{"report_id":"50714f4a-b306-4b9f-abdd-6ee7a1ed1156","version":0,"status":"done","tags":["phishing","suspicious","telegram_bot"],"date":"2026-06-12T09:07:09Z","url":{"schema":"http","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.132","port":0,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"title":"View Secure Document - Sign in","dom":{"size":267323,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (62336)","md5":"7f0c77469db3e2862d07fa04d69d1d11","sha1":"68743b3d1f62bbdf674d6684267582debbeb219d","sha256":"1cc6449eb8e6149cb7ae97a8f0742b38ac9918c5aacbe534e5bf2cfd933465ff","sha512":"15a784e48090dad09ae4cc3c0a940901c876f4a879aa75ae05c54e887e81885615e2563c0174b3316ec749ee51d2e0c5c43fac29cae7deaeca62b3edf13a3b3c","ssdeep":"6144:PswajpSYt72uB8zd3nuatHiuZ1aYxs7TA7Vmseqq4g:Na1SYtRc33CMaoQTA7VmseKg","tlshash":"39449c324c23ac27099ec1d7599d6fda7fa8cecb46316223707c858c9b95af21cd614e","dom_hash":"domhasha6402d7bd14065dfa39ca878d536a749","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.132","port":0,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-17T09:07:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":4,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-12","alert":"Detects file containing Telegram Bot API","trigger":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"madeforthis.s-ed1.cloud.gcore.lu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"madeforthis.s-ed1.cloud.gcore.lu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic phishing","verdict":"phishing","severity":"medium","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]},"summary":[{"fqdn":"madeforthis.s-ed1.cloud.gcore.lu","ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-12T09:07:10.800427Z","last_seen":"2026-06-12T09:07:10.800427Z","alert_count":8,"request_count":2,"received_data":262700,"sent_data":1081,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap:4.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"BootstrapCDN:4.1.3","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-06-08T07:31:13.685477Z","alert_count":0,"request_count":2,"received_data":173104,"sent_data":954,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-07T23:49:17.429937Z","alert_count":0,"request_count":1,"received_data":87348,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2026-06-08T08:44:09.646547Z","alert_count":0,"request_count":1,"received_data":51973,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-06-11T17:37:13.569548Z","alert_count":0,"request_count":1,"received_data":78695,"sent_data":517,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"md5":"e04de6548a926375e033ff0877acc10b","sha1":"431c6e6d3a9eb0f2b29936cc3df7ef6d5896830f","sha256":"62f69ff7d2e84f0a9841f9fcddbef7ebc41a585cca05c991e33ae73acd1b4076","sha512":"7aa127ae1d20330ee0325d29bd8490ceed293768e13ea6bbcd6f9c294491cceafcf601b2ad1a37cc9d8369831422f5b1ff460dcf08ec157b85aea12018471f79","size":5224,"token":"8102484756:AAGHBoKBWFOwhSZA-O48KaRC3L0SJBgPKgI","is_revoked":false,"bot":{"token":"8102484756:AAGHBoKBWFOwhSZA-O48KaRC3L0SJBgPKgI","user_id":"8102484756","username":"bx007_bot","first_name":"result.bx","last_name":"","chat":{"chat_id":"1236418683","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic phishing","verdict":"phishing","severity":"medium","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"eventHandler","is_inline":false,"md5":"55d41bf1762ab367e34869095adc637a","sha1":"a971c369972c389b280912b9f0c0cf3732694b8d","sha256":"90cafbf1ac4ef47a2ef629011d29aae0bac2c7d96f05506c1df4f5646c417925","sha512":"71c77c6f6c8528716d50dc83abea2ed1fca8a3743f463e39807695a694a82b680806902a621ec0fd4e2479b19d3a7834ac3d62a516ec1f6544cf850beb9cba7a","ssdeep":"","tlshash":"c7200000000000000000030000000000c0000000000000000000000000030000000000","size":3,"data":"","first_seen":"2023-11-26T01:58:04Z","last_seen":"2026-07-20T08:17:49.612678Z","times_seen":5132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"21fde7e9fdab901a0e4a374f0e231142","sha1":"8c220d3fa759af4e8d0bb6e7fa064adf5339c6d7","sha256":"c2e37822ba621ba159ebc9c8e2536262c8a9305933ac8fd97e290c6baa6dcaa2","sha512":"0eb14443b184ef01afba081d5623a071149004f39d553bc0ef79ad8a099feabc8cb17f54c7d1d7e20211ddb3e3eabef475c0e27540af831419b688cc6bb8ff9f","ssdeep":"","tlshash":"e3c02b8b708e0e700c9943f2001b0754d4c1502c3c41d001875588ccc020a60d27be24","size":143,"data":"","first_seen":"2024-09-19T21:05:39.284094Z","last_seen":"2026-07-19T18:09:32.783635Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"61aa92b60446a94c55e92b5e9acf4344","sha1":"bf582133883f418d958f302893e3cd73ae7f1ac8","sha256":"259cb3fda1c6bb9b062d578d691ab3450bd86c23d1e6c3c2bafb3ea777097b2a","sha512":"186a1d220f8e055cdcc7c94a485867cd4d5a59a0fd85d267cdd256cc83824a5de0b8307fae9418466f4844d84b3212d6f3d9714f38a65834ad82057cc7fcba71","ssdeep":"","tlshash":"19c08c360e20c43a423a9106b38fa3882ce801860654d3828028d8097830e46f0ba2f3","size":153,"data":"","first_seen":"2024-09-19T21:05:39.285192Z","last_seen":"2026-07-19T18:09:32.784178Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4b99a7e076df11114cbee7e3744b310","sha1":"1ecc5510f9463557d7436db098df743bcda202c9","sha256":"4c0fbf981c65dc840e07f5f43e6894d882883b84f44999cb73a7b8cee27f74f1","sha512":"82e0c95b971c95ceae5a494b2e4beb045ec327b0d4640c9270d9621bc5a99ff1b4528815cda26d8287ce08c15d09bd00178447e81d9a9672b1ed10dc5a730754","ssdeep":"","tlshash":"c3a011bab0a2282000ab3aba202b020c383e80023a0220000a288a8828328a28022c0a","size":70,"data":"","first_seen":"2024-09-19T21:05:39.282088Z","last_seen":"2026-07-19T18:09:32.784672Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d88b197e1a665e375a0a1892d0e50d05","sha1":"ce515a27dc0cb15657de2f19816583977bf4c28d","sha256":"b9b5c445dc56bff7290313df959ce2e70d45e82b73f2cf72bc5a7032cca6024a","sha512":"cf633507a679efb6ed95da3bddde47e16c15ff439475cba1d8084b1726896449c3ed63f2455f89008e964c56adce2ca0e5fbe5141ea059a4aa26897ddccd6cb1","ssdeep":"","tlshash":"97e08cf3b2a716b10bee66ef285283487c78c8216c012050ac2c81618074f96a47aa84","size":307,"data":"","first_seen":"2024-09-19T21:05:39.280148Z","last_seen":"2026-07-10T11:21:06.478146Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1678a018b55a06d957f79e9f93aa4b1a","sha1":"48831c417393833b2137867ae71c755d9dd30be0","sha256":"cca3ee218ef7107780f3e14e27163b931310f693449884742ec482bf7d570e88","sha512":"d7f318f5d27c52defdc9fd0cbb029fcc96a7b81d97ff49544e9242c1224d97a1cd8aae371a0a323d92052cca229243ffbd50759f4fe9457ce96d5bddf03500d0","ssdeep":"","tlshash":"40d0a74828b0233482af2413d9dfa9d42dda57596022c086948e5880a954e3fd17fda2","size":235,"data":"","first_seen":"2024-09-19T21:05:39.280913Z","last_seen":"2026-07-19T18:09:32.785689Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9270ce33dba920f941b0b4c0a582a1","sha1":"9ff3f3dc4797bec64afc54482da533c687becf0a","sha256":"aea9369eac8db638d15b7316e09638839d90a37180cef0b2599d51d3933223b0","sha512":"e30334fddf18c0dc8f26007edf4dbba2f42f655e1145e34e70921ae9c5902462297c7e626e65320f46a0e3c18be65f12c7142690f708c6a4c737fddd0bed88d4","ssdeep":"","tlshash":"14e0c24c28b0223482be2013d59f96d56de657d46026c0d6c4cea89199a4d3fd57fea2","size":310,"data":"","first_seen":"2024-09-19T21:05:39.282979Z","last_seen":"2026-07-19T18:09:32.786612Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9a48f5a4b6815728ea1967e2c7ed15","sha1":"13b8268ca588edc943c25646f1c7fae1b9911fd5","sha256":"ec3d0c9f52552c13a2fee48c8c9b1305b503249ecf5546e6362912ebf504077c","sha512":"0c495c3a4f2ae3dfad3311dd578f3bad3b3809ac8ed031da26e45ed49cbd5a6207fe01238502350d06b4653ea26585584d69e8a95e47b40c6f8f294b7bf5bba8","ssdeep":"96:Htii6z8CDRE4EeG3bQVrqNegu+9r5o58Bs+Z/L:Htii6QCDRg2qwgu+Ae/L","tlshash":"6ad15356ad8f3e008b6419a522ec2cc91c9db79c6cd20ddc0a4bdb4ce59f87748e85dd","size":6623,"data":"","first_seen":"2026-06-12T01:37:54.723521Z","last_seen":"2026-06-12T09:07:17.461762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-22T04:53:00.382606Z","times_seen":292124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-22T04:53:00.382606Z","times_seen":292124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"21fde7e9fdab901a0e4a374f0e231142","sha1":"8c220d3fa759af4e8d0bb6e7fa064adf5339c6d7","sha256":"c2e37822ba621ba159ebc9c8e2536262c8a9305933ac8fd97e290c6baa6dcaa2","sha512":"0eb14443b184ef01afba081d5623a071149004f39d553bc0ef79ad8a099feabc8cb17f54c7d1d7e20211ddb3e3eabef475c0e27540af831419b688cc6bb8ff9f","ssdeep":"","tlshash":"e3c02b8b708e0e700c9943f2001b0754d4c1502c3c41d001875588ccc020a60d27be24","size":143,"data":"","first_seen":"2024-09-19T21:05:39.284094Z","last_seen":"2026-07-19T18:09:32.783635Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"61aa92b60446a94c55e92b5e9acf4344","sha1":"bf582133883f418d958f302893e3cd73ae7f1ac8","sha256":"259cb3fda1c6bb9b062d578d691ab3450bd86c23d1e6c3c2bafb3ea777097b2a","sha512":"186a1d220f8e055cdcc7c94a485867cd4d5a59a0fd85d267cdd256cc83824a5de0b8307fae9418466f4844d84b3212d6f3d9714f38a65834ad82057cc7fcba71","ssdeep":"","tlshash":"19c08c360e20c43a423a9106b38fa3882ce801860654d3828028d8097830e46f0ba2f3","size":153,"data":"","first_seen":"2024-09-19T21:05:39.285192Z","last_seen":"2026-07-19T18:09:32.784178Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4b99a7e076df11114cbee7e3744b310","sha1":"1ecc5510f9463557d7436db098df743bcda202c9","sha256":"4c0fbf981c65dc840e07f5f43e6894d882883b84f44999cb73a7b8cee27f74f1","sha512":"82e0c95b971c95ceae5a494b2e4beb045ec327b0d4640c9270d9621bc5a99ff1b4528815cda26d8287ce08c15d09bd00178447e81d9a9672b1ed10dc5a730754","ssdeep":"","tlshash":"c3a011bab0a2282000ab3aba202b020c383e80023a0220000a288a8828328a28022c0a","size":70,"data":"","first_seen":"2024-09-19T21:05:39.282088Z","last_seen":"2026-07-19T18:09:32.784672Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d88b197e1a665e375a0a1892d0e50d05","sha1":"ce515a27dc0cb15657de2f19816583977bf4c28d","sha256":"b9b5c445dc56bff7290313df959ce2e70d45e82b73f2cf72bc5a7032cca6024a","sha512":"cf633507a679efb6ed95da3bddde47e16c15ff439475cba1d8084b1726896449c3ed63f2455f89008e964c56adce2ca0e5fbe5141ea059a4aa26897ddccd6cb1","ssdeep":"","tlshash":"97e08cf3b2a716b10bee66ef285283487c78c8216c012050ac2c81618074f96a47aa84","size":307,"data":"","first_seen":"2024-09-19T21:05:39.280148Z","last_seen":"2026-07-10T11:21:06.478146Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1678a018b55a06d957f79e9f93aa4b1a","sha1":"48831c417393833b2137867ae71c755d9dd30be0","sha256":"cca3ee218ef7107780f3e14e27163b931310f693449884742ec482bf7d570e88","sha512":"d7f318f5d27c52defdc9fd0cbb029fcc96a7b81d97ff49544e9242c1224d97a1cd8aae371a0a323d92052cca229243ffbd50759f4fe9457ce96d5bddf03500d0","ssdeep":"","tlshash":"40d0a74828b0233482af2413d9dfa9d42dda57596022c086948e5880a954e3fd17fda2","size":235,"data":"","first_seen":"2024-09-19T21:05:39.280913Z","last_seen":"2026-07-19T18:09:32.785689Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9270ce33dba920f941b0b4c0a582a1","sha1":"9ff3f3dc4797bec64afc54482da533c687becf0a","sha256":"aea9369eac8db638d15b7316e09638839d90a37180cef0b2599d51d3933223b0","sha512":"e30334fddf18c0dc8f26007edf4dbba2f42f655e1145e34e70921ae9c5902462297c7e626e65320f46a0e3c18be65f12c7142690f708c6a4c737fddd0bed88d4","ssdeep":"","tlshash":"14e0c24c28b0223482be2013d59f96d56de657d46026c0d6c4cea89199a4d3fd57fea2","size":310,"data":"","first_seen":"2024-09-19T21:05:39.282979Z","last_seen":"2026-07-19T18:09:32.786612Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9a48f5a4b6815728ea1967e2c7ed15","sha1":"13b8268ca588edc943c25646f1c7fae1b9911fd5","sha256":"ec3d0c9f52552c13a2fee48c8c9b1305b503249ecf5546e6362912ebf504077c","sha512":"0c495c3a4f2ae3dfad3311dd578f3bad3b3809ac8ed031da26e45ed49cbd5a6207fe01238502350d06b4653ea26585584d69e8a95e47b40c6f8f294b7bf5bba8","ssdeep":"96:Htii6z8CDRE4EeG3bQVrqNegu+9r5o58Bs+Z/L:Htii6QCDRg2qwgu+Ae/L","tlshash":"6ad15356ad8f3e008b6419a522ec2cc91c9db79c6cd20ddc0a4bdb4ce59f87748e85dd","size":6623,"data":"","first_seen":"2026-06-12T01:37:54.723521Z","last_seen":"2026-06-12T09:07:17.461762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","size":51039,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-22T03:22:11.13987Z","times_seen":125591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"21fde7e9fdab901a0e4a374f0e231142","sha1":"8c220d3fa759af4e8d0bb6e7fa064adf5339c6d7","sha256":"c2e37822ba621ba159ebc9c8e2536262c8a9305933ac8fd97e290c6baa6dcaa2","sha512":"0eb14443b184ef01afba081d5623a071149004f39d553bc0ef79ad8a099feabc8cb17f54c7d1d7e20211ddb3e3eabef475c0e27540af831419b688cc6bb8ff9f","ssdeep":"","tlshash":"e3c02b8b708e0e700c9943f2001b0754d4c1502c3c41d001875588ccc020a60d27be24","size":143,"data":"","first_seen":"2024-09-19T21:05:39.284094Z","last_seen":"2026-07-19T18:09:32.783635Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"61aa92b60446a94c55e92b5e9acf4344","sha1":"bf582133883f418d958f302893e3cd73ae7f1ac8","sha256":"259cb3fda1c6bb9b062d578d691ab3450bd86c23d1e6c3c2bafb3ea777097b2a","sha512":"186a1d220f8e055cdcc7c94a485867cd4d5a59a0fd85d267cdd256cc83824a5de0b8307fae9418466f4844d84b3212d6f3d9714f38a65834ad82057cc7fcba71","ssdeep":"","tlshash":"19c08c360e20c43a423a9106b38fa3882ce801860654d3828028d8097830e46f0ba2f3","size":153,"data":"","first_seen":"2024-09-19T21:05:39.285192Z","last_seen":"2026-07-19T18:09:32.784178Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4b99a7e076df11114cbee7e3744b310","sha1":"1ecc5510f9463557d7436db098df743bcda202c9","sha256":"4c0fbf981c65dc840e07f5f43e6894d882883b84f44999cb73a7b8cee27f74f1","sha512":"82e0c95b971c95ceae5a494b2e4beb045ec327b0d4640c9270d9621bc5a99ff1b4528815cda26d8287ce08c15d09bd00178447e81d9a9672b1ed10dc5a730754","ssdeep":"","tlshash":"c3a011bab0a2282000ab3aba202b020c383e80023a0220000a288a8828328a28022c0a","size":70,"data":"","first_seen":"2024-09-19T21:05:39.282088Z","last_seen":"2026-07-19T18:09:32.784672Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d88b197e1a665e375a0a1892d0e50d05","sha1":"ce515a27dc0cb15657de2f19816583977bf4c28d","sha256":"b9b5c445dc56bff7290313df959ce2e70d45e82b73f2cf72bc5a7032cca6024a","sha512":"cf633507a679efb6ed95da3bddde47e16c15ff439475cba1d8084b1726896449c3ed63f2455f89008e964c56adce2ca0e5fbe5141ea059a4aa26897ddccd6cb1","ssdeep":"","tlshash":"97e08cf3b2a716b10bee66ef285283487c78c8216c012050ac2c81618074f96a47aa84","size":307,"data":"","first_seen":"2024-09-19T21:05:39.280148Z","last_seen":"2026-07-10T11:21:06.478146Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1678a018b55a06d957f79e9f93aa4b1a","sha1":"48831c417393833b2137867ae71c755d9dd30be0","sha256":"cca3ee218ef7107780f3e14e27163b931310f693449884742ec482bf7d570e88","sha512":"d7f318f5d27c52defdc9fd0cbb029fcc96a7b81d97ff49544e9242c1224d97a1cd8aae371a0a323d92052cca229243ffbd50759f4fe9457ce96d5bddf03500d0","ssdeep":"","tlshash":"40d0a74828b0233482af2413d9dfa9d42dda57596022c086948e5880a954e3fd17fda2","size":235,"data":"","first_seen":"2024-09-19T21:05:39.280913Z","last_seen":"2026-07-19T18:09:32.785689Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9270ce33dba920f941b0b4c0a582a1","sha1":"9ff3f3dc4797bec64afc54482da533c687becf0a","sha256":"aea9369eac8db638d15b7316e09638839d90a37180cef0b2599d51d3933223b0","sha512":"e30334fddf18c0dc8f26007edf4dbba2f42f655e1145e34e70921ae9c5902462297c7e626e65320f46a0e3c18be65f12c7142690f708c6a4c737fddd0bed88d4","ssdeep":"","tlshash":"14e0c24c28b0223482be2013d59f96d56de657d46026c0d6c4cea89199a4d3fd57fea2","size":310,"data":"","first_seen":"2024-09-19T21:05:39.282979Z","last_seen":"2026-07-19T18:09:32.786612Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9a48f5a4b6815728ea1967e2c7ed15","sha1":"13b8268ca588edc943c25646f1c7fae1b9911fd5","sha256":"ec3d0c9f52552c13a2fee48c8c9b1305b503249ecf5546e6362912ebf504077c","sha512":"0c495c3a4f2ae3dfad3311dd578f3bad3b3809ac8ed031da26e45ed49cbd5a6207fe01238502350d06b4653ea26585584d69e8a95e47b40c6f8f294b7bf5bba8","ssdeep":"96:Htii6z8CDRE4EeG3bQVrqNegu+9r5o58Bs+Z/L:Htii6QCDRg2qwgu+Ae/L","tlshash":"6ad15356ad8f3e008b6419a522ec2cc91c9db79c6cd20ddc0a4bdb4ce59f87748e85dd","size":6623,"data":"","first_seen":"2026-06-12T01:37:54.723521Z","last_seen":"2026-06-12T09:07:17.461762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e04de6548a926375e033ff0877acc10b","sha1":"431c6e6d3a9eb0f2b29936cc3df7ef6d5896830f","sha256":"62f69ff7d2e84f0a9841f9fcddbef7ebc41a585cca05c991e33ae73acd1b4076","sha512":"7aa127ae1d20330ee0325d29bd8490ceed293768e13ea6bbcd6f9c294491cceafcf601b2ad1a37cc9d8369831422f5b1ff460dcf08ec157b85aea12018471f79","ssdeep":"96:4NmznVykE12vNHVrooVGFit/V6519yFDbXpXt7j:aKVyks29VMQGC6519yhb5B","tlshash":"d8b14549f8af32d1157320b92b7f620469a1484fdd48cd50746db984af1cf2eb97b1c5","size":5224,"data":"","first_seen":"2026-06-12T01:37:54.724985Z","last_seen":"2026-06-12T09:07:17.46308Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-12","alert":"Detects file containing Telegram Bot API","trigger":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.1.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-22T02:47:30.386353Z","times_seen":145042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"21fde7e9fdab901a0e4a374f0e231142","sha1":"8c220d3fa759af4e8d0bb6e7fa064adf5339c6d7","sha256":"c2e37822ba621ba159ebc9c8e2536262c8a9305933ac8fd97e290c6baa6dcaa2","sha512":"0eb14443b184ef01afba081d5623a071149004f39d553bc0ef79ad8a099feabc8cb17f54c7d1d7e20211ddb3e3eabef475c0e27540af831419b688cc6bb8ff9f","ssdeep":"","tlshash":"e3c02b8b708e0e700c9943f2001b0754d4c1502c3c41d001875588ccc020a60d27be24","size":143,"data":"","first_seen":"2024-09-19T21:05:39.284094Z","last_seen":"2026-07-19T18:09:32.783635Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"61aa92b60446a94c55e92b5e9acf4344","sha1":"bf582133883f418d958f302893e3cd73ae7f1ac8","sha256":"259cb3fda1c6bb9b062d578d691ab3450bd86c23d1e6c3c2bafb3ea777097b2a","sha512":"186a1d220f8e055cdcc7c94a485867cd4d5a59a0fd85d267cdd256cc83824a5de0b8307fae9418466f4844d84b3212d6f3d9714f38a65834ad82057cc7fcba71","ssdeep":"","tlshash":"19c08c360e20c43a423a9106b38fa3882ce801860654d3828028d8097830e46f0ba2f3","size":153,"data":"","first_seen":"2024-09-19T21:05:39.285192Z","last_seen":"2026-07-19T18:09:32.784178Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4b99a7e076df11114cbee7e3744b310","sha1":"1ecc5510f9463557d7436db098df743bcda202c9","sha256":"4c0fbf981c65dc840e07f5f43e6894d882883b84f44999cb73a7b8cee27f74f1","sha512":"82e0c95b971c95ceae5a494b2e4beb045ec327b0d4640c9270d9621bc5a99ff1b4528815cda26d8287ce08c15d09bd00178447e81d9a9672b1ed10dc5a730754","ssdeep":"","tlshash":"c3a011bab0a2282000ab3aba202b020c383e80023a0220000a288a8828328a28022c0a","size":70,"data":"","first_seen":"2024-09-19T21:05:39.282088Z","last_seen":"2026-07-19T18:09:32.784672Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d88b197e1a665e375a0a1892d0e50d05","sha1":"ce515a27dc0cb15657de2f19816583977bf4c28d","sha256":"b9b5c445dc56bff7290313df959ce2e70d45e82b73f2cf72bc5a7032cca6024a","sha512":"cf633507a679efb6ed95da3bddde47e16c15ff439475cba1d8084b1726896449c3ed63f2455f89008e964c56adce2ca0e5fbe5141ea059a4aa26897ddccd6cb1","ssdeep":"","tlshash":"97e08cf3b2a716b10bee66ef285283487c78c8216c012050ac2c81618074f96a47aa84","size":307,"data":"","first_seen":"2024-09-19T21:05:39.280148Z","last_seen":"2026-07-10T11:21:06.478146Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1678a018b55a06d957f79e9f93aa4b1a","sha1":"48831c417393833b2137867ae71c755d9dd30be0","sha256":"cca3ee218ef7107780f3e14e27163b931310f693449884742ec482bf7d570e88","sha512":"d7f318f5d27c52defdc9fd0cbb029fcc96a7b81d97ff49544e9242c1224d97a1cd8aae371a0a323d92052cca229243ffbd50759f4fe9457ce96d5bddf03500d0","ssdeep":"","tlshash":"40d0a74828b0233482af2413d9dfa9d42dda57596022c086948e5880a954e3fd17fda2","size":235,"data":"","first_seen":"2024-09-19T21:05:39.280913Z","last_seen":"2026-07-19T18:09:32.785689Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9270ce33dba920f941b0b4c0a582a1","sha1":"9ff3f3dc4797bec64afc54482da533c687becf0a","sha256":"aea9369eac8db638d15b7316e09638839d90a37180cef0b2599d51d3933223b0","sha512":"e30334fddf18c0dc8f26007edf4dbba2f42f655e1145e34e70921ae9c5902462297c7e626e65320f46a0e3c18be65f12c7142690f708c6a4c737fddd0bed88d4","ssdeep":"","tlshash":"14e0c24c28b0223482be2013d59f96d56de657d46026c0d6c4cea89199a4d3fd57fea2","size":310,"data":"","first_seen":"2024-09-19T21:05:39.282979Z","last_seen":"2026-07-19T18:09:32.786612Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9a48f5a4b6815728ea1967e2c7ed15","sha1":"13b8268ca588edc943c25646f1c7fae1b9911fd5","sha256":"ec3d0c9f52552c13a2fee48c8c9b1305b503249ecf5546e6362912ebf504077c","sha512":"0c495c3a4f2ae3dfad3311dd578f3bad3b3809ac8ed031da26e45ed49cbd5a6207fe01238502350d06b4653ea26585584d69e8a95e47b40c6f8f294b7bf5bba8","ssdeep":"96:Htii6z8CDRE4EeG3bQVrqNegu+9r5o58Bs+Z/L:Htii6QCDRg2qwgu+Ae/L","tlshash":"6ad15356ad8f3e008b6419a522ec2cc91c9db79c6cd20ddc0a4bdb4ce59f87748e85dd","size":6623,"data":"","first_seen":"2026-06-12T01:37:54.723521Z","last_seen":"2026-06-12T09:07:17.461762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"21fde7e9fdab901a0e4a374f0e231142","sha1":"8c220d3fa759af4e8d0bb6e7fa064adf5339c6d7","sha256":"c2e37822ba621ba159ebc9c8e2536262c8a9305933ac8fd97e290c6baa6dcaa2","sha512":"0eb14443b184ef01afba081d5623a071149004f39d553bc0ef79ad8a099feabc8cb17f54c7d1d7e20211ddb3e3eabef475c0e27540af831419b688cc6bb8ff9f","ssdeep":"","tlshash":"e3c02b8b708e0e700c9943f2001b0754d4c1502c3c41d001875588ccc020a60d27be24","size":143,"data":"","first_seen":"2024-09-19T21:05:39.284094Z","last_seen":"2026-07-19T18:09:32.783635Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"61aa92b60446a94c55e92b5e9acf4344","sha1":"bf582133883f418d958f302893e3cd73ae7f1ac8","sha256":"259cb3fda1c6bb9b062d578d691ab3450bd86c23d1e6c3c2bafb3ea777097b2a","sha512":"186a1d220f8e055cdcc7c94a485867cd4d5a59a0fd85d267cdd256cc83824a5de0b8307fae9418466f4844d84b3212d6f3d9714f38a65834ad82057cc7fcba71","ssdeep":"","tlshash":"19c08c360e20c43a423a9106b38fa3882ce801860654d3828028d8097830e46f0ba2f3","size":153,"data":"","first_seen":"2024-09-19T21:05:39.285192Z","last_seen":"2026-07-19T18:09:32.784178Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4b99a7e076df11114cbee7e3744b310","sha1":"1ecc5510f9463557d7436db098df743bcda202c9","sha256":"4c0fbf981c65dc840e07f5f43e6894d882883b84f44999cb73a7b8cee27f74f1","sha512":"82e0c95b971c95ceae5a494b2e4beb045ec327b0d4640c9270d9621bc5a99ff1b4528815cda26d8287ce08c15d09bd00178447e81d9a9672b1ed10dc5a730754","ssdeep":"","tlshash":"c3a011bab0a2282000ab3aba202b020c383e80023a0220000a288a8828328a28022c0a","size":70,"data":"","first_seen":"2024-09-19T21:05:39.282088Z","last_seen":"2026-07-19T18:09:32.784672Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d88b197e1a665e375a0a1892d0e50d05","sha1":"ce515a27dc0cb15657de2f19816583977bf4c28d","sha256":"b9b5c445dc56bff7290313df959ce2e70d45e82b73f2cf72bc5a7032cca6024a","sha512":"cf633507a679efb6ed95da3bddde47e16c15ff439475cba1d8084b1726896449c3ed63f2455f89008e964c56adce2ca0e5fbe5141ea059a4aa26897ddccd6cb1","ssdeep":"","tlshash":"97e08cf3b2a716b10bee66ef285283487c78c8216c012050ac2c81618074f96a47aa84","size":307,"data":"","first_seen":"2024-09-19T21:05:39.280148Z","last_seen":"2026-07-10T11:21:06.478146Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1678a018b55a06d957f79e9f93aa4b1a","sha1":"48831c417393833b2137867ae71c755d9dd30be0","sha256":"cca3ee218ef7107780f3e14e27163b931310f693449884742ec482bf7d570e88","sha512":"d7f318f5d27c52defdc9fd0cbb029fcc96a7b81d97ff49544e9242c1224d97a1cd8aae371a0a323d92052cca229243ffbd50759f4fe9457ce96d5bddf03500d0","ssdeep":"","tlshash":"40d0a74828b0233482af2413d9dfa9d42dda57596022c086948e5880a954e3fd17fda2","size":235,"data":"","first_seen":"2024-09-19T21:05:39.280913Z","last_seen":"2026-07-19T18:09:32.785689Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9270ce33dba920f941b0b4c0a582a1","sha1":"9ff3f3dc4797bec64afc54482da533c687becf0a","sha256":"aea9369eac8db638d15b7316e09638839d90a37180cef0b2599d51d3933223b0","sha512":"e30334fddf18c0dc8f26007edf4dbba2f42f655e1145e34e70921ae9c5902462297c7e626e65320f46a0e3c18be65f12c7142690f708c6a4c737fddd0bed88d4","ssdeep":"","tlshash":"14e0c24c28b0223482be2013d59f96d56de657d46026c0d6c4cea89199a4d3fd57fea2","size":310,"data":"","first_seen":"2024-09-19T21:05:39.282979Z","last_seen":"2026-07-19T18:09:32.786612Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9a48f5a4b6815728ea1967e2c7ed15","sha1":"13b8268ca588edc943c25646f1c7fae1b9911fd5","sha256":"ec3d0c9f52552c13a2fee48c8c9b1305b503249ecf5546e6362912ebf504077c","sha512":"0c495c3a4f2ae3dfad3311dd578f3bad3b3809ac8ed031da26e45ed49cbd5a6207fe01238502350d06b4653ea26585584d69e8a95e47b40c6f8f294b7bf5bba8","ssdeep":"96:Htii6z8CDRE4EeG3bQVrqNegu+9r5o58Bs+Z/L:Htii6QCDRg2qwgu+Ae/L","tlshash":"6ad15356ad8f3e008b6419a522ec2cc91c9db79c6cd20ddc0a4bdb4ce59f87748e85dd","size":6623,"data":"","first_seen":"2026-06-12T01:37:54.723521Z","last_seen":"2026-06-12T09:07:17.461762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"21fde7e9fdab901a0e4a374f0e231142","sha1":"8c220d3fa759af4e8d0bb6e7fa064adf5339c6d7","sha256":"c2e37822ba621ba159ebc9c8e2536262c8a9305933ac8fd97e290c6baa6dcaa2","sha512":"0eb14443b184ef01afba081d5623a071149004f39d553bc0ef79ad8a099feabc8cb17f54c7d1d7e20211ddb3e3eabef475c0e27540af831419b688cc6bb8ff9f","ssdeep":"","tlshash":"e3c02b8b708e0e700c9943f2001b0754d4c1502c3c41d001875588ccc020a60d27be24","size":143,"data":"","first_seen":"2024-09-19T21:05:39.284094Z","last_seen":"2026-07-19T18:09:32.783635Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"61aa92b60446a94c55e92b5e9acf4344","sha1":"bf582133883f418d958f302893e3cd73ae7f1ac8","sha256":"259cb3fda1c6bb9b062d578d691ab3450bd86c23d1e6c3c2bafb3ea777097b2a","sha512":"186a1d220f8e055cdcc7c94a485867cd4d5a59a0fd85d267cdd256cc83824a5de0b8307fae9418466f4844d84b3212d6f3d9714f38a65834ad82057cc7fcba71","ssdeep":"","tlshash":"19c08c360e20c43a423a9106b38fa3882ce801860654d3828028d8097830e46f0ba2f3","size":153,"data":"","first_seen":"2024-09-19T21:05:39.285192Z","last_seen":"2026-07-19T18:09:32.784178Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4b99a7e076df11114cbee7e3744b310","sha1":"1ecc5510f9463557d7436db098df743bcda202c9","sha256":"4c0fbf981c65dc840e07f5f43e6894d882883b84f44999cb73a7b8cee27f74f1","sha512":"82e0c95b971c95ceae5a494b2e4beb045ec327b0d4640c9270d9621bc5a99ff1b4528815cda26d8287ce08c15d09bd00178447e81d9a9672b1ed10dc5a730754","ssdeep":"","tlshash":"c3a011bab0a2282000ab3aba202b020c383e80023a0220000a288a8828328a28022c0a","size":70,"data":"","first_seen":"2024-09-19T21:05:39.282088Z","last_seen":"2026-07-19T18:09:32.784672Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d88b197e1a665e375a0a1892d0e50d05","sha1":"ce515a27dc0cb15657de2f19816583977bf4c28d","sha256":"b9b5c445dc56bff7290313df959ce2e70d45e82b73f2cf72bc5a7032cca6024a","sha512":"cf633507a679efb6ed95da3bddde47e16c15ff439475cba1d8084b1726896449c3ed63f2455f89008e964c56adce2ca0e5fbe5141ea059a4aa26897ddccd6cb1","ssdeep":"","tlshash":"97e08cf3b2a716b10bee66ef285283487c78c8216c012050ac2c81618074f96a47aa84","size":307,"data":"","first_seen":"2024-09-19T21:05:39.280148Z","last_seen":"2026-07-10T11:21:06.478146Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1678a018b55a06d957f79e9f93aa4b1a","sha1":"48831c417393833b2137867ae71c755d9dd30be0","sha256":"cca3ee218ef7107780f3e14e27163b931310f693449884742ec482bf7d570e88","sha512":"d7f318f5d27c52defdc9fd0cbb029fcc96a7b81d97ff49544e9242c1224d97a1cd8aae371a0a323d92052cca229243ffbd50759f4fe9457ce96d5bddf03500d0","ssdeep":"","tlshash":"40d0a74828b0233482af2413d9dfa9d42dda57596022c086948e5880a954e3fd17fda2","size":235,"data":"","first_seen":"2024-09-19T21:05:39.280913Z","last_seen":"2026-07-19T18:09:32.785689Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9270ce33dba920f941b0b4c0a582a1","sha1":"9ff3f3dc4797bec64afc54482da533c687becf0a","sha256":"aea9369eac8db638d15b7316e09638839d90a37180cef0b2599d51d3933223b0","sha512":"e30334fddf18c0dc8f26007edf4dbba2f42f655e1145e34e70921ae9c5902462297c7e626e65320f46a0e3c18be65f12c7142690f708c6a4c737fddd0bed88d4","ssdeep":"","tlshash":"14e0c24c28b0223482be2013d59f96d56de657d46026c0d6c4cea89199a4d3fd57fea2","size":310,"data":"","first_seen":"2024-09-19T21:05:39.282979Z","last_seen":"2026-07-19T18:09:32.786612Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9a48f5a4b6815728ea1967e2c7ed15","sha1":"13b8268ca588edc943c25646f1c7fae1b9911fd5","sha256":"ec3d0c9f52552c13a2fee48c8c9b1305b503249ecf5546e6362912ebf504077c","sha512":"0c495c3a4f2ae3dfad3311dd578f3bad3b3809ac8ed031da26e45ed49cbd5a6207fe01238502350d06b4653ea26585584d69e8a95e47b40c6f8f294b7bf5bba8","ssdeep":"96:Htii6z8CDRE4EeG3bQVrqNegu+9r5o58Bs+Z/L:Htii6QCDRg2qwgu+Ae/L","tlshash":"6ad15356ad8f3e008b6419a522ec2cc91c9db79c6cd20ddc0a4bdb4ce59f87748e85dd","size":6623,"data":"","first_seen":"2026-06-12T01:37:54.723521Z","last_seen":"2026-06-12T09:07:17.461762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"21fde7e9fdab901a0e4a374f0e231142","sha1":"8c220d3fa759af4e8d0bb6e7fa064adf5339c6d7","sha256":"c2e37822ba621ba159ebc9c8e2536262c8a9305933ac8fd97e290c6baa6dcaa2","sha512":"0eb14443b184ef01afba081d5623a071149004f39d553bc0ef79ad8a099feabc8cb17f54c7d1d7e20211ddb3e3eabef475c0e27540af831419b688cc6bb8ff9f","ssdeep":"","tlshash":"e3c02b8b708e0e700c9943f2001b0754d4c1502c3c41d001875588ccc020a60d27be24","size":143,"data":"","first_seen":"2024-09-19T21:05:39.284094Z","last_seen":"2026-07-19T18:09:32.783635Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"61aa92b60446a94c55e92b5e9acf4344","sha1":"bf582133883f418d958f302893e3cd73ae7f1ac8","sha256":"259cb3fda1c6bb9b062d578d691ab3450bd86c23d1e6c3c2bafb3ea777097b2a","sha512":"186a1d220f8e055cdcc7c94a485867cd4d5a59a0fd85d267cdd256cc83824a5de0b8307fae9418466f4844d84b3212d6f3d9714f38a65834ad82057cc7fcba71","ssdeep":"","tlshash":"19c08c360e20c43a423a9106b38fa3882ce801860654d3828028d8097830e46f0ba2f3","size":153,"data":"","first_seen":"2024-09-19T21:05:39.285192Z","last_seen":"2026-07-19T18:09:32.784178Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4b99a7e076df11114cbee7e3744b310","sha1":"1ecc5510f9463557d7436db098df743bcda202c9","sha256":"4c0fbf981c65dc840e07f5f43e6894d882883b84f44999cb73a7b8cee27f74f1","sha512":"82e0c95b971c95ceae5a494b2e4beb045ec327b0d4640c9270d9621bc5a99ff1b4528815cda26d8287ce08c15d09bd00178447e81d9a9672b1ed10dc5a730754","ssdeep":"","tlshash":"c3a011bab0a2282000ab3aba202b020c383e80023a0220000a288a8828328a28022c0a","size":70,"data":"","first_seen":"2024-09-19T21:05:39.282088Z","last_seen":"2026-07-19T18:09:32.784672Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d88b197e1a665e375a0a1892d0e50d05","sha1":"ce515a27dc0cb15657de2f19816583977bf4c28d","sha256":"b9b5c445dc56bff7290313df959ce2e70d45e82b73f2cf72bc5a7032cca6024a","sha512":"cf633507a679efb6ed95da3bddde47e16c15ff439475cba1d8084b1726896449c3ed63f2455f89008e964c56adce2ca0e5fbe5141ea059a4aa26897ddccd6cb1","ssdeep":"","tlshash":"97e08cf3b2a716b10bee66ef285283487c78c8216c012050ac2c81618074f96a47aa84","size":307,"data":"","first_seen":"2024-09-19T21:05:39.280148Z","last_seen":"2026-07-10T11:21:06.478146Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"1678a018b55a06d957f79e9f93aa4b1a","sha1":"48831c417393833b2137867ae71c755d9dd30be0","sha256":"cca3ee218ef7107780f3e14e27163b931310f693449884742ec482bf7d570e88","sha512":"d7f318f5d27c52defdc9fd0cbb029fcc96a7b81d97ff49544e9242c1224d97a1cd8aae371a0a323d92052cca229243ffbd50759f4fe9457ce96d5bddf03500d0","ssdeep":"","tlshash":"40d0a74828b0233482af2413d9dfa9d42dda57596022c086948e5880a954e3fd17fda2","size":235,"data":"","first_seen":"2024-09-19T21:05:39.280913Z","last_seen":"2026-07-19T18:09:32.785689Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9270ce33dba920f941b0b4c0a582a1","sha1":"9ff3f3dc4797bec64afc54482da533c687becf0a","sha256":"aea9369eac8db638d15b7316e09638839d90a37180cef0b2599d51d3933223b0","sha512":"e30334fddf18c0dc8f26007edf4dbba2f42f655e1145e34e70921ae9c5902462297c7e626e65320f46a0e3c18be65f12c7142690f708c6a4c737fddd0bed88d4","ssdeep":"","tlshash":"14e0c24c28b0223482be2013d59f96d56de657d46026c0d6c4cea89199a4d3fd57fea2","size":310,"data":"","first_seen":"2024-09-19T21:05:39.282979Z","last_seen":"2026-07-19T18:09:32.786612Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf9a48f5a4b6815728ea1967e2c7ed15","sha1":"13b8268ca588edc943c25646f1c7fae1b9911fd5","sha256":"ec3d0c9f52552c13a2fee48c8c9b1305b503249ecf5546e6362912ebf504077c","sha512":"0c495c3a4f2ae3dfad3311dd578f3bad3b3809ac8ed031da26e45ed49cbd5a6207fe01238502350d06b4653ea26585584d69e8a95e47b40c6f8f294b7bf5bba8","ssdeep":"96:Htii6z8CDRE4EeG3bQVrqNegu+9r5o58Bs+Z/L:Htii6QCDRg2qwgu+Ae/L","tlshash":"6ad15356ad8f3e008b6419a522ec2cc91c9db79c6cd20ddc0a4bdb4ce59f87748e85dd","size":6623,"data":"","first_seen":"2026-06-12T01:37:54.723521Z","last_seen":"2026-06-12T09:07:17.461762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"185.145.113.133","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:06:45.461Z","timestamp":1781255205461,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s-ed1.cloud.gcore.lu","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"79:30:8F:86:72:C5:01:84:B8:85:EE:DC:53:1F:D7:F1:06:9A:97:89","sha256":"6B:0B:85:B0:E1:BF:24:8A:27:8A:CC:11:94:BA:EA:9C:2E:DA:A8:D9:78:6A:63:0B:87:2A:D6:03:24:18:21:E2"}}},"request":{"raw":"GET /xls/review-file.html HTTP/1.1\r\nHost: madeforthis.s-ed1.cloud.gcore.lu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 12 Jun 2026 09:06:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 262350\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 10 Jun 2026 22:30:19 GMT\r\nx-rgw-object-type: Normal\r\nETag: \"7bb92a2db018c213500d7e4fa7c1b03f\"\r\nx-amz-request-id: tx00000d8d50cbdb31e57d3-006a2bcc25-1594298441-ed1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:4.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"BootstrapCDN:4.1.3","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}],"data":{"size":262350,"size_decoded":262700,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (62367)","md5":"7bb92a2db018c213500d7e4fa7c1b03f","sha1":"90a6f45de1f9e7f829e8e583ed67ae71dbd6a563","sha256":"22415bfd3654a69903fe568b7f76d0a650192d25fa81152d3c6d803c66850a28","sha512":"1a8a749bb60c6ffaf7ab56380f635f696fcaaa3251f3c33f43befc247956b0de7fbda7652775b5e6a3f4cc9529f5be9bc268717f8234c01e41b4474f40d37713","ssdeep":"6144:LswajpSYt72uB8zd3nuatHiuZ1aYxs7TA7VmseR4N:5a1SYtRc33CMaoQTA7VmseaN","tlshash":"d1449b324d23ac27099ec1c7598d6fda7fa8cec746316227b07c858c9795af21cca15e","first_seen":"2026-06-12T01:37:54.713052Z","last_seen":"2026-06-12T09:07:17.439377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":23,"connect":22,"send":0,"wait":26,"receive":93,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"madeforthis.s-ed1.cloud.gcore.lu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"madeforthis.s-ed1.cloud.gcore.lu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic phishing","verdict":"phishing","severity":"medium","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","date":"2026-06-12T09:06:46.045Z","timestamp":1781255206045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://madeforthis.s-ed1.cloud.gcore.lu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 02:18:53 GMT\r\nexpires: Fri, 11 Jun 2027 02:18:53 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 110873\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":85578,"size_decoded":31012,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-22T04:53:00.382606Z","times_seen":292124,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":17,"receive":16,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","date":"2026-06-12T09:06:46.180Z","timestamp":1781255206180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 11 Jun 2026 02:18:53 GMT\r\nexpires: Fri, 11 Jun 2027 02:18:53 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 110873\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":85578,"size_decoded":30992,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-22T04:53:00.382606Z","times_seen":292124,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.1.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.65.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","date":"2026-06-12T09:06:46.048Z","timestamp":1781255206048,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.1.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://madeforthis.s-ed1.cloud.gcore.lu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-152b5\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:06:46 GMT\r\nage: 1286891\r\nx-served-by: cache-lga21947-LGA, cache-bma-essb1270033-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 6807, 2280\r\nx-timer: S1781255206.082891,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30070\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":86709,"size_decoded":30709,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-22T02:47:30.386353Z","times_seen":145042,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":9,"receive":5,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","date":"2026-06-12T09:06:46.050Z","timestamp":1781255206050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 12 Jun 2026 09:06:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"67176c242e1bdc20603c878dee836df3\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:06 GMT\r\ncdn-cachedat: 08/01/2025 15:36:25\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1078\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a78b5a25cfaf2df533c60a6d4fa388d4\r\ncdn-cache: HIT\r\nage: 2355939\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a0a7b38dee305ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51039,"size_decoded":15426,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50758)","md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-07-22T03:22:11.13987Z","times_seen":125591,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/C8yD9g5/US-payment-terms-1.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.5","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","date":"2026-06-12T09:06:46.056Z","timestamp":1781255206056,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Apr 2026 08:46:45 GMT","end":"Tue, 14 Jul 2026 08:46:44 GMT"},"fingerprint":{"sha1":"AB:FE:0C:54:E2:24:E0:D9:B7:F9:DC:18:02:C9:05:26:34:63:E8:65","sha256":"F0:A7:95:74:CF:C2:BC:7A:69:1D:6A:03:47:B4:D3:2A:76:24:DE:28:F8:31:95:41:B2:F8:86:C9:B3:F8:E3:01"}}},"request":{"raw":"GET /C8yD9g5/US-payment-terms-1.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Fri, 12 Jun 2026 09:06:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 78329\r\nlast-modified: Mon, 08 Apr 2024 14:38:08 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78329,"size_decoded":78695,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1415x2000, components 3","md5":"b62cb0558b9b24f73af92bb53f3b8f90","sha1":"72f901c26ee58c0a94042dd309bbf5869adbe84f","sha256":"ba4964eb4b09ed1902d533c34657f99d8d2f1bdbbb6101afe3095db527d105d9","sha512":"051601647ffa5f6ffb4f0f06daa74f1730a4012b60fba9be19e9eb2cdd842a02a949232c310c701b34926041cbeca9253abfb8e4ac47b51fab1d6fe3bc39bc67","ssdeep":"1536:P1tqiExaGh6QOOOOOOOOOOOOOOOOOOTTEccrawSDlRM9IzzFjYlsIgC6+:P2xHiccraXJzzgsIgC6+","tlshash":"c973af47b3da8311d74cebba0d10bb912532966642b520999b21cf6f34e31a71dfb31b","first_seen":"2024-04-11T07:07:01Z","last_seen":"2026-06-12T09:07:17.450326Z","times_seen":196,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":2,"connect":22,"send":0,"wait":49,"receive":112,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"madeforthis.s-ed1.cloud.gcore.lu/favicon.ico","fqdn":"madeforthis.s-ed1.cloud.gcore.lu","domain":"gcore.lu","tld":"lu"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html","date":"2026-06-12T09:06:46.301Z","timestamp":1781255206301,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.s-ed1.cloud.gcore.lu","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"79:30:8F:86:72:C5:01:84:B8:85:EE:DC:53:1F:D7:F1:06:9A:97:89","sha256":"6B:0B:85:B0:E1:BF:24:8A:27:8A:CC:11:94:BA:EA:9C:2E:DA:A8:D9:78:6A:63:0B:87:2A:D6:03:24:18:21:E2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: madeforthis.s-ed1.cloud.gcore.lu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T05:24:28.82285Z","times_seen":17441673,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"madeforthis.s-ed1.cloud.gcore.lu","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"madeforthis.s-ed1.cloud.gcore.lu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]}}]}