{"report_id":"54ca0b82-6b64-4a86-88b2-b98a2f1de8aa","version":6,"status":"done","tags":["phishing","microsoft","outlook"],"date":"2023-12-05T11:12:20Z","url":{"schema":"http","addr":"r20.rs6.net/tn.jsp?f=001DyiWYWxw55me5hKOpLoWPi2zPLufLvAVkUsxNuI1kxlGri6oJhvtLT2sS7xHZfY3Cr1DqIPaXnc6nE5f8fbx01TJVPTQdG5PvJ-bzaFb-WS_TfDKUrZRLdK0M17V4KAXbREOpl8kJu0=\u0026c=\u0026ch==\u0026__=/asdf/cmFtb25hLnBhcnZhbmVoQGJhc3NtZWRpY2FsZ3JvdXAuY29t","fqdn":"r20.rs6.net","domain":"rs6.net","tld":"net"},"ip":{"addr":"208.75.122.11","port":0,"asn":40444,"as":"ASN-CC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"title":"Loading"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:01:39Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"b464.m0rx1.com","ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2023-11-30","domain_rank":0,"first_seen":"2023-12-01 04:56:34","last_seen":"2023-12-04 20:29:57","alert_count":16,"request_count":16,"received_data":455214,"sent_data":7727,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.socket.io","ip":{"addr":"143.204.55.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2010-04-18","domain_rank":62068,"first_seen":"2015-03-23 23:14:03","last_seen":"2023-12-05 05:52:18","alert_count":0,"request_count":1,"received_data":46488,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20 07:02:03","last_seen":"2023-12-05 05:09:09","alert_count":0,"request_count":9,"received_data":430465,"sent_data":5675,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2023-12-05 05:09:20","alert_count":0,"request_count":1,"received_data":90090,"sent_data":422,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r20.rs6.net","ip":{"addr":"208.75.122.11","port":0,"asn":40444,"as":"ASN-CC","country":"United States","country_code":"US"},"domain_registered":"2001-12-21","domain_rank":6735,"first_seen":"2014-04-18 19:30:06","last_seen":"2023-12-04 10:32:28","alert_count":0,"request_count":1,"received_data":390,"sent_data":696,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ef7link.com","ip":{"addr":"162.241.85.202","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2023-02-08","domain_rank":0,"first_seen":"2023-02-12 03:42:46","last_seen":"2023-12-04 20:29:46","alert_count":1,"request_count":1,"received_data":329,"sent_data":532,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"b464.m0rx1.com/90z5/myscr948587.js","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"798732c053c5578616e807f16f769d4f","sha1":"cec3425b57280902e85f812358350362dad12799","sha256":"a20b33ba5e7a21a1bd276fa6c94adda93e8b4e0daaf3770ef545a5f74295e334","sha512":"e242a2a8edacce2959f83140f301cc08f54dc2e6e98fdbd33022808598a929c0e665a957cdcd95e399fae1c16a5b9d10d0fabd2e63583e89c734fc3eeb81b818","ssdeep":"384:b3r5bykUNplu0Ny8ilpfRVC0QBLKiPpGFi2S4gAhfYPAWwOaYYS4genJWW32F5IP:b75bX4lhVKS8q4gAmYeGtlVL","tlshash":"69c2c9181e04efb0927f4b8385919a881934eb9bfbc4ec5d80979ad3f729366c6d7c44","size":27839,"data":"","first_seen":"2023-12-04T20:30:18Z","last_seen":"2023-12-11T20:07:03Z","times_seen":855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c90f391245a994ae95e644a587c8626","sha1":"7bfc99336571d0ccfe38f9e1d18cb26b4adfc316","sha256":"acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7","sha512":"916f4cd48fc87b759efa209ecb2b67a7878d6e16eb3128512be9668731027f7795bc016e6081ee9f74ff4b38af54c9cadf88a6f965980c7d0881b05d645cfeaf","ssdeep":"","tlshash":"","size":33876,"data":"","first_seen":"2023-11-30T14:29:00Z","last_seen":"2023-12-14T14:42:23Z","times_seen":11689,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/js/pages-head-top-web.min.js?cb=1701774729872","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4d4ac8b0368a6b2d1f4c8bc5101b6b6","sha1":"41a5b910f027cf26f58d212c673e1c4b7d288965","sha256":"bf238e428816d92b7f5e5c98f1c8f74db5fded35a7f52e88f97e1444ec0f3907","sha512":"9f509294cc7eb5226719ef0431533087ca5da8123c8d5b14986b060f5a95df50d276e99d5a5890a43fa3e19011034e6fd10dcdfbd3470475b675e43f0a8fc425","ssdeep":"","tlshash":"5d51f11030144b694d7b238ef4715864fdd583263525f8a1c0afa89cb4b2fd605aafa7","size":2478,"data":"","first_seen":"2023-12-05T03:09:27Z","last_seen":"2024-08-20T16:44:48.235694Z","times_seen":920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"97ca4a722cd023d4ebb293cc5fe3ed05","sha1":"872829fdc1bec3c72805a6d1224cade4148619e1","sha256":"617b969740b11423fb26401b618b381d8e94b1adb68cf0cd423b12d0a6e8ca6e","sha512":"a1327c4c13e741ff6ebdf83191d24518a27c9754a5ee04def0e789b9af1a4f9ce620667d8ce03d3b0809ed8a78e88f10729e06ba74c412395739407ffb974a9b","ssdeep":"","tlshash":"3051a5fad5f9019306599611226f3a022531026f4c88b17d3e8cc94c6f2d4af21f47da","size":3100,"data":"","first_seen":"2024-08-20T16:42:21.964142Z","last_seen":"2024-08-20T16:42:21.964142Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-15T20:38:42.467932Z","times_seen":450358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.6.0/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"143.204.55.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"80f5b8c6a9eeac15de93e5a112036a06","sha1":"f7174635137d37581b11937fc90e9cb325077bce","sha256":"0401de33701f1cad16ecf952899d23990b6437d0a5b7335524edf6bdfb932542","sha512":"b976a5f02202439d94c6817d037c813fa1945c6bb93762284d97ff61718c5b833402f372562034663a467fdbaa46990de24cb1e356392340e64d034e4ba1b4e4","ssdeep":"384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2","tlshash":"1423a488f2a1b06187e37165443f110ba27a746964c9c18cf639d9f19eb8ece7123f79","size":45806,"data":"","first_seen":"2023-04-05T03:09:50Z","last_seen":"2026-04-15T07:33:09.301136Z","times_seen":39638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/js/pages-head-web.min.js?cb=1","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2663af643d013c14c8124da541ca2d0","sha1":"6fdff694fa243006c25083b91ec51aa28f8568a7","sha256":"31ae6827f3782d745a595d0b9c858aed76784fb6b8a050792bcd869c484363dd","sha512":"3b5ce5d038d551473459bb31fe3ac6415259eae80a0c0269bcb3533c25b2222e5da16d10c5d1df010d07de2e3f6a6ecedca01aa69e450b1a1d38f67a41f7ce0e","ssdeep":"","tlshash":"c7200000000000000c300000000000000000000000000c000003000000000000000000","size":9451,"data":"","first_seen":"2023-11-23T23:16:43Z","last_seen":"2024-08-20T18:07:12.684101Z","times_seen":3141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"69590b0b552c3dbb6fce433756aa4458","sha1":"f7d258e6ef3af0c9bc82260157df5d0c9f96da82","sha256":"8db4fa723999d564782473afadecfbdacff770144daf9282f582f8fb89c68bf5","sha512":"35aa6640b9d1cf9f6bcb02f28b3cccbdbd15347813342cb17465c89d90c46ac8e15ab20a0bed7bd78a54071a64af852e37e5a13b340068c3154c15474743a46c","ssdeep":"","tlshash":"1ee0d8246c3245a0595a506f757ba2983ca111033406f1a67a8fea285f22fc688f59f4","size":371,"data":"","first_seen":"2023-12-04T20:30:18Z","last_seen":"2024-08-20T16:47:11.587832Z","times_seen":855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"0c8000ac38802000803328e8002fa8aaa020083030800e022a02e8888cb222c822a8ae","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-04-15T20:38:53.859499Z","times_seen":278136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830bda1cf834569b","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dea94b333f9e835d904f5804f16e685","sha1":"46695f875b43d697a50680222b31c43190e804eb","sha256":"e3e35d92702ce9aaf97c2ce6db59dbd3a78741090d01c29366a978c7957ab2fe","sha512":"872ddf3db2c0cee6eb8daba97d51592d4f3307a19978f373c9e41f40a58dccf372e22eace1cf6409d1bedc3eca6a57fadbbc3f3ca11072a440b61c140c4a3b3c","ssdeep":"3072:LHehLjxzmPe8xRR4CFRgM8iJ7muSCk6tRg8Ft:Lqvue8TR43bymYTp","tlshash":"d10484cc63c1bd5641333a7878233216709b3d456c7c19deea40b5d429f931a92ebabe","size":178835,"data":"","first_seen":"2023-12-05T11:43:55Z","last_seen":"2023-12-05T12:28:10Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-15T20:37:13.728112Z","times_seen":676298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8e025805ac0ec250c733497f5f890493","sha1":"fa23f3ec24a60575b4a2146938f4a80498a40f0c","sha256":"56d82d8b943f59641bd3a9a22f6849f76aa3a8921872de3a97af5fcf5537cd3d","sha512":"c6897eb1b24253c6fde355472d7a8503170031331c8edb7d1a99d34233f879a4442fe6cb7008bc8f4fb5c75e0d78db98eca868155895cfcee9ffe980e900e95b","ssdeep":"","tlshash":"a43151cdf9a6b123135124b946bf3e40e63afc1068089950d531d2cc3d3694b8a77eae","size":1780,"data":"","first_seen":"2024-08-20T16:42:21.968112Z","last_seen":"2024-08-20T16:42:27.058471Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"6c7af0a531fc7404ea48925fda186625","sha1":"842e0fef08c69f38abe00ccb7f28c8665e00dc8a","sha256":"3d1a5fcd8f92048be1119824ffde8cac7cebc6e45a91fdf87a1d7066e32fe5b4","sha512":"973d2cb839cbd2bfdc31b67a0d67e2f19c142828cad990309cae3d40ac4a48d75ca59801260a6a70717c0fd7507f787d76b6a6e79b37dd05f1389e3d81d6fed2","ssdeep":"96:rzxrYlcCC3HZr5k9ZBDZU4coP9uhYWWNuCuDf56ywUvKg:W/+HSxPQhYSDsHg","tlshash":"2da13362a5b29765ed7240b223a29bf8f8454003b706887576d7630f5ff6be1c482be4","size":4763,"data":"","first_seen":"2023-12-04T20:30:18Z","last_seen":"2024-08-20T16:47:11.598443Z","times_seen":855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d50fe447c67a515d4ba936505175a8fe","sha1":"78d20da444441fb45dcf61e09d9bcbc9f01502e2","sha256":"7dcf7a54137031c03f28f6a33cb62b258023c5de06d504259d5ad39f16b1b85e","sha512":"b165f7e4c221c2c822ac9ad87b7ee17992ecad0cdb7521b7ffba8d24220f594eb2e3ff97f48eea37dd0a7a4a3fa26e3e9591764d4b63932cc9c4ecfe7d158474","ssdeep":"","tlshash":"","size":3573,"data":"","first_seen":"2023-11-30T14:29:00Z","last_seen":"2024-08-20T17:20:43.669801Z","times_seen":11653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"http","addr":"r20.rs6.net/tn.jsp?f=001DyiWYWxw55me5hKOpLoWPi2zPLufLvAVkUsxNuI1kxlGri6oJhvtLT2sS7xHZfY3Cr1DqIPaXnc6nE5f8fbx01TJVPTQdG5PvJ-bzaFb-WS_TfDKUrZRLdK0M17V4KAXbREOpl8kJu0=\u0026c=\u0026ch==\u0026__=/asdf/cmFtb25hLnBhcnZhbmVoQGJhc3NtZWRpY2FsZ3JvdXAuY29t","fqdn":"r20.rs6.net","domain":"rs6.net","tld":"net"},"ip":{"addr":"208.75.122.11","port":0,"asn":40444,"as":"ASN-CC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-05T11:12:08.514206526Z","timestamp":1701774728514,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /tn.jsp?f=001DyiWYWxw55me5hKOpLoWPi2zPLufLvAVkUsxNuI1kxlGri6oJhvtLT2sS7xHZfY3Cr1DqIPaXnc6nE5f8fbx01TJVPTQdG5PvJ-bzaFb-WS_TfDKUrZRLdK0M17V4KAXbREOpl8kJu0=\u0026c=\u0026ch==\u0026__=/asdf/cmFtb25hLnBhcnZhbmVoQGJhc3NtZWRpY2FsZ3JvdXAuY29t HTTP/1.1\r\nHost: r20.rs6.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Tue, 05 Dec 2023 11:12:02 GMT\r\nServer: Apache\r\nP3P: CP=\"CAO DSP TAIa OUR NOR UNI\"\r\nLocation: https://ef7link.com//asdf/cmFtb25hLnBhcnZhbmVoQGJhc3NtZWRpY2FsZ3JvdXAuY29t\r\nContent-Length: 0\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate, no-cache=\"Set-Cookie\"\r\nPragma: no-cache\r\nConnection: close\r\nContent-Type: text/html;charset=ISO-8859-1\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ef7link.com//asdf/cmFtb25hLnBhcnZhbmVoQGJhc3NtZWRpY2FsZ3JvdXAuY29t","fqdn":"ef7link.com","domain":"ef7link.com","tld":"com"},"ip":{"addr":"162.241.85.202","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-05T11:12:09.085593357Z","timestamp":1701774729085,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET //asdf/cmFtb25hLnBhcnZhbmVoQGJhc3NtZWRpY2FsZ3JvdXAuY29t HTTP/1.1\r\nHost: ef7link.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 133\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 05 Dec 2023 11:12:03 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":133,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"18d0ff66668c76c6957dbcb1c06931a5","sha1":"77ca577eaff98ce58beb7e22017ce1aa8d36647d","sha256":"6ba57811766d317b6d7b5c2419743db78bc1ccb1c9d17217152cc7769fc0f787","sha512":"1c1278b1b215ffd84208ab79138c861b1ee49bbb0d366656eee738286dfc4ab05f37a76696312a1e78c50f9736c48f8c2424fdb48f44da3487588fc278ecdbe6","ssdeep":"","tlshash":"d8c02baa0c01c4c32c8100f0c4a1fd08514380ace600ccc0d0c4d06461807ce4cfac84","first_seen":"2023-12-05T12:12:21Z","last_seen":"2023-12-05T12:12:31Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"b464.m0rx1.com/90z5/myscr948587.js","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:09.656Z","timestamp":1701774729656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /90z5/myscr948587.js HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/90z5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:03 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Nov 2023 14:44:12 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 6653\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=C%2FxUhywhlz2ruQkYJSVodHo3%2FIM7h0719rTuJ%2F6xnqLlhWwffHcyLT%2FOZHF%2FLHsK6m7V8X8HDdCxxCsfEboR%2FgQLTtOR9WBLI3sUrL5yQxhTw%2B0o3xgxMmJHULZD32yTxw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830bda17c98e0afa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38542,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"798732c053c5578616e807f16f769d4f","sha1":"cec3425b57280902e85f812358350362dad12799","sha256":"a20b33ba5e7a21a1bd276fa6c94adda93e8b4e0daaf3770ef545a5f74295e334","sha512":"e242a2a8edacce2959f83140f301cc08f54dc2e6e98fdbd33022808598a929c0e665a957cdcd95e399fae1c16a5b9d10d0fabd2e63583e89c734fc3eeb81b818","ssdeep":"384:b3r5bykUNplu0Ny8ilpfRVC0QBLKiPpGFi2S4gAhfYPAWwOaYYS4genJWW32F5IP:b75bX4lhVKS8q4gAmYeGtlVL","tlshash":"69c2c9181e04efb0927f4b8385919a881934eb9bfbc4ec5d80979ad3f729366c6d7c44","first_seen":"2023-12-04T20:30:18Z","last_seen":"2023-12-11T20:07:03Z","times_seen":855,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/css/pages-okta.css?cb=1","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.356Z","timestamp":1701774730356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/css/pages-okta.css?cb=1 HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/90z5/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: text/css\r\ncontent-length: 0\r\nlast-modified: Wed, 08 Nov 2023 20:47:39 GMT\r\netag: \"0-609aa32aa0b88\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nage: 13868\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=CJdvv00nXQnxXsxU7yzogZKuZVStH64WnylBE9vtXNgQS1RDe4br1leD4%2FRb%2FfBFWZumtuVdor69f8TazMPKCRUO1Z57ZLmqWVVo91KFci1oE6deHBQDhNkRtp23\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 830bda1c2c160afa-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/fonts/GDSherpa-bold.woff2","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.420Z","timestamp":1701774730420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/fonts/GDSherpa-bold.woff2 HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://b464.m0rx1.com/90z5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28000\r\nlast-modified: Thu, 24 Aug 2023 14:00:16 GMT\r\netag: \"6d60-603aba5c97c00\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=k8PBcwymtv5V%2FRc%2BL5HviiB1Cqo19vbvJ0w7NFvgaIOjcIQehGyfw46FOEEc%2Bld1X0PXFP%2FnIdYNOh1r1xWesScKGC03sJ%2Fm7dbwYt5WOK3Bt%2F1iNilmNmBTdcCZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13868\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 830bda1c3c3c0afa-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28000, version 1.66\\012- data","md5":"a4bca6c95fed0d0c5cc46cf07710dcec","sha1":"73b56e33b82b42921db8702a33efd0f2b2ec9794","sha256":"5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f","sha512":"60a058b20fcb4f63d02e89225a49226ccd7758c21d9162d1b2f4b53bba951b1c51d3d74c562029f417d97f1fca93f25fdd2bc0501f215e3c1ef076810b54dd06","ssdeep":"768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+","tlshash":"cfc2f1878fd02879a72dfeb80252903197d00de93fea42318d99b70fe683987515e272","first_seen":"2023-04-09T13:59:19Z","last_seen":"2026-04-15T19:48:20.332739Z","times_seen":94717,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/fonts/GDSherpa-regular.woff2","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.422Z","timestamp":1701774730422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/fonts/GDSherpa-regular.woff2 HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://b464.m0rx1.com/90z5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28584\r\nlast-modified: Thu, 24 Aug 2023 14:00:24 GMT\r\netag: \"6fa8-603aba6438e00\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=FsTWIGTeHkTC3Oj2HaX2zHsRakGVCd8t4sJWTw%2Fq0N4923snlYqJrRoC9j6AqrqRvh8zZK5sXljEo6ycAxdpCzduzlqIypEBszUaJGPGeWMKnn4H27CxL5IiR%2Fvx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13868\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 830bda1c3c440afa-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28584,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28584, version 1.66\\012- data","md5":"17081510f3a6f2f619ec8c6f244523c7","sha1":"87f34b2a1532c50f2a424c345d03fe028db35635","sha256":"2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956","sha512":"e27976f77797ad93160af35714d733fd9e729a9981d8a6f555807981d08d8175e02692aa5ea6e59cebd33895f5f6a3575692565fdd75667630dab158627a1005","ssdeep":"768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc","tlshash":"b4d2e0ed44d2c62988f7638902690111f27898ffe52d7db3c19da0b27245d7ea3a8b09","first_seen":"2023-04-09T18:51:15Z","last_seen":"2026-04-15T19:48:20.332275Z","times_seen":101828,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/fonts/GDSherpa-vf.woff2","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.424Z","timestamp":1701774730424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/fonts/GDSherpa-vf.woff2 HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://b464.m0rx1.com/90z5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 43596\r\nlast-modified: Thu, 24 Aug 2023 14:00:36 GMT\r\netag: \"aa4c-603aba6faa900\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=cy3OWkZ%2FXPBvE1BQl9FcoMU%2BkFuMjIoiBAkXZ0J5I3GpXbQziRpxGnApWTh3Gp2EdkorjD5Rr2iUesiIlD6iXyQqw16URUmLOQcHZLZgjpGx4tYWGMGEFpviwbUK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13868\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 830bda1c4c490afa-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43596, version 1.0\\012- data","md5":"2a05e9e5572abc320b2b7ea38a70dcc1","sha1":"d5fa2a856d5632c2469e42436159375117ef3c35","sha256":"3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec","sha512":"785ab5585b8a9ed762d70578bf13a6a69342441e679698fd946e3616ef5688485f099f3dc472975ef5d9248afaad6da6779813b88aa1db60abe2cc065f47eb5f","ssdeep":"768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf","tlshash":"e2130258592578a9eb43bd49f00c6e64c296b3d8f5832b62334a04f0bff651620fe797","first_seen":"2023-04-18T03:10:28Z","last_seen":"2026-04-15T15:18:16.518562Z","times_seen":91856,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/fonts/GDSherpa-bold.woff","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.421Z","timestamp":1701774730421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/fonts/GDSherpa-bold.woff HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://b464.m0rx1.com/90z5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: font/woff\r\ncontent-length: 35970\r\nlast-modified: Thu, 24 Aug 2023 14:00:22 GMT\r\netag: \"8c82-603aba6250980\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=Dt1ygWJghmlTKos0R0f8QpBbU8jvTJDPfqc8LZok5UoTo3qOQF%2F3Bbomb90GTAMCsKHKUylblLplgyDYZxaliCSU3a%2Fg12M6OKgOMxkAPqyCN59QSknK9xVpLk37\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13868\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 830bda1c3c400afa-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35970,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35970, version 1.0\\012- data","md5":"496b7bbde91c7dc7cf9bbabbb3921da8","sha1":"2bd3c406a715ab52dad84c803c55bf4a6e66a924","sha256":"ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798","sha512":"e02b40fea8f77292b379d7d792d9142b32dfcb887655a2d1781441227dd968589bfc5c00691b92e824f7edb47d11eba325ade67ad08a4af31a3b0ddf4bb8b967","ssdeep":"768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV","tlshash":"a4f2d09831594c2aacbd58232b71d9df21e38f61ba42029ba193e4cd9c4714dbb1e47f","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-04-15T15:18:16.485256Z","times_seen":90462,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/fonts/GDSherpa-regular.woff","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.423Z","timestamp":1701774730423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/fonts/GDSherpa-regular.woff HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://b464.m0rx1.com/90z5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: font/woff\r\ncontent-length: 36696\r\nlast-modified: Thu, 24 Aug 2023 14:00:28 GMT\r\netag: \"8f58-603aba6809700\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=bz2iQv854FhJmW%2FowEJZNSGUpUDkceuOgvkiIeuOcRUbgA%2BbkRPpZh8dOnRJZyln8Dm0oMLTYcQl2z%2FnF6ZZ2KFk3eSij%2Bc1ZC0QFqiZ59w8F%2BcrjeliWiLxrxVY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13868\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 830bda1c4c480afa-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36696,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36696, version 1.0\\012- data","md5":"a69e9ab8afdd7486ec0749c551051ff2","sha1":"c34e6aa327b536fb48d1fe03577a47c7ee2231b8","sha256":"fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf","sha512":"9a0e4297282542b8813f9cc85b2ccb09663ce281f64503f9a5284631881da9aacf7649553bf1423d941f01b97e6bc3ba50ab13e55e4b7b61c5aa0a4adf4d390f","ssdeep":"768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU","tlshash":"31f2f15d76443e8cf06a245836ad2dd6a423171247138f8709de72bbd14f120f65aaff","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-04-15T15:18:16.534335Z","times_seen":90392,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/fonts/GDSherpa-vf2.woff2","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.425Z","timestamp":1701774730425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/fonts/GDSherpa-vf2.woff2 HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://b464.m0rx1.com/90z5/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 93276\r\nlast-modified: Thu, 24 Aug 2023 14:00:32 GMT\r\netag: \"16c5c-603aba6bda000\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=wHfS%2BA1k88wZhFI%2BPxT6N1fJxq0AHkyneAnBCKxjom6w7kHODzUuPBljrP%2BdBrtzLTqYPT8FoeyuP5kiNqpsE45ELtSBAidcNrPcIsBqZJNgN%2FmxcT03w3nIfzKh\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 13868\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 830bda1c4c4a0afa-OSL\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93276,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 93276, version 1.0\\012- data","md5":"bcd7983ea5aa57c55f6758b4977983cb","sha1":"ef3a009e205229e07fb0ec8569e669b11c378ef1","sha256":"6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c","sha512":"e868a2702ca3b99e1abbcbd40b1c90b42a9d26086a434f1cbae79dfc072216f2f990fec6265a801bc4f96db0431e8f0b99eb0129b2ee7505b3fdfd9bb9bafe90","ssdeep":"1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa","tlshash":"d293029c71ec79c19e00616e94c92535f89fdab0f049d3fa9a4ed85b927c369e343b10","first_seen":"2023-05-01T02:20:29Z","last_seen":"2026-04-15T15:18:16.488845Z","times_seen":91689,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.socket.io/4.6.0/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"143.204.55.70","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.347Z","timestamp":1701774730347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.socket.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 22 Oct 2023 00:00:00 GMT","end":"Sun, 17 Nov 2024 23:59:59 GMT"},"fingerprint":{"sha1":"BB:7D:4E:26:70:F6:06:2A:12:E9:92:A8:F1:9F:CD:82:0B:BF:48:ED","sha256":"C6:1C:9F:99:92:94:22:B4:CA:16:AD:70:73:8C:CF:16:98:BB:6F:5E:9B:8A:EE:32:C3:D5:13:F3:CF:69:F4:51"}}},"request":{"raw":"GET /4.6.0/socket.io.min.js HTTP/1.1\r\nHost: cdn.socket.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"socket.io.min.js\"\r\ncontent-encoding: gzip\r\ndate: Fri, 27 Oct 2023 10:49:06 GMT\r\netag: W/\"80f5b8c6a9eeac15de93e5a112036a06\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::bqgb5-1698403746025-0e8d119dc2bf\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-C1\r\nx-amz-cf-id: Bop6cX-V4Cxsgs-rWOC-jfp8_qFGFXp6gn9nHY99pHkcWf8JG9m_oQ==\r\nage: 3760446\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45806,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (45667)","md5":"80f5b8c6a9eeac15de93e5a112036a06","sha1":"f7174635137d37581b11937fc90e9cb325077bce","sha256":"0401de33701f1cad16ecf952899d23990b6437d0a5b7335524edf6bdfb932542","sha512":"b976a5f02202439d94c6817d037c813fa1945c6bb93762284d97ff61718c5b833402f372562034663a467fdbaa46990de24cb1e356392340e64d034e4ba1b4e4","ssdeep":"384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2","tlshash":"1423a488f2a1b06187e37165443f110ba27a746964c9c18cf639d9f19eb8ece7123f79","first_seen":"2023-04-05T03:09:50Z","last_seen":"2026-04-15T07:33:09.301136Z","times_seen":39638,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":8,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/js/pages-head-web.min.js?cb=1","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.360Z","timestamp":1701774730360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/js/pages-head-web.min.js?cb=1 HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/90z5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Nov 2023 21:57:28 GMT\r\netag: W/\"24eb-60ad8ebfd52c3-gzip\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nage: 13868\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=qcBsOweKpfWNgQkT00gkbUi4IthOUt%2BhNyayMK2w8TYSM4T%2Bqt%2BcbDgxrHeHMM5FOIQ%2BZvIsxmNFEqxugQtvMul%2BVJn%2FM0q1JbbjIkQOUyKaRqC%2FOKZxVv9YsaSd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 830bda1c2c1a0afa-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9451,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (9493), with no line terminators","md5":"452d55de561fffc8c0c96f698dbdf9a8","sha1":"c2ea086b0040d100bf614cec061acd05d1537041","sha256":"20c2e9dc4f093d70b78f5fb33c764d1d8afe53383de06a8a680b14dd07d613f4","sha512":"ada9efb7b93b5ade7d762a131b650dab2ff5a41b90a346f508452d598fbd106e4d1f4ae841b1e6de414b6cfb45fbf1e11730428c111b2ef1e7a1daa16809f3c1","ssdeep":"","tlshash":"c7200000000000000c300000000000000000000000000c000003000000000000000000","first_seen":"2023-11-23T23:16:43Z","last_seen":"2023-12-06T20:13:12Z","times_seen":3066,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:09.694Z","timestamp":1701774729694,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /turnstile/v0/api.js?render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 05 Dec 2023 11:12:03 GMT\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\nlocation: /turnstile/v0/b/56d3063b/api.js?render=explicit\r\ncache-control: max-age=300, public\r\nserver: cloudflare\r\ncf-ray: 830bda183eac56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":33876,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":28,"dns":0,"connect":1,"send":0,"wait":9,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/css/pages.min.css?cb=1","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.351Z","timestamp":1701774730351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/css/pages.min.css?cb=1 HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/90z5/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Nov 2023 20:47:39 GMT\r\netag: W/\"4276-609aa32a97ee8-gzip\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nage: 13868\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=IvM%2FEytU15d0ftAT5ZulNfTsB8w9wry0NgPi2UzGkxDe7qztxDitfBZ%2FsKECNsLPRSNWVQF2V9xctJ8cHsiPM3f4aVL%2FDIJNqn61Cx0BYohpqufrTcLu7cAx3Yig\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 830bda1c1bf00afa-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17014,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17014), with no line terminators","md5":"4d38e2ffc538c11f0dca9cb2ad6ca08a","sha1":"400ca5c484a88f9a91a1d1439e5f51a621ad3eaa","sha256":"6b14e6f4239ef85c9180a099263a041df2b82bd65a245e72cca365cbd5e88fa8","sha512":"2c1c64502508146e23f45c2d398db7a2283fdf0ee7f3757565e648a2e08cbbfbde2c32dd3ee4c764ea0c8162f0eabc4e456e2338f4e36aaf7a8e1afdaa4ff74b","ssdeep":"192:S3PiHSaXZfdY8xbXUfCkDAm0vHXIYECacgAx8K1MbJK2EKPMq/vHID/gPnqBvMmU:mtaVdY8xbXn54YE80tk0Sgfn","tlshash":"6672aaa1a2103229e177c13721d2fac922355652f57b5eb9bc7671f4cf891c32b3354a","first_seen":"2023-11-01T19:35:47Z","last_seen":"2024-08-20T21:28:38.768471Z","times_seen":25049,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/ew4g0I%2FZYomJh1e75pupA0WLfHDXy%2FQKEyLTEDfnNN8%3D","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal","date":"2023-12-05T11:12:10.629Z","timestamp":1701774730629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1/ew4g0I%2FZYomJh1e75pupA0WLfHDXy%2FQKEyLTEDfnNN8%3D HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: image/png\r\ncache-control: max-age=2629800, public\r\nserver: cloudflare\r\ncf-ray: 830bda1de926569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced\\012- data","md5":"9246cca8fc3c00f50035f28e9f6b7f7d","sha1":"3aa538440f70873b574f40cd793060f53ec17a5d","sha256":"c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84","sha512":"a2098304d541df4c71cde98e4c4a8fb1746d7eb9677ceba4b19ff522efdd981e484224479fd882809196b854dbc5b129962dba76198d34aaecf7318bd3736c6b","ssdeep":"","tlshash":"a5a002e763957d7bd94b133756651151f8324514171305458805d475161736c81c4a82","first_seen":"2023-08-25T15:09:14Z","last_seen":"2025-05-14T12:12:43.698394Z","times_seen":189286,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/js/pages-head-top-web.min.js?cb=1701774729872","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:09.882Z","timestamp":1701774729882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/js/pages-head-top-web.min.js?cb=1701774729872 HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/90z5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 05 Dec 2023 00:09:12 GMT\r\netag: W/\"9ae-60bb80b5ee41f-gzip\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=XuYz4p1aDbpujNLlDDJDWAbUjLZ7Jet0thtvUZz3dK1sxx%2F2Nu8yaAGkDXD6jcjz5CQMJmYdrsz20lRVKVY3BFWkICDgPCox9fxHQuY%2Ba%2BU8yM00%2FMU%2F7Brds3do\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 830bda193a4b0afa-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2478,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2660), with no line terminators","md5":"e417733b0f3d442de78609400bcdbee8","sha1":"1db75217530081f4e9f2886ced8e63d265abb8cc","sha256":"175cb3eee4bb458355c82db9e7be199bddf6238116eda3b6ff13bf790d033d7c","sha512":"b385a6cb12eb9315a8bab904e93170fa2c85ae32ed3c613ba0888628097ed0710f68d3744eda10144a86535965e2da291b814884ad4636156a9d512928966bb3","ssdeep":"","tlshash":"2b51ca093055ba085d6e764ab075aa78bcc5733b3511a420c0dfacacc0f6fd62879eb7","first_seen":"2023-12-05T03:09:28Z","last_seen":"2023-12-06T21:41:01Z","times_seen":866,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/cloudfavicon.ico","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:09.992Z","timestamp":1701774729992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/cloudfavicon.ico HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/90z5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nlast-modified: Wed, 16 Aug 2023 01:22:46 GMT\r\netag: W/\"86be-6030022068580\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nage: 13868\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=M7P8DUUfrafgfMMcw4nkIxYE4EspI5AuS8hzqhvo6iwukasnqmoth%2BmKGVOAYSEkb%2Flzy7AHE5xME%2Fkd6nn3wpJH0eN9TPEqFHGSdYYoz47fqD%2FD2mnmzBbZElxg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 830bda19ea950afa-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34494,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\\012- data","md5":"88415acda09a4cbd9d87543c3ba78180","sha1":"2dec4705e9ab399efdc6eef36e079aa31d1df8d9","sha256":"20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c","sha512":"77d0d7e0c85a1cad6a22372f2d3904c0842628ce7f1adac9a2a0cbf3b566ce8148527b0e7ede2bb068f5d005917b3f95c2a25d031d0d4d7a6a5a117cefa83b24","ssdeep":"96:4KOr5hOo0Qhk2fAewTq/iwa2R7Qz8pz4DopTPGFsbN:qbl626uRg8pvF","tlshash":"e3f2e7886a03cca8b5877be0cd3795fd031f6c2ad86418df216b7d49bb79f12a055e12","first_seen":"2023-05-08T14:11:31Z","last_seen":"2026-04-13T07:57:23.756501Z","times_seen":39979,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/cloudfavicon.ico","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.616Z","timestamp":1701774730616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/cloudfavicon.ico HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/90z5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nlast-modified: Wed, 16 Aug 2023 01:22:46 GMT\r\netag: W/\"86be-6030022068580\"\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nage: 13868\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=M7P8DUUfrafgfMMcw4nkIxYE4EspI5AuS8hzqhvo6iwukasnqmoth%2BmKGVOAYSEkb%2Flzy7AHE5xME%2Fkd6nn3wpJH0eN9TPEqFHGSdYYoz47fqD%2FD2mnmzBbZElxg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 830bda1dcd1f0afa-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34494,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel\\012- data","md5":"88415acda09a4cbd9d87543c3ba78180","sha1":"2dec4705e9ab399efdc6eef36e079aa31d1df8d9","sha256":"20cccc47c1bac9d2ef36b6a1c58af58c5c169ad5ca084080f0392b86f949641c","sha512":"77d0d7e0c85a1cad6a22372f2d3904c0842628ce7f1adac9a2a0cbf3b566ce8148527b0e7ede2bb068f5d005917b3f95c2a25d031d0d4d7a6a5a117cefa83b24","ssdeep":"96:4KOr5hOo0Qhk2fAewTq/iwa2R7Qz8pz4DopTPGFsbN:qbl626uRg8pvF","tlshash":"e3f2e7886a03cca8b5877be0cd3795fd031f6c2ad86418df216b7d49bb79f12a055e12","first_seen":"2023-05-08T14:11:31Z","last_seen":"2026-04-13T07:57:23.756501Z","times_seen":39979,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2039861040:1701770960:UTRDJKmxj-hd3sZGyyfY2WAHkew8KSPSrizXIf7VcwE/830bda1cf834569b/9d7656ff8158ad6","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal","date":"2023-12-05T11:12:14.623Z","timestamp":1701774734623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2039861040:1701770960:UTRDJKmxj-hd3sZGyyfY2WAHkew8KSPSrizXIf7VcwE/830bda1cf834569b/9d7656ff8158ad6 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal\r\nContent-type: application/x-www-form-urlencoded\r\nCF-Challenge: 9d7656ff8158ad6\r\nContent-Length: 24834\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:08 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 1qJLx7+lScwCgJOWrXZ0jENBqpGWa37OnkFzSfi7IOjCiHYWPSCHg0la/BQhX7fV$cXc5LprhXYvnSrocordrpw==\r\nserver: cloudflare\r\ncf-ray: 830bda36dc1f569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17856,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (17856), with no line terminators","md5":"2d999b41166ae315920a0d549aa055c1","sha1":"4e0080fbdefc41aa6502df27107e8f5d1bcab986","sha256":"c3a144f0629b2135f74c68077b19ad3c7938fff0619ba9347e5deb5795eadbdc","sha512":"b61ef69500e3514251c2cf02319c07b064bcca22729446ceeb0e7ac70ae6cb462af84ab845d7a0aa839519a3bfa4940078b96a0178cc02199120f7a91300f9ba","ssdeep":"384:BcODbrFlSUNDQlZcx0nfMr+gA32GP5cvV9J+sdntpuC:/rP3NE4x0i+HGj5+sdtl","tlshash":"8782e1239e6cf4320c858d0670cc99db58d18ffd3252f675609764f4d2e998f3a12a6b","first_seen":"2023-12-05T12:12:21Z","last_seen":"2023-12-05T12:12:21Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b464.m0rx1.com/90z5/","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T11:12:09.304Z","timestamp":1701774729304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /90z5/ HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ef7link.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=fFFCGSCiA4smh9P6fh4WTFaigZm5ylTaZqSA2BIHuPXSR1Xb7u1dLUFIQoML8PCk7lloC07tH0ysnUhVjFvtt9SMUBqCIWcw3l8d0dwNteO8Q9O1y9MuBtp8MjOQQGrOLg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 830bda15b8df568b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document, ASCII text, with no line terminators","md5":"339fe908b782d533a2dfcaf5ef04a529","sha1":"1e791f0e3e0c1d1a04cbaddd817080dce64ba620","sha256":"3370a1fe014eda4355e78696a1f9eec823fb9f12b485aab01397411a97ad05d8","sha512":"b7f46ae2f600cfc8874585b51be853b3e23e65a1691b4876f3a3b3e1311cd144236a378f76a0491643956a1dfe9179ec8ac4fa0441c102ed1431e0069059d95b","ssdeep":"","tlshash":"66b012ff1c60c0c4fc0429f12ff5fdb84007902e0950f80db1c0301481527e90c76540","first_seen":"2023-12-04T20:30:18Z","last_seen":"2023-12-11T20:07:03Z","times_seen":844,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":15,"dns":0,"connect":1,"send":0,"wait":239,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:09.692Z","timestamp":1701774729692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 05 Dec 2023 11:12:03 GMT\r\nage: 1172106\r\nx-served-by: cache-lga21931-LGA, cache-bma1659-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 331064\r\nx-timer: S1701774724.903840,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-15T20:38:42.467932Z","times_seen":450358,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":56,"dns":30,"connect":8,"send":0,"wait":9,"receive":2,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830bda1cf834569b","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal","date":"2023-12-05T11:12:10.631Z","timestamp":1701774730631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=830bda1cf834569b HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nserver: cloudflare\r\ncf-ray: 830bda1de928569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":178835,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7dea94b333f9e835d904f5804f16e685","sha1":"46695f875b43d697a50680222b31c43190e804eb","sha256":"e3e35d92702ce9aaf97c2ce6db59dbd3a78741090d01c29366a978c7957ab2fe","sha512":"872ddf3db2c0cee6eb8daba97d51592d4f3307a19978f373c9e41f40a58dccf372e22eace1cf6409d1bedc3eca6a57fadbbc3f3ca11072a440b61c140c4a3b3c","ssdeep":"3072:LHehLjxzmPe8xRR4CFRgM8iJ7muSCk6tRg8Ft:Lqvue8TR43bymYTp","tlshash":"d10484cc63c1bd5641333a7878233216709b3d456c7c19deea40b5d429f931a92ebabe","first_seen":"2023-12-05T11:43:55Z","last_seen":"2023-12-05T12:28:10Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/830bda1cf834569b/1701774725134/hswG0bhq4dRIviN","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal","date":"2023-12-05T11:12:12.321Z","timestamp":1701774732321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/i/830bda1cf834569b/1701774725134/hswG0bhq4dRIviN HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-ray: 830bda287cb0569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3 x 30, 8-bit/color RGB, non-interlaced\\012- data","md5":"2dc606c46060c656366e08da3121d269","sha1":"daa7bd64b33b2d245643350d0bc1d24785a4afb9","sha256":"2b2a4f967751507ce9db5b405a9f2772b4c27426dac18a9ed35efa591b0fcfce","sha512":"2195cdd1fe672ed4c95603f7759abf2070cb67eb34d9bcfcc8b0d6fb9ea5ea9658409d84620c83339e7e5deb14713a5eb691c12729eefe6ca92ee09d2c041a9e","ssdeep":"","tlshash":"afa002fb63d06c39c9460a77a7250561e8730618525113078825c46556562ac81d5a42","first_seen":"2023-05-16T19:57:56Z","last_seen":"2025-05-06T03:20:13.138599Z","times_seen":69,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/pages/0a06.css?cb=1701774730269","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.341Z","timestamp":1701774730341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/pages/0a06.css?cb=1701774730269 HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/90z5/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Nov 2023 14:38:50 GMT\r\netag: W/\"4fd-60b5f9c307e56-gzip\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=E%2Fx2MWM2bMDcsNuWhGQRt3jUOkj2EAZb%2FuAJMrPtZ0%2Fk03wYCfZ2I1aDVBAnFF2knLzgjB%2BLwwkFq9p986VpkUMfZxtbyzpsAl7yMf3%2B9HfxyGWqdd2qmKFbrao9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 830bda1c0be00afa-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1277,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1320), with no line terminators","md5":"f01289b3d1a61700b9be2f304ec9c8ba","sha1":"e566c68bc2cd481307fe280f59e701e55ec2ae81","sha256":"7233555de534a69a13ebd1e089834e8d4a6a360df6392bfe8345c31fb5a2437e","sha512":"3c73b8c83afb82b389c76507f4b2ebe5298d712328e66b1f4b91a0fa4080bf73985f8d4c0e6913a869e48108f2b2a28892f03c800a1c5a3b3fbfa7830e1be7b8","ssdeep":"","tlshash":"3d21026ae6865cbf751b9f692bf12784132db040c0258b3c3b3e71b3638909460773a6","first_seen":"2023-11-14T19:39:32Z","last_seen":"2024-08-20T19:37:29.53362Z","times_seen":6006,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/830bda1cf834569b/1701774725133/67d34eeac339c30f0c3b14321ab955eba9ad532608a3a288f7238f6d9ff242f0/fz5BoOs2uyyKRuw","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal","date":"2023-12-05T11:12:12.274Z","timestamp":1701774732274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/830bda1cf834569b/1701774725133/67d34eeac339c30f0c3b14321ab955eba9ad532608a3a288f7238f6d9ff242f0/fz5BoOs2uyyKRuw HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Tue, 05 Dec 2023 11:12:06 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nwww-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gZ9NO6sM5ww8MOxQyGrlV66mtUyYIo6KI9yOPbZ_yQvAAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEApsOXvs4inomvHEEJWeAmbewj10vTdOMUJh5YooYpzkcTFx8O1fGckZDmN__WSsDanz_dK-uZ_ETYKIumajyX7F3zXM4AXeZC2iYL_e3-Pi1TmaGIMJZdPWVVC9cf8AFwX7fRkcgCHxky-BRBi2T8ry--e2NK119BZC3f1t7LwQTVpP1LL3UYxZNFWJTGISYzuWNO5NvmWgGr2V4bint7BqWVsBG5VguykSCXBQX0WyMxge5W5z-tspRPjpXtc35sgdq737t6ATIZ2BVH0nyYaECjgMbN-BY6w9Y_jz03Ce0StP3YSZijpo1lfW2_lIX3SvsNX-SYCOkZ-9685ZUBSQIDAQAB, max-age=20, PrivateToken challenge=AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIGfTTurDOcMPDDsUMhq5VeuprVMmCKOiiPcjj22f8kLwABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAyAcIyqXWj0XAym0z5V844rFA0WOzLVwj0uCwmVj6zC4qOH40oBiGHrMNMBnDyk95jvnBAuHeEs855e7nA4l4DPJ4jUWKZbua8BxGAzjn74A1BV81a52F1zvBPUm-VEJXPAPXQehXphSv51uR7HKtfcM5oaS33TGDSy-6xv0r84xjMuTBvwPgXGehxpi1MCGGE5yWkzKN5Zzllk7m6Nkiv6learV-Uz7tzaoPbdZkBk1bFXxm2q07jWavoBZ-JEuEJyjQ00PSTz2Zjpbct6AlR3eCS9sbmXtb5XxSs7JMsvoa8uojD7a5m2SEJIwaf8xKL6wtxkaPonUfvsLj4JoJZQIDAQAB, max-age=20\r\nserver: cloudflare\r\ncf-ray: 830bda282c78569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:34.799861Z","times_seen":406839,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/56d3063b/api.js?render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:09.742Z","timestamp":1701774729742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /turnstile/v0/b/56d3063b/api.js?render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://b464.m0rx1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 830bda185ec256c4-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33876,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (33875)","md5":"8c90f391245a994ae95e644a587c8626","sha1":"7bfc99336571d0ccfe38f9e1d18cb26b4adfc316","sha256":"acbe221d9bb71e85d0a3b52a7a9d44ee4669ab664186b32d0c737a2be62681e7","sha512":"916f4cd48fc87b759efa209ecb2b67a7878d6e16eb3128512be9668731027f7795bc016e6081ee9f74ff4b38af54c9cadf88a6f965980c7d0881b05d645cfeaf","ssdeep":"","tlshash":"","first_seen":"2023-11-30T14:29:00Z","last_seen":"2023-12-14T14:42:23Z","times_seen":11689,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2039861040:1701770960:UTRDJKmxj-hd3sZGyyfY2WAHkew8KSPSrizXIf7VcwE/830bda1cf834569b/9d7656ff8158ad6","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal","date":"2023-12-05T11:12:10.967Z","timestamp":1701774730967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2039861040:1701770960:UTRDJKmxj-hd3sZGyyfY2WAHkew8KSPSrizXIf7VcwE/830bda1cf834569b/9d7656ff8158ad6 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal\r\nContent-type: application/x-www-form-urlencoded\r\nCF-Challenge: 9d7656ff8158ad6\r\nContent-Length: 2397\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:05 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: Xc97bfG160ylejUpB0axiRrMYIDOkPTjZJtySzVVOZSOOXypvmAFZH4BKveYe92fb77GpxMXkIOoAkMGTzXYDf4y3DZACnjtx1lLB2+PKbh9nFVlqE2p30bPr0iUTu5SCnwg+o1JEyEo8Hy6DDLji+OD4/dA6AKXOWorMPdVKaIJ+SVuQ6t3HeDoj0Ef8d0V0aS/oYb73ZdZOofteZEywZ4f/kgjd+6La5pI/3hDj5O4TfsF5zZm/Y6vHtqeXrWHSZlNJQsWv2gNRE/et7Mqvzhh2KeNPEKYLikOsmq7jMk5YlawbUZQPsNolSJftJ4Q6dw283qtddnzALrNNXNm8PxnHXrp8BsjeEdNTbP5f1hAzCfNtsm65aF62nqQ/CCi$n4hIRNlYlLLpui/D5PbjBg==\r\nserver: cloudflare\r\ncf-ray: 830bda200b80569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88400,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"091a31257012e6b0c79bdf813acc7d8f","sha1":"1be5ab3e7ce572996ed09037d0215c73568b85a4","sha256":"a80acedb9e435d130686a169d6f23bd5da8af2616b6d2867efc3b5cf611e702f","sha512":"5be7b90b52224d784404c6b4ed0cc62c67e1c2e10a0260f53facc49cee6b144352f1b9c26c0833e1238490516240064081d5fd32b5745ba7482f372a7f7b0687","ssdeep":"1536:tQp4oKI29VzEt0NFSJWwrBEUkvs2wexhSyYj/tOZ5+U0PxtEAMsz6vKgFIDjW0O:tQtN2zzQWoEUk2exhgj/ti5MA0JgajNO","tlshash":"b383122c9aed3dd5033bd13e94afee07acc18f068420e382eb5f51452d2dfd9a865068","first_seen":"2023-12-05T12:12:21Z","last_seen":"2023-12-05T12:12:21Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b464.m0rx1.com/web6/assets/css/pages-godaddy.css?cb=1","fqdn":"b464.m0rx1.com","domain":"m0rx1.com","tld":"com"},"ip":{"addr":"172.67.201.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.354Z","timestamp":1701774730354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"m0rx1.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 13:22:35 GMT","end":"Wed, 28 Feb 2024 13:22:34 GMT"},"fingerprint":{"sha1":"18:E1:31:63:0D:C5:8C:BD:0F:2C:19:B8:F8:76:E4:2A:C4:A3:8A:1F","sha256":"6D:88:C6:FF:1E:3A:FD:F9:45:15:E6:58:53:41:32:58:8F:DF:AF:A6:E8:15:AB:92:35:40:3D:53:C7:97:91:AD"}}},"request":{"raw":"GET /web6/assets/css/pages-godaddy.css?cb=1 HTTP/1.1\r\nHost: b464.m0rx1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/90z5/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Nov 2023 20:47:39 GMT\r\netag: W/\"954d-609aa32a9dca8-gzip\"\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: DENY\r\ncontent-security-policy: frame-ancestors 'none'\r\ncache-control: max-age=14400\r\nage: 13868\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=fC0QCu9jtLekglDkC4pQYdGgYVcbrMfLFSNa05g0XE4ZuPpwgloG3tVN6NxM52QLxT16mHVWosIhebSfqFmZBUjX8yAr5%2Bv7QhbNnrjoqOpjflzHeJ7KseiwpqK2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 830bda1c2c110afa-OSL\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38221,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1437), with CRLF line terminators","md5":"0a40b289b9ecb589387f31cbd2807033","sha1":"dbb02f7d438a952b55cab142749c648cd6417af5","sha256":"c17e32e67edc46c2720b01a4a716996809ad8335c875f6980319a1440de6c245","sha512":"faca0a6d1d4202a89b79c81baba0317438d140917e29eead72cc3a0b3e9b4e096ab3b2989bb3c16cf2d8747ff487170afd0b67d88cc251d72c9f4933476e0362","ssdeep":"192:XoogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkfeWcrScuH9Ye3YdersR8Q5oqWjfHogxp:QDKAaZtJs5odwHhx5P6mqjDggJkLLn","tlshash":"c403cf86155062385f36277bf3bb00aceb6d827356961664b4bcb444cff86e410e1eaf","first_seen":"2023-11-09T15:46:52Z","last_seen":"2024-08-20T20:16:30.359257Z","times_seen":23017,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.2.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://b464.m0rx1.com/90z5/#ramona.parvaneh@bassmedicalgroup.com","date":"2023-12-05T11:12:10.484Z","timestamp":1701774730484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 18 Aug 2023 00:00:00 GMT","end":"Sat, 17 Aug 2024 23:59:59 GMT"},"fingerprint":{"sha1":"5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E","sha256":"A2:A8:37:E9:57:D0:F0:FE:3B:6F:A8:23:58:80:DA:61:DD:F9:50:CF:F0:2D:27:D5:00:AA:21:A7:B4:75:80:AD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/njz79/0x4AAAAAAAN6D7f9sgpQQzbS/auto/normal HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://b464.m0rx1.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 11:12:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndocument-policy: js-profiling\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nserver: cloudflare\r\ncf-ray: 830bda1cf834569b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72918,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (40091)","md5":"f14238e9eb824ae9140900adb0b74188","sha1":"fe8fede8adcffd1d69918c6dd913b3e851dc0cb7","sha256":"613072fb9f82145fc558a284f5f6fea48b6771ebd97419540d9666ee28cb12c8","sha512":"4a689de267b2afc6271b8a563c5c0cf772f9ca8b858fdb82d303970542630f2407687190304ee57f979e4bb757f53fbab3bd24bd858c64c981a9f15cfc668ba5","ssdeep":"1536:UaTfc9IJbBeceIedkeO5gwyc99Kh0afdU6/jPNXhzNmU77JuI15fJRjDbY1GvIjc:bfoTV/Pws9/j1hd77Jv5fJRjDbYMvIjc","tlshash":"0b63e6d98ebc7c69ab029a29b0ce51e3732d53471551e198b8dca190cfec04e26f1f79","first_seen":"2023-12-05T12:12:21Z","last_seen":"2023-12-05T12:12:21Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}