{"report_id":"62d1fb03-0599-4c07-9701-ba7ef066b810","version":0,"status":"done","tags":[],"date":"2026-06-16T01:37:16Z","url":{"schema":"http","addr":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","fqdn":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","domain":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","tld":"cdn.bubble.io"},"ip":{"addr":"104.17.124.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","fqdn":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","domain":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","tld":"cdn.bubble.io"},"title":"Webmail :: Welcome to Roundcube Webmail","dom":{"size":4309,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e525dc26dae82f54eda00ba5fe105466","sha1":"2bcecdfcea9d2b07fad497ed413cdf6f6627d5d3","sha256":"17258b621426fea607ecfbbb7bbc454dc40dbfbc38c2a4ac8363fb704a163d7a","sha512":"bfd5de026be615ded6cd44f7acdc10e17feb33685dab799d15cdf440f28d8db3405958d6a3fad0d3c4d60d46e411e32b45db93029d6722a08c89539cbd236548","ssdeep":"96:evg9F32+kNzPUlTsUjih3hABNz6quhaiccDIKfs8/UgBf0DfPbiqip:evg9F32+yYlTsU23hItcXUlmQbiqip","tlshash":"789184f2e71d18c2072445b974be7ac934be403b6b159d967ce4203c2ff4f8e696a584","dom_hash":"domhash5f972db4cf998740e4c5553d98911c03","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","fqdn":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","domain":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","tld":"cdn.bubble.io"},"ip":{"addr":"104.17.124.183","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-21T01:37:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","ip":{"addr":"104.17.123.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-01-05","domain_rank":0,"first_seen":"2023-07-19T12:58:25Z","last_seen":"2026-06-01T04:31:50.334367Z","alert_count":8,"request_count":4,"received_data":7385,"sent_data":2319,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.5.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-14T22:40:52.388947Z","alert_count":0,"request_count":3,"received_data":142083,"sent_data":1795,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-14T23:49:50.803257Z","alert_count":0,"request_count":1,"received_data":288286,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.hostingireland.news","ip":{"addr":"185.43.232.5","port":443,"asn":29550,"as":"Simply Transit Ltd","country":"Ireland","country_code":"IE"},"domain_registered":"2015-10-20","domain_rank":0,"first_seen":"2017-01-18T20:10:51Z","last_seen":"2026-05-17T02:15:54.73889Z","alert_count":0,"request_count":1,"received_data":120920,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.0.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"11d6572328c173c395bfa02e3e4d0272","sha1":"c80ea474aca683117bb6871655c246c6e5d6c3dd","sha256":"aff01a147aeccc9b70a5efad1f2362fd709f3316296ec460d94aa7d31decdb37","sha512":"70481d7a1d0859ed69518ca9c789983e30f1181fedc88391c23c732ab9e8c5c89fd99c48edfc3cd696565749469cf58badf207180eea73deb8327463c8262611","ssdeep":"6144:9JChNVls+TCtlFhTzeKR7PYmD2zK8EAbEtPx+WI+Y7cFyW48L/dyVxNaIPfytrAP:9f7PYmD43APx+WI+Y7cFyMyDTPfCAeuH","tlshash":"e754a4d9f78d112e423231aaac2f12cdb77cd171560458aebd4d597c24a083d83baf7a","size":287649,"data":"","first_seen":"2023-03-07T01:28:54Z","last_seen":"2026-07-21T21:10:14.225919Z","times_seen":841,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","fqdn":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","domain":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","tld":"cdn.bubble.io"},"ip":{"addr":"104.17.123.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b974ae235b08354ab3ce45e04cdf97f","sha1":"c23836cf280d42b7f0f7d82ae25af446582deb3e","sha256":"a5378eff0115f89603e2480c1df6b00b224e4350b5879af10bccd975cad11567","sha512":"2096526a3cb9745d7ecc01fe8cec5712091651473ec7a0aca3414142cfc4b101f57ee4a23317da8613126357ca0c3eed693daba045c5e74e6c5652dc266cfc70","ssdeep":"","tlshash":"925144b2f30d14c10b7415bf517e6ac531bd40366e55aee77ce0343828f4f8e65aa8a1","size":2792,"data":"","first_seen":"2026-06-16T01:37:19.019027Z","last_seen":"2026-06-16T01:37:19.019027Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.hostingireland.news/wp-content/uploads/2010/11/Webmail_logo.png","fqdn":"www.hostingireland.news","domain":"hostingireland.news","tld":"news"},"ip":{"addr":"185.43.232.5","port":443,"asn":29550,"as":"Simply Transit Ltd","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","date":"2026-06-16T01:36:53.349Z","timestamp":1781573813349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hostingireland.news","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 12:27:35 GMT","end":"Wed, 26 Aug 2026 12:27:34 GMT"},"fingerprint":{"sha1":"FA:7B:D2:FD:7C:F8:7A:27:A9:BC:12:BC:77:99:6F:0E:CB:9F:C0:6C","sha256":"E3:3E:AF:71:DE:48:A2:1E:2F:07:A4:BD:17:2F:68:D4:2B:E0:2E:81:CE:25:DC:F0:3A:09:F5:E8:A1:8E:62:24"}}},"request":{"raw":"GET /wp-content/uploads/2010/11/Webmail_logo.png HTTP/1.1\r\nHost: www.hostingireland.news\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 23 Jun 2026 01:36:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 07 Nov 2018 14:08:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 120404\r\ndate: Tue, 16 Jun 2026 01:36:53 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: sameorigin,SAMEORIGIN\r\nsetifempty: Referrer-Policy: same-origin\r\nx-permitted-cross-domain-policies: none\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120404,"size_decoded":120920,"mime_type":"image/png","magic":"PNG image data, 3876 x 770, 8-bit/color RGBA, non-interlaced","md5":"099f3a79bdb4525ac677ce0e7a9d5921","sha1":"c4ddc2cef5f38c2154b4db04e7d99d29f4024729","sha256":"8acb4658cb92bcd1607d539e3d7dc7b0c9efc38b2c7e666a4c332fd1972e514b","sha512":"a9d203a7f4111307a7eb13c7668eb55ad7e0ce53930937e0cea9af2964cc28eee924cea8002784aa4a6b751cae85746ee661c5c761ea773a508603c12b264bab","ssdeep":"3072:dsE6Zwvhi5tMc/BcVkfpYlkL2CDJER27l1nScxE:dpasi5tf+WfpbBlERil3xE","tlshash":"00c3f23604b0e5b6f265c4fcdc7ddbe2835920f5c8666dfa8d345c9a6d9380e88621ce","first_seen":"2023-05-05T15:51:38Z","last_seen":"2026-06-16T01:37:18.998083Z","times_seen":126,"resource_available":false,"data":null}},"time_used":1124,"timings":{"blocked":119,"dns":140,"connect":64,"send":0,"wait":128,"receive":573,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/favicon.ico","fqdn":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","domain":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","tld":"cdn.bubble.io"},"ip":{"addr":"104.17.123.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","date":"2026-06-16T01:36:54.008Z","timestamp":1781573814008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bubble.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 03:35:14 GMT","end":"Thu, 27 Aug 2026 04:34:13 GMT"},"fingerprint":{"sha1":"A7:5D:71:13:AE:CC:EF:E7:62:51:75:E4:7E:3B:D6:EB:1C:17:7B:F2","sha256":"C4:56:E9:46:AE:52:06:E4:06:DD:08:96:EF:20:50:54:AD:07:C5:B7:7C:3F:E2:55:0D:2A:0C:1A:39:C2:41:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Tue, 16 Jun 2026 01:36:54 GMT\r\ncontent-type: application/xml\r\nx-amz-request-id: J77R5X1GF92EAKTF\r\nx-amz-id-2: aCMfONZeFbKRR0+6wUbS0CY1VUfx4OjtVt6SlFM0QMILUCoNG6PewQ0RIX1YO/6xmYA9VG0OJgs=\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-ray: a0c6161199a756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":243,"size_decoded":639,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"30b0ba5afedeea7128f2b0675c834c08","sha1":"d0e4d101476864d00f92d529e19d5972e28e63e6","sha256":"b3bcdd805c6010251d1b33a66bd71975997552d32d8632510513487f9a61251a","sha512":"27c600cb94850e1ccf10d0fac4a09b6c37980538ce9f8be834e721de515bdd94f73f63e4df6358492a95595cafa41a1240f10e5b9ddc40d6b135dd6cc532cbd4","ssdeep":"","tlshash":"b8d0973ab244ac058e010a38a73ef230eb1c293412d420b41ad029c70fce0a24c24232","first_seen":"2026-06-16T01:37:19.002431Z","last_seen":"2026-06-16T01:37:19.002431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","fqdn":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","domain":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","tld":"cdn.bubble.io"},"ip":{"addr":"104.17.123.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-16T01:36:52.579Z","timestamp":1781573812579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bubble.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 03:35:14 GMT","end":"Thu, 27 Aug 2026 04:34:13 GMT"},"fingerprint":{"sha1":"A7:5D:71:13:AE:CC:EF:E7:62:51:75:E4:7E:3B:D6:EB:1C:17:7B:F2","sha256":"C4:56:E9:46:AE:52:06:E4:06:DD:08:96:EF:20:50:54:AD:07:C5:B7:7C:3F:E2:55:0D:2A:0C:1A:39:C2:41:A8"}}},"request":{"raw":"GET /f1679644455398x630943732016925300/webmailf.html HTTP/1.1\r\nHost: edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 16 Jun 2026 01:36:52 GMT\r\ncontent-type: text/html\r\nx-amz-id-2: H+HJR+D0HTSRJIzyXfGjhLLrFci+eWfXnAuZpl/cD6uyFbQRPI/cYaGok/Rmn3UyIynSPA0JS+2mxVWPG6N6+z8PSELl+TEL3Kivi0gMxSQ=\r\nx-amz-request-id: WGMF3SV153B035YK\r\nlast-modified: Fri, 24 Mar 2023 07:54:16 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-appname: briggs\r\ncache-control: public,max-age=86400\r\nx-amz-meta-app-version: test\r\nx-amz-version-id: 3AqvlxMKqtyLh7oP_518Lkporo1cJqK5\r\nstrict-transport-security: max-age=31536000\r\nserver: cloudflare\r\npriority: u=0,i\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a0c616092edb56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.5.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4529,"size_decoded":2401,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"c6046fac9bddd2b2f47dda81864b1caf","sha1":"62cdc0b2cd350b397fa3c2ca8e602224707a5193","sha256":"6a7a3df3e6bfaaa23e8116ccb17510df702416b81dba2c6435eadc2993c890b1","sha512":"58e707b4ca02f7729f8eaaf226c1087934c8f5e86f1a3202278f935d72a00e790778d49b65c9d6931d87cce89dfdfeb39b19f668fd4bd080009a683913c6f0b9","ssdeep":"96:iTtubDENJle5xi0u+X8Z7rqxi9YkXxHf2C7M4fzrHf7DOinvi72:ihufWleBuF7rvreCHvWiviy","tlshash":"7b9196f2750e0cc5476442b9b0b9aec4f87ec12b9b11966575e0212b2af4f497f935cc","first_seen":"2025-04-07T10:43:31.95239Z","last_seen":"2026-06-16T01:37:19.006536Z","times_seen":23,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":36,"connect":46,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/jquery.min.js","fqdn":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","domain":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","tld":"cdn.bubble.io"},"ip":{"addr":"104.17.123.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","date":"2026-06-16T01:36:53.328Z","timestamp":1781573813328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bubble.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 03:35:14 GMT","end":"Thu, 27 Aug 2026 04:34:13 GMT"},"fingerprint":{"sha1":"A7:5D:71:13:AE:CC:EF:E7:62:51:75:E4:7E:3B:D6:EB:1C:17:7B:F2","sha256":"C4:56:E9:46:AE:52:06:E4:06:DD:08:96:EF:20:50:54:AD:07:C5:B7:7C:3F:E2:55:0D:2A:0C:1A:39:C2:41:A8"}}},"request":{"raw":"GET /f1679644455398x630943732016925300/jquery.min.js HTTP/1.1\r\nHost: edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Tue, 16 Jun 2026 01:36:53 GMT\r\ncontent-type: application/xml\r\nx-amz-request-id: H2GVKQHDT3MT736B\r\nx-amz-id-2: jeG4lTD2jLMkNOLoXeELj2v/aVPH9DYW+Qd962eQofwpyzMvpUMkdBZ4/wgiG0OVN9mD5DwtUEoyHW5JWd/oBugGek4K/ryF\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-ray: a0c6160d585f56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":263,"size_decoded":674,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"a4ec8062f7f509dbc03a506852b3a39c","sha1":"d3e8eab6da5e7fb099fb95bfb6a3bc452b751c0e","sha256":"ec7d10c6a117e9aed2aaaab4c7e5505352d5ebb217d164ecd6af0b633374d4cc","sha512":"3df2d422dc0b8d9e7978375b16f4b107c135f14849a1ed1b065638b0f97b9f63c79b8775934f817650ec12990c3ddc401d7c41557e8b5b3e26ab2757c11eb58a","ssdeep":"","tlshash":"2ad02b6af35491259f451865766af621b724853012c027fc99d269831f859814d28130","first_seen":"2026-06-16T01:37:19.008787Z","last_seen":"2026-06-16T01:37:19.008787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","date":"2026-06-16T01:36:53.335Z","timestamp":1781573813335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 16 Jun 2026 01:36:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 3374\r\nexpires: Sun, 06 Jun 2027 01:36:53 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZKwbBpReTGo2BIWLCYIOPUqdJDoVfdAVuvm4eNArfMLQC1S6V9v7zjmUMWS0MMlVX%2F1OFjvdOu%2F0RNSH3LDM8k3HT192k1sZT1a3Dq4JSsLaGNQD%2FoFVBEIXEmchIwpY3Qkg0KO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0c6160dcb9256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31000,"size_decoded":6603,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-26T16:49:53.130859Z","times_seen":302900,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":22,"connect":0,"send":0,"wait":43,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","date":"2026-06-16T01:36:53.523Z","timestamp":1781573813523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 16 Jun 2026 01:36:53 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\nserver: cloudflare\r\npriority: u=5,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 12909\r\nexpires: Sun, 06 Jun 2027 01:36:53 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZRgQiBnz93ITbGR2SMZZ68dAFPvW5UuTgPtYbZTNuUsINULVHm%2FlXXH2ZuAWP8%2Bo%2Fpjj%2FUwlw7nyOT8ihqoxroZG8GAmE%2FCK%2BkVuHKbsj6RFm%2FU23iOHd5wgLKFUB%2Brfjsz7dyVc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0c6160e8bcd56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77160,"size_decoded":78137,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-07-26T16:48:12.12802Z","times_seen":523407,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/jquery.min.js","fqdn":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","domain":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","tld":"cdn.bubble.io"},"ip":{"addr":"104.17.123.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","date":"2026-06-16T01:36:53.674Z","timestamp":1781573813674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bubble.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 May 2026 03:35:14 GMT","end":"Thu, 27 Aug 2026 04:34:13 GMT"},"fingerprint":{"sha1":"A7:5D:71:13:AE:CC:EF:E7:62:51:75:E4:7E:3B:D6:EB:1C:17:7B:F2","sha256":"C4:56:E9:46:AE:52:06:E4:06:DD:08:96:EF:20:50:54:AD:07:C5:B7:7C:3F:E2:55:0D:2A:0C:1A:39:C2:41:A8"}}},"request":{"raw":"GET /f1679644455398x630943732016925300/jquery.min.js HTTP/1.1\r\nHost: edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\ndate: Tue, 16 Jun 2026 01:36:53 GMT\r\ncontent-type: application/xml\r\nx-amz-request-id: H2GYDE341G29BXTC\r\nx-amz-id-2: wzyGB7qCPVCjlfxCcjKFjNJ96x13EJ6ZqAkDOSWzL6fCjqAMYsdmLExHhxBqTdtYF6NHSesD5ln1r15BxwauTUAN4JnzwYWV\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-ray: a0c6160f790856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263,"size_decoded":674,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"5c33acd9fdd50be938def6ba2f33d7ae","sha1":"ba76a0437ec7de7933e0c96c8b036b137e810a22","sha256":"65fee5144ce1d839dea667bf0220cd2396b79df35e83a7a71b050e4e3f58bf90","sha512":"19037485592864e5e2dde6b7fa1326857f3f0b5b2dbb1699eb5588598d0f2b627a934a7b3769f9bbfd167173ff7673df56489540d37c05271d21bb2d752f9ccc","ssdeep":"","tlshash":"b9d02b117389d80e1541496a363fa3257b74103493c876752dc2298b4f825664d186b4","first_seen":"2026-06-16T01:37:19.016095Z","last_seen":"2026-06-16T01:37:19.016095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","date":"2026-06-16T01:36:53.318Z","timestamp":1781573813318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 16 Jun 2026 01:36:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 3374\r\nexpires: Sun, 06 Jun 2027 01:36:53 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZjpgwXElGVYCAsIhfWFOPVdgmrjGIsHM%2BmgFjnYP%2B0jvaKzSudCm90H9H1tLZaqhfbBS%2B3NGBjACqCD%2BHTsCzhfIkAVFgQSo2sHyFJ7HU3SqFBPHIPI0h5H8l8wM5mhRqpe5F8B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0c6160dcb9156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":6605,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-26T16:49:53.130859Z","times_seen":302900,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":39,"connect":43,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.0.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/f1679644455398x630943732016925300/webmailf.html","date":"2026-06-16T01:36:53.325Z","timestamp":1781573813325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.5.0.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://edfdc0fa5e2ae6e3c6d7156f3b2ce00c.cdn.bubble.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-463a1\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 16 Jun 2026 01:36:53 GMT\r\nage: 540918\r\nx-served-by: cache-lga21959-LGA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1309, 359\r\nx-timer: S1781573813.460373,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 84374\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":287649,"size_decoded":85011,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"11d6572328c173c395bfa02e3e4d0272","sha1":"c80ea474aca683117bb6871655c246c6e5d6c3dd","sha256":"aff01a147aeccc9b70a5efad1f2362fd709f3316296ec460d94aa7d31decdb37","sha512":"70481d7a1d0859ed69518ca9c789983e30f1181fedc88391c23c732ab9e8c5c89fd99c48edfc3cd696565749469cf58badf207180eea73deb8327463c8262611","ssdeep":"6144:9JChNVls+TCtlFhTzeKR7PYmD2zK8EAbEtPx+WI+Y7cFyW48L/dyVxNaIPfytrAP:9f7PYmD43APx+WI+Y7cFyMyDTPfCAeuH","tlshash":"e754a4d9f78d112e423231aaac2f12cdb77cd171560458aebd4d597c24a083d83baf7a","first_seen":"2023-03-07T01:28:54Z","last_seen":"2026-07-21T21:10:14.225919Z","times_seen":841,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":35,"connect":41,"send":0,"wait":41,"receive":140,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}