{"report_id":"45993bd4-a8b3-4ea8-a55f-7cb49bee0a63","version":0,"status":"done","tags":["fedex","logistics","phishing"],"date":"2026-09-06T13:03:34Z","url":{"schema":"http","addr":"chat.olfe.net/app","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"chat.olfe.net/app/","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"title":"FedEx Info | FedEx","dom":{"size":32323,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"14cf28a8a7910459c9b0001784b586b0","sha1":"3b9000ce4b1cf05ef24ba7c1a8f455058846b269","sha256":"1c8d7acb58b6fb1bf6c24cfe0603276398c8bfa0f846001d2073627d1b4bffd6","sha512":"a2a0a547f913716edf1b70c50e5fe52019a1bebbb64983a7454479ff81d0b76bc660022a47d1fdf9c5883d9229da6f61218defb0538a84aead19e663243b49df","ssdeep":"192:79rjC9n4kcyvidcybN7VupIu81L3mcSr+8KurLj:79rjC9iN7VJu81L3J0+8Kurn","tlshash":"b6e2dc10a8f4dcb240fb58da55629e2a9cf98703e1550289fa5d8bf60fb3d6ecb33514","dom_hash":"domhashfb9a4b4b808a4b7fa55345cb6aeaa798","first_seen":"2026-06-17T13:19:55.293543Z","last_seen":"2026-09-06T20:52:59.515346Z","times_seen":14,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chat.olfe.net/app","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-11T13:03:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]},"summary":[{"fqdn":"chat.olfe.net","ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-19","domain_rank":0,"first_seen":"2026-09-06T12:47:36.263974Z","last_seen":"2026-09-06T12:47:36.263974Z","alert_count":26,"request_count":13,"received_data":405147,"sent_data":6843,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.fedex.com","ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1991-02-26","domain_rank":8945,"first_seen":"2012-05-22T08:55:43Z","last_seen":"2026-09-02T14:56:27.736077Z","alert_count":0,"request_count":1,"received_data":5944,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"pro.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":56192,"first_seen":"2018-03-17T18:03:41Z","last_seen":"2026-09-04T14:49:48.77478Z","alert_count":0,"request_count":1,"received_data":156876,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"chat.olfe.net/app/js/respond.min.js","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78915bb8b3dd6696d3842d82ed48b104","sha1":"504cce482567765d63843d7b9d00c4195109c449","sha256":"1944a255577a8ed66ae984c6f6356281ff6f29dc84a2af6f1facf258c7dab62e","sha512":"fae71ebe045ce6a2c190b47bda2a0dd9f042c659c8225f566a31ddf1872de61048b99efcb9d9dfb02860e5304940b30c1dfcfdc00c96424f6e97374738139fcf","ssdeep":"96:fmeKAql8GALKZ2sdX0MVrpezoG3+gTYkhs7/tQMBze2EOgSUHB75h0:fnqSGTZbvVrpezoVgdSjtQMle2EOgSIc","tlshash":"a891c8a422203548e2ea3825967f4226f8739cb575584890d515e8b83da8fed10f7ff7","size":4593,"data":"","first_seen":"2023-03-07T12:03:04Z","last_seen":"2026-09-06T20:52:59.529603Z","times_seen":488,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.olfe.net/app/js/jquery-3.5.1.min.js","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-09-06T23:07:12.537093Z","times_seen":270600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.olfe.net/app/js/bootstrap.min.js","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cabc5d07dec4c381f521bbcd41c009db","sha1":"ca329d086682a4d75b5528d326a66a6d3fffab13","sha256":"2909d4fa86cf09191e768576e1a6eab7f2635a2627549c45d29595ffac9c0da9","sha512":"66f6e36c99f2b57f526b4dff01c6cffe787d2bde6d6abe11d080314d2da08760a18889de7ebd6bec4a675429694d650437b55aaef12c1f7aaebe463587474016","ssdeep":"768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn","tlshash":"ef538249b254787206df747a817b460bb73a2899a046813cb97ad8dd1f7cc893173fb8","size":62411,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-09-06T20:52:59.51977Z","times_seen":2572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.olfe.net/app/js/html5shiv.min.js","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40bd440d29b3a9371b0c63fec41ee64f","sha1":"e790c26449c57de298923c686cb3434d1d461a1d","sha256":"dc9cbf19b48bae0d28f72e59e67d6ec34ab1644087ec2e8e42954180d1586b48","sha512":"50326d2577f37ec88f3e09c8e52d74d3414f2c11cc86fcc0317d7923ea86d84d8e0330bd3f527353024e7e7ca95e2387ecc44f6aace13db0460cd363ef305fa0","ssdeep":"","tlshash":"4751a8857062714a8b2f11ab917f970ff5e452a6d8580060d0e9c87cf930df8c2bbf65","size":2730,"data":"","first_seen":"2023-03-07T12:03:04Z","last_seen":"2026-09-06T20:52:59.523187Z","times_seen":1873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chat.olfe.net/app/css/bootstrap.css","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.224Z","timestamp":1788699783224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/css/bootstrap.css HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykv7Ny6I0BCZ4zDieJY%2BvkmNWDr2mWqN5UkzVJxckVWComuCQD9ZPrbEvGBTFMCi3qxAd6lirq3gbShjPqikPF1w1Lj50OiNc%2BqEwg7fCcjJGioCZOSZObQiBs0RXFc7\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a36dabed2c3d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193015,"size_decoded":27840,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"052dfc723bbdf659b1528e37b1472301","sha1":"a06f1b5340a4dceaa9a8e044d0248ab48fcb7e17","sha256":"0c159070e198b7ed2a9162d6c9751f5914ff62803914d8512d60b1f5ffde4334","sha512":"99a22fd4a93d74eca1883c15ee63799eee662428db0371a26003d14988c9bf8300597835b38637aa2c5961e9dde3b8e67eb371609e2e68e62ddaa62bdd792a97","ssdeep":"1536:Hgwcfq/zc1+QI/Rhi4De5j9p7AC2LdQVUaryWrSPUKO5kIl8d/ALfLNLy:Hpc178d/ALfLNLy","tlshash":"10140f9dfdf118087057956864dbbbf57b7e4086d20ece7a76e23264cf493c18c62a88","first_seen":"2023-04-05T04:36:20Z","last_seen":"2026-09-06T20:52:59.528643Z","times_seen":1276,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1195,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"chat.olfe.net/app/js/respond.min.js","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.404Z","timestamp":1788699783404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/js/respond.min.js HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dt7xQvLOs6bEDV%2FaVxq97jFFerwS3cmRD0ZEw2%2BSPJyd1%2FR4SM%2BessNXn%2F21DarCqGPHGKMonKG1rqjIOFiBKBGjslCR9gikSSzaAtKbcGfD47N%2Bj9pHQ7ylnr253Gt9\"}]}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a36dabee4c8b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4593,"size_decoded":2999,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4453)","md5":"78915bb8b3dd6696d3842d82ed48b104","sha1":"504cce482567765d63843d7b9d00c4195109c449","sha256":"1944a255577a8ed66ae984c6f6356281ff6f29dc84a2af6f1facf258c7dab62e","sha512":"fae71ebe045ce6a2c190b47bda2a0dd9f042c659c8225f566a31ddf1872de61048b99efcb9d9dfb02860e5304940b30c1dfcfdc00c96424f6e97374738139fcf","ssdeep":"96:fmeKAql8GALKZ2sdX0MVrpezoG3+gTYkhs7/tQMBze2EOgSUHB75h0:fnqSGTZbvVrpezoVgdSjtQMle2EOgSIc","tlshash":"a891c8a422203548e2ea3825967f4226f8739cb575584890d515e8b83da8fed10f7ff7","first_seen":"2023-03-07T12:03:04Z","last_seen":"2026-09-06T20:52:59.529603Z","times_seen":488,"resource_available":true,"data":null}},"time_used":1221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"chat.olfe.net/app/js/jquery-3.5.1.min.js","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.408Z","timestamp":1788699783408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/js/jquery-3.5.1.min.js HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbyJ0TE%2FObIk%2BQ8hLVgPHHy7vIy5Uy2jh2CPhyom8yK7Mu8UFnwsStB2u0EM0jOoQZHFtfFbDda%2BCkFJb9IOeMLkePN4WACoaLzAC2PhOgyO8maefez2qXPbYKUFaN4f\"}]}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a36dabee5c8d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":33510,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-09-06T23:07:12.537093Z","times_seen":270600,"resource_available":true,"data":null}},"time_used":1238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1236,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"chat.olfe.net/app/image/logo.png","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.416Z","timestamp":1788699783416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/image/logo.png HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:27 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqqoLe1S6NuPEC1PVFeNUnKj1w04m3sKmCVWuMOElDBR648mxNHWpfQuau%2Bpr8MsTVQGbL9ZaH5nTtWCftH8KpzdJOXAYjmI0B6dDxtbGdS%2Bce31oSr%2FUDV0CIlxgn8c\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36dabee5c930daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3833\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3833,"size_decoded":4499,"mime_type":"image/png","magic":"PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced","md5":"1db90a4ce474d6d90842744e5003bcc5","sha1":"c2dcc1c0fce9080f1540f94bb2a0014f2cc44889","sha256":"9f8ae5767c7da740d0e60bf68fc6c1a53bccb8802abe086d46c919b3617d7d47","sha512":"a0d808ef9cf189997ae61636638f8e01247e67a9e7b4e13e3a701eda62195ffdaf69d1203bce761666e13bb5e89f83eb72ce987ea47e1e1918b1ed7b70846643","ssdeep":"","tlshash":"99814a85faa02d9ba7f9f41328d7a303ff1fd80044e5a2b25cd7e4650818af4e6588dd","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-09-06T20:52:59.524864Z","times_seen":158,"resource_available":false,"data":null}},"time_used":1226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"chat.olfe.net/app","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-06T13:03:01.588Z","timestamp":1788699781588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\ndate: Sun, 06 Sep 2026 13:03:02 GMT\r\nserver: cloudflare\r\nlocation: http://chat.olfe.net/app/\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53QcKg8g2f%2B53xaHjxufCOAwswF78hX2XB%2FpEcPi4ZAJvFwZ%2BQVsOCL53a36eSMNNHEufsd5wqhx9fbpda2FRf9o2ZDa5Fv7yEy%2FRJsN5gSDN2GNAqnCoLIXGXka1Zuy\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a36dabe319dc0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T23:14:22.793115Z","times_seen":18318957,"resource_available":true,"data":null}},"time_used":1245,"timings":{"blocked":-1,"dns":10,"connect":16,"send":0,"wait":1219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"chat.olfe.net/app/css/test.css","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.225Z","timestamp":1788699783225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/css/test.css HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7KegeE3jY%2Fi0z67ggFzfOQ2VqJ8njMneF6KzfBGdJOgV5OBV9dQrBuRQ5WfOvmVdgN6DSj8spDuWTV9IXPos16aFxYz%2FwJ98OrY72PTu64c7gHVSYg0AnkXqyug7RY%2B\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a36dabed2c3e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1730,"size_decoded":1315,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c47244d004471b285abbe628d2d16af7","sha1":"d24cbb6caa90b9a7fac4afe4d77c8078f4f502a4","sha256":"8e63d5a105a1e787341fb90033b94d3e6da431e5b16ee42bbca450d0be6f8fea","sha512":"1562740dbfd5a322a478471a516e56e96f267df60cfb61fb8f47c127129d05c0bae71cd03432b8f3cb23f21dd00048c82506891cb7d3853a36dc0ca7e23d870b","ssdeep":"","tlshash":"1131c0befa4851097236dcb8f7237e936eac84858b0203797fbd615931c6674a511f8c","first_seen":"2023-04-07T07:52:01Z","last_seen":"2026-09-06T20:52:59.522337Z","times_seen":140,"resource_available":false,"data":null}},"time_used":1305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"chat.olfe.net/app/image/media.png","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.419Z","timestamp":1788699783419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/image/media.png HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:27 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SE6YkN6JaI8zuq%2Bd1KjAtbbB%2FKki4oef9g7GgEU%2FOvvfkDtdaUnYg6uyxYtdzDIR0L646%2FmqE0btHLjcmekNq7jOfR8ZCzhJ%2BTk1CuM%2FB9njvOPYa2BvemsNrXsgQ81m\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36dabee6c960daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1566\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1566,"size_decoded":2238,"mime_type":"image/png","magic":"PNG image data, 68 x 19, 8-bit/color RGBA, non-interlaced","md5":"a41afa7db420a45ee73680b53e34d0c6","sha1":"74790de0d9a731dcabdcf95856a82e7ae7853759","sha256":"2a032fa265ae439e56a80e3d76f47ac554380de3bfc817a857924d7ea48e1626","sha512":"b6e2045d02c55cf579a92bb7a56bae12a55659f8983867fb23e32c0881bd80d2a8b2db764d2efbc224b5172337bdc826d29159ba5ea90d05763da9ea22ed0ccc","ssdeep":"","tlshash":"77310a385231a95083204ac706de3937c89bd35067dc837c7960c8945adc6928b7ce94","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-09-06T20:52:59.527196Z","times_seen":198,"resource_available":false,"data":null}},"time_used":1216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"chat.olfe.net/app/js/html5shiv.min.js","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.227Z","timestamp":1788699783227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/js/html5shiv.min.js HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXXfazWedZvZuLajlkyLRWrLqdS%2FLM%2BMPFMjh4nHICh%2FAGyQ%2BNkAPI8a3tEG4%2FJlia2AAFiBF86PoxRfilU6p%2BAxxjQO6RFf7OuuKR4wPs%2FXfxXQW80woh85rg%2BhILfq\"}]}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a36dabed2c3f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2730,"size_decoded":2062,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2639)","md5":"40bd440d29b3a9371b0c63fec41ee64f","sha1":"e790c26449c57de298923c686cb3434d1d461a1d","sha256":"dc9cbf19b48bae0d28f72e59e67d6ec34ab1644087ec2e8e42954180d1586b48","sha512":"50326d2577f37ec88f3e09c8e52d74d3414f2c11cc86fcc0317d7923ea86d84d8e0330bd3f527353024e7e7ca95e2387ecc44f6aace13db0460cd363ef305fa0","ssdeep":"","tlshash":"4751a8857062714a8b2f11ab917f970ff5e452a6d8580060d0e9c87cf930df8c2bbf65","first_seen":"2023-03-07T12:03:04Z","last_seen":"2026-09-06T20:52:59.523187Z","times_seen":1873,"resource_available":true,"data":null}},"time_used":1198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"chat.olfe.net/app/js/bootstrap.min.js","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.410Z","timestamp":1788699783410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/js/bootstrap.min.js HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wz%2B6hP6O8esezhLyuxwlq0kaCBLtbWk7afyDET599qtbyp1UOahX%2FKC6B9YLTmeNf6tZGcr%2Fdfviq8GRthg2DLQbVXP9GL86apgIg%2Fg4wgu4SvGfHsGY8nDFfLy0E1y4\"}]}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a36dabee5c910daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62411,"size_decoded":18089,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62126)","md5":"cabc5d07dec4c381f521bbcd41c009db","sha1":"ca329d086682a4d75b5528d326a66a6d3fffab13","sha256":"2909d4fa86cf09191e768576e1a6eab7f2635a2627549c45d29595ffac9c0da9","sha512":"66f6e36c99f2b57f526b4dff01c6cffe787d2bde6d6abe11d080314d2da08760a18889de7ebd6bec4a675429694d650437b55aaef12c1f7aaebe463587474016","ssdeep":"768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn","tlshash":"ef538249b254787206df747a817b460bb73a2899a046813cb97ad8dd1f7cc893173fb8","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-09-06T20:52:59.51977Z","times_seen":2572,"resource_available":true,"data":null}},"time_used":1224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.fedex.com/images/c/s1/fx-favicon.ico","fqdn":"www.fedex.com","domain":"fedex.com","tld":"com"},"ip":{"addr":"23.33.119.120","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:05.850Z","timestamp":1788699785850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.fedex.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA EV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 31 Jul 2026 00:00:00 GMT","end":"Sun, 14 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0F:77:BA:57:E8:B3:32:F4:86:C2:85:0A:44:9F:73:07:7C:04:9C:7D","sha256":"58:66:4D:83:F6:95:9B:C1:28:79:9A:9B:3E:D1:98:FD:FD:CF:53:D3:77:DE:63:70:05:B6:5A:B5:BE:86:DC:E8"}}},"request":{"raw":"GET /images/c/s1/fx-favicon.ico HTTP/1.1\r\nHost: www.fedex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: Apache\r\nlast-modified: Fri, 16 Sep 2016 14:47:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5430\r\naccess-control-allow-credentials: true\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-type: image/x-icon\r\ncache-control: max-age=16344\r\nexpires: Sun, 06 Sep 2026 17:35:33 GMT\r\ndate: Sun, 06 Sep 2026 13:03:09 GMT\r\nakamai-grn: 0.74772117.1788699789.18bc238c\r\nset-cookie: Rbt=f0; path=/\nfdx_bman=ae4dd21c017dc0fb4482067b92f3f4be; path=/; domain=.www.fedex.com; Secure\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"Rbt","value":"f0","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"Rbt=f0; path=/"},{"name":"fdx_bman","value":"ae4dd21c017dc0fb4482067b92f3f4be","quoted":false,"path":"/","domain":".www.fedex.com","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"fdx_bman=ae4dd21c017dc0fb4482067b92f3f4be; path=/; domain=.www.fedex.com; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5430,"size_decoded":5944,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"a53129769d15f251d4e5c5cb966765b4","sha1":"043d6a7b9cca5d05aba04fc0a3f4527e3ad075e0","sha256":"eab1b9a0ef942d84e3a8ed8c3e3996acb7a46af9a0b9f914ced662bcbe0e54be","sha512":"149e9ecc344fc864c4f772acdbb6e00bdfc5399301922b58f137c14ac042f1c57775213dc6335c8d9cd39b7e9ef7982acfda29f2be794a8c0923ab4e6735792c","ssdeep":"24:EDfxncjMt+eDLLA0y3AoqJkYr2NjPx+nQjBpTTOBjEV1tdSnhajWljDXjX0XXjXL:cVDD4CExYjQEag07023H","tlshash":"06b1a709a638edd0d0a12a31c842d9fe0b25ed07e87c483b5a90ff8a777311c0e2568f","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-09-06T20:52:59.532394Z","times_seen":998,"resource_available":false,"data":null}},"time_used":4054,"timings":{"blocked":3976,"dns":0,"connect":3,"send":0,"wait":57,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.olfe.net/app/","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-06T13:03:02.844Z","timestamp":1788699782844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/ HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:03 GMT\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=0d258151a0ba121f637d7441677801da; path=/\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4rlJxt8BkGMQfEn1dWw6ONRTyVHJtpTTrOnlxy04SO9KROJAqDp8sj8tTiZ53aOEYdmCbOoD9q3EzZeUzuWLeYy1QO3q8bGu%2FoHWEWVBFJk7Z7W93G6tp7jYM9rMUNA\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a36dabeacbde0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0d258151a0ba121f637d7441677801da","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0d258151a0ba121f637d7441677801da; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":32888,"size_decoded":5726,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"92bfc0a7befde04eba00934dfa36ffa9","sha1":"e640206dd150832c2ca8e8765818cd7c82f10de7","sha256":"fc7d26aa38541247da9f3c62c3741bca07c52bb063e275483be31816464e29cb","sha512":"e5e13a3bf4ec7c747e68beb82c1e5aad8e51079cb1648288c9bdba36cb2ffb5624d28e6ac0172e34ac7752bb17e56dc073c629859a68ae5189b994479d3f6dd2","ssdeep":"192:ckZ1Zlc/3pLhl1uj1EVzkLG8xHSNntdo4Itgb:c81ZH1EVcG8xHSpro4Itgb","tlshash":"24e2ca1068d4d812a0fb99d949629e2afdb98303c2554689fa9e93f70fb3d3dcb33514","first_seen":"2023-04-12T08:51:14Z","last_seen":"2026-09-06T20:52:59.524002Z","times_seen":102,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.10.0/css/all.css","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.406Z","timestamp":1788699783406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 22:43:58 GMT","end":"Tue, 10 Nov 2026 23:43:53 GMT"},"fingerprint":{"sha1":"27:66:CD:33:A1:36:78:CF:48:0E:80:96:7F:BF:D5:3D:EA:A1:BA:94","sha256":"E0:AA:C3:D8:02:C4:8B:44:BD:25:27:FC:56:D4:4C:A2:5E:A6:71:77:C7:35:20:F5:59:BB:5F:1F:70:30:2B:3B"}}},"request":{"raw":"GET /releases/v5.10.0/css/all.css HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://chat.olfe.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 13:03:09 GMT\r\ncontent-type: text/css\r\nx-amz-id-2: oSjBhgKxlRfZeTLOnVaAv12zJolZS3H7mIBbPx8Bc5EKLwdsBr0/umkrEfWJ1fpG+pnBoRlEHVVkOo7ALnpvEpcOsYiPVlhJ\r\nx-amz-request-id: W1E5XRSH758KEG47\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Mon, 28 Jun 2021 16:54:32 GMT\r\ncf-cache-status: HIT\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\nage: 153839\r\netag: W/\"aa1272633e7e552395d147a499bad186\"\r\ncontent-encoding: gzip\r\ncf-ray: a36dac164f345a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":156228,"size_decoded":30307,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"aa1272633e7e552395d147a499bad186","sha1":"ddbccb0011dd4868a013b1dcbdb836b7213eb41d","sha256":"2af905d92cfd34b5413126a54f639da408166cbbcb54318e413ad5e10b5bf6ec","sha512":"886ddfc7252269b42b0adfd5f4e47da0cd6ccb9b0b3ea18c015b1e4edb1eb1f55cf49728fdcdd151949256851c72cc555cd7f6408a5638595f26d0caf86ffbdc","ssdeep":"1536:KgvcfQ4aNi7HHQZD0bMSPCDTdV3dWGFIiboA+8Ieiy6BauXZG817fgFSkAmYdAT/:DcI4aY7QN0bjPerGuHuXkz","tlshash":"bae371b5d41d01da7726c60fab01b27a98f6f738d5810e4ae0cb4c5e1de2b9811c9bed","first_seen":"2023-04-05T22:29:58Z","last_seen":"2026-09-06T21:27:22.447186Z","times_seen":5472,"resource_available":false,"data":null}},"time_used":6406,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":13,"receive":0,"ssl":6387},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.olfe.net/app/image/logo-footer.gif","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.417Z","timestamp":1788699783417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/image/logo-footer.gif HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:27 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4j9Lfbs0ud3Btf%2FQs%2BloM4hf%2BucqW0KQHXoetDRBYF%2BQN6HB%2BZaKdVp9Y%2BTtBFVvMTEv5gScVWVxA3DhJ%2FHNqU0sOO88lJDAmRqC5UX9tSL8SHBvI56VomQifCYtCW7g\"}]}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36dabee5c940daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1120\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1120,"size_decoded":1794,"mime_type":"image/gif","magic":"GIF image data, version 89a, 74 x 20","md5":"c511f7109470ffe886d41bb3fc1e2e63","sha1":"3340c29fb154c48f8cd1505a104db3fbae8571d5","sha256":"1c192944e83b1e02fe33b614ba139866c0f81f6f37cfe00add496440b037dc3b","sha512":"94f577ff8f6d33d65fd57fab2e390c4d5982e4e1daeba2dc1f9e69d723d85a518ab209e7a586f75baabbee4771f099342cf90086f19bd6ec68d415098c0e59b0","ssdeep":"","tlshash":"7a2194fc2b31ad84efa90c32adb297e7634a307296d21947de5b42806469267003c482","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-09-06T20:52:59.526304Z","times_seen":370,"resource_available":false,"data":null}},"time_used":1216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1214,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"chat.olfe.net/app/image/search.png","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.418Z","timestamp":1788699783418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/image/search.png HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:27 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BInUF0caeulhnR5NadORjuCoWnQ8KQWxpJzoVJfK0fFosa3yQXZaoOR8QMeEJySh%2Bx1rtrVAATdD%2FyoKkPq0Odx8Tx0sf9WXpqnbzAOfeGvx%2BkkiCUrHZ0j3xvC5o7dH\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36dabee6c950daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2138,"size_decoded":2804,"mime_type":"image/png","magic":"PNG image data, 211 x 28, 8-bit/color RGBA, non-interlaced","md5":"ca6c158ea3aa13f92b975c48936b8916","sha1":"c05c8bbdc03ad576e2432d0459e66bd61b60b9b5","sha256":"c071ec308404a22b060a1266d3d836c545c88a3a8afd8e29db699acd15f1cabc","sha512":"c1ffaedea511181ff824e472615271da8050ce09a8afed7d443ae4c60f44472d3f1d83413c6fc1a1f4f3cd3f17c27e1bbd7ede22f3582ea2bcd93ca7916c007e","ssdeep":"","tlshash":"a8411ae31a0a69d47f3114260b0695f0e5f959da708d9031edfa289f67fece3180fa16","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-09-06T20:52:59.531247Z","times_seen":175,"resource_available":false,"data":null}},"time_used":1213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"chat.olfe.net/app/image/canada.png","fqdn":"chat.olfe.net","domain":"olfe.net","tld":"net"},"ip":{"addr":"104.21.24.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chat.olfe.net/app/","date":"2026-09-06T13:03:03.420Z","timestamp":1788699783420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"olfe.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 04:09:38 GMT","end":"Tue, 17 Nov 2026 05:09:16 GMT"},"fingerprint":{"sha1":"80:BA:B3:DF:12:F4:69:7F:87:D0:9D:B4:BA:B5:DC:04:2D:4E:04:8D","sha256":"18:32:50:A9:31:E0:0E:45:56:F9:5F:97:BE:AB:3E:DF:21:30:61:61:2E:A0:76:62:5A:58:17:CE:3D:E7:4D:C5"}}},"request":{"raw":"GET /app/image/canada.png HTTP/1.1\r\nHost: chat.olfe.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.olfe.net/app/\r\nCookie: PHPSESSID=0d258151a0ba121f637d7441677801da\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 13:03:04 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 04 Sep 2026 18:18:27 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QecDsQhX4U%2BfLfRScdPOOUws6eOuq6eRALZAJJbqtw5wXQxAj6K9nJi6ACT7sF7NR1hqWK44PmZU2hDacNZJLIBYNOZKh7l8nZhi8e7gZrW%2BSh%2Bxgl1S0tJ6jWKref%2Bx\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a36dabee6c970daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":964,"size_decoded":1631,"mime_type":"image/png","magic":"PNG image data, 113 x 22, 8-bit/color RGBA, non-interlaced","md5":"bc6fcddd08d68beb2a6d438c8c625cdd","sha1":"6f6582383f450453985044e760d918e4e052118d","sha256":"a1c42b7d341f59fdffdb0615859ecefc71c18b1d40830a60c562b43fe683f0a8","sha512":"06bf82b16823978b8b948a05da5446e1a5829074227c2b764124b459989d31616a914dfee6154c7af16d6402d75eeeca2484a5e83e8976d295000d53c3bceddb","ssdeep":"","tlshash":"c61194d02445fd9a96f0dae28bb4473af12f8e143a21a725210dca984d70f548428201","first_seen":"2023-04-30T20:19:19Z","last_seen":"2026-09-06T20:52:59.520626Z","times_seen":155,"resource_available":false,"data":null}},"time_used":1218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"chat.olfe.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - FedEx","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with FedEx phishing","tags":["fedex","logistics","phishing"],"meta":null}]}}]}