{"report_id":"61eda20a-269a-44b0-8a94-3125d80b9111","version":6,"status":"done","tags":["dropbox","phishing"],"date":"2023-12-04T02:42:58Z","url":{"schema":"http","addr":"queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","fqdn":"queen-fdcd.layne1095.workers.dev","domain":"layne1095.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.21.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"queen-fdcd.layne1095.workers.dev/0009ecdc-e401-4b46-9faf-984c5884032f","fqdn":"queen-fdcd.layne1095.workers.dev","domain":"layne1095.workers.dev","tld":"workers.dev"},"title":"Share Point Online"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:16:32Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-12-03 06:08:10","alert_count":0,"request_count":1,"received_data":1925,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"queen-fdcd.layne1095.workers.dev","ip":{"addr":"104.21.21.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2023-06-14 21:46:38","last_seen":"2023-12-04 01:53:08","alert_count":4,"request_count":2,"received_data":2943032,"sent_data":1044,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kit.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2012-10-18","domain_rank":1868,"first_seen":"2019-12-16 20:51:31","last_seen":"2023-12-03 05:09:04","alert_count":0,"request_count":1,"received_data":12501,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":12905,"first_seen":"2013-08-16 11:51:31","last_seen":"2023-12-03 07:59:58","alert_count":0,"request_count":1,"received_data":31012,"sent_data":407,"comment":"","tags":null,"fingerprints":null},{"fqdn":"contractso.web.app","ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2019-01-08","domain_rank":0,"first_seen":"2022-07-30 00:35:46","last_seen":"2023-12-03 14:58:03","alert_count":9,"request_count":9,"received_data":187272,"sent_data":3730,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.iconscout.com","ip":{"addr":"104.18.28.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-06-01","domain_rank":43939,"first_seen":"2017-01-06 18:08:07","last_seen":"2023-12-03 14:58:03","alert_count":0,"request_count":1,"received_data":6908,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1.bp.blogspot.com","ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":8403,"first_seen":"2012-05-21 15:44:19","last_seen":"2023-12-02 22:28:07","alert_count":0,"request_count":1,"received_data":78150,"sent_data":507,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ka-f.fontawesome.com","ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2012-10-18","domain_rank":3598,"first_seen":"2019-12-17 07:36:13","last_seen":"2023-12-03 12:57:01","alert_count":0,"request_count":2,"received_data":89102,"sent_data":1053,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":724,"first_seen":"2014-06-18 02:37:31","last_seen":"2023-12-03 05:09:31","alert_count":0,"request_count":1,"received_data":145801,"sent_data":475,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2023-12-03 05:09:22","alert_count":0,"request_count":2,"received_data":61882,"sent_data":838,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-10","alert":"Office365","trigger":"queen-fdcd.layne1095.workers.dev/","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-10","alert":"Office365","trigger":"queen-fdcd.layne1095.workers.dev/","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com/","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":[{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-06-27","alert":"Other","trigger":"queen-fdcd.layne1095.workers.dev/favicon.ico","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-06-27","alert":"Other","trigger":"queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null}]},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"02abd2f21c254e8b948d006cc264a34a","sha1":"743a4e74db1c083e5fd3ed61b1f485b0f5e9afa4","sha256":"802aa50bfab2d48c2bffd6b19819a4bb75b519806ac40e7577a5610a5c17389f","sha512":"67937590469fe6c3f49d4113141648cabfb3a1e4e934a0bcf5de8b62f82946ca9f78f4a3167490c281dedea565bb1c45474f87a4211d7ade091c4fa9703ec30c","ssdeep":"6144:38InxtYiVR7TSM5nXp+nrpk/TQJqw6CWOJm+VI0cRzymnmc8u9djUpCwVH3a69BY:lnxtYiVBTSMN7La55wMnjlxfxu1L","tlshash":"4d15c7d4a2c91864b9a373fb4a22f4e45b2df165a05730c72ece3b14456d6bd0a3f0e6","size":925383,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.371749Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.1.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-05-07T17:42:14.319724Z","times_seen":140798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"599d64d5aba5924ea71aa848575956e9","sha1":"4db5d9ea6c8817ef605de793eaf90aa02e508d32","sha256":"250b8b3ad80418c3f7ee4ce814c46666a2c92d2aadba346af61a5bd5f3283ac3","sha512":"17400330875e81e4bb8fa517dddba7e523d767a85b650c5b3e5967ef4df506da0cfbc4df59bd829fbe16c22e0c5f2ff019fa5e443a6c0fdb996d5e40b07784e3","ssdeep":"3072:kr37m5T3U0+9NiQGlBYwdTcr6gXypTFwvHoFdYMS:kHm5Tk0ndY+pTFwvInvS","tlshash":"00c312720c4ce325a660fdafb679a05ce13af9c9c2454f16f731688bd7cd500a79ea84","size":128593,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.366255Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"8290045c31005004c1773cd0501754d55030443330401d411d45d4444d7151c033d45c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-05-07T17:17:38.421315Z","times_seen":83270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0de280da3c43cdcf6d96cd8b3500d15d","sha1":"49a024d6e4fae5e81efec145258851723d45b570","sha256":"1d70e5742343d075e4e293e3fe5e0f808f3ba28a9477b429bddc66c3ede2e033","sha512":"40a9bd27571becec0fc7312ee5a2cb9e31f9c6eca40d8379256aab1059a60b5a4e46597683035d51640ee618a9afa35448959782f945cf26510e558253c73ec6","ssdeep":"192:gCcReMahwJuLX5EyXizS6bbiOg5N56RwbDUJ28OX:gLeMamwVEyXizS6bbiHN6Y","tlshash":"4e22f88c937271c905901ebfbe308e7cd294fa05da5de224a3e3be1503d1d48a5b6f62","size":10790,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.369966Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"queen-fdcd.layne1095.workers.dev/0009ecdc-e401-4b46-9faf-984c5884032f","fqdn":"queen-fdcd.layne1095.workers.dev","domain":"layne1095.workers.dev","tld":"workers.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"6121935a0fb3c2f166109e72a0fa4bb8","sha1":"5bd2f77590c81808cc51819f6469b2334bb4df31","sha256":"5c9ac0205f68ea1af82e7156c13f6b415d5dff8e2ad32eb26fa97d0c7436af8b","sha512":"7dac81b0af1fe6b94cd1c8a9aac9610faeccaa69244baa66b42c161d877b962b163534aeeef787aaa22122847214d14f99c328e057c70a657884dd77f2f3dcce","ssdeep":"24576:+NBtoYV1IS4v+T6XYWPY26F87g6L0SkeEThK8Kj6J0R50cQYS5Oyslm/kp4r96Dg:YBBovBoWPi6SctZuD","tlshash":"fc35b57ee189cf855b68066339dcd7b52781acad0958e991cb6f70a2c0f549720fc22f","size":1102454,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.367562Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bdbb0e20ec48ae343256b7be8f5e063","sha1":"9e0cfb1f4303916e47f49c290650f00df9b61024","sha256":"9d8dc74801e168f234a3c5a9b6775a9c55f69f961c18b50659589093074347a7","sha512":"c205148a850cb51993cef24aef738e8c55073224193d2b46ea8fca0abcb4d2177e15d1a22fa962193629123951aad1ce69ee700dc325d43ec5eee81a88209fde","ssdeep":"6144:G1ssuCCbZIvXeL5a/ha5NIfreFILj5FBiWTb3vA6Vp+ocUbihW6fy1bYkBATSuKk:ErvuILmQq","tlshash":"762564f2abca4b7bdd1a3585c63320779792208f373c819b15fb88cb354c49651b6a39","size":962910,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.364701Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-07T17:52:13.694194Z","times_seen":277039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac60a542c56ae9aaa6702bc89937e79c","sha1":"4f4520b40b229f12f94c76fc159e77c2c8b05fcb","sha256":"f8a3143a791bd292b9a550309848b6183635625857b43c99c3d56149adea1238","sha512":"131bd229d7ff7844454c579bc3a082301db485667555eabf6eb30827645bb6f109b126f5e26e7d675fa17894157657fae31c728c4aee5e536ddf2e10a8ede5aa","ssdeep":"768:cdGaXvP05YVAH/0QViS4s/eiWffOX/JzdRL8t0tTR3DbNsQcJZpBjCQqik+jILWc:oL05YVAf00iS4wevQNV","tlshash":"8b036bc6b2c670c523d30ff13b6f35c5f69a15e07aa59006f021f894a9e6168fb8da31","size":38340,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.369018Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b021b51d2579b915c884255448616421","sha1":"642d5d4cf19019785cf5aff884cb3441195aa7b4","sha256":"13eaf8a139439681861ca7bc092f3ce648c74030b9de75c7d7e83f332dbb4976","sha512":"f9b7b83b5ba3bd0d909f006de03309fd61e92a8c31b98751205940596b907c0e92a9e113f66d835b5337a2ccc18f4768f6dd24ae6cd4d248bf2b71ddcf6f75d3","ssdeep":"","tlshash":"3711ebf3170168e40da4a4c72eb4ce85a9da74280f1891f247dfeb22a715fac1789e07","size":808,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.365408Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc0647547d3dde51f2bd58c69d4c7e80","sha1":"54957b63d3951b686eab9cdc53c7b7b7fd7a933d","sha256":"126ee2c07946d1a98ae749deb7466b63e005d6ff4da1430d3ec2f47acdf77726","sha512":"fe24b70c25d72323eb6a2d58c34e69b99b9f43618b0f0c1f638f5ac3c1f6a307abb0358e9d65bda52475cc6edf47a47043e209d6576c302bcda8bc1919c483e0","ssdeep":"384:tRRPqR9UT70uAH4U3yLN+ubzvP7+s+YrRGhKc9rAnVL37gDcDZUOphuKnvquYJhV:tRYR9UT70uQFyLN+ubzvD+s+Yr+DoL3m","tlshash":"86825c49f3c274c423eb57f6676bb2d9e92724e77c45980be011fa682f2112ac9db430","size":18686,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.372649Z","times_seen":248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"01f40d1e5205f4b4201e972d9766bd5e","sha1":"280302633cecef4737453158fad50e5453fa0f4f","sha256":"0092c8e893bcb9a4d4184359524bb68d5b174a3fe7472c64553a7c36a5260940","sha512":"b04829596a5a49cb2b9965a6b723002d6bf602ca8d56542e58d5e92ce9c26e28571d1ae632feb73914db87190af3aad1169034711a07e324fadfe921d49cd539","ssdeep":"24576:yi+tVoz2p+OsFqal0BTa7O29wHf3rbBms:N+e2p+XFqIpcbB5","tlshash":"0635e68645d09087746a2ca99efe967d22cf7d190e590383f5b80f3b3cd81f682563e9","size":1089657,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.374679Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/585b051251.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55d343a40c7166a79fd314f13cbb2e93","sha1":"96904a849c32ca220e0aaa2ae3e81cf2b5cdf764","sha256":"a1f75d6278713a84a8f28a392c77ca8a6a7c32bf14314d4a34a6ce2f06cfdf7a","sha512":"518ac396e7f82899cab4a6e3cb68116f2b599d680d015a1a8024926bc39e9a5d3ed68935b2150da33ad41a9103e4cfd5031a7e89036901c972eee257546bb1c5","ssdeep":"192:GO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:GdRCchzzYfnqejah3e1Q5l8h6vb0","tlshash":"d732c2997694f1b646ab7160c03f620bf276352a3006d020e25dd9e4ac7dd6e9233f2e","size":11893,"data":"","first_seen":"2023-11-29T01:32:53Z","last_seen":"2025-11-14T14:58:52.675593Z","times_seen":7510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"3fe541a613e2ffb35d05e53bea37285f","sha1":"552884945270acf360f13720ee14e0f071a13e13","sha256":"fc9dcce717966fd38ef8aee4f1e5bc11d84daf6104a0d4c64f4c0903de6ff362","sha512":"cc3c7eff990e3d95ed205964b0d205519b54ef96b46bd4024c3564b35dcbcd2ab07af927c822a226e0f0935183628852cb4fe95368fa32abb417b544b971c585","ssdeep":"6144:hPIJYvcupudluDcOmAwGLlNtsB+k3xenw6nfLhwiDL2tytH+y/3QOHk17DHtahTC:fHK5WL8qcC3Lhk0rMNq96","tlshash":"572583f6a1894855ba5272fb471bf4e09b2db164611bb28b1ace3f10079c2b44b3f1f5","size":965766,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.377384Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"597ffbd693cecb868f01e1093d7f6577","sha1":"d7454fdcb0eafa8d8840b292df61920b73b43194","sha256":"97ed01ad139c6fcb08e3b58820d98088ead1a469f43c1c7d8d987789ab89932a","sha512":"d96d490891e011b44b76775875d97027cee62d712126dd52958a9d1ab0dfe4338a53233499d52f14ab265b8b2d9caa0c073400c7181b93bdc6dae54da623c382","ssdeep":"12288:jLQL2F2VGaYXiGBFOcJjKx5qEzHv7K/uFtuyCEchuyU:jLQL2F2VjGPOcBKLqEzHv7K/uFIyCE1z","tlshash":"811597f3a632f1aab4fd7e834375d98906749a462cba0d1addd11a3364d40f81e4ec8d","size":958306,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.376033Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"10416d8c462c2e5861a8896c1e28418e","sha1":"e7274c311eeb9a5b9f09b079fbd5ca7edeb706fa","sha256":"dcaaf3e4a0249321b02cefb59179bac81afe2b02c816a078fac35fd2c80b61c7","sha512":"e8c88a3ef2bbf0c64dd629c8ac6a35b665361e954fe2bfe2647a736b71c46f08bb69813d28240e4356e247b258d85bee7e3e3d76cc61a06ae00d93053c9698c6","ssdeep":"96:/mO7czo/OHhrv3jLyaXEVBPnliBP29fIXqBGgclyQauxW1aV0eGI3ZBDWiJ9hwEi:/z7yaQJjLyaXEXnluPSAXqBG7lyQauUV","tlshash":"d1c1fd29723b7151a3c9b8b32a0fea5dd58c5d7db4a03aa58f77e4d0721980218c9eb0","size":5949,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-10-06T09:22:23.8412Z","times_seen":1539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c30c48193f7885c9f8ab204245e5d73f","sha1":"87a38b5dee16b0b7fa82b8e98938f0ebf4dd8ab6","sha256":"7383d8e588b3e385317fc7548d21b36abf2356d3d4b114d4b9b97412bd4d38b3","sha512":"08953f5dc1335125854e58f7b64ad8b56da0e488c512144851de553a0b706fb7061dda25f4c11cd82b64a2f932ac5bbfb06508d9fe32870ea70577e9a5c99ae6","ssdeep":"192:vKCqsfL12fQrCaPhqtlEyTA8DDkQ1y8hcXj8UXlMbK5Ed1PwNoHexRIqpU3qHIGw:vKCqsfQFSDn5+z","tlshash":"23e17fbb265f361263d99cb8681f075cd3ca134d32b047d28ebad8f5b65da4028dd7a0","size":7259,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-10-06T09:22:23.822286Z","times_seen":1539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bdc6ff2191a180b385e39c1b83850b21","sha1":"9073008cd292dec08f74a06ceb53ce1ab51b9a3c","sha256":"2e3cf4b8c0726a49882b890099f2e536f8b435c3f6abb3757a0350548358e425","sha512":"dd2e32f13018d2e4fc89c6307023a1ad7d231b2662fe99c38986b1d48ba998a3e9d0d97e888d8d58b3e222bcecad948d5e837d40ffc861f2974e4308ba814e82","ssdeep":"192:BOV1L41jMxoI5lIdSWsYqcRNmRd6Msb8wU9ZlMWEiEXvvlq9fl1EvQTe4yaf3T:BOjmE5A1sYqcRNmRd6MswwUrlMXiEXvE","tlshash":"4822b68c7abdb1ae2a0b75f7663721cf65681cd577d80c398250dcc8769122ed0eca38","size":10729,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.379617Z","times_seen":1511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"154f4fb45e4ec99d7b65ca91144da3f5","sha1":"54292bcd889df521a024d6a7c9e9e9014c729663","sha256":"12dcee6e75d50c48b06e85f7020d31f292a0fc67ebf2c82fde4f4547936afaf6","sha512":"85ca47edcaba7b8ee7e5de3ebe55a167d7c79b6dbdca32f28572402983ba560b3006fc87e1ffff2f10622b4ee797a7ba7d5676259bdfb8e735e4b71c51e5343e","ssdeep":"24576:jiHtVoE2p+OsFqal0BTa7O29wHf3rbBmj:GHJ2p+XFqIpcbBI","tlshash":"a135e68645d09087746a2ca99efe967d22cf7d190e590383f5b80f3b3cd81f682563e9","size":1089726,"data":"","first_seen":"2023-06-29T01:01:25Z","last_seen":"2024-08-21T06:51:47.383167Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"67bddd8a883754906775041bb1a864f3","sha1":"cc4cebc7838b62910b845c55e62b1609a0764cee","sha256":"9c8586370a91b33dc8eec467231a5548328e7a8fb88b6144227f720baac9a91c","sha512":"ea64ab405071ce71dbb6ca37254e5cce7ce7bb400ac916f724fb23a560eed67defc47afb96b08ebdb73ab76e5c72f3f6a06add4ee54b8015acbed453f989ca14","ssdeep":"6144:X8InxtYiVR7TSM5nXp+qrpk/TQJqw6CWOJm+VI0cRzymnmc8u9djUpCwVH3a69BB:FnxtYiVBTSMNGLa55wMnjlxfxu1K","tlshash":"5215b7d4a2c91864b9a373fb4a22f4e45b2df165a05730c72ece3b14456d6bd0a3f0e6","size":925430,"data":"","first_seen":"2023-06-29T01:01:25Z","last_seen":"2024-08-21T06:51:47.384129Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"21906728bd57e36539bb460ea338ed73","sha1":"bc9711fd1ca9517e69e744abf834c877c9bf3faa","sha256":"0b654341d6d285e8ae2d17cada82f130976c95aa3a55ef95c7f7ed6b0f179e16","sha512":"1dd1f263ab467e549ed5c4f5fc6c9b05c11c612065b3e2fa1dca0890e30429a683fdec7e8d28975062342f307478072f9dea915255ffbf4b5607bf04c8117cfc","ssdeep":"6144:J1ssuCCbZIvXeL5a/ha5NIfreFILj5FBiWTb3vA6Vp+ocUbihW6fy1bYkBATSuKr:jrvuILmQV","tlshash":"872564f2abca4b7bdd1a3585c63320779792208f373c819b15fb88cb354c49651b6a39","size":963055,"data":"","first_seen":"2023-06-29T01:01:25Z","last_seen":"2024-08-21T06:51:47.385599Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"067f8ffa6201a1d12cfcc5c429ee3009","sha1":"dec0fe11e02f650c0aa17037640d905fcdcd29a2","sha256":"6784e72dfcd4f78d37f59b44f36b1b37e2f1767b5aff8be95f384fd697359c0e","sha512":"8c0a0a1c8286fc3589cf8fd99a1fb18a8dce96ec546c7f0b207856df80c7753bceed9090ad81f69bb05e51884109f9c1b5500d55cbf734aacf811e9ebc62ea89","ssdeep":"","tlshash":"1c3172621bd0d5af18a180c73530628e6c50f01b590ddbde36fe97329ba1fae0b1791d","size":1776,"data":"","first_seen":"2023-06-29T01:01:25Z","last_seen":"2024-08-21T06:51:47.386724Z","times_seen":1522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2c5f45e8b9a983f2c0c93ecbd0ac3990","sha1":"4dcab27bbd2c74381a275e7f509b6c1ad0ca8c9f","sha256":"01fddc0e51a6b50df2b75799092f0ce662b09d17ec49ec9e11f5bcc90c9915fd","sha512":"ccdfbecf694f9690571d3a642f0190248011c6424444a2b556d43b851a53998b5158c15a1b215ac826dbbb4094966e92507d86371aefb4a8b66cfb73ef73d32d","ssdeep":"","tlshash":"8a01fea37550900941618789b9f5b01efcc2680b6ac82954bdeb623b1fb126f883bc48","size":694,"data":"","first_seen":"2023-04-20T08:02:09Z","last_seen":"2024-10-06T09:22:23.874765Z","times_seen":1791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3cfcacb214eb73814ad9e2bd778320cc","sha1":"af97f165ed1201ae8a45b39fddd7dfc521caa19c","sha256":"72325336ffb4c44d13eaec003e2583fa7de34ac8491ff22be50e1c3b925c3cca","sha512":"d034da4df3fb8f7c71949c5484ceadd128f4eef8228cc161295a1a164109684a116812663b94e7bef88758937df94e4bcb339266729f4bc766f7889a66de875c","ssdeep":"","tlshash":"0a71d995d315885ce07cacec7c433b9868a0f5ebd9c4a42146ac83756eb917162f8b8d","size":3520,"data":"","first_seen":"2023-06-29T01:01:25Z","last_seen":"2024-10-06T09:22:23.88331Z","times_seen":1539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a9e0a5ec489628dd544b533c75c9bdd0","sha1":"f593e8619b8dfc1db2d005cd321eadc302f82607","sha256":"40358d1cb836be590ff7506f3cd77afa6982bf5ebd37474f826fa25e046c8612","sha512":"111110460dea6351a79b501cbe63d80c72c709433b7cf3daaf389b33b2f01d083c52272d64dac8cbae62c56cc4f0d0045fb187ff122241882f3bface01ba58dc","ssdeep":"48:b7DTnWe5yxxbLvytfS2F58LAQkquyiVD5Wep5vIur8S5k5K945SMKgY/trWVpqgB:b7DTWeUxx/6pVQiCep+uHerKRpWrN/","tlshash":"c9c1ce9ae3565c01f2b9cdc4b4853be1a5c0b61e8eca09344bbce2b5f5cc576367078a","size":6089,"data":"","first_seen":"2023-06-29T01:01:25Z","last_seen":"2024-10-06T09:22:23.849747Z","times_seen":1539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f648592643cf6bf632a855b48af7de51","sha1":"e3445dc66b6224a9a15690786dbaff3555ad6998","sha256":"e2eb242131260ee3e8c556fb8758283cce7a11c751480d3062239c02d87a2aa2","sha512":"ca41bf977ecdd0335dffda438427bdd57cf44d90c3fe51ccacbbbd14e9e219da4a919c0327f15c0b28ebde36ddc4b20cfa92ebb98aa44529b583750d44addd3e","ssdeep":"","tlshash":"cb51fd45d331ac6ce4788cce684637d1b4e0b5fbcac49721867ce3756aad0f162a8749","size":3051,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.38212Z","times_seen":1511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.4.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:43.893Z","timestamp":1701657763893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.4.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://queen-fdcd.layne1095.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15851\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:38 GMT\r\nage: 6855558\r\nx-served-by: cache-lga21965-LGA, cache-bma1681-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 9, 633517\r\nx-timer: S1701657758.453644,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30638\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30638,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-05-07T17:57:25.364282Z","times_seen":127060,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":32,"dns":1,"connect":8,"send":0,"wait":13,"receive":28,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.1.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.245Z","timestamp":1701657766245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.1.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-152b5\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:40 GMT\r\nage: 6857159\r\nx-served-by: cache-lga21947-LGA, cache-bma1681-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 119, 130782\r\nx-timer: S1701657761.769515,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30070\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30070,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-05-07T17:42:14.319724Z","times_seen":140798,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contractso.web.app/storages/box.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.252Z","timestamp":1701657766252,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/box.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"280c381de202e3f1a64c9dea771f491d2e7ce777c60b74e664d09c804d95e655-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:40 GMT\r\nx-served-by: cache-bma1683-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657761.827657,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 9042\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":9042,"size_decoded":0,"mime_type":"","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\\012- data","md5":"1bc69aa63f9cab6a06f547fa69fddbc5","sha1":"a3f5e6d1480763884bef1b8d250a2d8b27a5be38","sha256":"5efe924f8689e6afc5438dfe5499e09c4726e03bee7ce6e6614f3867f9761dc7","sha512":"3e4335d378cde0360bb6ab25d353225b27a1bd05f4958044926019065a0d24d507deb8dc36f935b460819d0484eef6e41854148a6873eaa17774ad0e7bb9131c","ssdeep":"192:sSDS0tKg9E05Tvkidu5Kz+q7f0XAL6H7uSSxsaCPYylBX:rJXE05oidu5Kz+ICAL8RSFCTlp","tlshash":"74b28d13ee70b675a46964300ecd350a5f321243ca453e41be9d0d9ddf21be9af4b0a3","first_seen":"2023-04-11T09:03:30Z","last_seen":"2025-09-23T17:19:37.386173Z","times_seen":1845,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":47,"dns":5,"connect":8,"send":0,"wait":10,"receive":2,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/aol1.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.267Z","timestamp":1701657766267,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/aol1.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"dd7f7f55e783563d8fc532b4e4126d742794a7683b9653e7f9b91ada85bb925d-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:40 GMT\r\nx-served-by: cache-bma1683-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657761.831829,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12234\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":12234,"size_decoded":0,"mime_type":"","magic":"PNG image data, 253 x 218, 8-bit/color RGBA, non-interlaced\\012- data","md5":"ec9cbc1048239b3927ad0276fc983019","sha1":"17c27c038644bdb141381b606c7c94a177c07326","sha256":"f8a8cf4f1928938c796e2f35f8c21b0d510d4e3f16e016ee83d1f206f8ebde14","sha512":"72b033c7062df73b0ccb14921f580888c09faa7d753450a06d2c4127bb05404395e120569037c674245a35fb18c90193d580607ca0665bb3697f70ec4304e473","ssdeep":"384:yBiKaPw7bGJTBF15Er1AO4AHHA8ygKNNqKY7+:miQGtEtHAggNqK4+","tlshash":"fec2ad09bcb8b183494a9d7a2eca3d496c33174798556cd0bede9c564f01bb64d4b2c3","first_seen":"2023-04-11T09:03:30Z","last_seen":"2026-05-05T23:00:23.552051Z","times_seen":3018,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":37,"dns":1,"connect":9,"send":0,"wait":10,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/office3651.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.268Z","timestamp":1701657766268,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/office3651.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"42fa0ba0204a61d1b8c3baf6f50fdd22c35a7becb928510effaf056fdc99c9d1-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:40 GMT\r\nx-served-by: cache-bma1683-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657761.833351,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3687\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":3687,"size_decoded":0,"mime_type":"","magic":"PNG image data, 187 x 188, 8-bit/color RGBA, non-interlaced\\012- data","md5":"a5cdadd60382e9ae6228121542eb1c2a","sha1":"cec15f6470d0237569e931d7d11752b41ac5d8a3","sha256":"71e729939e175f4ae9d3fcc645d6b7389ec341a47a84950e047197331fdc22f1","sha512":"d7cc71e07f00d47ecb7b0c74bc9bd3fceae72845415036dd2af6f4abf428d8c8246eabf73a8dd92c115a157dcd0888f533ac418b50c3fd04c4c630985945fb14","ssdeep":"96:OSTWvkiTJq6UqENG+GfNFrNnVhsc5l8vQ1BDTQ+OLb3iMXLGe8Q/e9cv5:OSCkiNq6UqEw7A41N0+OnLbbTe9E","tlshash":"0682f751fcb1b09490ae993325d43040bc7b8bc3da858c897d8d4d626f057ad5ebbde2","first_seen":"2023-04-11T09:03:30Z","last_seen":"2026-05-05T23:00:23.54406Z","times_seen":3899,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":37,"dns":1,"connect":9,"send":0,"wait":10,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/outlook1.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.265Z","timestamp":1701657766265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/outlook1.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-type: image/png\r\netag: \"181232938be6b7bd118aacdee7c09fedfe42c183843baa23a645f0262b8fb326\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:40 GMT\r\nx-served-by: cache-bma1683-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657761.835569,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 771\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\\012- data","md5":"c3fc46c5799c76f9107504028f39190f","sha1":"519096ad3f03410cf9ce3c9b9fcca6b439d97b23","sha256":"57898461712a639d119bdf88b7145919dcc8956c7a271d2e4a1084b29eae6785","sha512":"df4a0a2f78b2013035fb738bf405119b275d4cfec31a23071eb9af499d5f31fdc4be22754ce791c975d7d417e908b5cad16f962b0add3dfdcde19844d74f6678","ssdeep":"","tlshash":"7b01ba6112735f3abfc72613591562350df2c51dd4439781167f14cd650b3eca014751","first_seen":"2023-04-30T20:33:19Z","last_seen":"2026-05-05T23:00:23.549802Z","times_seen":3812,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":42,"dns":0,"connect":15,"send":0,"wait":9,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.iconscout.com/icon/free/png-256/yahoo-2752017-2284834.png","fqdn":"cdn.iconscout.com","domain":"iconscout.com","tld":"com"},"ip":{"addr":"104.18.28.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.270Z","timestamp":1701657766270,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sun, 16 Apr 2023 00:00:00 GMT","end":"Mon, 15 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"93:0D:DD:B0:E7:BD:A9:D4:6E:BB:0D:78:78:44:C1:8E:20:2B:4F:E9","sha256":"6C:9E:D4:62:F8:26:AC:BB:81:9D:8A:D6:8E:43:79:B0:47:2B:2D:EA:9A:8E:DB:65:97:DB:25:0C:A0:3F:DF:C7"}}},"request":{"raw":"GET /icon/free/png-256/yahoo-2752017-2284834.png HTTP/1.1\r\nHost: cdn.iconscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:42:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5888\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept,X-CSRF-TOKEN,Authorization,Client-ID\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=9419\r\ncontent-disposition: inline; filename=\"yahoo-2752017-2284834.webp\"\r\nvary: Accept\r\netag: \"44d83ef016dbc382f3c1da2f736b035a\"\r\nlast-modified: Fri, 28 Aug 2020 05:06:06 GMT\r\nx-amz-replication-status: REPLICA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: MWs1xHxgg6L8sR56AhPDsOrjRgXB0axw\r\ncf-cache-status: HIT\r\nage: 1032592\r\nexpires: Tue, 03 Dec 2024 02:42:40 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 8300b28d4935b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"462937c010fe51f29e217145ac614c99","sha1":"90cb7f5542e4da877887fa5f675aeda8c41ff6f8","sha256":"37a14f4abecd152fc284270ca1a8af00674335182acd9f7ed1d5db103983ead7","sha512":"8f9bc647daec8dafacc3d2e49a151a464d038bbc4834c7da45ec18c6eb23f49e19bee3579e3a7d14ef54d33df85caef762dd040cb1d509ccf362f2e9b289713d","ssdeep":"96:aw3oUV77feeqqXTQcS06p/MFrsuO0s3Q0G/8UmnDj+2At0iD4xzkDCO7CHcGSU:aw3ow7jFq+TeJxMFIuO0CQUi2AtsOCO8","tlshash":"79c19ea4a5fc8d7a16bd10c9b3716fe0625014d8b218eebbd2f784600b1bab4d81b4f5","first_seen":"2023-05-09T20:45:19Z","last_seen":"2024-09-19T21:02:05.643296Z","times_seen":1830,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":46,"dns":4,"connect":8,"send":0,"wait":11,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contractso.web.app/storages/gmail.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.273Z","timestamp":1701657766273,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/gmail.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"cf7fbbb1613832a431b620911a0c86395c0414fe4a81ffcb6073ed75b15c9710-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:40 GMT\r\nx-served-by: cache-bma1683-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657761.841085,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 57443\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":57443,"size_decoded":0,"mime_type":"","magic":"PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced\\012- data","md5":"dce2f2b0e50cb1dbb0246d152791cb46","sha1":"d0a69c159304edc08db005163e7a0daf5a1e98a6","sha256":"acf087c1757f08b0cfd53d59066544d7ef0bfcc50999e77c5813739cd9dc1479","sha512":"91054b36ef1673b24e4fe3dc324cbe339f4e9eb72785a6a4c355c7b2a11a9a7c6e188ff9bf5b34ffdd2805d4bbed71ef6ca4975ee3e330fd8d8e383ed64b28ee","ssdeep":"1536:FxqKcVqezl0vLoYxEuKoYk5LHjGkT3b1mQOEj0+R+EH:FsK2qezl0zoYxEuKo7CYrOb+Rb","tlshash":"a063f1d3246210eef3a535f0aefdb4433a102ade0605465b2a9f982dfc335a726c5689","first_seen":"2023-04-11T09:03:30Z","last_seen":"2026-04-27T01:38:42.992578Z","times_seen":2771,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":9,"receive":9,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/other1.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.272Z","timestamp":1701657766272,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/other1.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"702685aceaca9ed1ba709d4a1508fb913b5a4b2001c7c96548651d10b57446be-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:40 GMT\r\nx-served-by: cache-bma1683-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657761.844587,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7679\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":7679,"size_decoded":0,"mime_type":"","magic":"PNG image data, 190 x 187, 8-bit/color RGBA, non-interlaced\\012- data","md5":"6843a244e12fab158aa189680b5e7049","sha1":"0e1c691f87cc4fa35c88344974f2829c40176b70","sha256":"3a9b144d6482b78afc4e0a940a1d3c22240f14fa535b808cf4dab9635339569f","sha512":"145010c45b6b83ea4005eb367c0507959ff0817e482f19e9973504081acae1b7827cbd1172cec7732b13f4e0cec058271bd6700444fbcf61fb6a3c068a3744c4","ssdeep":"192:ESCkiDw7e9Mg/wio0EYm9FWyo2XdJfXoOZdEDfmiIJQdiRVi/WTanY:DBiDw7eAdq+FWyo2/fXoZbDIJ0ci/BnY","tlshash":"d6a26d36fd727d60d68da6311cd82989ac3b8f43a9104d417ade08297f05fb99d1f542","first_seen":"2023-04-11T09:03:30Z","last_seen":"2026-04-27T01:38:42.988661Z","times_seen":3854,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":44,"dns":4,"connect":14,"send":0,"wait":15,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.233Z","timestamp":1701657766233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Nov 2023 18:39:35 GMT\r\nexpires: Thu, 28 Nov 2024 18:39:35 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 374586\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30028,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-07T17:52:13.694194Z","times_seen":277039,"resource_available":true,"data":null}},"time_used":597,"timings":{"blocked":291,"dns":1,"connect":8,"send":0,"wait":8,"receive":8,"ssl":277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1.bp.blogspot.com/-CYDSHib_wQY/X5G7l5LqTDI/AAAAAAAAklg/uJxZb4zeb0EXG_Rle2xUJGeVT7dzPUHDQCLcBGAsYHQ/s2048/Gmail%2Bnew%2BLogo%2B2020.webp","fqdn":"1.bp.blogspot.com","domain":"bp.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.258Z","timestamp":1701657766258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:28 GMT","end":"Mon, 15 Jan 2024 11:23:27 GMT"},"fingerprint":{"sha1":"07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B","sha256":"EA:70:51:EC:3A:D6:B1:37:97:90:B3:2A:F0:E8:6E:B9:0E:21:0B:ED:2C:E5:05:28:23:05:33:D0:BA:EB:CC:D5"}}},"request":{"raw":"GET /-CYDSHib_wQY/X5G7l5LqTDI/AAAAAAAAklg/uJxZb4zeb0EXG_Rle2xUJGeVT7dzPUHDQCLcBGAsYHQ/s2048/Gmail%2Bnew%2BLogo%2B2020.webp HTTP/1.1\r\nHost: 1.bp.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"Gmail new Logo 2020.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 77605\r\nx-xss-protection: 0\r\ndate: Mon, 04 Dec 2023 01:01:16 GMT\r\nexpires: Tue, 05 Dec 2023 01:01:16 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 6085\r\netag: \"v9259\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77605,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 2048x1790, components 3\\012- data","md5":"3a83eb416a79a3fc30964bcedaa8af00","sha1":"abbe5c585ec8749379279a7c2aa4ee88780aae28","sha256":"b058764dadaa97342511495fc1119f662970a0d056614e69fc4ec98753235969","sha512":"568260434c5b65c882c3889db54b44b8889002f3dad4c42575934bc5a754b4bd0b5f495cfdb241f3f1090d5fa80e493c9715338280e2cf7cceb5104db66a87ba","ssdeep":"768:5BDqU0sH/mvCajBdurC8/nQzrLLIAa04wr6fqpjnR+OcflEe8fg/4ENdx+tg:b2UdOvFjTgC8/nQrfa04wGfqVRKu+VTh","tlshash":"9273d01a7cb9cfe9c46652353af75a3e258307a2b11b852460fb1b6e09227d0cd3de85","first_seen":"2023-05-09T12:23:07Z","last_seen":"2024-10-06T09:22:23.77719Z","times_seen":1849,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":267,"dns":1,"connect":11,"send":0,"wait":10,"receive":28,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contractso.web.app/reglastefarg/hover.css","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.713Z","timestamp":1701657766713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /reglastefarg/hover.css HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6272\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"e4c7b38ebf0c1bb7f7bc9193113d305dfd11817279517afe7904b1a9cf19a91f-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:41 GMT\r\nx-served-by: cache-bma1669-BMA\r\nx-cache: HIT\r\nx-cache-hits: 2\r\nx-timer: S1701657761.243851,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6272,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fac4178c15e5a86139c662dafc809501","sha1":"ef1481841399156a880ec31b07dda9cfaa1ace39","sha256":"bb88454962767eb6f2ddb1aabaaf844d8a57de7e8f848d7f6928f81b54998452","sha512":"0902219b6e236fbf9d8173d1d452c8733c1bf67b0eb906cc9866ea0c27c2d08f6da556d01475e9b54e2c6ce797b230bfbd5f39055ce0c71ea4d3e36872c378d9","ssdeep":"1536:67O7EesvXIPRX4PT8aZv8qoXIoqbTFaFeTxvyAZ+D7M71D:qXIPRX4PT3","tlshash":"bcb38bf56591210432278a0cc3cf5f79a73cd0a3aa61dcb9b746584bcf52a5c63cab27","first_seen":"2023-04-05T06:16:47Z","last_seen":"2026-05-06T20:41:59.922556Z","times_seen":5958,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/dropbox-white.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:47.026Z","timestamp":1701657767026,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/dropbox-white.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6144\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"83b1a0250e9cda3994de60934d33f5c9d740a6512ecb810681105776b9ee833b-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:41 GMT\r\nx-served-by: cache-bma1669-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657762.557251,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":6144,"size_decoded":0,"mime_type":"","magic":"PNG image data, 512 x 140, 8-bit/color RGBA, non-interlaced\\012- data","md5":"58bd50faf57210090ca6826861832728","sha1":"dd3f528f59b292cb33e01e6021eee41ad84a24a5","sha256":"20e7b7353a4986f22af95d1a3263aa768d401fce4e77ff4758af8780e43f8532","sha512":"b274a4800ead758c5a33a421ef5b482141a2492816cec0aea698dd1bb7770d4822fa4191717e0bd064fba237d7d44dfffe96b86331fcc1e45a532d8fe451c934","ssdeep":"192:cS0tKg9E05TzktB5sCQCRxtzeQS/byJSK:wXE05stB5sARxcnbyl","tlshash":"07923925bdb07068a84eb9311dd832419d721a0bddc13d40bade5ddb6f21f8a8e4b492","first_seen":"2023-04-11T09:03:30Z","last_seen":"2025-07-10T11:45:47.02143Z","times_seen":1370,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/5.jpg","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:47.474Z","timestamp":1701657767474,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/5.jpg HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 78623\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"57cfc159820f604fa47a62349cf85beaabe550a47a689be56f4d205d3ace05d8-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:42:42 GMT\r\nx-served-by: cache-bma1669-BMA\r\nx-cache: HIT\r\nx-cache-hits: 5\r\nx-timer: S1701657762.002802,VS0,VE0\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":78623,"size_decoded":0,"mime_type":"","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1000x751, components 3\\012- data","md5":"bf1ee3df9e8f071c3eb1d4c8619e6fa3","sha1":"013ea067cb271bbfc951a077c0024f0898e81316","sha256":"e807e8bb8700b79f0f423e1ec0b47bff9a4857a65afb021b00b25efeebd22a93","sha512":"acfe7fd379a0de5c6f2c261d04ec3008790decdac123ab308e7916e621d62763d68df6c091cbdf0a80bae7fecdb39ee71a9258804521c43ee09481deafd88e8b","ssdeep":"1536:hbcZEGeaMAU518G8tFlStml+7f6+2o9F8D5oi1Mu1T0MZeupwKN0Oarc1:hwZLa5ItFItm8W+X9i9o9ueL9KNzaI1","tlshash":"6373022f93928bd8fe43ac3a6c5e32e5ee4b3a5bd3794ed82b740572d105502520ec95","first_seen":"2023-04-11T09:03:30Z","last_seen":"2025-09-23T17:19:37.382761Z","times_seen":838,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Archivo+Narrow\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.712Z","timestamp":1701657766712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /css?family=Archivo+Narrow\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 04 Dec 2023 02:42:41 GMT\r\ndate: Mon, 04 Dec 2023 02:42:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1293,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1320), with no line terminators","md5":"d2dc9e6ce6319f62a7fc6e4f736b5985","sha1":"5a3a070c02d12b29592414c8bad9fcead7545200","sha256":"52f85c1c70023b87eaf4d6bdf4ff5c4c315b046b0832e2218dd7c884e30de975","sha512":"ad91bf8e1ae1ee083ccc23f6eeb1bcef68c710d1425d03051437f951d40fac2d0b5ac7f31b36f914fa6911753ff5ad637d9cfd4628f7482e4559ed3c0972db3a","ssdeep":"","tlshash":"d0216e80241b2a04a6834fd627db7b31ad0e7791b86191366ffd14db8cced36231971d","first_seen":"2023-09-15T01:57:36Z","last_seen":"2024-08-21T06:51:49.144161Z","times_seen":14316,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":56,"dns":6,"connect":20,"send":0,"wait":21,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"queen-fdcd.layne1095.workers.dev/favicon.ico","fqdn":"queen-fdcd.layne1095.workers.dev","domain":"layne1095.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.21.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:44.149Z","timestamp":1701657764149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"layne1095.workers.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 10 Oct 2023 23:56:10 GMT","end":"Mon, 08 Jan 2024 23:56:09 GMT"},"fingerprint":{"sha1":"14:50:4F:3B:CF:43:2C:6C:AB:E6:B8:28:D4:9B:7D:01:AD:3D:48:B0","sha256":"DD:AD:0D:F0:A7:E4:34:94:08:D2:62:87:B5:15:0A:02:04:A5:9B:E9:34:85:70:5D:DD:63:5F:9C:1A:02:70:A1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: queen-fdcd.layne1095.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 02:42:38 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=XGAEffdjG5uzA3Q%2Bq18BXFjixI86lvAHZw6n6teNYykpL08n5EwYR3hMTUtnf3XWA5M5guvIpTBAqDKn0P2G6rjAnjwK2ReujASJ62nP5FeAquctSQftIACQDnZmQCmV9a6feFpkuab%2BzduXcgtVeQdiAw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8300b27fafce56a5-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1470940,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T17:57:28.492271Z","times_seen":14799076,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-10","alert":"Office365","trigger":"queen-fdcd.layne1095.workers.dev/","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-06-27","alert":"Other","trigger":"queen-fdcd.layne1095.workers.dev/favicon.ico","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.945Z","timestamp":1701657766945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 08 Nov 2023 07:11:36 GMT","end":"Tue, 06 Feb 2024 07:11:35 GMT"},"fingerprint":{"sha1":"BC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81","sha256":"95:DB:E6:BD:0B:8B:40:88:04:6D:9A:E7:2D:72:2B:65:28:9E:D8:5F:A3:7A:9D:8A:55:13:EE:FB:3C:93:E7:10"}}},"request":{"raw":"GET /releases/v5.15.4/css/free.min.css?token=585b051251 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://queen-fdcd.layne1095.workers.dev/\r\nOrigin: https://queen-fdcd.layne1095.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:42:41 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 04 Aug 2021 18:53:09 GMT\r\netag: W/\"a12ec7ebe75a4d59a5dd6b79e2ba2e16\"\r\ncache-control: max-age=31556926\r\naccess-control-allow-headers: fa-kit-token\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7334e58f541a6f336bf4941e79456558.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR50-P1\r\nx-amz-cf-id: 1hEggM8LQr98Yx2O0i3xqGRVDIwIWQ5hPoT50qao2XMq5hjTXvJKQg==\r\nage: 767429\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=bTlqePW4WDBNGxIPNoSaHSCJVltUswYAAVo9qGeaKbaUv0SV8OWdNC140a9yHQd12RB336G3u3BaFe4g4clkCSHC2OqcnWreqcWGu2WFY%2B3h0Rr55kS2Ox2KcR78QIuF6%2BfZxrtpBg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8300b291ba92416b-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60130)","md5":"a12ec7ebe75a4d59a5dd6b79e2ba2e16","sha1":"28f5dcc595ee6d4163481ef64170180502c8629b","sha256":"fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda","sha512":"28b9ea5f3f95807259c2745162424aceecac2556bc1ab9a3b33e4e15b54c6970a4df4a5892fe83c1155c82ca8d93aebb173be32f1a7f8b9d3ce038b2dd1e6ffe","ssdeep":"768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ","tlshash":"5b430bb8e54d01c9b732c44bbf81b2bc61baf73de5910d95f00e691c2ad26a811c5f7a","first_seen":"2023-04-05T03:17:09Z","last_seen":"2026-05-07T17:55:58.302332Z","times_seen":22856,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":74,"dns":2,"connect":30,"send":0,"wait":43,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.710Z","timestamp":1701657766710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 00:15:17 GMT","end":"Wed, 28 Feb 2024 00:15:16 GMT"},"fingerprint":{"sha1":"34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04","sha256":"43:DF:F0:50:19:18:94:64:CA:28:1D:82:84:B3:9A:EC:06:DB:BE:07:DE:82:E2:0D:5C:52:19:05:67:1E:BF:A6"}}},"request":{"raw":"GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://queen-fdcd.layne1095.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:42:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: W/\"450fc463b8b1a349df717056fbb3e078\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-cachedat: 10/31/2023 18:48:44\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 752\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requestid: f9e35b3c15f3bdf9f9ae8872ea2535b7\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 696840\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 8300b28fefd656af-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144877,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-05-07T17:38:38.938841Z","times_seen":55418,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":35,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","fqdn":"queen-fdcd.layne1095.workers.dev","domain":"layne1095.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.21.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T02:42:43.529Z","timestamp":1701657763529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"layne1095.workers.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 10 Oct 2023 23:56:10 GMT","end":"Mon, 08 Jan 2024 23:56:09 GMT"},"fingerprint":{"sha1":"14:50:4F:3B:CF:43:2C:6C:AB:E6:B8:28:D4:9B:7D:01:AD:3D:48:B0","sha256":"DD:AD:0D:F0:A7:E4:34:94:08:D2:62:87:B5:15:0A:02:04:A5:9B:E9:34:85:70:5D:DD:63:5F:9C:1A:02:70:A1"}}},"request":{"raw":"GET /439db6de-872e-4b52-8c39-1aed234e4111 HTTP/1.1\r\nHost: queen-fdcd.layne1095.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:42:38 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=5aSSRTg8Uw5BPEt8jdJppNp2PqXtRZqrpFDDHe3RhqEbhc%2BE2XIBLGDgQ4b3kqEffjU3gzCp3aeAw0NhTC2XQvQA5a6UAKAVfnlcy2XSZfP83bhKGVsqdxD1oSQFzMIutPOIfzZhIjsBNQe1A4SqotbZ2w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8300b27be827b4fa-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1470940,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T17:57:28.492271Z","times_seen":14799076,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-10","alert":"Office365","trigger":"queen-fdcd.layne1095.workers.dev/","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-06-27","alert":"Other","trigger":"queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/585b051251.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.713Z","timestamp":1701657766713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fontawesome.com","organization":"Fonticons Inc"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 22 Nov 2022 00:00:00 GMT","end":"Sat, 23 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E","sha256":"F6:72:03:2C:D0:96:E1:1E:BD:AD:77:14:74:82:CE:BB:40:88:41:FC:D2:F9:16:2B:93:34:73:8F:84:4F:FC:82"}}},"request":{"raw":"GET /585b051251.js HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://queen-fdcd.layne1095.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:42:41 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: max-age=60, public, stale-while-revalidate=30\r\nvary: origin, accept-encoding, access-control-request-headers, access-control-request-method\r\nx-request-id: F5yRnc-X8rBVPZsJeLnh\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 8300b28fffd856a2-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11893,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (11461)","md5":"55d343a40c7166a79fd314f13cbb2e93","sha1":"96904a849c32ca220e0aaa2ae3e81cf2b5cdf764","sha256":"a1f75d6278713a84a8f28a392c77ca8a6a7c32bf14314d4a34a6ce2f06cfdf7a","sha512":"518ac396e7f82899cab4a6e3cb68116f2b599d680d015a1a8024926bc39e9a5d3ed68935b2150da33ad41a9103e4cfd5031a7e89036901c972eee257546bb1c5","ssdeep":"192:GO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:GdRCchzzYfnqejah3e1Q5l8h6vb0","tlshash":"d732c2997694f1b646ab7160c03f620bf276352a3006d020e25dd9e4ac7dd6e9233f2e","first_seen":"2023-11-29T01:32:53Z","last_seen":"2025-11-14T14:58:52.675593Z","times_seen":7510,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":34,"dns":6,"connect":4,"send":0,"wait":162,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://queen-fdcd.layne1095.workers.dev/439db6de-872e-4b52-8c39-1aed234e4111","date":"2023-12-04T02:42:46.947Z","timestamp":1701657766947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 08 Nov 2023 07:11:36 GMT","end":"Tue, 06 Feb 2024 07:11:35 GMT"},"fingerprint":{"sha1":"BC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81","sha256":"95:DB:E6:BD:0B:8B:40:88:04:6D:9A:E7:2D:72:2B:65:28:9E:D8:5F:A3:7A:9D:8A:55:13:EE:FB:3C:93:E7:10"}}},"request":{"raw":"GET /releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://queen-fdcd.layne1095.workers.dev/\r\nOrigin: https://queen-fdcd.layne1095.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:42:41 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 04 Aug 2021 18:53:09 GMT\r\netag: W/\"76f34b71fc9fb641507ff6a822cc07f5\"\r\ncache-control: max-age=31556926\r\naccess-control-allow-headers: fa-kit-token\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7334e58f541a6f336bf4941e79456558.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR50-P1\r\nx-amz-cf-id: DZNN3MDURWzp42UM0iwcg95YlyOGGw-vUzACTZYWvRt_OSjDhJbooA==\r\nage: 322552\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vJmqt3d%2Brfrw2tVpZk1VXYKQ%2BSwSYQym4pJm%2FWF9XWLGfKteGU2gl%2FzpLHla5zauLzCFLromOCgnXWHUO%2BnHgHO0zHxj29Uz62R6at4tXX05vDGkbgeHv6HpHbk6E8R22ZvEtUnsbQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8300b291ca99416b-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26682,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26500)","md5":"76f34b71fc9fb641507ff6a822cc07f5","sha1":"73ed2f8f21cd40fb496e61306acbb5849d4dbff4","sha256":"6dea47458a4cd7cd7312cc780a53c62e0c8b3ccc8d0b13c1ac0ea6e3dfcecea8","sha512":"6c4002ce78247b50bfa835a098980af340e4e9f05f7097c1e83301289051ce1282e647abab87db28a32fbfe0263c7318d2444b7d57875873908d6d5ed2af882f","ssdeep":"192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP","tlshash":"bec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T03:17:09Z","last_seen":"2026-05-07T16:27:06.081659Z","times_seen":21655,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":83,"dns":0,"connect":30,"send":0,"wait":41,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}