980408745953300f2002a45799b8","size":87,"data":"","first_seen":"2025-02-12T12:50:11.116248Z","last_seen":"2026-05-01T06:41:18.6492Z","times_seen":5563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0fdf25a240ae3f9ec199427eec7e7c9d","sha1":"c7d176e8076e8e5775a888d8dd136a61f273e8cb","sha256":"e3280cd3dbc1429e7240c47204921da3157f188817ab45ecbc3cf5fd7175cd21","sha512":"0ae130de450b0af07854f81764a291f9fe085e796233698641289ee5b3962135d2ef36e3e4b70253457a44d73aaf5e0ef6943e99f1bb74bc8ec2a96dc6191385","ssdeep":"3:N/BKL1XyQd4:eL1CQd4","tlshash":"de5504c4f44030744510cc00d15415357045040110171703705d54d4d7301043411540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.840231Z","last_seen":"2025-02-14T22:25:29.840231Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4906d675ba7449694b05c5a513a89c87","sha1":"5ad466f7a523c6b9085c131f92f9d789be6dfad0","sha256":"2d05e10e01eedcbc512d2f5082388b9aab2e6c57ffb76522a1eff888f0a56971","sha512":"652ec057a197ade441a22cb3e4fd71c001ce588d04fdf5a7981e21b75a902aa7938110387896ac52dd7928e29897ca8a29f8492f4a3ba28c3d0f29bf0897aeba","ssdeep":"3:N/BKL1XyQdp:eL1CQdp","tlshash":"805504c4544030f45411c400d1541c37d005040110170403705d54d4d7301043410dc0","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.841427Z","last_seen":"2025-02-14T22:25:29.841427Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d4e8cdefad1519bbab1dd7c86a0da7cc","sha1":"6083a008f6aef67b80d8651b7f80bedfe4ae19e0","sha256":"01ffaacb49ca5d13f050515e0d63f7665255bd24173897a045b58f5f8bb7f1bf","sha512":"a4bcff3265a3346314a6be359809a170b5b995cae128d842d6a69569d13d034cad0159bbefeb1d6596a654104109a66320aae6f4cc95ad921fe0620c97e0c61f","ssdeep":"3:N/BKL1XyQc+:eL1CQb","tlshash":"355504d4744031744410c414d1501535500504051017040371dd44f4d7301043430540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.842662Z","last_seen":"2025-02-14T22:25:29.842662Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"932e6a7e3fe7ea284f8b315c74c68a14","sha1":"affb9ac211df85f18f80f6ce433bdaacb3486c42","sha256":"cde133cf589bff97f4b5cde4e984f6f7d3015f68329d563c18be6dcc27dd3af5","sha512":"bcee66b336b678959320d43134ecceef11b43c0130c987f4ecc22ff0293f2a0b41cf9abde0a644d5e07d890b5c3aefe3d484a587cd37b6decc626b9bd060e6ff","ssdeep":"3:N/BKL1XyQcYH:eL1CQxH","tlshash":"ed5504cd544031744414c450d15017355107040130171413715d44d4d73010c3430540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.843856Z","last_seen":"2025-02-14T22:25:29.843856Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9336c47c0587d1fbb82158b093a5f748","sha1":"e8ebf9eea0dab15630a83658c9808d3211c271ea","sha256":"bc80d080df16e90019f4a05d2fc5ab0d953408581dd164774766cca2a3955b4d","sha512":"7dd1c463f60ebeac52a499c03ed16b224316a9bd3050ce451f2bf890e2e1fe54df3b24cb77963b8157d8fcea4f85c11d1933b10fce88c5e5a10e94dc820bdbbb","ssdeep":"3:N/BKL1XyQdU:eL1CQdU","tlshash":"9e5504c45440357c4c10c440d17514357005041510570407705d74d4d7301043410540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.845534Z","last_seen":"2025-02-14T22:25:29.845534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ec6e8b769308eb5d67427198ec28537b","sha1":"6d61ee0bbcb13d4d91d403f7d8604434d8999ffe","sha256":"35b48d6ba2143ad10d575f1af4aac66728bb3188b3ae4b0d49be5377890981a9","sha512":"514c2de6471a453ae82cd3ba27c95efb9b36063674eb383e713ca6b65514d77e2265ffda359ac043135d0592e53cb223426752f7b64980ad9b18cfdfd6e8e694","ssdeep":"3:N/BKL1XyQc9cn:eL1CQ/n","tlshash":"a65504d4544031f45414c410d150153571050405105f0c03f15d44d4d7301043430540","size":1337359,"data":"","first_seen":"2025-02-14T22:25:29.847442Z","last_seen":"2025-02-14T22:25:29.847442Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"liquiddepth.site/?ljrayemt=575827f4e94bdee679a79d7187fa3627b049729f0bea3e04548b8a97474f26897a76ea1664b4fc9287f80c668d2879cd957f35da0ed7b417aad8886a371a448b\u0026qrc=christianhulme@slurpmail.net","fqdn":"liquiddepth.site","domain":"liquiddepth.site","tld":"site"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-14T22:24:52.165Z","timestamp":1739571892165,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquiddepth.site","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:05:32 GMT","end":"Wed, 07 May 2025 11:05:31 GMT"},"fingerprint":{"sha1":"3A:DB:B8:23:B3:D7:99:DE:AB:CD:A2:4A:56:61:60:74:11:A4:BF:09","sha256":"4F:19:EC:BF:71:BF:C6:5A:93:3D:E8:65:E8:F1:E2:72:08:D4:A3:FA:14:92:AC:9E:85:9F:FB:C1:98:14:E7:2A"}}},"request":{"raw":"GET /?ljrayemt=575827f4e94bdee679a79d7187fa3627b049729f0bea3e04548b8a97474f26897a76ea1664b4fc9287f80c668d2879cd957f35da0ed7b417aad8886a371a448b\u0026qrc=christianhulme@slurpmail.net HTTP/1.1\r\nHost: liquiddepth.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nSet-Cookie: qPdM=VS8HOw8FT2W2; path=/; samesite=none; secure; httponly\nqPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk; path=/; samesite=none; secure; httponly\r\nlocation: /?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net\r\nDate: Fri, 14 Feb 2025 22:24:53 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T23:15:02.360454Z","times_seen":15302914,"resource_available":true,"data":null}},"time_used":2207,"timings":{"blocked":807,"dns":29,"connect":296,"send":0,"wait":592,"receive":0,"ssl":479},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"liquiddepth.site/?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net","fqdn":"liquiddepth.site","domain":"liquiddepth.site","tld":"site"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-14T22:24:53.573Z","timestamp":1739571893573,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquiddepth.site","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:05:32 GMT","end":"Wed, 07 May 2025 11:05:31 GMT"},"fingerprint":{"sha1":"3A:DB:B8:23:B3:D7:99:DE:AB:CD:A2:4A:56:61:60:74:11:A4:BF:09","sha256":"4F:19:EC:BF:71:BF:C6:5A:93:3D:E8:65:E8:F1:E2:72:08:D4:A3:FA:14:92:AC:9E:85:9F:FB:C1:98:14:E7:2A"}}},"request":{"raw":"GET /?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net HTTP/1.1\r\nHost: liquiddepth.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html;charset=UTF-8\r\nDate: Fri, 14 Feb 2025 22:24:53 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3259,"size_decoded":3259,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1928)","md5":"ddc8606d22c35c3927d82731b3433030","sha1":"1fb0ed66fb302224890871fe053b1cd73112808a","sha256":"b6869b5d40a7cadf2a4e5778e38c09f3f5cf17f33bc6df0f0a18b742bc36fbaa","sha512":"66690a02511a88e2759a6d4c2456159d3c759574b61b1a302b296d9e9c2e1f3a642c195bfafac9c3f6e469b7cdae5e994eb454a4dd37529793494169507179b0","ssdeep":"","tlshash":"1b61a62b6e21b01a96f3897620b0679d3934f108db03879aed77d7544ed12660e1274c","first_seen":"2025-02-12T22:40:43.46857Z","last_seen":"2025-02-19T07:52:12.511981Z","times_seen":8,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://liquiddepth.site/?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:24:54.222Z","timestamp":1739571894222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 16:48:17 GMT","end":"Tue, 01 Apr 2025 17:48:13 GMT"},"fingerprint":{"sha1":"EF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D","sha256":"D1:4D:4E:31:A8:EC:1A:A5:4D:63:98:22:CE:29:88:08:86:71:4D:04:14:4E:6A:FD:D2:F1:59:E5:E7:31:84:D1"}}},"request":{"raw":"GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://liquiddepth.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 14 Feb 2025 22:24:54 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/324d0dcf743c/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 912078931fdf56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T23:15:02.360454Z","times_seen":15302914,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":39,"dns":9,"connect":5,"send":0,"wait":12,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/","date":"2025-02-14T22:24:54.436Z","timestamp":1739571894436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 16:48:17 GMT","end":"Tue, 01 Apr 2025 17:48:13 GMT"},"fingerprint":{"sha1":"EF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D","sha256":"D1:4D:4E:31:A8:EC:1A:A5:4D:63:98:22:CE:29:88:08:86:71:4D:04:14:4E:6A:FD:D2:F1:59:E5:E7:31:84:D1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 22:24:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 61\r\ncache-control: max-age=2629800, public\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 91207894393356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61,"size_decoded":61,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced","md5":"9246cca8fc3c00f50035f28e9f6b7f7d","sha1":"3aa538440f70873b574f40cd793060f53ec17a5d","sha256":"c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84","sha512":"a2098304d541df4c71cde98e4c4a8fb1746d7eb9677ceba4b19ff522efdd981e484224479fd882809196b854dbc5b129962dba76198d34aaecf7318bd3736c6b","ssdeep":"","tlshash":"a5a002e763957d7bd94b133756651151f8324514171305458805d475161736c81c4a82","first_seen":"2023-08-25T15:09:14Z","last_seen":"2025-05-14T12:12:43.698394Z","times_seen":189286,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/324d0dcf743c/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://liquiddepth.site/?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:24:54.280Z","timestamp":1739571894280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 16:48:17 GMT","end":"Tue, 01 Apr 2025 17:48:13 GMT"},"fingerprint":{"sha1":"EF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D","sha256":"D1:4D:4E:31:A8:EC:1A:A5:4D:63:98:22:CE:29:88:08:86:71:4D:04:14:4E:6A:FD:D2:F1:59:E5:E7:31:84:D1"}}},"request":{"raw":"GET /turnstile/v0/b/324d0dcf743c/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://liquiddepth.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Feb 2025 22:24:54 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Tue, 11 Feb 2025 23:52:12 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91207893380456b7-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16163,"size_decoded":48139,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48138)","md5":"59306e15eb43de76a56231e5e426ec80","sha1":"7606b8e4aeace12b393ad6dcebdf6d64bc7240e9","sha256":"69865fe9be4f6cdced3ca8c047a486db063f1179846f5edff395c39a7494fa34","sha512":"99c5ee7567fecb0fd92c4622ee949975972fc46e165aa8e9ff719b3a64472f15e6a79ec83ca533c7305b70b35984b7980ac0552ce1169dbd1dc2c3c1f2d83f4b","ssdeep":"768:nCbU/CNu5h5taq75KvO0fV9/KFeWlzQylfTDjVsgVX2bwDBslY1L8ep7K1oiSJvU:4Nu5h5taq7gGYV9yjcylh2bQs3","tlshash":"f2232b583266797317e980e0617ba74373297a39f94ccc509823c97526acecad133fb9","first_seen":"2025-02-12T12:50:11.006899Z","last_seen":"2025-02-17T12:19:44.484181Z","times_seen":2233,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://liquiddepth.site/?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:24:54.364Z","timestamp":1739571894364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 16:48:17 GMT","end":"Tue, 01 Apr 2025 17:48:13 GMT"},"fingerprint":{"sha1":"EF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D","sha256":"D1:4D:4E:31:A8:EC:1A:A5:4D:63:98:22:CE:29:88:08:86:71:4D:04:14:4E:6A:FD:D2:F1:59:E5:E7:31:84:D1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://liquiddepth.site/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 22:24:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-No2pDy1hJTpsuTP4' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 91207893c8c056b7-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":143459,"size_decoded":27460,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (22104)","md5":"43f46556a727dc72fcd0841b8c09f22c","sha1":"c5599b59f07cb2c5cf93853acf63a507868985ca","sha256":"507acf3750a8040e83d7c11f6060b634c08c6630131672b4a8a4bc94382cb4c9","sha512":"e73102abfa6084c644bbce2bd92b02201419c36d2f120e98e6cf6007d4072206dd330519af0767a6515126f380f5b4847b3c83c0925378e07d0cb13793acbb80","ssdeep":"384:VMx/++dNKuVHV0cZ/gCa8lLTBxsGSe8apcB6GQU+fgO35LaM:Q6OhZ/P+GZ8apceN","tlshash":"18c2960386501f7e74538b2da3e1b584a3387a025f96b1b7f65c42a48f4e29f3b53b16","first_seen":"2025-02-14T22:25:29.788522Z","last_seen":"2025-02-14T22:25:29.788522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/91207893c8c056b7/1739571894761/3a536652ab49b5f2d6d2da1501bd827b6acf5b2646bf303521a7b77cf3636047/nU2ugsQGdRkMqbW","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/","date":"2025-02-14T22:24:57.521Z","timestamp":1739571897521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 16:48:17 GMT","end":"Tue, 01 Apr 2025 17:48:13 GMT"},"fingerprint":{"sha1":"EF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D","sha256":"D1:4D:4E:31:A8:EC:1A:A5:4D:63:98:22:CE:29:88:08:86:71:4D:04:14:4E:6A:FD:D2:F1:59:E5:E7:31:84:D1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/91207893c8c056b7/1739571894761/3a536652ab49b5f2d6d2da1501bd827b6acf5b2646bf303521a7b77cf3636047/nU2ugsQGdRkMqbW HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Fri, 14 Feb 2025 22:24:57 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gOlNmUqtJtfLW0toVAb2Ce2rPWyZGvzA1Iae3fPNjYEcAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIDpTZlKrSbXy1tLaFQG9gntqz1smRr8wNSGnt3zzY2BHABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIDpTZlKrSbXy1tLaFQG9gntqz1smRr8wNSGnt3zzY2BHABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAhyjrDP7zQ5ZzlMLlYQtQX3vhc-vT9nQ7vrqtgRKParT8Oth2rSDPTnsgZg0iIcHgtncvEYs0_AFSmWkTKaRR8Iz7b_fzAUi-ich_EvH2TqI1NNthkX9p1zMPjtsHF8NVHXodhKq5aA9XbyvYPzVrAAUN9o0pMmtujcCqS8YOBRudNJO0XwRK_wNP1hwo6DhxBLbEyRHXijqqhJ9tbnLXbevGkAZfTjcQMUyxlWFkqXxUtXoQl0eZGisKDTzujFuVC78iaFPaBtRicxYv7qyQYt2OPyy3ktlVVzlRWHIpb8TBpBGh2nwqDW0pwcsemsrEuZZ6gFpGH7Sg8fFX28x3bwIDAQAB\", max-age=20\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 912078a77f4d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":1,"size_decoded":1,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T23:13:27.860072Z","times_seen":432524,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/250443290:1739568534:o4QIcSmli_-YPuYflRgY8s0QvNUUpxlzU7b2hodieuk/91207893c8c056b7/eMzV8Q_NertOwc7TosIERVE2ZWHnTFt1JiEjO5lblzM-1739571894-1.1.1.1-O0oyGM4KwioO8cvfgfbKK_5D60zJF0b1kxbYAhVA9QK7ATvdX3RwuIXZ_3Fz8EpL","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/","date":"2025-02-14T22:25:02.850Z","timestamp":1739571902850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 16:48:17 GMT","end":"Tue, 01 Apr 2025 17:48:13 GMT"},"fingerprint":{"sha1":"EF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D","sha256":"D1:4D:4E:31:A8:EC:1A:A5:4D:63:98:22:CE:29:88:08:86:71:4D:04:14:4E:6A:FD:D2:F1:59:E5:E7:31:84:D1"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/250443290:1739568534:o4QIcSmli_-YPuYflRgY8s0QvNUUpxlzU7b2hodieuk/91207893c8c056b7/eMzV8Q_NertOwc7TosIERVE2ZWHnTFt1JiEjO5lblzM-1739571894-1.1.1.1-O0oyGM4KwioO8cvfgfbKK_5D60zJF0b1kxbYAhVA9QK7ATvdX3RwuIXZ_3Fz8EpL HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/\r\ncf-chl: eMzV8Q_NertOwc7TosIERVE2ZWHnTFt1JiEjO5lblzM-1739571894-1.1.1.1-O0oyGM4KwioO8cvfgfbKK_5D60zJF0b1kxbYAhVA9QK7ATvdX3RwuIXZ_3Fz8EpL\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 31903\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 22:24:57 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: +0G4fn8Zwu8+gqx9mbv/ymZCKKPxh8PPoaCqFu/lTV3dsR+Iw8B6hikXCn2gxpNf$6ROFAEeZwPuWQDXbFLFyMg==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 912078a8c8dd56b7-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26543,"size_decoded":27948,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (27948), with no line terminators","md5":"775c7a32b63e780d2e7894ffa138994a","sha1":"50dbbc73047c7a37fa82d9ef737297ccdbc1173e","sha256":"5cbaa4042dd873eafd9c307c7a433a77b277b267bc1230aa5876a41a9723fae7","sha512":"37b09d18aba8d2144eda662aea4621b79dd002952e188990c2c7b6bd197639d2e023cb3b1f5b87f13ad3b3f4f4ed6059c3d6f5a6531c6f1f32d314a33333e162","ssdeep":"768:jaN6A1YB7xs8B4KXXpLNPpfBFy2XnbAaXf5:jTVxB4KnHpXyIbHP5","tlshash":"61c2e1d05174cd35cb825bb2ea902e5ef1369b4f081f00d63cd65f86ac8db08688e227","first_seen":"2025-02-14T22:25:29.790538Z","last_seen":"2025-02-14T22:25:29.790538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"liquiddepth.site/?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net","fqdn":"liquiddepth.site","domain":"liquiddepth.site","tld":"site"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-14T22:24:53.573Z","timestamp":1739571893573,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquiddepth.site","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:05:32 GMT","end":"Wed, 07 May 2025 11:05:31 GMT"},"fingerprint":{"sha1":"3A:DB:B8:23:B3:D7:99:DE:AB:CD:A2:4A:56:61:60:74:11:A4:BF:09","sha256":"4F:19:EC:BF:71:BF:C6:5A:93:3D:E8:65:E8:F1:E2:72:08:D4:A3:FA:14:92:AC:9E:85:9F:FB:C1:98:14:E7:2A"}}},"request":{"raw":"POST /?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net HTTP/1.1\r\nHost: liquiddepth.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 923\r\nOrigin: https://liquiddepth.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://liquiddepth.site/?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nlocation: https://hoferpuff.store/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hvZmVycHVmZi5zdG9yZS8iLCJkb21haW4iOiJob2ZlcnB1ZmYuc3RvcmUiLCJrZXkiOiJWUzhIT3c4RlQyVzIiLCJxcmMiOiJjaHJpc3RpYW5odWxtZUBzbHVycG1haWwubmV0IiwiaWF0IjoxNzM5NTcxOTA0LCJleHAiOjE3Mzk1NzIwMjR9.QvhFK3iOfMgDLX4WMkWiidljyKsKp7TUJI4qnEup8yc\r\nDate: Fri, 14 Feb 2025 22:25:04 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T23:15:02.360454Z","times_seen":15302914,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"hoferpuff.store/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hvZmVycHVmZi5zdG9yZS8iLCJkb21haW4iOiJob2ZlcnB1ZmYuc3RvcmUiLCJrZXkiOiJWUzhIT3c4RlQyVzIiLCJxcmMiOiJjaHJpc3RpYW5odWxtZUBzbHVycG1haWwubmV0IiwiaWF0IjoxNzM5NTcxOTA0LCJleHAiOjE3Mzk1NzIwMjR9.QvhFK3iOfMgDLX4WMkWiidljyKsKp7TUJI4qnEup8yc","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-14T22:25:04.175Z","timestamp":1739571904175,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoferpuff.store","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:06:51 GMT","end":"Wed, 07 May 2025 11:06:50 GMT"},"fingerprint":{"sha1":"52:7B:80:E5:BC:B7:60:1C:78:AF:8D:82:22:13:DD:AE:03:C2:9F:3E","sha256":"EF:36:16:42:52:CE:2C:47:11:2F:38:04:A6:95:BB:D1:44:47:D2:19:05:76:B4:01:A5:D5:BB:DD:43:83:B8:53"}}},"request":{"raw":"GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2hvZmVycHVmZi5zdG9yZS8iLCJkb21haW4iOiJob2ZlcnB1ZmYuc3RvcmUiLCJrZXkiOiJWUzhIT3c4RlQyVzIiLCJxcmMiOiJjaHJpc3RpYW5odWxtZUBzbHVycG1haWwubmV0IiwiaWF0IjoxNzM5NTcxOTA0LCJleHAiOjE3Mzk1NzIwMjR9.QvhFK3iOfMgDLX4WMkWiidljyKsKp7TUJI4qnEup8yc HTTP/1.1\r\nHost: hoferpuff.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://liquiddepth.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nSet-Cookie: qPdM=VS8HOw8FT2W2; path=/; samesite=none; secure; httponly\nqPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk; path=/; samesite=none; secure; httponly\r\nlocation: /?qrc=christianhulme%40slurpmail.net\r\nDate: Fri, 14 Feb 2025 22:25:05 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T23:15:02.360454Z","times_seen":15302914,"resource_available":true,"data":null}},"time_used":2292,"timings":{"blocked":849,"dns":78,"connect":296,"send":0,"wait":592,"receive":0,"ssl":474},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"hoferpuff.store/?qrc=christianhulme%40slurpmail.net","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-14T22:25:05.624Z","timestamp":1739571905624,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoferpuff.store","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:06:51 GMT","end":"Wed, 07 May 2025 11:06:50 GMT"},"fingerprint":{"sha1":"52:7B:80:E5:BC:B7:60:1C:78:AF:8D:82:22:13:DD:AE:03:C2:9F:3E","sha256":"EF:36:16:42:52:CE:2C:47:11:2F:38:04:A6:95:BB:D1:44:47:D2:19:05:76:B4:01:A5:D5:BB:DD:43:83:B8:53"}}},"request":{"raw":"GET /?qrc=christianhulme%40slurpmail.net HTTP/1.1\r\nHost: hoferpuff.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://liquiddepth.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=15552000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nX-XSS-Protection: 1; mode=block\r\nAge: 0\r\nPragma: no-cache\r\nExpires: 0\r\nCache-Control: no-cache, no-store, must-revalidate\r\nSet-Cookie: AS=v=1\u0026s=DvlRryMs\u0026d=A67b11443|G9XcLyD.2SoejSXjBjE5OOPlglXFBTz8.blx729acPlPHYIKiqM9v13RUzOO52YT3RPw7WBvg6o.WnlOeSGQlHO17wuNxEHp.8.j2LqjbcXmhIJR0T5rq9nJiJ.ev7l1p31CJpo9AJt.E2TDIXS4nvVIULDB8hsQoZN8WRIYODYqLrRcNgqy_TaxZveH.nvPXYQ5UG1aib.ffv0WjKmnYen8d09mxrozigNAmtAPCXZebqxIzDymUerqZhhu5Nj5J5hTOt99IhpNYVAAYo3zKD5fdntYIwYV6Uhb814kOBj4hsjoLXtYEuzUgozY8f0P0l_Gu8kNSghvKIUwDA.zVtoYjzKncruspcyMk_KW.xFQxu2WndlK.Dbx241eXLMBJ0bjpb7Kd0hKtAjAIEYE9Ph9sJDm6M2RVbHE6vCIieMXr.M9bHV_yZtb15h1FkT5mGhMEuhLgnGTKu0Mrs5AioaU_p4YW53YEDpbE05PivzV4uhkv5_Xq1t9C9dTswIBhTR1nQiQlo_tLPidhSEcrvz0Uj1tMML6wL2feeayheipOgmcatRWP2Vahr.sEn58UJ6NZ745zlXSTw34VYW90RLGsQr8mYn35WKmpun7AyqSzk9.WgG5pYUN2IU7O.RWdAixsksIsKYFBDh9LllxDk4vcn0Id0ruRy4OyyUDEiH40ldHcSeTFvWJloNSnGps5cn.l7eSThzhgQYBYK7JlDdFAhoZa9s.Q8K5jrVdNVGq_uKcAOc1L8IlBgwdrxVBsyJx9johIsI2ng87kwHviTItLHcUurHyhJoSymcLKvA5zpIOnl8OMSt79_5VDX3XPS.mQTzSLkYKXIDKf0oLxCrBbav6VqkgA4mXffoXJvO5bw8.O9YebDL2SfciyZXwYO6Vr5ArGA--~A; path=/; domain=hoferpuff.store; secure; HttpOnly\nA1=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; Expires=Sun, 15 Feb 2026 04:25:07 GMT; Max-Age=31557600; Domain=hoferpuff.store; Path=/; SameSite=Lax; Secure; HttpOnly\nA3=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; Expires=Sun, 15 Feb 2026 04:25:07 GMT; Max-Age=31557600; Domain=hoferpuff.store; Path=/; SameSite=None; Secure; HttpOnly\nA1S=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; Domain=hoferpuff.store; Path=/; SameSite=Lax; Secure\r\nContent-Type: text/html; charset=utf-8\r\nContent-Security-Policy: default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';\r\nVary: Accept-Encoding\r\nContent-Encoding: br\r\nDate: Fri, 14 Feb 2025 22:25:07 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nServer: ATS\r\nExpect-CT: max-age=31536000, report-uri=\"http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only\"\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8055,"size_decoded":42985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2691)","md5":"3c8a00ec19fab152cb99bcd72836ac7c","sha1":"5cbbf9c3783638cbdaa256255d5b5aed4e9e5fad","sha256":"030348e9f48ce2cf9c86e9da4311c32ffc7327591ecd67ee3425160a07d2aee5","sha512":"42c5aa25c7afaf5163136dae3a6c5aedc121f87ea2facb0bf5b33c6de570df185d1ebc0c19b5e16ee7cfb41ca139937af828f9f6657a212d9d0fe6ecf375eafa","ssdeep":"768:+OEt+CJsyo1P1NrDNpSArjo1PxakQCqgwzA3qHefAhY0AfqO3GH2cQj6UIkSaa+k:Qt+pt1Na8/","tlshash":"9e13bd58eaf48c6c09ff0ac82164180848b9a746611978ecbd9d5bfd1ff58fee12b11d","first_seen":"2025-02-14T22:25:29.791499Z","last_seen":"2025-02-14T22:25:29.791499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"hoferpuff.store/s.yimg.com/~/wm/mbr/4d7e1df106276f14e7f9c7f68448e92dfc08911c/yahoo-main.css","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:08.112Z","timestamp":1739571908112,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoferpuff.store","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:06:51 GMT","end":"Wed, 07 May 2025 11:06:50 GMT"},"fingerprint":{"sha1":"52:7B:80:E5:BC:B7:60:1C:78:AF:8D:82:22:13:DD:AE:03:C2:9F:3E","sha256":"EF:36:16:42:52:CE:2C:47:11:2F:38:04:A6:95:BB:D1:44:47:D2:19:05:76:B4:01:A5:D5:BB:DD:43:83:B8:53"}}},"request":{"raw":"GET /s.yimg.com/~/wm/mbr/4d7e1df106276f14e7f9c7f68448e92dfc08911c/yahoo-main.css HTTP/1.1\r\nHost: hoferpuff.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk; AS=v=1\u0026s=DvlRryMs\u0026d=A67b11443|G9XcLyD.2SoejSXjBjE5OOPlglXFBTz8.blx729acPlPHYIKiqM9v13RUzOO52YT3RPw7WBvg6o.WnlOeSGQlHO17wuNxEHp.8.j2LqjbcXmhIJR0T5rq9nJiJ.ev7l1p31CJpo9AJt.E2TDIXS4nvVIULDB8hsQoZN8WRIYODYqLrRcNgqy_TaxZveH.nvPXYQ5UG1aib.ffv0WjKmnYen8d09mxrozigNAmtAPCXZebqxIzDymUerqZhhu5Nj5J5hTOt99IhpNYVAAYo3zKD5fdntYIwYV6Uhb814kOBj4hsjoLXtYEuzUgozY8f0P0l_Gu8kNSghvKIUwDA.zVtoYjzKncruspcyMk_KW.xFQxu2WndlK.Dbx241eXLMBJ0bjpb7Kd0hKtAjAIEYE9Ph9sJDm6M2RVbHE6vCIieMXr.M9bHV_yZtb15h1FkT5mGhMEuhLgnGTKu0Mrs5AioaU_p4YW53YEDpbE05PivzV4uhkv5_Xq1t9C9dTswIBhTR1nQiQlo_tLPidhSEcrvz0Uj1tMML6wL2feeayheipOgmcatRWP2Vahr.sEn58UJ6NZ745zlXSTw34VYW90RLGsQr8mYn35WKmpun7AyqSzk9.WgG5pYUN2IU7O.RWdAixsksIsKYFBDh9LllxDk4vcn0Id0ruRy4OyyUDEiH40ldHcSeTFvWJloNSnGps5cn.l7eSThzhgQYBYK7JlDdFAhoZa9s.Q8K5jrVdNVGq_uKcAOc1L8IlBgwdrxVBsyJx9johIsI2ng87kwHviTItLHcUurHyhJoSymcLKvA5zpIOnl8OMSt79_5VDX3XPS.mQTzSLkYKXIDKf0oLxCrBbav6VqkgA4mXffoXJvO5bw8.O9YebDL2SfciyZXwYO6Vr5ArGA--~A; A1=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A3=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A1S=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 40gZIpWlamnNfMuZ4kQQi/4JjPe9VmNkIghwmHuPEDgcdzjBGzPauSjGpiC17xpeJ+LcIEZ8HVM=\r\nx-amz-request-id: 0SJVGBVRRWR7V293\r\nDate: Fri, 14 Feb 2025 10:32:49 GMT\r\nLast-Modified: Fri, 14 Feb 2025 05:56:58 GMT\r\nETag: \"3276b1ba3325ad18b7581e47c72090a3-df\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: text/css\r\nServer: ATS\r\nReferrer-Policy: no-referrer-when-downgrade\r\nVary: Origin, Accept-Encoding\r\nAge: 42741\r\nATS-Carp-Promotion: 1, 1\r\nContent-Encoding: gzip\r\nContent-Length: 138696\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000\r\nSet-Cookie: qPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:09 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:09 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:09 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:09 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":138696,"size_decoded":704538,"mime_type":"text/css","magic":"ASCII text, with very long lines (40540)","md5":"3276b1ba3325ad18b7581e47c72090a3","sha1":"9f55ccbcf9451c2389d5fe0c71195081323b4d25","sha256":"f46567ef42777ff877e10b40fc601b894fc01e29b3946acff07c74e919f69a84","sha512":"f71d0a967e815b430023d4f2c87fa0a192a5889aeeca8c63f60a19b8a47172eef9fa286809ea05d39968641c843760be1b76c002c4827de9c9f00e78db5646c1","ssdeep":"12288:srmuAxlnVW/3E+hV6vcdL8TmN33xLPVwQ:JxVVWfE+hV6vmL8TmN33NPVH","tlshash":"a6e429539a12202f7d2f466171f5be4cb239e112da92dffaf5ab9964ce4a0421133f4c","first_seen":"2025-02-14T14:49:34.848661Z","last_seen":"2025-02-16T06:15:16.688326Z","times_seen":11,"resource_available":false,"data":null}},"time_used":2757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1854,"receive":903,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"s.yimg.com/bw/fonts/yahoo-sans-cr4-vf.woff2","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:10.979Z","timestamp":1739571910979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.fantasysports.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 20 Jan 2025 00:00:00 GMT","end":"Wed, 12 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"93:44:EB:9C:34:E4:19:4F:E3:27:16:9F:52:DD:CB:DD:7E:7E:35:EA","sha256":"35:CC:98:8C:B6:8C:5D:EE:79:31:39:15:95:9D:6F:40:2A:F4:FD:A0:C5:E6:24:8F:D6:F8:4C:E2:18:E7:DF:E7"}}},"request":{"raw":"GET /bw/fonts/yahoo-sans-cr4-vf.woff2 HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hoferpuff.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoferpuff.store/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: oMxdEiZSen3CD7caqDVAMKKKRGH5dLNFNDmmLSnUXf+9ArJ757K0Jhb3kHRgw9oCVbPUTsfkfUs=\r\nx-amz-request-id: NA20TYGA8NF0W2S8\r\ndate: Fri, 14 Feb 2025 09:30:32 GMT\r\nlast-modified: Fri, 14 Feb 2025 01:59:26 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: wUt5QWMHFonqO_Z13wqeP1wud1inlbiC\r\naccept-ranges: bytes\r\ncontent-type: binary/octet-stream\r\ncontent-length: 34588\r\nserver: ATS\r\nreferrer-policy: no-referrer-when-downgrade\r\netag: \"492a0a160b8da9414134282ef8b62f78\"\r\ncache-control: public, max-age=604800\r\nage: 46480\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34588,"size_decoded":34588,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 34588, version 0.0","md5":"492a0a160b8da9414134282ef8b62f78","sha1":"25f704e7b3c6972ff84ba95d4e92e807ab15f38b","sha256":"318d39388d650f931cfd5283ab5da11570bc0c6b1a85360bcbf03d3656d2ea8a","sha512":"ca28ed371e6846e108297faf0c4c1a5de7e3409f535d2b63365b27cb12400c7aeae9ef0169bb318533d12d74cdd9102470f1c7fc8eee58c2ba22056fdb2ad3e2","ssdeep":"768:AWUwlnmujFvuPmo/290wc01MeCYDdJa7NPsra4l3:8G7jNGJeQhoa7qa4l","tlshash":"5ff2f112f23dc91dec5b1ae0d4322ae0dc159061cabe1798d4b7399123fd01bb54eb9c","first_seen":"2024-08-23T09:37:42Z","last_seen":"2026-05-15T23:56:06.56844Z","times_seen":368,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":101,"dns":21,"connect":33,"send":0,"wait":36,"receive":36,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/bw/fonts/centra-no2-bold.woff2","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:10.986Z","timestamp":1739571910986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.fantasysports.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 20 Jan 2025 00:00:00 GMT","end":"Wed, 12 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"93:44:EB:9C:34:E4:19:4F:E3:27:16:9F:52:DD:CB:DD:7E:7E:35:EA","sha256":"35:CC:98:8C:B6:8C:5D:EE:79:31:39:15:95:9D:6F:40:2A:F4:FD:A0:C5:E6:24:8F:D6:F8:4C:E2:18:E7:DF:E7"}}},"request":{"raw":"GET /bw/fonts/centra-no2-bold.woff2 HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hoferpuff.store\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoferpuff.store/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: iyWRXWhVnM6xdVjrQFAUpGNAaq8ue8KXOayAzH1LVlUmTopozqXuCAJ1oA/SAQXFgnvjQPlwK5c=\r\nx-amz-request-id: B1002SB8CE9DA1B0\r\ndate: Fri, 14 Feb 2025 21:22:29 GMT\r\nlast-modified: Fri, 14 Feb 2025 01:59:19 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: QxTORM7uLfxOn.aKdVfOlaoknNpdqNf9\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ncontent-length: 39888\r\nserver: ATS\r\nreferrer-policy: no-referrer-when-downgrade\r\netag: \"f7ffc5f925d3b186f552cde1c3e99691\"\r\ncache-control: public, max-age=604800\r\nage: 3763\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39888,"size_decoded":39888,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 39888, version 0.0","md5":"f7ffc5f925d3b186f552cde1c3e99691","sha1":"6827b93164847bda1b696fa71e0997c30fd9d007","sha256":"22aca3530f993651436788f0effab7c09d3ac03bb0cdfcc8d809629e24cd54c7","sha512":"e2524e10b00a4f7f83bb88d8ee4c1c1e6e367f0b0a1823f8d0fe4f72ba6fe14f9b146ba852d3f442aa1d8a3abfddcd6a86ca3387a28c95d57ff7a1d80a5e4b20","ssdeep":"768:SuBSTQkmuXr3letgzDt0zU5C4/xwOac2ZcLYEPH:Svtmu73yo5x//abREPH","tlshash":"3a03f29630cd60d8dbef624f355e72eb9836d32218164c834287ae11dde9c1e83da977","first_seen":"2024-08-23T09:37:42Z","last_seen":"2026-05-15T17:47:28.257145Z","times_seen":497,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":95,"dns":14,"connect":35,"send":0,"wait":71,"receive":33,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3p-udc.yahoo.com/v2/public/yql?yhlVer=2\u0026yhlClient=rapid\u0026yhlS=794200018\u0026yhlCT=2\u0026yhlBTMS=1739571911323\u0026yhlClientVer=3.53.39\u0026yhlRnd=6MkB49JoamHOJgRB\u0026yhlCompressed=0","fqdn":"3p-udc.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"188.125.72.139","port":443,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:11.326Z","timestamp":1739571911326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Dec 2024 00:00:00 GMT","end":"Wed, 04 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"36:A8:53:3C:69:AB:C3:81:64:96:37:F5:7C:66:04:E6:56:1E:80:AF","sha256":"35:B0:21:0E:5A:20:20:9C:6E:B7:16:0A:C4:43:41:0A:E9:1C:14:E8:7C:AB:91:02:5B:1F:66:AC:8D:81:48:B5"}}},"request":{"raw":"POST /v2/public/yql?yhlVer=2\u0026yhlClient=rapid\u0026yhlS=794200018\u0026yhlCT=2\u0026yhlBTMS=1739571911323\u0026yhlClientVer=3.53.39\u0026yhlRnd=6MkB49JoamHOJgRB\u0026yhlCompressed=0 HTTP/1.1\r\nHost: 3p-udc.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 1803\r\nOrigin: https://hoferpuff.store\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://hoferpuff.store\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, private, max-age=0\r\np3p: policyref=\"http://info.yahoo.com/w3c/p3p.xml\", CP=\"CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV\"\r\npragma: no-cache\r\nexpires: -1\r\nx-envoy-upstream-service-time: 1\r\ndate: Fri, 14 Feb 2025 22:25:11 GMT\r\nserver: ATS\r\nage: 0\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T23:15:02.360454Z","times_seen":15302914,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":93,"dns":14,"connect":31,"send":0,"wait":34,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"guce.yahoo.com/v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid","fqdn":"guce.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"52.215.129.223","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:11.793Z","timestamp":1739571911793,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"guce.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Feb 2025 00:00:00 GMT","end":"Wed, 30 Jul 2025 23:59:59 GMT"},"fingerprint":{"sha1":"91:86:B9:21:05:5A:48:89:FC:68:9F:6A:05:E4:25:F7:24:08:8D:B7","sha256":"D1:74:2C:D1:89:45:93:44:21:8B:C5:EB:62:78:3B:7B:31:ED:2B:17:71:56:57:0E:DE:06:59:EB:E2:61:FA:C3"}}},"request":{"raw":"GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1\r\nHost: guce.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/\r\nOrigin: https://hoferpuff.store\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nContent-Encoding: gzip\r\nConnection: keep-alive\r\nServer: guce\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Type: application/json\r\nContent-Length: 70\r\nDate: Fri, 14 Feb 2025 22:25:12 GMT\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":70,"size_decoded":53,"mime_type":"application/json","magic":"JSON text data","md5":"602bded260090b7a675a1c554929bef9","sha1":"2c97c4efbf866172120086a8b8498f536e2f7693","sha256":"97a75fbda5f646269663ee26f1c2b1c73209b34a0faaaf2f75d9f5f2326d9132","sha512":"5ecbc8434aba28bdb15a901367b3b8b3e9cb4e4dfd29faab2751cfd800b47f7b66ad2f518ac6aa8387b1f9b8e691a4d4200d82cd0db3e05c28cdcbe888612191","ssdeep":"","tlshash":"8e90022299a80d7a1a8b6a88404a4a5404d9826641e11050cd45a7151a06955855d49a","first_seen":"2023-10-28T14:39:56Z","last_seen":"2026-05-03T06:55:08.466267Z","times_seen":202,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":208,"dns":65,"connect":35,"send":0,"wait":35,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"csp.yahoo.com/beacon/csp?src=mail-gam","fqdn":"csp.yahoo.com","domain":"yahoo.com","tld":"com"},"ip":{"addr":"188.125.72.139","port":0,"asn":34010,"as":"Yahoo-UK Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-14T22:25:12.276704464Z","timestamp":1739571912276,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /beacon/csp?src=mail-gam HTTP/1.1\r\nHost: csp.yahoo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 916\r\nOrigin: https://gpt.mail.yahoo.net\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 14 Feb 2025 22:25:12 GMT\r\nstrict-transport-security: max-age=31536000\r\nserver: ATS\r\ncache-control: no-store, no-cache, private, max-age=0\r\nexpires: -1\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T23:15:02.360454Z","times_seen":15302914,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/wm/mbr/images/checkbox-checked.svg","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:12.366Z","timestamp":1739571912366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.api.fantasysports.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Mon, 20 Jan 2025 00:00:00 GMT","end":"Wed, 12 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"93:44:EB:9C:34:E4:19:4F:E3:27:16:9F:52:DD:CB:DD:7E:7E:35:EA","sha256":"35:CC:98:8C:B6:8C:5D:EE:79:31:39:15:95:9D:6F:40:2A:F4:FD:A0:C5:E6:24:8F:D6:F8:4C:E2:18:E7:DF:E7"}}},"request":{"raw":"GET /wm/mbr/images/checkbox-checked.svg HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hoferpuff.store/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: aOszuVMsRBkS0PJYuXnCH6wkf0R3iqYRQ8hjQmPbv16/g1mFtmOUtV14v8oVVNtNDtidXLDt9uc=\r\nx-amz-request-id: BXR3RY3AG48R59V4\r\ndate: Thu, 13 Feb 2025 12:26:28 GMT\r\nlast-modified: Fri, 24 Apr 2020 17:13:52 GMT\r\netag: \"ac8c4fbeda6efad9549cb41b992a8b3a-df\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public,max-age=315360000\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\nserver: ATS\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: Origin, Accept-Encoding\r\nage: 122325\r\ncontent-encoding: gzip\r\ncontent-length: 659\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":659,"size_decoded":1246,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac8c4fbeda6efad9549cb41b992a8b3a","sha1":"46f532f081af894297bce53a7d212e2d253a60bf","sha256":"11b4310df6e27428e7cf86f316abdc10148ac5cf3c8bbbd5b85c88b9f6290c59","sha512":"0d82a3acb37b93d05692f677f31f7a381c4d17d21e665504e9e1dc7745edae2ac89ad23c8a32e8954431c9ba97b015e340d8fd7ac35cf96dd569a4303591013e","ssdeep":"","tlshash":"d52177d012fe40dcf0019352d3a476d07975781f5ac40098b6cd3a5bbb618ea86bba0d","first_seen":"2023-04-17T08:42:57Z","last_seen":"2026-04-24T15:30:35.085708Z","times_seen":464,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/s.yimg.com/~/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:08.115Z","timestamp":1739571908115,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoferpuff.store","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:06:51 GMT","end":"Wed, 07 May 2025 11:06:50 GMT"},"fingerprint":{"sha1":"52:7B:80:E5:BC:B7:60:1C:78:AF:8D:82:22:13:DD:AE:03:C2:9F:3E","sha256":"EF:36:16:42:52:CE:2C:47:11:2F:38:04:A6:95:BB:D1:44:47:D2:19:05:76:B4:01:A5:D5:BB:DD:43:83:B8:53"}}},"request":{"raw":"GET /s.yimg.com/~/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png HTTP/1.1\r\nHost: hoferpuff.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk; AS=v=1\u0026s=DvlRryMs\u0026d=A67b11443|G9XcLyD.2SoejSXjBjE5OOPlglXFBTz8.blx729acPlPHYIKiqM9v13RUzOO52YT3RPw7WBvg6o.WnlOeSGQlHO17wuNxEHp.8.j2LqjbcXmhIJR0T5rq9nJiJ.ev7l1p31CJpo9AJt.E2TDIXS4nvVIULDB8hsQoZN8WRIYODYqLrRcNgqy_TaxZveH.nvPXYQ5UG1aib.ffv0WjKmnYen8d09mxrozigNAmtAPCXZebqxIzDymUerqZhhu5Nj5J5hTOt99IhpNYVAAYo3zKD5fdntYIwYV6Uhb814kOBj4hsjoLXtYEuzUgozY8f0P0l_Gu8kNSghvKIUwDA.zVtoYjzKncruspcyMk_KW.xFQxu2WndlK.Dbx241eXLMBJ0bjpb7Kd0hKtAjAIEYE9Ph9sJDm6M2RVbHE6vCIieMXr.M9bHV_yZtb15h1FkT5mGhMEuhLgnGTKu0Mrs5AioaU_p4YW53YEDpbE05PivzV4uhkv5_Xq1t9C9dTswIBhTR1nQiQlo_tLPidhSEcrvz0Uj1tMML6wL2feeayheipOgmcatRWP2Vahr.sEn58UJ6NZ745zlXSTw34VYW90RLGsQr8mYn35WKmpun7AyqSzk9.WgG5pYUN2IU7O.RWdAixsksIsKYFBDh9LllxDk4vcn0Id0ruRy4OyyUDEiH40ldHcSeTFvWJloNSnGps5cn.l7eSThzhgQYBYK7JlDdFAhoZa9s.Q8K5jrVdNVGq_uKcAOc1L8IlBgwdrxVBsyJx9johIsI2ng87kwHviTItLHcUurHyhJoSymcLKvA5zpIOnl8OMSt79_5VDX3XPS.mQTzSLkYKXIDKf0oLxCrBbav6VqkgA4mXffoXJvO5bw8.O9YebDL2SfciyZXwYO6Vr5ArGA--~A; A1=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A3=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A1S=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: WwJE/pgHbiyBzct21vaVK15jAU0GN+p/Vlk076NAHedbM6UK+Ws7eyTQqM/VfLBor7QMFmIUujk=\r\nx-amz-request-id: R2H0QHGH23HF16EQ\r\nDate: Fri, 14 Feb 2025 00:18:48 GMT\r\nLast-Modified: Thu, 13 Feb 2025 21:31:35 GMT\r\nETag: \"cd166981c96c6d0f4b5a7d798c25878e\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=86400\r\nExpires: Sat, 15 Feb 2025 00:00:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1346\r\nServer: ATS\r\nReferrer-Policy: no-referrer-when-downgrade\r\nVary: Origin\r\nAge: 79585\r\nATS-Carp-Promotion: 1, 1\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000\r\nSet-Cookie: qPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:12 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:12 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:12 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:12 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1346,"size_decoded":1346,"mime_type":"image/png","magic":"PNG image data, 240 x 72, 8-bit colormap, non-interlaced","md5":"cd166981c96c6d0f4b5a7d798c25878e","sha1":"09031c4013138bb8bd54ab9092ac59aa47d7c60c","sha256":"0fdefe26bac6a6b0b06fe67984582f887af70b7da25d6cb1b401f9074db58338","sha512":"6d217a81dfdcfd601c3f6d9cde3f1be0c4d4ffef85b02b06208014101456ca730ef759bd51637966c9f2572080b79e8a2f9d45a2087ddc40df015f8c052da501","ssdeep":"","tlshash":"6821d85a1a7baa91cda1bc7278bcc89ef5106013ca311d93826ab5699c0e0eab15406a","first_seen":"2023-04-17T08:42:57Z","last_seen":"2026-05-16T17:34:00.774546Z","times_seen":3289,"resource_available":false,"data":null}},"time_used":7376,"timings":{"blocked":2741,"dns":1,"connect":294,"send":0,"wait":1881,"receive":1,"ssl":301},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"hoferpuff.store/s.yimg.com/~/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:08.117Z","timestamp":1739571908117,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoferpuff.store","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:06:51 GMT","end":"Wed, 07 May 2025 11:06:50 GMT"},"fingerprint":{"sha1":"52:7B:80:E5:BC:B7:60:1C:78:AF:8D:82:22:13:DD:AE:03:C2:9F:3E","sha256":"EF:36:16:42:52:CE:2C:47:11:2F:38:04:A6:95:BB:D1:44:47:D2:19:05:76:B4:01:A5:D5:BB:DD:43:83:B8:53"}}},"request":{"raw":"GET /s.yimg.com/~/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png HTTP/1.1\r\nHost: hoferpuff.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk; AS=v=1\u0026s=DvlRryMs\u0026d=A67b11443|G9XcLyD.2SoejSXjBjE5OOPlglXFBTz8.blx729acPlPHYIKiqM9v13RUzOO52YT3RPw7WBvg6o.WnlOeSGQlHO17wuNxEHp.8.j2LqjbcXmhIJR0T5rq9nJiJ.ev7l1p31CJpo9AJt.E2TDIXS4nvVIULDB8hsQoZN8WRIYODYqLrRcNgqy_TaxZveH.nvPXYQ5UG1aib.ffv0WjKmnYen8d09mxrozigNAmtAPCXZebqxIzDymUerqZhhu5Nj5J5hTOt99IhpNYVAAYo3zKD5fdntYIwYV6Uhb814kOBj4hsjoLXtYEuzUgozY8f0P0l_Gu8kNSghvKIUwDA.zVtoYjzKncruspcyMk_KW.xFQxu2WndlK.Dbx241eXLMBJ0bjpb7Kd0hKtAjAIEYE9Ph9sJDm6M2RVbHE6vCIieMXr.M9bHV_yZtb15h1FkT5mGhMEuhLgnGTKu0Mrs5AioaU_p4YW53YEDpbE05PivzV4uhkv5_Xq1t9C9dTswIBhTR1nQiQlo_tLPidhSEcrvz0Uj1tMML6wL2feeayheipOgmcatRWP2Vahr.sEn58UJ6NZ745zlXSTw34VYW90RLGsQr8mYn35WKmpun7AyqSzk9.WgG5pYUN2IU7O.RWdAixsksIsKYFBDh9LllxDk4vcn0Id0ruRy4OyyUDEiH40ldHcSeTFvWJloNSnGps5cn.l7eSThzhgQYBYK7JlDdFAhoZa9s.Q8K5jrVdNVGq_uKcAOc1L8IlBgwdrxVBsyJx9johIsI2ng87kwHviTItLHcUurHyhJoSymcLKvA5zpIOnl8OMSt79_5VDX3XPS.mQTzSLkYKXIDKf0oLxCrBbav6VqkgA4mXffoXJvO5bw8.O9YebDL2SfciyZXwYO6Vr5ArGA--~A; A1=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A3=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A1S=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: aBxoez+QQgfjTgziNX57UGrQkv+74NY4AeOIu/aVFOdhKm5di62gGWIXHzFpqpg+6lkfAG6jNUY=\r\nx-amz-request-id: P8WMXH8EQ68VTYEJ\r\nDate: Fri, 14 Feb 2025 16:37:11 GMT\r\nLast-Modified: Thu, 13 Feb 2025 21:31:35 GMT\r\nETag: \"dd31f56b9e4dff40eb87447c3dc55b84\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=86400\r\nExpires: Sat, 15 Feb 2025 00:00:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1391\r\nServer: ATS\r\nReferrer-Policy: no-referrer-when-downgrade\r\nVary: Origin\r\nAge: 20882\r\nATS-Carp-Promotion: 1, 1\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000\r\nSet-Cookie: qPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:12 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:12 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:12 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:12 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1391,"size_decoded":1391,"mime_type":"image/png","magic":"PNG image data, 240 x 72, 8-bit colormap, non-interlaced","md5":"dd31f56b9e4dff40eb87447c3dc55b84","sha1":"1908b34af2d15440d33dfc81fcb93aa9b271dc58","sha256":"4f47ef8ff3dad2a78360ab207cf35ff2905622511c0426109f6e225052cf5637","sha512":"057d2dcd66c48a2bb43d7b62bc38e4dacd3d7f3fdaa103af178fdbc737be91a81a369158bf02ab59c46f507f538536d01d5fc179d681375f9b77ee814e544407","ssdeep":"","tlshash":"e62108e4d6d90c8bb6ac47820037fab1ec14ad8160dde53118467f23d4b63199cedc10","first_seen":"2023-05-02T15:41:00Z","last_seen":"2026-05-16T17:34:00.770015Z","times_seen":2852,"resource_available":false,"data":null}},"time_used":7395,"timings":{"blocked":2739,"dns":1,"connect":304,"send":0,"wait":1902,"receive":1,"ssl":302},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"gpt.mail.yahoo.net/sandbox?client=login\u0026version=0.1\u0026limited=0\u0026headerBidder=1\u0026haq=1\u0026benji=1","fqdn":"gpt.mail.yahoo.net","domain":"yahoo.net","tld":"net"},"ip":{"addr":"87.248.119.252","port":0,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-14T22:25:14.274720873Z","timestamp":1739571914274,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /sandbox?client=login\u0026version=0.1\u0026limited=0\u0026headerBidder=1\u0026haq=1\u0026benji=1 HTTP/1.1\r\nHost: gpt.mail.yahoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nexpect-ct: max-age=31536000, report-uri=\"http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-omg-env: norrin-green--gam-production-ir2-fb54cb58f-bqdkz\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: base-uri 'none'; connect-src https:; script-src 'nonce-q60+bzUjTxe/Hntqe1bpvw==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:; sandbox allow-forms allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts; block-all-mixed-content; frame-ancestors https://mail.yahoo.com https://*.mail.yahoo.com https://mail.aol.com https://*.mail.aol.com https://login.yahoo.com https://*.login.yahoo.com https://login.aol.com https://*.login.aol.com https://devbox.login.aol.com:8080 https://devbox.login.yahoo.com:8080; report-uri https://csp.yahoo.com/beacon/csp?src=mail-gam\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 14 Feb 2025 22:25:11 GMT\r\nx-envoy-upstream-service-time: 1\r\nserver: ATS\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1892,"size_decoded":1892,"mime_type":"application/x-gzip","magic":"gzip compressed data, from Unix","md5":"eb39ebc26bf57cac8bef4f90933d7a69","sha1":"7071753bc71c6eb07344423590fdb134e5bc728a","sha256":"997b5a294faddabd90d369033858973f80eb628c39e49452aa8228adfde0a202","sha512":"aaf33cef0d4455be8e20ca676a9adfafb333b10f4fa2ef7ea6164281ef684533d783929c0d57996172d9cdd594374a7ff0e5740663f547ccae89bd2372c0335e","ssdeep":"","tlshash":"2f418682b3128346d58e237d393beedd63edd488bc907dce0a44ec418d0c63a5b812c9","first_seen":"2025-02-14T22:25:29.801721Z","last_seen":"2025-02-14T22:25:29.801721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/s.yimg.com/~/wm/mbr/images/yahoo-apple-touch-v0.0.2.png","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:12.369Z","timestamp":1739571912369,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoferpuff.store","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:06:51 GMT","end":"Wed, 07 May 2025 11:06:50 GMT"},"fingerprint":{"sha1":"52:7B:80:E5:BC:B7:60:1C:78:AF:8D:82:22:13:DD:AE:03:C2:9F:3E","sha256":"EF:36:16:42:52:CE:2C:47:11:2F:38:04:A6:95:BB:D1:44:47:D2:19:05:76:B4:01:A5:D5:BB:DD:43:83:B8:53"}}},"request":{"raw":"GET /s.yimg.com/~/wm/mbr/images/yahoo-apple-touch-v0.0.2.png HTTP/1.1\r\nHost: hoferpuff.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk; AS=v=1\u0026s=DvlRryMs\u0026d=A67b11443|G9XcLyD.2SoejSXjBjE5OOPlglXFBTz8.blx729acPlPHYIKiqM9v13RUzOO52YT3RPw7WBvg6o.WnlOeSGQlHO17wuNxEHp.8.j2LqjbcXmhIJR0T5rq9nJiJ.ev7l1p31CJpo9AJt.E2TDIXS4nvVIULDB8hsQoZN8WRIYODYqLrRcNgqy_TaxZveH.nvPXYQ5UG1aib.ffv0WjKmnYen8d09mxrozigNAmtAPCXZebqxIzDymUerqZhhu5Nj5J5hTOt99IhpNYVAAYo3zKD5fdntYIwYV6Uhb814kOBj4hsjoLXtYEuzUgozY8f0P0l_Gu8kNSghvKIUwDA.zVtoYjzKncruspcyMk_KW.xFQxu2WndlK.Dbx241eXLMBJ0bjpb7Kd0hKtAjAIEYE9Ph9sJDm6M2RVbHE6vCIieMXr.M9bHV_yZtb15h1FkT5mGhMEuhLgnGTKu0Mrs5AioaU_p4YW53YEDpbE05PivzV4uhkv5_Xq1t9C9dTswIBhTR1nQiQlo_tLPidhSEcrvz0Uj1tMML6wL2feeayheipOgmcatRWP2Vahr.sEn58UJ6NZ745zlXSTw34VYW90RLGsQr8mYn35WKmpun7AyqSzk9.WgG5pYUN2IU7O.RWdAixsksIsKYFBDh9LllxDk4vcn0Id0ruRy4OyyUDEiH40ldHcSeTFvWJloNSnGps5cn.l7eSThzhgQYBYK7JlDdFAhoZa9s.Q8K5jrVdNVGq_uKcAOc1L8IlBgwdrxVBsyJx9johIsI2ng87kwHviTItLHcUurHyhJoSymcLKvA5zpIOnl8OMSt79_5VDX3XPS.mQTzSLkYKXIDKf0oLxCrBbav6VqkgA4mXffoXJvO5bw8.O9YebDL2SfciyZXwYO6Vr5ArGA--~A; A1=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A3=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A1S=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: whrp2EJZ6sVngYlp/jZUa/oK+rO7M73DgP1D7OdPTInTZUDO3CZbuFmuU0Z0WvfXMgYhR0z1Rowmju0S1TCNMlF3rPdml3vY\r\nx-amz-request-id: VZK5098DZP0QR6SN\r\nDate: Mon, 03 Feb 2025 16:23:01 GMT\r\nLast-Modified: Thu, 12 Sep 2019 21:58:38 GMT\r\nETag: \"a9d2dde886cd61f73365a84878c78475\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=315360000\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 12635\r\nServer: ATS\r\nReferrer-Policy: no-referrer-when-downgrade\r\nVary: Origin\r\nAge: 972133\r\nATS-Carp-Promotion: 1, 1\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000\r\nSet-Cookie: qPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:13 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:13 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:13 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:13 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12635,"size_decoded":12635,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, interlaced","md5":"a9d2dde886cd61f73365a84878c78475","sha1":"6f1f1f7414116c4b01f04ee0a07b41202c2da539","sha256":"b168c836ccef9cf1cbf7b2440bc11d26667c4ae19613f1e7cf5e6cdc303c7de4","sha512":"feeac0c6b9877239594989198b9b842ae7200646f04a733d93c25d4ec29ef17784621a47ac8c1042a0ed91f01cf9243c5021e6f00e2edb0207cf3e3bbf4805be","ssdeep":"384:YMvofvirDwawizKrN5Vlh2EAgj3I+JK080CgF:jvo3i4a7svygj3I+tT","tlshash":"b542c0ed4b8aad24f8705c438bfc62ac5b8485c2e0e44f1c73d1a39421ca6edf419a9c","first_seen":"2023-04-29T20:40:21Z","last_seen":"2026-05-16T17:34:00.775258Z","times_seen":3151,"resource_available":false,"data":null}},"time_used":2007,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1887,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"hoferpuff.store/logads?adType=gam\u0026delay=timeout\u0026spid=794200018","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:16.812Z","timestamp":1739571916812,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoferpuff.store","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:06:51 GMT","end":"Wed, 07 May 2025 11:06:50 GMT"},"fingerprint":{"sha1":"52:7B:80:E5:BC:B7:60:1C:78:AF:8D:82:22:13:DD:AE:03:C2:9F:3E","sha256":"EF:36:16:42:52:CE:2C:47:11:2F:38:04:A6:95:BB:D1:44:47:D2:19:05:76:B4:01:A5:D5:BB:DD:43:83:B8:53"}}},"request":{"raw":"GET /logads?adType=gam\u0026delay=timeout\u0026spid=794200018 HTTP/1.1\r\nHost: hoferpuff.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk; AS=v=1\u0026s=DvlRryMs\u0026d=A67b11443|G9XcLyD.2SoejSXjBjE5OOPlglXFBTz8.blx729acPlPHYIKiqM9v13RUzOO52YT3RPw7WBvg6o.WnlOeSGQlHO17wuNxEHp.8.j2LqjbcXmhIJR0T5rq9nJiJ.ev7l1p31CJpo9AJt.E2TDIXS4nvVIULDB8hsQoZN8WRIYODYqLrRcNgqy_TaxZveH.nvPXYQ5UG1aib.ffv0WjKmnYen8d09mxrozigNAmtAPCXZebqxIzDymUerqZhhu5Nj5J5hTOt99IhpNYVAAYo3zKD5fdntYIwYV6Uhb814kOBj4hsjoLXtYEuzUgozY8f0P0l_Gu8kNSghvKIUwDA.zVtoYjzKncruspcyMk_KW.xFQxu2WndlK.Dbx241eXLMBJ0bjpb7Kd0hKtAjAIEYE9Ph9sJDm6M2RVbHE6vCIieMXr.M9bHV_yZtb15h1FkT5mGhMEuhLgnGTKu0Mrs5AioaU_p4YW53YEDpbE05PivzV4uhkv5_Xq1t9C9dTswIBhTR1nQiQlo_tLPidhSEcrvz0Uj1tMML6wL2feeayheipOgmcatRWP2Vahr.sEn58UJ6NZ745zlXSTw34VYW90RLGsQr8mYn35WKmpun7AyqSzk9.WgG5pYUN2IU7O.RWdAixsksIsKYFBDh9LllxDk4vcn0Id0ruRy4OyyUDEiH40ldHcSeTFvWJloNSnGps5cn.l7eSThzhgQYBYK7JlDdFAhoZa9s.Q8K5jrVdNVGq_uKcAOc1L8IlBgwdrxVBsyJx9johIsI2ng87kwHviTItLHcUurHyhJoSymcLKvA5zpIOnl8OMSt79_5VDX3XPS.mQTzSLkYKXIDKf0oLxCrBbav6VqkgA4mXffoXJvO5bw8.O9YebDL2SfciyZXwYO6Vr5ArGA--~A; A1=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A3=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A1S=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nReferrer-Policy: no-referrer-when-downgrade\r\nStrict-Transport-Security: max-age=15552000\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nContent-Type: text/html; charset=utf-8\r\ncontent-length: 2\r\nVary: Accept-Encoding\r\nDate: Fri, 14 Feb 2025 22:25:18 GMT\r\nAge: 0\r\nConnection: close\r\nServer: ATS\r\nExpect-CT: max-age=31536000, report-uri=\"http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only\"\r\nContent-Security-Policy: default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-16T23:07:42.733676Z","times_seen":412646,"resource_available":true,"data":null}},"time_used":3121,"timings":{"blocked":607,"dns":13,"connect":293,"send":0,"wait":1905,"receive":1,"ssl":298},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"http","addr":"services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Camazondotcom%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org\u0026lang=en-US","fqdn":"services.addons.mozilla.org","domain":"mozilla.org","tld":"org"},"ip":{"addr":"151.101.65.91","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-14T22:25:20.689644282Z","timestamp":1739571920689,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Camazondotcom%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org\u0026lang=en-US HTTP/1.1\r\nHost: services.addons.mozilla.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ncontent-type: application/json\r\nallow: GET, HEAD, OPTIONS\r\nx-amo-request-id: eb5606ffe9b3407b90b3830eb629b2b2\r\netag: \"4f822d39c269d2c47e3174b6c6bad3b7\"\r\ncontent-security-policy: object-src 'none'; form-action 'self'; style-src 'unsafe-inline' https://addons.mozilla.org/static-server/; frame-src https://www.recaptcha.net/recaptcha/; default-src 'none'; child-src https://www.recaptcha.net/recaptcha/; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; img-src 'self' blob: data: https://addons.mozilla.org/static-server/ https://addons.mozilla.org/user-media/ https://*.google-analytics.com https://*.googletagmanager.com; font-src 'self' https://addons.mozilla.org/static-server/; media-src https://videos.cdn.mozilla.net; script-src https://*.google-analytics.com https://*.googletagmanager.com https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://addons.mozilla.org/static-server/; report-uri /__cspreport__, default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; object-src 'none'; report-uri /__cspreport__\r\nx-frame-options: DENY, deny\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncache-control: max-age=3600\r\nx-xss-protection: 0\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 14 Feb 2025 22:25:20 GMT\r\nage: 544\r\nx-served-by: cache-bfi-krnt7300109-BFI, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 15, 2\r\nx-timer: S1739571921.675987,VS0,VE0\r\nvary: origin, X-Country-Code, Accept-Language, Accept-Encoding\r\ncontent-length: 68\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68,"size_decoded":82,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"4f822d39c269d2c47e3174b6c6bad3b7","sha1":"d56bd07959c766e9c18faa9cf1070548f9236b65","sha256":"cda00e555c758b1c13b6cbd17049ca8471057d16c60f08f551dbc331308eecf3","sha512":"e2bcb5794ca80a0b627a6e4ab51ab2dcf48a1bcd9a44a3c1c7b74c58b37bb8c2bce53af789939a57bb803459dcee8de4a7dfe8e2e8a632ee63c208f8a16136d0","ssdeep":"","tlshash":"8ca002726a348e6cbb43182bf44b79278e9cf0173a140f35cae40eb856e847716c7989","first_seen":"2023-04-05T15:38:55Z","last_seen":"2025-03-02T06:02:18.838061Z","times_seen":29236,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.41%2Clibpulse%20not-available)/default/default/update.xml","fqdn":"aus5.mozilla.org","domain":"mozilla.org","tld":"org"},"ip":{"addr":"35.244.181.201","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-14T22:25:20.85587364Z","timestamp":1739571920855,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.41%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1\r\nHost: aus5.mozilla.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nCache-Control: no-cache\r\nPragma: no-cache\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-length: 42\r\nrule-id: unknown\r\nrule-data-version: unknown\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; frame-ancestors 'none'\r\nx-proxy-cache-status: EXPIRED\r\nvia: 1.1 google\r\ndate: Fri, 14 Feb 2025 22:25:05 GMT\r\ncontent-type: text/xml; charset=utf-8\r\nage: 15\r\ncache-control: public,max-age=90\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":42,"mime_type":"text/xml; charset=utf-8","magic":"XML 1.0 document, ASCII text","md5":"f8f24fa0c857d8f2ee493e131b85ab62","sha1":"cb6049f830a54d14a19d4104fc0bb5ab5fdedbe6","sha256":"e0dadbc9cd1f1bd8ce3118cc3383e0d0f6d147f055265d498d99deea956ba00f","sha512":"e95a47c6be09efad9a8f081216a3e23eac6e33af95f84e8ef996f0af183601b960c3a3c35a7b2e51f64ec495f6a4bbfab8de639ef5aec495c41e7e53da209300","ssdeep":"","tlshash":"929004cc5304d531043505c0070540013370c1070c54000c744f4dc4134dc740f1c17d","first_seen":"2023-04-05T15:14:37Z","last_seen":"2025-09-24T12:13:00.801697Z","times_seen":27513,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/s.yimg.com/~/wm/mbr/4d7e1df106276f14e7f9c7f68448e92dfc08911c/bundle.js","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:08.121Z","timestamp":1739571908121,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoferpuff.store","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:06:51 GMT","end":"Wed, 07 May 2025 11:06:50 GMT"},"fingerprint":{"sha1":"52:7B:80:E5:BC:B7:60:1C:78:AF:8D:82:22:13:DD:AE:03:C2:9F:3E","sha256":"EF:36:16:42:52:CE:2C:47:11:2F:38:04:A6:95:BB:D1:44:47:D2:19:05:76:B4:01:A5:D5:BB:DD:43:83:B8:53"}}},"request":{"raw":"GET /s.yimg.com/~/wm/mbr/4d7e1df106276f14e7f9c7f68448e92dfc08911c/bundle.js HTTP/1.1\r\nHost: hoferpuff.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk; AS=v=1\u0026s=DvlRryMs\u0026d=A67b11443|G9XcLyD.2SoejSXjBjE5OOPlglXFBTz8.blx729acPlPHYIKiqM9v13RUzOO52YT3RPw7WBvg6o.WnlOeSGQlHO17wuNxEHp.8.j2LqjbcXmhIJR0T5rq9nJiJ.ev7l1p31CJpo9AJt.E2TDIXS4nvVIULDB8hsQoZN8WRIYODYqLrRcNgqy_TaxZveH.nvPXYQ5UG1aib.ffv0WjKmnYen8d09mxrozigNAmtAPCXZebqxIzDymUerqZhhu5Nj5J5hTOt99IhpNYVAAYo3zKD5fdntYIwYV6Uhb814kOBj4hsjoLXtYEuzUgozY8f0P0l_Gu8kNSghvKIUwDA.zVtoYjzKncruspcyMk_KW.xFQxu2WndlK.Dbx241eXLMBJ0bjpb7Kd0hKtAjAIEYE9Ph9sJDm6M2RVbHE6vCIieMXr.M9bHV_yZtb15h1FkT5mGhMEuhLgnGTKu0Mrs5AioaU_p4YW53YEDpbE05PivzV4uhkv5_Xq1t9C9dTswIBhTR1nQiQlo_tLPidhSEcrvz0Uj1tMML6wL2feeayheipOgmcatRWP2Vahr.sEn58UJ6NZ745zlXSTw34VYW90RLGsQr8mYn35WKmpun7AyqSzk9.WgG5pYUN2IU7O.RWdAixsksIsKYFBDh9LllxDk4vcn0Id0ruRy4OyyUDEiH40ldHcSeTFvWJloNSnGps5cn.l7eSThzhgQYBYK7JlDdFAhoZa9s.Q8K5jrVdNVGq_uKcAOc1L8IlBgwdrxVBsyJx9johIsI2ng87kwHviTItLHcUurHyhJoSymcLKvA5zpIOnl8OMSt79_5VDX3XPS.mQTzSLkYKXIDKf0oLxCrBbav6VqkgA4mXffoXJvO5bw8.O9YebDL2SfciyZXwYO6Vr5ArGA--~A; A1=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A3=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A1S=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: A7X26130JozA0qgoHTQWYfFTmZTmtu8SjVXbr7xYpqO915A6AP3LlAbt4Hw0nel4B1ICOVzOFXQ=\r\nx-amz-request-id: 8V2BF5PV0PGH4J5K\r\nDate: Fri, 14 Feb 2025 10:32:46 GMT\r\nLast-Modified: Fri, 14 Feb 2025 05:56:58 GMT\r\nETag: \"26098cb82fc3da410c1b309598d2e3f3-df\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=31536000\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nServer: ATS\r\nReferrer-Policy: no-referrer-when-downgrade\r\nVary: Origin, Accept-Encoding\r\nAge: 42745\r\nATS-Carp-Promotion: 1, 1\r\nContent-Encoding: gzip\r\ncontent-length: 193070\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000\r\nSet-Cookie: qPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:10 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:10 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:10 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:10 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\r\nContent-Security-Policy: default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":193070,"size_decoded":193070,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T23:15:02.360454Z","times_seen":15302914,"resource_available":true,"data":null}},"time_used":4109,"timings":{"blocked":577,"dns":1,"connect":293,"send":0,"wait":2640,"receive":294,"ssl":300},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"gpt.mail.yahoo.net/sandbox?client=login\u0026version=0.1\u0026limited=0\u0026headerBidder=1\u0026haq=1\u0026benji=1","fqdn":"gpt.mail.yahoo.net","domain":"yahoo.net","tld":"net"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:11.813Z","timestamp":1739571911813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jp.techcrunch.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Wed, 12 Feb 2025 00:00:00 GMT","end":"Wed, 14 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"26:17:AC:16:A4:3D:4C:70:0F:F1:00:30:94:7F:A3:EF:6B:7F:8F:0C","sha256":"D5:76:41:FC:73:03:C8:DE:3C:0F:51:E0:CF:9B:53:AB:49:B8:6B:90:45:A9:BC:31:8F:0B:B6:E7:DF:80:64:48"}}},"request":{"raw":"GET /sandbox?client=login\u0026version=0.1\u0026limited=0\u0026headerBidder=1\u0026haq=1\u0026benji=1 HTTP/1.1\r\nHost: gpt.mail.yahoo.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nexpect-ct: max-age=31536000, report-uri=\"http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-omg-env: norrin-green--gam-production-ir2-fb54cb58f-bqdkz\r\ncontent-type: text/html; charset=utf-8\r\ncontent-security-policy: base-uri 'none'; connect-src https:; script-src 'nonce-q60+bzUjTxe/Hntqe1bpvw==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:; sandbox allow-forms allow-popups allow-popups-to-escape-sandbox allow-same-origin allow-scripts; block-all-mixed-content; frame-ancestors https://mail.yahoo.com https://*.mail.yahoo.com https://mail.aol.com https://*.mail.aol.com https://login.yahoo.com https://*.login.yahoo.com https://login.aol.com https://*.login.aol.com https://devbox.login.aol.com:8080 https://devbox.login.yahoo.com:8080; report-uri https://csp.yahoo.com/beacon/csp?src=mail-gam\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 14 Feb 2025 22:25:11 GMT\r\nx-envoy-upstream-service-time: 1\r\nserver: ATS\r\nage: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T23:15:02.360454Z","times_seen":15302914,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":88,"dns":13,"connect":31,"send":0,"wait":116,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/s.yimg.com/~/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:12.371Z","timestamp":1739571912371,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoferpuff.store","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:06:51 GMT","end":"Wed, 07 May 2025 11:06:50 GMT"},"fingerprint":{"sha1":"52:7B:80:E5:BC:B7:60:1C:78:AF:8D:82:22:13:DD:AE:03:C2:9F:3E","sha256":"EF:36:16:42:52:CE:2C:47:11:2F:38:04:A6:95:BB:D1:44:47:D2:19:05:76:B4:01:A5:D5:BB:DD:43:83:B8:53"}}},"request":{"raw":"GET /s.yimg.com/~/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico HTTP/1.1\r\nHost: hoferpuff.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk; AS=v=1\u0026s=DvlRryMs\u0026d=A67b11443|G9XcLyD.2SoejSXjBjE5OOPlglXFBTz8.blx729acPlPHYIKiqM9v13RUzOO52YT3RPw7WBvg6o.WnlOeSGQlHO17wuNxEHp.8.j2LqjbcXmhIJR0T5rq9nJiJ.ev7l1p31CJpo9AJt.E2TDIXS4nvVIULDB8hsQoZN8WRIYODYqLrRcNgqy_TaxZveH.nvPXYQ5UG1aib.ffv0WjKmnYen8d09mxrozigNAmtAPCXZebqxIzDymUerqZhhu5Nj5J5hTOt99IhpNYVAAYo3zKD5fdntYIwYV6Uhb814kOBj4hsjoLXtYEuzUgozY8f0P0l_Gu8kNSghvKIUwDA.zVtoYjzKncruspcyMk_KW.xFQxu2WndlK.Dbx241eXLMBJ0bjpb7Kd0hKtAjAIEYE9Ph9sJDm6M2RVbHE6vCIieMXr.M9bHV_yZtb15h1FkT5mGhMEuhLgnGTKu0Mrs5AioaU_p4YW53YEDpbE05PivzV4uhkv5_Xq1t9C9dTswIBhTR1nQiQlo_tLPidhSEcrvz0Uj1tMML6wL2feeayheipOgmcatRWP2Vahr.sEn58UJ6NZ745zlXSTw34VYW90RLGsQr8mYn35WKmpun7AyqSzk9.WgG5pYUN2IU7O.RWdAixsksIsKYFBDh9LllxDk4vcn0Id0ruRy4OyyUDEiH40ldHcSeTFvWJloNSnGps5cn.l7eSThzhgQYBYK7JlDdFAhoZa9s.Q8K5jrVdNVGq_uKcAOc1L8IlBgwdrxVBsyJx9johIsI2ng87kwHviTItLHcUurHyhJoSymcLKvA5zpIOnl8OMSt79_5VDX3XPS.mQTzSLkYKXIDKf0oLxCrBbav6VqkgA4mXffoXJvO5bw8.O9YebDL2SfciyZXwYO6Vr5ArGA--~A; A1=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A3=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A1S=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: voLJwFrUI5hKQlNU/1lvLVJoZffizWCDUirl+LeebMZgjQ5VkAOLbpVU0XXnXXsshfytmBqhJO4=\r\nx-amz-request-id: N5VBV9KHVCJZM1G4\r\nDate: Thu, 13 Feb 2025 15:50:51 GMT\r\nLast-Modified: Wed, 11 Sep 2019 18:01:04 GMT\r\nETag: \"b6814ae5582d7953821acbd76e977bb4\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: public,max-age=315360000\r\nAccept-Ranges: bytes\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 1406\r\nServer: ATS\r\nReferrer-Policy: no-referrer-when-downgrade\r\nVary: Origin\r\nAge: 110063\r\nATS-Carp-Promotion: 1, 1\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000\r\nSet-Cookie: qPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:13 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:13 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:13 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:13 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1406,"size_decoded":1406,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"b6814ae5582d7953821acbd76e977bb4","sha1":"75a33fc706c2c6ba233e76c17337e466949f403c","sha256":"4a491acd00880c407a2b749619003716c87e9c25ac344e5934c13e8f9aa0e8b3","sha512":"958268f22e72875b97c42d8927e6a1d6168c94fe2184de906029688a9d63038301df2e3de57e571a3d0ecc7ad41178401823e5c54576936d37c84c7a3ed8ef6b","ssdeep":"","tlshash":"a12128007064454fe1cd32f40f3b53e883c9d188d5b1b6cd8350f402df881392701041","first_seen":"2023-04-12T08:46:05Z","last_seen":"2026-05-16T21:02:26.962892Z","times_seen":9459,"resource_available":false,"data":null}},"time_used":1904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1902,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=91207893c8c056b7\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/","date":"2025-02-14T22:24:54.458Z","timestamp":1739571894458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 16:48:17 GMT","end":"Tue, 01 Apr 2025 17:48:13 GMT"},"fingerprint":{"sha1":"EF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D","sha256":"D1:4D:4E:31:A8:EC:1A:A5:4D:63:98:22:CE:29:88:08:86:71:4D:04:14:4E:6A:FD:D2:F1:59:E5:E7:31:84:D1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=91207893c8c056b7\u0026lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 22:24:54 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 91207894595b56b7-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":121209,"size_decoded":121209,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"39f7ffe1f1d1445859c6d17fac2e573d","sha1":"65007d6914cf2ec2d87c911e902280359b806a2f","sha256":"8d5ec686991f5b9b4fa597509d1b7df34271d4c579133685c1572bf2ac5186e4","sha512":"d1774da76300f1567216de065272c51530c24c234201cc0085ec65fbf2818d056170169d56966cc499ec9006f43dbfac3d4abc2d5a298da80ab56e1c20266338","ssdeep":"1536:vc7LCh/vd5TtdfND6Zd3PTEQXRiqkcHlW9ftrE27f8XyG8g2JD4VzLvfoshJE:vcn2vdz6Zd/7iqknp7YyG8gJwj","tlshash":"ecc3e8c839c674bb43326678206b750671af6cc4742c0c5deb10e8e57af9358616bebb","first_seen":"2025-02-14T22:25:29.805786Z","last_seen":"2025-02-14T22:25:29.805786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/91207893c8c056b7/1739571894759/2l4k7kgIQ5HTbP-","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/","date":"2025-02-14T22:24:57.238Z","timestamp":1739571897238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jan 2025 16:48:17 GMT","end":"Tue, 01 Apr 2025 17:48:13 GMT"},"fingerprint":{"sha1":"EF:AE:47:10:51:72:52:24:8B:84:F7:18:BC:91:3D:8F:CC:64:29:8D","sha256":"D1:4D:4E:31:A8:EC:1A:A5:4D:63:98:22:CE:29:88:08:86:71:4D:04:14:4E:6A:FD:D2:F1:59:E5:E7:31:84:D1"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/91207893c8c056b7/1739571894759/2l4k7kgIQ5HTbP- HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/l3gfh/0x4AAAAAAA6wdFvUTaswKqxt/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 14 Feb 2025 22:24:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 61\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 912078a5bd2c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61,"size_decoded":61,"mime_type":"image/png","magic":"PNG image data, 66 x 17, 8-bit/color RGB, non-interlaced","md5":"b05300b0264e56d9722db712cc3e9b8e","sha1":"641bc625f7f034516f84b762be9d07abe8a7326f","sha256":"d084a37f2a30359e5910f5e5b280d0df5d47b19613dcf31dc369051e6af15f0c","sha512":"c57146aa740d03e711e55ad35137d227ad1582a5598f521889f36f985f7a618ce61d26093e8717a6f396c6ebe606487ca3c9a503c5640632f685c9a916e03c96","ssdeep":"","tlshash":"a8a002d77790ac3ac946023756692165ec321515071102158c05d9293b173ad84c4a86","first_seen":"2023-10-05T15:41:50Z","last_seen":"2025-05-10T13:04:44.21292Z","times_seen":67,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hoferpuff.store/s.yimg.com/~/ss/rapid-3.53.39.js","fqdn":"hoferpuff.store","domain":"hoferpuff.store","tld":"store"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:08.119Z","timestamp":1739571908119,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hoferpuff.store","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:06:51 GMT","end":"Wed, 07 May 2025 11:06:50 GMT"},"fingerprint":{"sha1":"52:7B:80:E5:BC:B7:60:1C:78:AF:8D:82:22:13:DD:AE:03:C2:9F:3E","sha256":"EF:36:16:42:52:CE:2C:47:11:2F:38:04:A6:95:BB:D1:44:47:D2:19:05:76:B4:01:A5:D5:BB:DD:43:83:B8:53"}}},"request":{"raw":"GET /s.yimg.com/~/ss/rapid-3.53.39.js HTTP/1.1\r\nHost: hoferpuff.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk; AS=v=1\u0026s=DvlRryMs\u0026d=A67b11443|G9XcLyD.2SoejSXjBjE5OOPlglXFBTz8.blx729acPlPHYIKiqM9v13RUzOO52YT3RPw7WBvg6o.WnlOeSGQlHO17wuNxEHp.8.j2LqjbcXmhIJR0T5rq9nJiJ.ev7l1p31CJpo9AJt.E2TDIXS4nvVIULDB8hsQoZN8WRIYODYqLrRcNgqy_TaxZveH.nvPXYQ5UG1aib.ffv0WjKmnYen8d09mxrozigNAmtAPCXZebqxIzDymUerqZhhu5Nj5J5hTOt99IhpNYVAAYo3zKD5fdntYIwYV6Uhb814kOBj4hsjoLXtYEuzUgozY8f0P0l_Gu8kNSghvKIUwDA.zVtoYjzKncruspcyMk_KW.xFQxu2WndlK.Dbx241eXLMBJ0bjpb7Kd0hKtAjAIEYE9Ph9sJDm6M2RVbHE6vCIieMXr.M9bHV_yZtb15h1FkT5mGhMEuhLgnGTKu0Mrs5AioaU_p4YW53YEDpbE05PivzV4uhkv5_Xq1t9C9dTswIBhTR1nQiQlo_tLPidhSEcrvz0Uj1tMML6wL2feeayheipOgmcatRWP2Vahr.sEn58UJ6NZ745zlXSTw34VYW90RLGsQr8mYn35WKmpun7AyqSzk9.WgG5pYUN2IU7O.RWdAixsksIsKYFBDh9LllxDk4vcn0Id0ruRy4OyyUDEiH40ldHcSeTFvWJloNSnGps5cn.l7eSThzhgQYBYK7JlDdFAhoZa9s.Q8K5jrVdNVGq_uKcAOc1L8IlBgwdrxVBsyJx9johIsI2ng87kwHviTItLHcUurHyhJoSymcLKvA5zpIOnl8OMSt79_5VDX3XPS.mQTzSLkYKXIDKf0oLxCrBbav6VqkgA4mXffoXJvO5bw8.O9YebDL2SfciyZXwYO6Vr5ArGA--~A; A1=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A3=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY; A1S=d=AQABBMPCr2cCEGO_B9H0fEe1kHO0jx66mZEFEgEBAQEUsWe5Z9w00iMA_eMAAA\u0026S=AQAAAqKYLNoipbuWHO-tIXayROY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1I2F8m8bITrCNqOvpAwuYtPy9WOa53VtXSxFhsbWiV13hfN9TL7JtuIRzVXIrEKoyPGJky3dVDE=\r\nx-amz-request-id: WSM6HGM2DCV1V2BJ\r\nDate: Wed, 12 Feb 2025 04:07:56 GMT\r\nLast-Modified: Thu, 20 Oct 2022 22:18:00 GMT\r\nETag: \"3ad90205296656e070371a83d5201160-df\"\r\nx-amz-server-side-encryption: AES256\r\nCache-Control: max-age=31536000, immutable\r\nx-amz-version-id: qQB6rmWhCi0nbuLvxW7W.stvcSOa1X3q\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nServer: ATS\r\nReferrer-Policy: no-referrer-when-downgrade\r\nVary: Origin, Accept-Encoding\r\nAge: 238635\r\nATS-Carp-Promotion: 1, 1\r\nContent-Encoding: gzip\r\ncontent-length: 51141\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000\r\nSet-Cookie: qPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:10 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM=DELETE; Expires=Fri, 14 Feb 2025 22:15:10 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:10 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\nqPdM.sig=DELETE; Expires=Fri, 14 Feb 2025 22:15:10 GMT; Max-Age=0; Domain=hoferpuff.store; Path=; Secure; HttpOnly\r\nContent-Security-Policy: default-src *  data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51141,"size_decoded":51141,"mime_type":"application/javascript","magic":"data","md5":"3ad90205296656e070371a83d5201160","sha1":"2a9abd973c356f4dfdc318ba3b7b1b45d304f0d6","sha256":"322863efdb222250f660a04127f8ac343cc74ded9ee6dea49e88605c80f46ee1","sha512":"4846d786a517eb1e91eae0c4f824516c3c9cdd9fc4f9f8ac9a932cd830db48a7e125f10c2580081a2ce2241b0de5907c92421889fefa753f475ef377e4dd018c","ssdeep":"768:DC6LVVI4DFtXHdj9b1pbNUoLrsQInWw4IpdIp9FL92ed8HysJm9Sf2TDN:Ph+4bHd5b7qoLwLh4Ip2p2Q8HyWmF","tlshash":"f53318e871d1707242eb2475613f620a72371a622c4e5840f66cedd46878edf6337ead","first_seen":"2023-10-28T14:39:56Z","last_seen":"2026-03-15T14:44:07.809691Z","times_seen":508,"resource_available":true,"data":null}},"time_used":3732,"timings":{"blocked":586,"dns":1,"connect":296,"send":0,"wait":2249,"receive":293,"ssl":303},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"consent.cmp.oath.com/cmp.js","fqdn":"consent.cmp.oath.com","domain":"oath.com","tld":"com"},"ip":{"addr":"143.204.55.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hoferpuff.store/?qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:25:08.122Z","timestamp":1739571908122,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"consent.cmp.oath.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert SHA2 High Assurance Server CA","organization":"DigiCert Inc"},"validity":{"start":"Wed, 12 Feb 2025 00:00:00 GMT","end":"Wed, 14 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"A9:78:D9:9D:91:87:F0:6A:C9:E7:51:8A:2A:24:BF:8A:D4:59:0B:0E","sha256":"93:92:C2:74:65:7F:7F:CA:31:5D:12:78:5B:4D:13:3D:AD:D9:9A:AD:18:1F:DC:98:0A:13:93:FD:B7:A6:83:76"}}},"request":{"raw":"GET /cmp.js HTTP/1.1\r\nHost: consent.cmp.oath.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hoferpuff.store/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 Nov 2024 18:50:18 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 15 Nov 2029 00:00:00 GMT\", rule-id=\"webapp-standard-lifecycle\"\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Fri, 14 Feb 2025 22:16:33 GMT\r\netag: W/\"286fbb8385e48697dc5f956d4825ed84\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: 3SNV-sQO_XyvxZGuaNwh8I3KSMotNeLxCWHAP-oSF-CVN2lJKWDvuA==\r\nage: 527\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":262888,"size_decoded":262888,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65484)","md5":"286fbb8385e48697dc5f956d4825ed84","sha1":"65029ee73290cc73a6d28ab509e8f15e9c0c8540","sha256":"6f9418768f10357fdf2acb67e82fa2c5312aa8d7f4e2825feb0070a15ee59c23","sha512":"646edbddf9baac718bc2d07faf347522c253f36eb5c318ca7b351005f76434d4562673fd3a0aad32f3404af8908477ecd3289b0ae4fe9eaa3998f24eaf8de902","ssdeep":"3072:RWmz6sWYV/JnX+7n8PrCReoMrlDO5LDdNN4BQExyJIdIsC:RWsWYV8nkrlMSi","tlshash":"2544d84932a0f4e543db95f2042b0406e7bd7264682ca0f8fbb599d35454bcba2f6fb4","first_seen":"2024-11-18T12:42:07.637345Z","last_seen":"2026-03-13T11:20:38.287772Z","times_seen":2770,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":35,"dns":37,"connect":1,"send":0,"wait":5,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"liquiddepth.site/favicon.ico","fqdn":"liquiddepth.site","domain":"liquiddepth.site","tld":"site"},"ip":{"addr":"108.165.64.23","port":443,"asn":834,"as":"IPXO","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://liquiddepth.site/?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net","date":"2025-02-14T22:24:54.348Z","timestamp":1739571894348,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"liquiddepth.site","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Feb 2025 11:05:32 GMT","end":"Wed, 07 May 2025 11:05:31 GMT"},"fingerprint":{"sha1":"3A:DB:B8:23:B3:D7:99:DE:AB:CD:A2:4A:56:61:60:74:11:A4:BF:09","sha256":"4F:19:EC:BF:71:BF:C6:5A:93:3D:E8:65:E8:F1:E2:72:08:D4:A3:FA:14:92:AC:9E:85:9F:FB:C1:98:14:E7:2A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: liquiddepth.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://liquiddepth.site/?ljrayemt=503b94477aab6b8a03e117349eca0c914bb5fcb2b257fda4c0155c45f257153b4dc12e98ddf5a877772089c137c8608e9154f425811acc2242a84d9b9e672d78\u0026qrc=christianhulme%40slurpmail.net\r\nCookie: qPdM=VS8HOw8FT2W2; qPdM.sig=5TTCuEadjP7RV5NJ_-8rfaW27Lk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 500 Internal Server Error\r\nDate: Fri, 14 Feb 2025 22:24:54 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\nTransfer-Encoding: chunked\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":null,"data":{"size":22,"size_decoded":22,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"6aab5444a217195068e4b25509bc0c50","sha1":"7b22eaf7eaa9b7e1f664a0632d3894d406fe7933","sha256":"fc5525d427bfa27792d3a87411be241c047d07f07c18e2fc36bf00b1c2e33d07","sha512":"aa5f66638b142b5e6d1d008f2934530c7aad2f7f19128ca24609825d0dacffd25a77591bfd7fb1d225be2fa77cabce837e0741326c1ac622c244d51e6fafb303","ssdeep":"","tlshash":"5570002ab80c080088830c0b0a323000a0000820020803c00882f0082202a000008200","first_seen":"2023-04-06T07:57:20Z","last_seen":"2026-05-16T12:34:47.199505Z","times_seen":14330,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}}]}