{"report_id":"7c704aac-645b-434d-b46e-4ea11714bb84","version":6,"status":"done","tags":[],"date":"2025-08-09T12:58:19Z","url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":0,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"title":"Sign in - Professional Email"},"submit":{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":0,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-13T12:58:19Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"webmail-oxcs.register.com","ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"domain_registered":"1994-11-01","domain_rank":0,"first_seen":"2022-05-20T02:33:53Z","last_seen":"2025-08-04T03:07:12.021214Z","alert_count":0,"request_count":189,"received_data":3595827,"sent_data":79206,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"74dc5932b3ff12870ccddf7204981506","sha1":"a1cfb92a8593296e62cf55a07a0a68c6fca017df","sha256":"faee914a2e3f5215774ceb36386ea9a84e7342a8dda6d31d03e3af5c2f9dd504","sha512":"6011776cffa3374376b58d184e4e286da8ba91be2625acca39d0fb01be63b1df17fbac178eef4d57b8b252ddb6c49c106158db03bedcfa2a42bef22ac3fbde69","ssdeep":"","tlshash":"97a022c820ce000080322222003a8e800028282c2008ae000028e0c80e2303022a380c","size":58,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.337194Z","times_seen":2536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/antiphishing/antiphishing-9209b04e.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0d6c62b24ba6613a2323ee5c58db0150","sha1":"8cd03547ce3552314c90d2df9bce68b20a8da90a","sha256":"26a3de554672ac091979d87f5f600ab1fa96464741a262ee39e058378bc706e8","sha512":"f95f3ac04249bf57cae1e1c7d142967cc362d83247d39d4e9f6e30a3a9a8eaa52f7e8712bf0f36b241c99bc82e9ca1756cf1bfacb8a9eea741f040c71f24ee02","ssdeep":"","tlshash":"a851b58635b6b4b403012ca071315895f2b966e13409e85cf22d9cee2df2d8ad262e7c","size":2813,"data":"","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-14T00:27:08.614401Z","times_seen":2545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/abstract.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ba717b14d6980c80415e634136d2d6de","sha1":"f94c231940390186853bd4b23c1828a5b994cc5b","sha256":"822ddc2a956b24f74da789fb4123f02c2ae44ea3ff67a8de4655948688516ef4","sha512":"54787a933b36bed081ddb2e09cfcc6878053c56dcbbe86cde87dede2968eb004b5617c2abb0da1a44c869ffa4a3a6720114a77f2571ab7c70209e8bcc14676d3","ssdeep":"","tlshash":"2b31814e6178c3330cc841d87783a1cb839e6a6b3297a068346ef6f66c55da6507adb0","size":1637,"data":"","first_seen":"2025-08-09T12:58:28.940313Z","last_seen":"2026-02-17T14:14:11.505533Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/question-octagon-4jz1mxRT.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8706aa8f315b4107cb5c92b93bd1feb0","sha1":"48453d637e3be807438ee4e4dc5910312451afa9","sha256":"5e404ff28cac001a68e957d76e90a05de7963df34b540c96b52206f4b1a4707b","sha512":"d8b5b3aeae3582a6cacbcb9a4f30017724f77f0472090b66a1f735939b5b38085a3ad6924b821291c9deb8624d30e04b22371469b36aaa5892bb8deab8326d43","ssdeep":"","tlshash":"c7111ffe6a7c529ca20b8d326f1045a4536d70fcf806c5600a9fa7b95033894f99f4a0","size":1026,"data":"","first_seen":"2024-08-18T11:00:52Z","last_seen":"2026-05-28T02:13:33.319453Z","times_seen":1230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a2813094108b3ec00e07d1b6edd5cc2e","sha1":"a95752d09c9350cdba6ca15e57d7c7665e317ff6","sha256":"48c7c94d88a7d54e43eb6e48408f0e80c1d8244f5ea258439799d746694279b9","sha512":"7b064f766cd9775560c094e55c4c26da9c3485320152a6942016b893f0760510f74fabbadd3502bbbb28c39cb0096b1afb325039e604523f8af7b1f07209b731","ssdeep":"","tlshash":"81a012d820825828476600501043994c00190070140c0f41c078e84034a2063153841c","size":74,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-05-14T22:28:10.04673Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"777716066d2b0088dc23c0539311c229","sha1":"7c150e057d52b0da07c89b67c491bcf1aded8130","sha256":"2bcd8b284d7c39ec3a423e562925dc4abcc0aab403e7a6a2c337b6f95403b72c","sha512":"a14fd545fee941ba520e7d55b2808a2afe0eb7d9a2953faeb64789b25ee7ac992c94dbf26a92004dfbcf695b5bb058df5d94f9fa0df18d36a498b0e9d2828d71","ssdeep":"","tlshash":"cea0029568c35044477e1174106fa8889069dc772b485df0c1609c5d1c59460d7ed56d","size":59,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.399995Z","times_seen":2552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ebb0bd53a5981f13a9e7dc77da35c3ce","sha1":"6998d91b585e6f36ff93bd8119a3869c616d6384","sha256":"1e7a2072bc8cc3fa729525cd944b8087593bdbcba59f0d330dd0833eb8fa9b0f","sha512":"61451f0c915d3f8a6e58c8a868a00f57606d72655c25dde82324cc863fdc31d213fd6e1d4f1ace6d57b2aa3f85be7a326c5a1f9ce69e3d47db27230b8a9b24e8","ssdeep":"","tlshash":"8ea0029530c29c0c8aae11b704675b89502644af145c4f50c06cf75578f7023d63946c","size":73,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2025-09-30T03:27:29.362695Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ebb0bd53a5981f13a9e7dc77da35c3ce","sha1":"6998d91b585e6f36ff93bd8119a3869c616d6384","sha256":"1e7a2072bc8cc3fa729525cd944b8087593bdbcba59f0d330dd0833eb8fa9b0f","sha512":"61451f0c915d3f8a6e58c8a868a00f57606d72655c25dde82324cc863fdc31d213fd6e1d4f1ace6d57b2aa3f85be7a326c5a1f9ce69e3d47db27230b8a9b24e8","ssdeep":"","tlshash":"8ea0029530c29c0c8aae11b704675b89502644af145c4f50c06cf75578f7023d63946c","size":73,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2025-09-30T03:27:29.362695Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"ebb0bd53a5981f13a9e7dc77da35c3ce","sha1":"6998d91b585e6f36ff93bd8119a3869c616d6384","sha256":"1e7a2072bc8cc3fa729525cd944b8087593bdbcba59f0d330dd0833eb8fa9b0f","sha512":"61451f0c915d3f8a6e58c8a868a00f57606d72655c25dde82324cc863fdc31d213fd6e1d4f1ace6d57b2aa3f85be7a326c5a1f9ce69e3d47db27230b8a9b24e8","ssdeep":"","tlshash":"8ea0029530c29c0c8aae11b704675b89502644af145c4f50c06cf75578f7023d63946c","size":73,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2025-09-30T03:27:29.362695Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/conference/zoom-settings.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b83016bab26be22620c563ba7997c82d","sha1":"a67e850547317cb060737d1ca7bb6fa84fb4dabf","sha256":"1aaff0cfbf8b8227121c3de588d972ea43580328b18d67fdc58e8e8a0aede507","sha512":"395756fa2384c376fc1da88852e38da610480e783efced125d120f9e882da0e3a10252e1f6be0bdaa57873a8e0c1082365eed70e6df3f539b0e002c2c6a75711","ssdeep":"","tlshash":"a0311f0b9430a63b00800df4e502c5eed37a6e6773e7b97290df43bada039b5c651ca4","size":1644,"data":"","first_seen":"2025-08-09T12:58:28.991915Z","last_seen":"2026-02-17T14:14:11.442693Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/main.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa4830584aa706d30b8dc27a23228317","sha1":"2e2b92595543fddad9d58aaac9bd4425c40e612d","sha256":"72c63153d23a02a3b0db8ff2ef2cb3dffcec9cec7cc71ba46270fc0f8325ea0d","sha512":"00e7d57bc9269b8448d0b6eb445f770186a35e457f3fe59e3ac4efb5814f22c4e154db53076933042ea1f923f7787f7787e31263248cd7a94f4b22f2d8210826","ssdeep":"1536:Q9jSFfCxGVESEfykhJNbW5QuwPZNxkKUOZ+u/iJueAZcNEOqRYp/:6GhcZuuNyruTaT29i","tlshash":"1eb3e88a71a5356203fba0b1515b120a7233697da846802c787dc9f66eb8d4c327ff7d","size":110343,"data":"","first_seen":"2025-08-09T12:58:28.942617Z","last_seen":"2025-08-31T18:20:20.612541Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.alt-login/forgot-password-link.07472780.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecd43378215e1e07d837dc33f7eebeb0","sha1":"fc85ea0dc1bed00c9c295f7ad9a7b4dd931de6f3","sha256":"81063e6e23642d2a30fa32891e9f3271c65ea934c841e88f03d95b935fc6e499","sha512":"107fb34905610e95dae4f0f63d60c1d6fb6ffbf506765d66729615111e1b617102eb3d4e7611ca4db9e6345ca80ad8e06aa61f365478194c7b6e4754baef6931","ssdeep":"","tlshash":"ddf09e1c64601dbb0cad2ce8731d310aa3de037158045459b96543861738d47549e9a9","size":483,"data":"","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.423072Z","times_seen":2492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/backbone-D7zN1VIy.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a21fa1e71539bdbb57012e5137710eb2","sha1":"387b8c9dc6af496ab72b7f5d0ddc0c82ba918e47","sha256":"08ee9e086e528430bb9a656f3ecd970993d6a5c5ad5c9a22589cf0eb4cac160d","sha512":"f44b85010a0ccfd58fa7b8d9145a7bfc6b918d611a9b9e9dc53b16345df11d7207822143d0a4b87c20082bb392a0eeb5fe32ca518b00ac794b94f32ba7a01ca2","ssdeep":"","tlshash":"d621331f54a4c77744440ae9660791cfc31e69b673ef90a0101b93a94c27db342b1eb4","size":1120,"data":"","first_seen":"2025-08-09T12:58:29.052081Z","last_seen":"2026-02-17T14:14:11.416697Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/events.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"37a8df536039fdad970069e008143da0","sha1":"b820051d90427b6d078b7b01f7ba940d4661d988","sha256":"63ee714b6bcf07eb382a9bfc54f5a87f56d714c1037f3d3df71d5357360890b8","sha512":"78e1d378274eafb190b17576be461fd713a60584168daedd8a259deab87b0c2a33d8a5242ffcf0895ec8bf4e2ba338d6f9028b9125819b832392b6e66c1a0cc8","ssdeep":"","tlshash":"d121411e54a0dbb7049102faa68b81cfd31aa4a271af80b2101ad6fd1c17db602a1cec","size":1155,"data":"","first_seen":"2024-08-18T11:00:48Z","last_seen":"2026-04-17T03:11:43.170165Z","times_seen":328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/config.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5244599084cb0f4abb50b6aa165927da","sha1":"bf60a881c641ac8ab2624756fd54740737ad42d1","sha256":"cd84009bfced4a51278e5b90aac1017734f00be24d12f30c9b25dd025c8df843","sha512":"d6021fec1978825253510f603d43ba756374083e4250593213e0bc1982d4e882efd0f6796d8189991b39bc0ba02d9653c5ba710f5d0d2bfae8a5703466d00a15","ssdeep":"","tlshash":"9751501bd030b53304884cf5e0169a69a3280e6733d6ff62d1ef5379a7098bac052e78","size":2717,"data":"","first_seen":"2025-08-09T12:58:29.071419Z","last_seen":"2025-08-31T18:20:20.721722Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/loginproxy/form.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e5af57bd8e4482f30a1e53347726bfb","sha1":"b2f73a525babd1ddb1f3489ddbbb89cf4c7ace0b","sha256":"983ef9d594565130c4ae60541712eef8c26ec64085996c2c94bc46941919a410","sha512":"579b67c017eb68238e15f190619843cae2d1e93816fe7174ee5129b34bc054163bf9e48e7f780a8681567afe93e9ae52af5529b4fbb577fe238044e7c13ee71b","ssdeep":"","tlshash":"a15156ccf5e93400265391fc60234613a33a29e9180d8f29b72f85663dbcd6ec61be4d","size":2859,"data":"","first_seen":"2024-11-11T15:00:46.058988Z","last_seen":"2026-06-09T14:57:37.338272Z","times_seen":2473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/event.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1147eea07ae4d6db58151d111fea32d8","sha1":"03df5ed3a00320c5ccba456bdda066dc5cf94795","sha256":"2b23fb9f2b70b0196e96796ab268ee142e57c41588afd560ca24851e86d1ccf5","sha512":"a7d992432668fd4b845916d5034013522e6e8950510c2f6be76015152b9e035554e1bd21f5a30a501a910c12fb8126e382f84361fe92ce44a873f4cbdf856fdd","ssdeep":"","tlshash":"7f41578f7460b23201cd15f9d50bc18ba37a6a5a7a9795f4f08eaff05d15c358022ef8","size":2361,"data":"","first_seen":"2025-08-09T12:58:29.090572Z","last_seen":"2026-02-17T14:14:11.454478Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"95cdb0d6ea399ca52f3e5effcf61d5dc","sha1":"bcb2d4ecda025587bf589a4abaef1d5f2e0f35c0","sha256":"137549b86ebff648c9395873c744de9ba5f4ba27d5d8d01a28150278a40698c2","sha512":"e59ebac11295502e90018cabe9d495d90a5d39e3c5d21d68a4e4c20d5db22473576ae20682e4bc04cb252e753528dca1170dd355f1e9b8e7e1e01a3c6f3fc2ac","ssdeep":"","tlshash":"1490029634c254588b7e11b4145ea985506688b61b4849b0c150a85d2c65460d66985c","size":55,"data":"","first_seen":"2024-03-27T20:50:28Z","last_seen":"2026-06-09T14:57:37.408328Z","times_seen":2538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2e9d1caaf28a12e3cacc4a74fab822a9","sha1":"bd31b4ac236efae2e3d4d536ce1b32330abae70e","sha256":"154bcdec4d6a18e41a4080e76de57c243c244ea47b921b82288843d0577306b5","sha512":"9edf83b3495ce70098b34194fb44d6d02867d2f8649d1e12cd6d07b868502d65c86a436e6c6a76a4e0c85e2684d34f82fab47d8f692bfebfc46fcacec12e353d","ssdeep":"","tlshash":"0e9002d520c661048a6b11a804565e85502648b014484a50805094552855024562545c","size":43,"data":"","first_seen":"2024-03-27T20:50:29Z","last_seen":"2026-06-09T14:57:37.37003Z","times_seen":2555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/dropdown-desktop.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b41769785d7047b94e52a2ee04cf73cc","sha1":"0250231cb660b8bc966ade343177ed4ebd174886","sha256":"6097a79998fe4d11a0cf88f89d330fa0b6e5966852a3eae1b05d3630e88bac9b","sha512":"865d87358b41ab26ad75c86bc4cc79c74dfa120c31006c1ae52fd7b625def37cb3060e5a1e0f4c3d86704a5777f2351021e9c2ea5e0395a4772d647546a46320","ssdeep":"","tlshash":"5161547bf1303937c280099ec540858e5326aa2b7393ef7b30bd5af56902862177edb5","size":3326,"data":"","first_seen":"2025-08-09T12:58:29.064507Z","last_seen":"2025-09-30T03:27:29.299387Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"41d9facf80865029fc5133eee9d88292","sha1":"f9a57252edee0f6f9e3b808a426a756553139f2f","sha256":"511c7ae32f6c674d72e1ec1a5ca98cb5ebbc9932dccb8b1ab7219bf46425df5d","sha512":"68256ae9750399b9ba839bdab05e5647db61b83029853eaccd99493058e9be7c5267d2ee3eff2cf9f2a4220ee31fe8af8fe5bca1397ff1992ea02e6254263044","ssdeep":"","tlshash":"ce90029520c294088aae11b404675a89502644a2145c4e50c064d45578a6023563946c","size":49,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.368966Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/capabilities.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4ba54728884d1f178810719fb0f75691","sha1":"1249862cdae3752f8519fb9fc81f3fba0f8133ac","sha256":"d46610cdc7e38489881c7fe44065fd9aec5c3e20a159b2913c2a9457c51c5098","sha512":"e0dbc1ef24165276f92bd09e92ce1d6dd40b56eaacf55e129e8fcf519996d4e6da14005e0e505cba074585b8222807e1e70d6cde9d0240ee19db9a5c3933e10d","ssdeep":"","tlshash":"7751645ab5a43edb23846ca8d835591263bc8d4136cefe71a08c11fee62545cca2ad3d","size":2956,"data":"","first_seen":"2025-08-09T12:58:28.935699Z","last_seen":"2025-08-31T18:20:20.655565Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tab/handling.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"55d9c8a058afec6ea322ff415701fe1a","sha1":"81acaee4a8307ae1fb41ce114cfaee2256f13e12","sha256":"d17d8c6625f9a0616e2f2644ff354aef5431ea12e94aa5fa91522c736ccdd089","sha512":"e016521cbe1134e0152329af4c815daa4235cefcb7558ac52cf38fd0e1c9253acd4336e3aed4d5a1b5cd39f34d2cb4ff14f615d54d0d4ef506edf151719357b1","ssdeep":"48:QCK/Qyx2Ghcp48Ca+lepMCXjyYaPhokFOm5/NxGJNWu0mPCnIDMUR2CQ2zJNYemc:QCkPhe46+Huk5VxlNCyQQnemYMPtq","tlshash":"84a1b10af1e0757101b808b1d6573fa673741a3a3185a1a9e0ae58b73d02427c26faf8","size":4786,"data":"","first_seen":"2025-08-09T12:58:29.073634Z","last_seen":"2026-02-17T14:14:11.439822Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9aa5acf0809feec17f49c5a767e77109","sha1":"2b442beae58032fd108164a458f410ab26f508a6","sha256":"d9682ed531e3afbd53399c4236ebba63fb82aa0c858d460751f7e303024696bb","sha512":"363d10f59b3418aa44120013525f09d704218429fbe5eb1905c7d2dedb2569dc275ec838c9b67e7104ab388037e19e3a30b91ff8c917be41dd22ea0cd8212876","ssdeep":"","tlshash":"d2c012ca4d46144642d22312598330641472d1ff1398a40779586e012b6975c1a16b84","size":179,"data":"","first_seen":"2023-03-14T05:05:51Z","last_seen":"2026-06-06T10:10:38.717303Z","times_seen":3154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/components.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"172ee6b006931b3e39e5b437f4e680ba","sha1":"dc84313a1b4d1f2e7639681ea67b0149cc10397e","sha256":"b69c1eb0dc7319196d1386ec072240c12aed8040e080a7e6f52fd2a3d28df159","sha512":"87a73b78931b34c8e7b415bef16167b1a3ae9219aa1312ddc7a05b2f1bad8bfb72be4ecf7a37649a3095a138283ada9065ea68f1b5fd62f4604b27dad90d2e37","ssdeep":"192:Gckf4aWoKmV9Z20xQr8fY55BTqQUZP3LKh:Gnf4alKw9Z2cw5TqfKh","tlshash":"69e1e988b0f4b071c10609e5e05f526ba2340723fac7cc25d1eedbae3a35864b126d6f","size":6940,"data":"","first_seen":"2025-08-09T12:58:29.046587Z","last_seen":"2025-09-30T03:27:29.290587Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/locale/meta.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"dca8d420049c2206e839082e337ea54e","sha1":"9d5fba5a82940f6ea49e60b5b2d82655bd2c5727","sha256":"a64fb55038d7831d55f7f77cdd18531f89bf5e8487cbbf3052d42e3579f2b6d9","sha512":"45d9cc4b952e33e7ea0472f46e87e3ae2ba79725e8dcf855655d45159899ad381cab93c64e124d95b28d3179d73c222df13407bf2e4330612a552e5d9bb65ad9","ssdeep":"384:PMLh++9w29BowUx+Lq3lny/onOK2hwfn/kCX4K:Pi+qYRhLnOK2hW/H4K","tlshash":"d1820076cc3d3aa95a802c266b462cf037b41e51f723de3642ac5f747ba945de85b830","size":17902,"data":"","first_seen":"2025-08-09T12:58:28.941523Z","last_seen":"2025-08-31T18:20:20.637867Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2e9d1caaf28a12e3cacc4a74fab822a9","sha1":"bd31b4ac236efae2e3d4d536ce1b32330abae70e","sha256":"154bcdec4d6a18e41a4080e76de57c243c244ea47b921b82288843d0577306b5","sha512":"9edf83b3495ce70098b34194fb44d6d02867d2f8649d1e12cd6d07b868502d65c86a436e6c6a76a4e0c85e2684d34f82fab47d8f692bfebfc46fcacec12e353d","ssdeep":"","tlshash":"0e9002d520c661048a6b11a804565e85502648b014484a50805094552855024562545c","size":43,"data":"","first_seen":"2024-03-27T20:50:29Z","last_seen":"2026-06-09T14:57:37.37003Z","times_seen":2555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.blackwhitelist.811cfd8a.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23cebe3680aa17439cfe6d5154ffb5c8","sha1":"38a363564bde5353a0e1558901844700c1b4534d","sha256":"c0236282fc42d67d26308e6a550117d3fd99b4a97818bdc7f243742e82d8fe07","sha512":"6b65dbf86a02146db630ede5ff79c98394ff6efad89e83f28045931c91d46df693d6a05c5e4d626ae0b4d86e57ae8cb1fe21a26af8e2d7144183ee6009cf393a","ssdeep":"","tlshash":"c3d0123f5db9a0f857ee0cdeab26944d362ce9e6c63310d552405ae3047848d8e2eb03","size":217,"data":"","first_seen":"2023-03-13T19:31:29Z","last_seen":"2025-09-30T03:27:29.305053Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"javascriptURL","is_inline":false,"md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","size":5,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-16T01:12:24.138065Z","times_seen":77635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2e9d1caaf28a12e3cacc4a74fab822a9","sha1":"bd31b4ac236efae2e3d4d536ce1b32330abae70e","sha256":"154bcdec4d6a18e41a4080e76de57c243c244ea47b921b82288843d0577306b5","sha512":"9edf83b3495ce70098b34194fb44d6d02867d2f8649d1e12cd6d07b868502d65c86a436e6c6a76a4e0c85e2684d34f82fab47d8f692bfebfc46fcacec12e353d","ssdeep":"","tlshash":"0e9002d520c661048a6b11a804565e85502648b014484a50805094552855024562545c","size":43,"data":"","first_seen":"2024-03-27T20:50:29Z","last_seen":"2026-06-09T14:57:37.37003Z","times_seen":2555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.gdpr/io.ox.gdpr-c98277dd.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7091d0ac91c5db7290a1eee1bed9deac","sha1":"672f789681c3c9f6efd1856a0bac03cff8d49f74","sha256":"f11fe45821740b2a50ada7d43ef2a22205076c7ce31443c4fbde876a72db5c8f","sha512":"44a5493e2f4b95bbb0f0efc789a4b3a7bbd3aeb88e60c8141744234d89cd2bb2492e32999f7a8e1f88d97dad225cd2222b7b11808e12b8212b27c7ddb27ebec2","ssdeep":"","tlshash":"bd51938235b6b07453122c9061318896f2b516e17009e84cf31c9cee2db2dced366f38","size":2709,"data":"","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-14T00:27:08.64312Z","times_seen":2545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/minimalapiconsent.0e902e90.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"721d84ef1ad67dda77418e546fe5c63e","sha1":"0dcc6bee7f4b3ceed69901e84146d30d5609dc16","sha256":"520658a4e0d889d6204904ecd46268dbcc83cdcde420083efbdfff71bc77129a","sha512":"c52c51546123d4039945341224bbd866d373229aaaaa1346f4e71f32e6eeabfa8a7da2961134571b041ccfb5e08879db531a14cf2a4f8ab96f985965b0082778","ssdeep":"","tlshash":"3651968235f6b07413162ca061764896f6b956e13449e44cf35c9cee2df2dced262f38","size":2731,"data":"","first_seen":"2024-08-18T11:00:56Z","last_seen":"2026-06-09T14:57:37.43696Z","times_seen":2534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/purify.es-CgBxVarD.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"004d3e148a3e52bd8d52eed666b37ac6","sha1":"7cdbdb18918a281fa71544ac53a7245c6ceac1f2","sha256":"699875b16625b06309d4cf8384373c0a49bc05cbd5f16595193c953d99e5eea9","sha512":"4dddbc4cfb86b7b3cca26fc8d61edbf172496686e8a3630ecad977cadb61dce50eaedd0a674f34ebc9f7d78760947e562d750fbf07ffdff65b23ff6632233da8","ssdeep":"384:OE7X5VqJzVKwv8PUMm6I5qxqUM145DE9xpvwXTitrPYMulXt9kDF9Zkgu7kXSRy2:XD5eVXv8MMml5qxqUM1EY/pvwXTitrwl","tlshash":"a3a23c6dbd856d765bdb01e860bb6e0ca5bc100a700cc450e6cdedb518bae49206bf2f","size":21865,"data":"","first_seen":"2025-07-14T20:51:20.475365Z","last_seen":"2026-02-17T14:14:11.48347Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"62880330b333b26377ba8e588558f612","sha1":"ddd45466a1b3141a65e9d06f036dd54aef89e99a","sha256":"4c4280f52195b352af63cb2a18a147f4bb2b69e34aa1177aedf50904712dfcab","sha512":"d2368b711d5257a064df99733db5a78fc27445899d21660f3e98e814f27ccfb1fd515f4d1173280c4ad33c43d3dcd5ed9c561bc289c01eb5dff4ac68dd964368","ssdeep":"","tlshash":"eaa002952cc75000867e1178185f5894a029ccb32bc85af1d0509c5d1c5502097ed56d","size":60,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.389959Z","times_seen":2498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/login/standard.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"da0c888351e40caf2316c29d587b0c77","sha1":"b7c1b8ea18433cfdc0e95c8483b4a2b5467295ac","sha256":"99fce2348fa97489d8c5e76f96d5165729dcfe360739b28c7842d81a4d2bbbd4","sha512":"da96c26a80e4844e6600ba04a2f506c2290c0d13780295a13087e29e5d82e3e17480a52e877b57874b80493e454c6626a271423c68edd438a046d19c4ab9d775","ssdeep":"","tlshash":"5d715f3bd130786310894cf9e012ae2443798e9733c6af72c0ef4bb5ab21a75d056d3a","size":3576,"data":"","first_seen":"2025-08-09T12:58:28.944793Z","last_seen":"2025-08-31T18:20:20.786446Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/api/tab.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"15d59dc4112f7eedafc5e521511ab199","sha1":"14c9d377a1eab1d814c0ec16d3d2f0efd04a5d46","sha256":"81198cb023893c54fc4dfe699cd9185af432079e7439927b471eaa3422401462","sha512":"a01a6aa4ffaa9db1c575ee85a19dff58777786d25ef6b7f0bf179bf8f5ac00a10d23ab0882359f16567d43cf419934bb743c8b6d601267bc3aa4fc2b62155c2e","ssdeep":"","tlshash":"f571975af560b179025c48fad02a5f67d3793ef23a9b6920c09f47b87b12833c127d98","size":3576,"data":"","first_seen":"2025-08-09T12:58:28.971368Z","last_seen":"2026-02-17T14:14:11.410695Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/jquery.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d8b4c140140788cbae4967440ffdecb1","sha1":"7e76b23c921e4c644dc821831d1ba1dc1cb37cc6","sha256":"0dc6ec470d96b4b651e88d452a97be1ef0d59ca5bd5c852faa28df3e2f40265f","sha512":"3760b5d0adffb6400100345e1211c8e6c588d99571e11212f720c07dfb4c562f4c19a5ccf8f4706e77bc5ce510f4a6045806ab4e61e3f940d57be12b2008f979","ssdeep":"","tlshash":"7521fd0fd054c63744801af9e502c1ee936b666773eac2b0509f83b91a168b681a2da5","size":1264,"data":"","first_seen":"2025-08-09T12:58:29.014754Z","last_seen":"2025-09-30T03:27:29.336348Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/minimalapiconsent.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f52e15f0dd3fde0c039c1ce8b13a533","sha1":"dd4455d689ad5ff2adad135b31bf53e0eea53615","sha256":"560b674d8f9e01de05e57dcdc4199f7737bb151347981a9a5cc2f70380f01082","sha512":"0c432ed042f5fd9b6e1e1de9f450afcb000f8b3078fdd6a9e4e4c93d70c05904f13874f81d88f48efec2765afb1a21cb9faffb0d2786bd8de43010c5a87a98bd","ssdeep":"","tlshash":"20c0801e14f56675674d4cf4839f804f3c7576555e236564705015719476c418e4ba11","size":182,"data":"","first_seen":"2024-08-18T11:00:59Z","last_seen":"2026-06-09T14:57:37.386079Z","times_seen":2534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.login.links/register.363e034b.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc1be168cd65b55685a67b67f149590f","sha1":"e7a54c23a60e5b173628e3bd48065a44ff113a78","sha256":"7727ba88912075c4fdaefdba500130921df2bd4796005b208fa432b69385f4b9","sha512":"12e5465289d3a6924a4630c5adc8280b83ac32fd39747fb50cdefe9a088732e2ea29c08c24647f3aef0f07e22337686d89655475441ee8e5083aa6dddd7876c5","ssdeep":"","tlshash":"9621cd9db03e141253372c8a70171105d57b1cb49e02fae9d6ac04750fbbb0d3497e0c","size":1195,"data":"","first_seen":"2023-03-07T12:58:11Z","last_seen":"2026-06-09T14:57:37.437529Z","times_seen":2492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/yell.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2c620f36e9330eae77a120bfac961e7a","sha1":"d509a47fc1d6129e16f6c3018a003d467b7aa029","sha256":"e9108ff25b09b1b814ed6f7d068b6995ee6b3cce552b87298410c10f61cc42b3","sha512":"ff90fc20a071a2d96601d11fb6337a1c59af908b4d54ae3c5372a329585f63668cd907c85d62a8e11a1fe19daae1525a9bf32a7400477a3651838752abf04541","ssdeep":"96:jg60OEAocidwbwecGUaeBu4BQ63FuH6ExlWWSRsDcUmEDGL0:EmEAZSwbwFIu2McH6EXWBSDcUmM","tlshash":"58b1d849a0353d6623b56df5f426560223f809633a8bf922d0ee06b9f660c64d347f3c","size":5289,"data":"","first_seen":"2025-08-09T12:58:28.938219Z","last_seen":"2025-09-27T05:38:56.463657Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"74dc5932b3ff12870ccddf7204981506","sha1":"a1cfb92a8593296e62cf55a07a0a68c6fca017df","sha256":"faee914a2e3f5215774ceb36386ea9a84e7342a8dda6d31d03e3af5c2f9dd504","sha512":"6011776cffa3374376b58d184e4e286da8ba91be2625acca39d0fb01be63b1df17fbac178eef4d57b8b252ddb6c49c106158db03bedcfa2a42bef22ac3fbde69","ssdeep":"","tlshash":"97a022c820ce000080322222003a8e800028282c2008ae000028e0c80e2303022a380c","size":58,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.337194Z","times_seen":2536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/extPatterns/stage.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"24ad8f26b108334d9740a424205e8059","sha1":"cfceddfdee782b2ebd8ff0919d9838a64ad42a59","sha256":"224a4d24bf6e8354eed3801189f749e6722fa3331f8b6a1747d4e22a61de7ed9","sha512":"ee8b8273509806aa8b8c49da92b0dab69ea00fbc85f08282316b8ff2ea1ae4f1ea6035e7b1905885d94521c29739b44edafc7ca6065d8ea279c507824e6c703f","ssdeep":"","tlshash":"7151865bb0b0b132008429f9d11bc66f933b6e6533d55aa1419e43781d23c299662f5d","size":2630,"data":"","first_seen":"2025-08-09T12:58:29.032205Z","last_seen":"2026-02-17T14:14:11.417856Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"59a0b35f137b143defcff57862fdd25a","sha1":"f88fc0530df42545bebd6c9c90eaca38fa7e35cc","sha256":"1aa00d02bb86fbbb9342357b6e0ef1b772baee5e2d7e143c2df3bc5b840ad857","sha512":"a0c52d30249ffefaa0c279e45b87c3b847600623080f39f85667ee6c8bb08ce9a3fe5572936d0d7b73089e4ca98b1bbbe0e0d56fca494f657890513668f3ca7d","ssdeep":"","tlshash":"7c90029435d650009522116501aa9d855028542060094e44853cd4911a5b460556b45c","size":49,"data":"","first_seen":"2023-08-05T02:38:04Z","last_seen":"2026-06-09T14:57:37.393937Z","times_seen":2547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/lib/jquery.lazyload.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8b591fd0579d9f6099fc2e417e7c0c8b","sha1":"81bfe2b16630eecf1a11884111581a9c4ce21a38","sha256":"e5995cf0eebf8dd61a310f13a4dd508964e4507bb5f4784f5077ee7e0bca9d30","sha512":"46799bc1d8750a3171ba880ac4ddb2c03c659e9b5a61fc7d10c6a911fdc1291d6832855fb2ce508c5ae43562c4bb64300bd29e45c96e7fe64b32dde822a35c67","ssdeep":"","tlshash":"fd5195d47094f061f97654b9cc36b208522ab4576fc2c165f09e28e7adb1c6ab232d7c","size":2601,"data":"","first_seen":"2025-08-09T12:58:28.932533Z","last_seen":"2026-02-17T14:14:11.40899Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"74dc5932b3ff12870ccddf7204981506","sha1":"a1cfb92a8593296e62cf55a07a0a68c6fca017df","sha256":"faee914a2e3f5215774ceb36386ea9a84e7342a8dda6d31d03e3af5c2f9dd504","sha512":"6011776cffa3374376b58d184e4e286da8ba91be2625acca39d0fb01be63b1df17fbac178eef4d57b8b252ddb6c49c106158db03bedcfa2a42bef22ac3fbde69","ssdeep":"","tlshash":"97a022c820ce000080322222003a8e800028282c2008ae000028e0c80e2303022a380c","size":58,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.337194Z","times_seen":2536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/jquery.plugins.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1de350a1bd5b84ca25ab746b09caba72","sha1":"875b4af59f1378be79be0b4f5469802f4824b0f9","sha256":"f8e7321c846fcc0177f17368918aa3765165ed3430a123e80f94b3283fa21d4a","sha512":"9ef62d418c328413896098ed555ffd136ba3c996d0a1cb920f7d0bc7815a3f9096ea27beff89b68563163df722191a24ef341f3dc7f26ff990096e83df221e8a","ssdeep":"96:pWPCkPsAuHl/rFjFriEWUCVgKeWv3DglsCPCFkmX5RL5IVRg4Q2hpf:pWKk41eEW9v3DGtCF9Rt6Rg4Q2f","tlshash":"59c1d7897061b17382d5a4fe9037c24ee3362457b5c6d1d0b04c4eee2d2aea11126fae","size":5724,"data":"","first_seen":"2025-08-09T12:58:28.975522Z","last_seen":"2026-02-17T14:14:11.491676Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/multifactor/login/error_handler.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e56b9219337056b6869ffa9119dc9c8a","sha1":"56d60fed87d977ba8e5a6496970c6ccc77c882e6","sha256":"6ab3805772500447280964d2117051c45a0e9182e151923a4f9255ec9fd885ec","sha512":"3c09129d2ab9c1f0440c1f17070650499404b660653dfa4fb4ce602e2bb31b6b6cfc2c85ee5aabe1b50bab6c133e20ad4182362d820ca0ace2b84ded1f33d6f6","ssdeep":"","tlshash":"e8411c6ae238342715649cf4d021de6193ba1e13b7d2bf37c8ef0772d7006b8d556a26","size":1877,"data":"","first_seen":"2025-08-09T12:58:29.117313Z","last_seen":"2025-08-26T18:05:53.96808Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/jitsiReservationManager/settings.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2f057884dd5d87f948471e1235ef9d7b","sha1":"f4d046e2dcc4f4df2823906bfd22a155bc0f5323","sha256":"c5008a1a84f6eb256f03fd296edda5b6b967c4a9e2f0c776e54b1a09745ea1ee","sha512":"27cb21c6c7965d6773394ad52a446cd2b82a7094b11eed83268da8f3f483ee70a502fd9e4f0fdafa2c5461cb5ed886974e1a103106510fafd537b56fca77ffb8","ssdeep":"","tlshash":"c331200bc074a636144009f8e502c5ead37a1a6373e7b97290df03b9da029b5c551ca4","size":1673,"data":"","first_seen":"2025-08-09T12:58:28.954596Z","last_seen":"2026-02-17T14:14:11.506352Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/main.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8f033688610ffecb7cd8f4c5e9c4190a","sha1":"c64ac6e271a881f66bfcf27fb3893516e90a1a94","sha256":"556dee4d97c64a51aa33a03f2872f11a0a0dacd546b2a397ddab595a10cadff0","sha512":"aa686da76215b8627acfcc6fba2c515e610e8f55c58e276082400f44209daa1a68d31af219c00646d772414c6c7ab9b7dea26ace3f5a62560831bf5438f1ae67","ssdeep":"192:OVt5YZ3w4MLly0Et1jMNT+AZBgCCyZcMn:OVt5Y24sly0ejMNzBgzyZcMn","tlshash":"8be1401a91383d2922a48ce8c4252e5013f90d167bcbff35d5fd12b4ef5558e852ae39","size":7061,"data":"","first_seen":"2025-08-09T12:58:29.044232Z","last_seen":"2025-08-31T18:20:20.635415Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c95b5dd497cf3108227353c601cd6a84","sha1":"aed2e99bd6cf725ff52abf47ebd8c888d2e6ec9a","sha256":"01b5850efb9fc15256a877e97a2ac1ddcbf44058ace5762d11df88acde5cf573","sha512":"eefb11520dc361f05d789bd151482cfd650d6c341c4cd6042fae1749b4a5f723e4bd14716a0b9a94904a15f0bfd7b2ba2acd53be8e025d228ad19f4282c61614","ssdeep":"","tlshash":"279002d520c2500e8aae11b4046f5bc9502644a1965c6958c260d4dd7c5d020562546c","size":56,"data":"","first_seen":"2024-12-05T10:55:15.045517Z","last_seen":"2026-03-24T12:02:31.001215Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/session.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0a009744d219e897aeb41b0d0b37ddc1","sha1":"b38588c9fcbff4c075ebafb1e9160f302cd1dc1b","sha256":"02d7b625fac58ae475e8281161716339c85cb0f96a7f468f509474a0ca389d0e","sha512":"ff7b600f20a3fa067b37fd5215878d80c2248bfb1d01df697ef05f35c2c750f36b182fd001851445933809104084d21524ef3ec47a853e9cf2a8bd52b9a3e85e","ssdeep":"48:/0RH+CK/Qyx2Gm3ZyR7530q175v5hYhGGhFjtTlgQtgB3p5YAChK5uC3bv2:/CeCkPgZy5O6vNGbx/O3pSvhKkE2","tlshash":"a691850ef071a537028424f9e4338145633a156732ebdab0e0ef87b57f21a6dc2a2d6c","size":4280,"data":"","first_seen":"2025-08-09T12:58:29.07815Z","last_seen":"2025-08-31T18:20:20.70538Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/guard/i18n.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"053d68540b13fada1a07bf0669588e2b","sha1":"57122973586fb7b789c3c3c8fb623d8a8bad96d9","sha256":"960572fc20465c6d6219720b82368b01be9fcc3bcef42e0b33efcdde5bb5b879","sha512":"6530068f7c9dc9d84bcafc820ccc63fae24072ee263f3bd5243d9fe1de7dfa1e4162a80d30ce95dc11fb42656f87197ab0c11e10eb75c8fba766543f96b83c35","ssdeep":"384:smPepMUMDrg9RHpIuN8cdcfSkT3l+xfocMUgUzHRsRtExaoj+QL:ZgMv+RJ6SWT3l+lUaFKQL","tlshash":"7c92e74b9a896fd10fc252b2f804e1237da3973ee72125451efc815c33bfd47226aa56","size":20531,"data":"","first_seen":"2024-12-03T09:24:57.386264Z","last_seen":"2026-01-27T18:11:28.511924Z","times_seen":315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/version.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5d9bc3377827cd1bd714a850a416796a","sha1":"f19aaf6654c6aa608e5e038989a0b63385a1b1d4","sha256":"358b70f45fe4f22efd4ecb28584b8777b88d6584e21deb71248358d534abaa01","sha512":"69822ceb704a2a3f56bd81e97a25d87c55857eb2942c6b8ee595637d9f7dd840f9fae543a195502a8673aee6f62cb88645325b70451fcb7b17891452a58319df","ssdeep":"","tlshash":"f511210e95a4cb37448502ea6a4780dfd32b68a6b2ef90a1201ad7ed5c17db702b5df4","size":990,"data":"","first_seen":"2025-08-09T12:58:29.017246Z","last_seen":"2025-08-31T18:20:20.548104Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/a11y.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"415150ca20fccb47a5589256907d673f","sha1":"86009bf09e3d94c74baaaaae0af3416901f65874","sha256":"f412be7235e7f3a9b5b4698b926233a51833981e353a441519e6bfbf5575e130","sha512":"794ab07dc1f8c244ce1f3eae08326b0069aa84885fbd59934ad9c0e30e6542f05ace64e795d444a53a058112fcf8438242cafa229245a657c01ddc38a5ab3028","ssdeep":"192:lky6xItS3BmO3NoW3ZVtBbGZP0GWKYkGaPZy99Z3vy3n7wEgED6nbMnHN9nZtzLX:GlqtQg0NostBbGZMGWKYkGaPZony37wG","tlshash":"5b22ba1c3191b1b255fb15d839a38e03f37b9c12bc13c564a41e87602d79e7252eae7d","size":9947,"data":"","first_seen":"2025-08-09T12:58:29.019937Z","last_seen":"2026-02-17T14:14:11.477314Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tab/session.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"eece4aaceb8509ac7b4608681b2b04b8","sha1":"375c8b6f5ac92c3a617b20e209c0c81e30b7cb91","sha256":"27e378b55ca247b1948840e016d31c4665c6b3cfa136cb37104eefbe42385fbd","sha512":"b9bb6eae0f71117f7184b03ddbeea0dd6ad51635f63786dc81c081304d3e0fe2808d0ca09e7fe36229c70740be16dc2c09fed68ac19c876295cdb2715f71f9d9","ssdeep":"192:llBE76PBPJ38TnXFhTChqQwbzQhaoij3pCoP3Z0WF9HnbUfQPcb:llBE76ph38TnXFhTY2bzQEoijYoP3WWQ","tlshash":"07122018b2343e3e7290cca9ac355e5113f58d1837efbf60a5bd0577db95898802ae2c","size":9898,"data":"","first_seen":"2025-08-09T12:58:28.948497Z","last_seen":"2025-08-31T18:20:20.698413Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"59a0b35f137b143defcff57862fdd25a","sha1":"f88fc0530df42545bebd6c9c90eaca38fa7e35cc","sha256":"1aa00d02bb86fbbb9342357b6e0ef1b772baee5e2d7e143c2df3bc5b840ad857","sha512":"a0c52d30249ffefaa0c279e45b87c3b847600623080f39f85667ee6c8bb08ce9a3fe5572936d0d7b73089e4ca98b1bbbe0e0d56fca494f657890513668f3ca7d","ssdeep":"","tlshash":"7c90029435d650009522116501aa9d855028542060094e44853cd4911a5b460556b45c","size":49,"data":"","first_seen":"2023-08-05T02:38:04Z","last_seen":"2026-06-09T14:57:37.393937Z","times_seen":2547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/moment-Czs3iPlw.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a43036b6505f786b086255a6fde68925","sha1":"a555ff4ef6092dce00d694fdd81ede7f7bad39b0","sha256":"adba443bdab9429503173764648ef1a75838d9a6574b4e9b91e6e776f16a4516","sha512":"7eb41f54247f3f9e8322d334ab3afd36a7002c1c9e6d18f3d219e8391dc6bfccec1088e5bb13a1d62ea6289ccf813a40045a1a9c2ce6289e286dc1eeabac1d44","ssdeep":"768:tZR4jbdRFGZBraNQQRwUSOKl00ZdqipSR4MW5arV2sceyNrx1niCIVs6tS3BHh:WoZBrWqxOP0+QkrieqrxZihZS3BB","tlshash":"2d53b5ca3146b112976612b408af4907f33d5ca6684e8d1cf50ce9dd7938d6e42bbfb8","size":60981,"data":"","first_seen":"2024-08-18T11:00:52Z","last_seen":"2025-08-31T18:20:20.680497Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.alt-login/register.0cd180a7.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d1f7528def2d0e1c49cfb690af561c8","sha1":"394a916b8b2af4229b2e4b1a43ef0ce81e66c922","sha256":"cc90122bfc32713e120f09289185724cb97f632a1691e1a9a83a08ed9b98512e","sha512":"075fa0f8019312c9ec60e09778f703ecaa48866d51b5ee7e3569ebdc0ee2ef001282b4f819f045a848a6fd36becaffc361fb0a29fc391aebd9c65c56c3ca5004","ssdeep":"","tlshash":"12f0815da1781926c9282bea7588210457bca5155d466e84f27d13673b20c0b784a96e","size":587,"data":"","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.438646Z","times_seen":2540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/dropdown.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b6359cef6c3f334d8dd18b51b889e291","sha1":"f31446d2c98cbaa86a2aaca86b1a7fa14c3be02a","sha256":"c0182844ee4d29d468dbac98408538cd42a3003d6bfb124f28770a816196f5c8","sha512":"ebf56335e081cd534e1b1fe41853e4be49fa4d8db845e7e8b1a13dda673c6f7b86bb5adc08382dca16564762ec8adf584a012744236141201b2d24ff439ead70","ssdeep":"192:NR/1GiZBbVthAs+3Gql0dKc7K7olCSKzoTroyNaYB043ecapxP5:NRhF+pl0n7F4MT0yNjB040Px","tlshash":"7d32b827b070365b635588d454005d1163aa5e29b54b9f2c78bdaefefa04fe03066e3d","size":11212,"data":"","first_seen":"2025-08-09T12:58:29.113975Z","last_seen":"2025-08-31T18:20:20.653323Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"41d9facf80865029fc5133eee9d88292","sha1":"f9a57252edee0f6f9e3b808a426a756553139f2f","sha256":"511c7ae32f6c674d72e1ec1a5ca98cb5ebbc9932dccb8b1ab7219bf46425df5d","sha512":"68256ae9750399b9ba839bdab05e5647db61b83029853eaccd99493058e9be7c5267d2ee3eff2cf9f2a4220ee31fe8af8fe5bca1397ff1992ea02e6254263044","ssdeep":"","tlshash":"ce90029520c294088aae11b404675a89502644a2145c4e50c064d45578a6023563946c","size":49,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.368966Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"a8e39b2037459fd8809dc2fb2128a4eb","sha1":"ac95d2b77f7335db41ddb42c9a91b9737fcdc130","sha256":"f4ad38f14b5cdd84bc6129f6601f7f0e1d2fdde08faf7a5010deab95d3f003ae","sha512":"87655c46569871e237a5d8f60d885af0cf5bc96c7bd367633b90ae204d2be29139398d2b52c48eebc4985831e2df0910cabaa579a7f5700ae92ae47c8330e42e","ssdeep":"","tlshash":"0a90029530c254088aae11b504665a89502644a6145c4e50c064e55578a6021963546c","size":50,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.410098Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.dumpster-f4301a77.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"52467eb3315d612c4b23f0f91dc6606c","sha1":"6a494d129200e7c22c1edc86509607370f129c4d","sha256":"4b3505b5c28ffb46b1d92165aa74a3c12287f3ce2fb58079473be8a2d16a2c0c","sha512":"b0349feefd6a6706a92e7b1258add461f729ddd63830bac9fd11730cac8c0520aa41d59aa7bbb86dbc6aa40efa9fb13eb38b3516d363f9bd6ba514c1958affe8","ssdeep":"","tlshash":"7a51d58634e5b071433938e021614896e27826a1340ee84cf35c9cef2df6dced2a2f68","size":3149,"data":"","first_seen":"2023-09-05T20:03:34Z","last_seen":"2026-06-09T14:57:37.420712Z","times_seen":2542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/views/extensible.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"64f74375ec48a0c4b837f5bbe37a7ebf","sha1":"d0cb4b432004787fd2b9574b63447e3cefef5b3b","sha256":"082eeba66234c358d75ec11cd53473f87ec8fee0596bf426e36cffbf549e9179","sha512":"6155ddcab9fdac09beeb0a68b95fee076c9420b953611ca13e3fdf681eb8a857d9c96b6af2774e9b29a5a5ac47027bdf59f606b0f89f062bb1a652322863280f","ssdeep":"","tlshash":"6a51b5197074f22201d984e5e40b09cfe3365db576c916f834dda2faad09eb68232e34","size":2998,"data":"","first_seen":"2025-08-09T12:58:28.968889Z","last_seen":"2025-09-27T05:38:56.458667Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"59a0b35f137b143defcff57862fdd25a","sha1":"f88fc0530df42545bebd6c9c90eaca38fa7e35cc","sha256":"1aa00d02bb86fbbb9342357b6e0ef1b772baee5e2d7e143c2df3bc5b840ad857","sha512":"a0c52d30249ffefaa0c279e45b87c3b847600623080f39f85667ee6c8bb08ce9a3fe5572936d0d7b73089e4ca98b1bbbe0e0d56fca494f657890513668f3ca7d","ssdeep":"","tlshash":"7c90029435d650009522116501aa9d855028542060094e44853cd4911a5b460556b45c","size":49,"data":"","first_seen":"2023-08-05T02:38:04Z","last_seen":"2026-06-09T14:57:37.393937Z","times_seen":2547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/loginproxy/register.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"713d4b902dca9c4b24ab93f437037c96","sha1":"e6b9c8091703818f88f83b5e50cf8e341c388aac","sha256":"14cb3a5d7e30ba471892889c1aaa1c9256155b996657e1ad1bffa56ed39d1cbf","sha512":"62357120da5c638d7558db2fd5a6d29d0ed86fd128fdce6a5a0a00226fe5b41fef76f1fc89b41415d74b3f34ce6338321b988246c7680e2ad007195d39090989","ssdeep":"","tlshash":"4f31a64653d8a83a00b41cf9f0b8b3a1e7f41b62b809586d922d4c959e1afcfd4c9f0d","size":1653,"data":"","first_seen":"2024-11-11T15:00:46.041851Z","last_seen":"2026-06-09T14:57:37.39249Z","times_seen":2529,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/util.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b6c291acf5a8a7a5b20bfc18f842c8fd","sha1":"9d00cf2ea5415423ab7a6e14e98b7625f3097e04","sha256":"c7f6c59b5580d1c2103a2569ea54ac42f59fa45478128116f702304d8a474e62","sha512":"3235d7b4cac654c44232dbc1adff924b4ac87885fe4b73e252172b5ce5f86d396cf8ff9d086262bcf4923040e9691ec15515f74180707bffa7769f258fd7d049","ssdeep":"192:Kko6oM4ioTrD0yS0sywzE5J21eXWEdrKtdroRJjF1D4teZwDbAgVZgw:5SMYTn0yVsywzE5UeXWGrK3roRJjzD4/","tlshash":"0022ea8d71a2b4638b5415f090fb101af37e9e612d4954a0e09e65f93e32edbc529f38","size":10453,"data":"","first_seen":"2025-08-09T12:58:29.011236Z","last_seen":"2026-02-17T14:14:11.477866Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/views/modal.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b621475c864f22a513af5359a94d2661","sha1":"1599eaa5c5f3f336d70759e91a6ddb58e4ffb323","sha256":"45c8dbcc1ce17b52eb09d81445b4141dc5e56a2462d0060fb9b01fdaeafc520f","sha512":"cf5b627fbadb1adc1e6ceb62dc61af4f8fdd60269281f51286842924e393e987bef3b81dfbedc73f5c6f63e0d9d7bc9412927cdf5d2c13aa2d5db47ee3213b24","ssdeep":"192:H8k6IFMRbzvRCNpQxG8FEY5XSXE75JzVOtHzmHQXEbggdFRXJ3Q3jWSpcf:n6IiJypk3EY5XSXE79OtTmwXfm9pqCBf","tlshash":"f122d866b038712207ff84e6601b061aa33199357847845cb0fcaafe2de9f912176e36","size":10693,"data":"","first_seen":"2025-08-09T12:58:29.03729Z","last_seen":"2025-09-27T05:38:56.426377Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/http.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"63601a387248f06594daba935632fc90","sha1":"c86bcad7d2f27bbe99042505d63df01e268a7f77","sha256":"beb2941dcbc3c91f62af663394751eb649a0baa2c484ae385319ba090f870dec","sha512":"0b645d5ca9fe06cf046929551813e4a2e3280b6f2511a88d6c3b4d57790d50a52fc127dd86928a925d4afdeeac7af3ea925d2fb2dba71790580b76fb6968f99c","ssdeep":"384:wmtycYZT3ZSK0kQNi+Mw3A7pELBzibG2t4lhjOmbGaC4NOk5dLB6zH+A3DRBBMRm:wmtJ4T3ZSpi+Mw3ANELgbG2t4lhambGR","tlshash":"31a21b9db966b4730999d1f2e4f70014a23d645c780d0c90e3ed87ba2d76e81a6e3f36","size":21855,"data":"","first_seen":"2025-08-09T12:58:29.06653Z","last_seen":"2025-09-30T03:27:29.142377Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"cba2a9eabbc51cf074f6768b90567f8c","sha1":"ce02e8f13b9a45b9ccbdaf5f910d940c6ebe6463","sha256":"025b79b67824434ccdf94488713ad4e3e9a168a0f535d757496dc75b70ac56a4","sha512":"5bd1d466e2cc7aee713568cb6539bfc6fa9d7d8f71453890c6662b333efc7fbae60a36d927c22e55b0856c642f66386d66014dcb5c7bae22672a13d6f30d06f0","ssdeep":"","tlshash":"c090029520c2981846ae127410a75a885125446314584f50c06cd49578f70a3563e47c","size":55,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2025-09-30T03:27:29.366127Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tab/communication.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8a2814da3c2cceaa05d2e53c177ae0cf","sha1":"bbdc2e61ddeabfffa12d80083c6ed4836471c500","sha256":"6627a58f7256515a48790c724e0acad43eb0706bd17be6808e3d2073fd122160","sha512":"02f0437e634348def31d5a32b4e3764494149cab99fb088212e342b97d6010a754c3e88f88845c8842fd4559261c21c2cf57c6705260dfebcad7cff90cf39594","ssdeep":"96:j7Srxch+iZOjKGZyGBWSsM4k2dRXIdc8c0ILU6/NSSDobhzj7qB:HSrxI+iAjKnGUSJ4kORY6rHVSRhHeB","tlshash":"3bb1541561343d2e32b44da99d267f2023e48e6936cfbf70e09e5a71fa1548b801be6d","size":5576,"data":"","first_seen":"2025-08-09T12:58:28.964026Z","last_seen":"2025-08-31T18:20:20.656284Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/underscore.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"862ccbf4093d289646f6a8a9f63ffa58","sha1":"870d5470bd31344df496de153667d111dbb4c183","sha256":"def1a7d193331890061fe98e144f81d527cbb9a6d3f9faa3c05c396ea404f875","sha512":"fdf1be9d988d401b8c970dcdaa3f9a3e51298ef05fb7eceb55ca8181703f894192e7d31a9e7332cf4f7a7b730fd422bfaf3d40a4a36df1fda8f54389b91f1fd5","ssdeep":"","tlshash":"bf210f0fd454c73744801af9e503c1ee932f566773eac170509f83b91a06cb681a1db5","size":1207,"data":"","first_seen":"2025-08-09T12:58:29.076186Z","last_seen":"2025-09-30T03:27:29.140265Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/util.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"eee6986ebee6aaba16c92b7dc63f7016","sha1":"9637495bad847a695a9006b40c6427b7f2a61e61","sha256":"f92f9b5a8108a4135a5e99199901a0f8979003a4b933aaa1e77e30fa333ded68","sha512":"6331ada0b1467b92f4d9bfeacc62e777fd52a5966840b07851b7ac34deb7321bdae82a73fcef1af73f8367f18ac235c6e05b446748f360f609750ab8c47221b4","ssdeep":"96:jXc2xTkv5rtXtQOaP7LA1XpD615OfexuPOP5tm/:I2xGrsTPHA1Xw1IfexuP0m/","tlshash":"73c1856851783c1b32a40ca0d8261d2223e98d557bdfffb495ac16f5fe75888c01ae7c","size":5818,"data":"","first_seen":"2025-08-09T12:58:28.951413Z","last_seen":"2025-08-31T18:20:20.533291Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"103a92c8affdfd29673180ea5a78cd1e","sha1":"b6edf5faee1083c7f7f6a2631d484775d3561c1c","sha256":"a26b7cc0dbb0f0e2b2a662ab08039380f20cb01ef230f6b1f712946e2d2c46ee","sha512":"4ae7a66ebed7ff62f9eee5d03a545619005aa405d07df878ff5fb2bf18f3c68223b8c09fc83739edfff86bf420b2f6537e0ca8fc0557f87e12e9cf0c3676ab54","ssdeep":"","tlshash":"d09004d530c3501047ff155401d75dc45075547014444d51c054d45f1c75030573d45c","size":41,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.369501Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ade8a83150f733e5c73061b572889ad6","sha1":"9061da5ec178b3badcfcb4a11ffb66ca46953413","sha256":"6adf9a7075d48a56a397f201f72a050091a6334971fb1f24b41f9da00d777f2e","sha512":"f830745752ccaacb6561f22d93f9e12953dc5a2a7a757ba833f06f34284c3ed4cbc9619cabff13a11a387d50e1618dc4ed1fa8a2086fed129f8e75adeff32173","ssdeep":"","tlshash":"e141a94639b6b075133914f0a1730c55a62829a1740af85cb7debcef36975cad251f2c","size":2241,"data":"","first_seen":"2024-12-03T09:24:57.3302Z","last_seen":"2026-04-17T03:11:43.124406Z","times_seen":369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/precore.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3e64ebbb1be2c0dc10cda8c7d1e9e42d","sha1":"36c517f92b1611ad3f2936f703383d6301c04015","sha256":"46974da2ba7b3ce18e052de2323b8f6aef3202f61fb07de05c58849144ed2766","sha512":"1d988cc38d5d836b78bfd3f7577196ca17d75310d11a24725f3e8fd0ba44d5c36fc873377f6b4c5b335a7545bee608f87e9e02c51e85ff33f40b23d402bd25b3","ssdeep":"96:jgmtoFOaRC1W6kP+voZvgQbsOeINvIDuluD+:MmtoYa0W6kWm9HvIDulj","tlshash":"9391c52f5199eeb212cc2dd59e2360c476d80611b4dcd0f3672822abef3a54d0c69f3a","size":4392,"data":"","first_seen":"2025-08-09T12:58:28.984085Z","last_seen":"2025-08-31T18:20:20.566717Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"8b7fc7af09a0650845ff9513bfad361f","sha1":"66bb9a373038936f0ac8cb0f87311be4086b276f","sha256":"c9aaf8432ac1e2680a962301ab8974020184b53969d9cc2c15f1b3a1f2728220","sha512":"6c7cc11550efbb51785adf8c13465800bdcb10d126a13b94a882c6c3f64e7d1adffa9007c3c7fa7c56d09bcb50e0d05ef34c2ae7ac69e24a1897ae98cb199983","ssdeep":"","tlshash":"26a0228828c20000033e0030202ea8888030cc330b000cf0c0308c8c2c08030c3ec22c","size":65,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.3885Z","times_seen":2556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/extensions.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"927d8cc23e0e18a831f0d739100c3dcb","sha1":"3a4ce9b909d66d1426ecf1a01ec44d6a125d8e7e","sha256":"175d086d2b8353310ba831263178fc05a06b36264132dbacd361f1dc212168f3","sha512":"c37de9ca68930c33091bc2a224f6019ce2a4f84250014ee6ebd05e35fa9c671852146c416b8474dddc7019178e9cfdb65e35984bc45f27f38ea4234cb7868511","ssdeep":"192:rvk2sGR05myW2hp5Qj6Tmu9M5qq/j38bFvBHCTIe:w2namMhpmj6Tmum5qQj3kHCTD","tlshash":"21f165c670a6f16246ebb4e4803f4116f33f9c99314c5168f08c95da7d7284aa63bf78","size":8031,"data":"","first_seen":"2025-08-09T12:58:28.989659Z","last_seen":"2026-02-17T14:14:11.484845Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"103a92c8affdfd29673180ea5a78cd1e","sha1":"b6edf5faee1083c7f7f6a2631d484775d3561c1c","sha256":"a26b7cc0dbb0f0e2b2a662ab08039380f20cb01ef230f6b1f712946e2d2c46ee","sha512":"4ae7a66ebed7ff62f9eee5d03a545619005aa405d07df878ff5fb2bf18f3c68223b8c09fc83739edfff86bf420b2f6537e0ca8fc0557f87e12e9cf0c3676ab54","ssdeep":"","tlshash":"d09004d530c3501047ff155401d75dc45075547014444d51c054d45f1c75030573d45c","size":41,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.369501Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/settings.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"254d96f7d867037be548cb52beee75fa","sha1":"fcd5d9c9011cdf0bd8efabf24cb07c71c0c1aadb","sha256":"14f8ff4b08b32460a707464df4a4d863f061c70004d1b7d6c11c085cdb034d3b","sha512":"503e3283668caa79c6f24efe6699802235cb5967b3a014573a15e80a09354a5d4f9ab14f146434b1de649e0c5685e7cf85934be580270531e4fbd8e0b74bd3fd","ssdeep":"96:jyuXf+EefS1szAXLzdd3FSQwgPjWKARyfU8Wk6URni:euXffSmEAXLzr1SQZX0FIni","tlshash":"f1d184833296e91141d84da5e8348333a2686cd674cafd7df0ac25fd6a2e491f035fb5","size":6677,"data":"","first_seen":"2025-08-09T12:58:29.069113Z","last_seen":"2026-02-17T14:14:11.449628Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/backbone-oPPGqYDF.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"478ae9a4a4c500ae15d29f2a1efa9680","sha1":"685815399d381034e8410f24d11029ded6c97ec5","sha256":"b9e37122858d65d914e12868e8f48d6d2219158fb1d8d1e42860ca62af121bed","sha512":"827a0798da720279e9b731931ae5f1bce7fe44419b7d5ef6bea169b0a54dcc640d5c5e45db765fcb1f02085ff320633038b78d5c87992b9763a24f1cbc596ab0","ssdeep":"1536:wYeWXvtZZVhNjos26na3gAiapstbaLWvacpF36vg/D9vqh/ozGc0f4BT9cby7OSX:wOZhNjL2Rwq5gb9Stoz0fsBaCVSHlkE4","tlshash":"ebd3f5dc72c7b46283a760b9407f110bf27a6c99684cc510f068d8e9bcb8a49917bf7d","size":134175,"data":"","first_seen":"2025-08-09T12:58:28.956154Z","last_seen":"2026-02-17T14:14:11.452157Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2e9d1caaf28a12e3cacc4a74fab822a9","sha1":"bd31b4ac236efae2e3d4d536ce1b32330abae70e","sha256":"154bcdec4d6a18e41a4080e76de57c243c244ea47b921b82288843d0577306b5","sha512":"9edf83b3495ce70098b34194fb44d6d02867d2f8649d1e12cd6d07b868502d65c86a436e6c6a76a4e0c85e2684d34f82fab47d8f692bfebfc46fcacec12e353d","ssdeep":"","tlshash":"0e9002d520c661048a6b11a804565e85502648b014484a50805094552855024562545c","size":43,"data":"","first_seen":"2024-03-27T20:50:29Z","last_seen":"2026-06-09T14:57:37.37003Z","times_seen":2555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/multifactor/api.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3d433c0eb493bf954c7645cfdd755036","sha1":"76d2926dd7e6b9a5067634441912d77d9175956c","sha256":"103e65df6286a0fe3b56c939244ff432d1b47e1093a9cfa59dfa73d3572acb17","sha512":"f56dd36a8dc43a115db6054050b1f8b393f3729d783f0a90c8047474b5547efd8fda6a2e39593da209e114e8b2239bb9a53f5879992bc94250f96847bc039e09","ssdeep":"","tlshash":"428165aae925f53701960df8f4128189e337198275fa8061d0cf9774ee22d79c912be9","size":3845,"data":"","first_seen":"2025-08-09T12:58:29.022471Z","last_seen":"2025-09-27T05:38:56.425408Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.gdpr.db34b815.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbed87d213b9a2ca8c6013744b5badfa","sha1":"5ffa12648ffaace2a897223fe10c811db1131ea7","sha256":"746ba18cb287037df23433ae4578926473aa64669f90ac6f0c2ffccff84d0bb2","sha512":"48829882736c0c68f89a99d83def7df9c6db04cf242aa08bb11456a806f5a843d1a92581c76bdf7fcf0be6b09ad50fc6b80c0e2991d7a121481858e9e2462d9a","ssdeep":"","tlshash":"0bc0122f2ca061b6864e0ee8c365a00d3924726ac32320a4541062615a7484a8e8fa06","size":187,"data":"","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.387012Z","times_seen":2540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"74dc5932b3ff12870ccddf7204981506","sha1":"a1cfb92a8593296e62cf55a07a0a68c6fca017df","sha256":"faee914a2e3f5215774ceb36386ea9a84e7342a8dda6d31d03e3af5c2f9dd504","sha512":"6011776cffa3374376b58d184e4e286da8ba91be2625acca39d0fb01be63b1df17fbac178eef4d57b8b252ddb6c49c106158db03bedcfa2a42bef22ac3fbde69","ssdeep":"","tlshash":"97a022c820ce000080322222003a8e800028282c2008ae000028e0c80e2303022a380c","size":58,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.337194Z","times_seen":2536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/office/main.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29df600d3aa0c34a67e443bf2573cabd","sha1":"2854ccef581ad37919b4d2245446f1254ff5e53c","sha256":"6f30fbca20874a0989a7f0374df909e831c8ef1b0b65b580fb37b9a2bcdfe283","sha512":"15bd0d462c543dbdeb56940ad324c0b02d52c4be0bf020d7af16e62f21e8b2c03b60fbf9c9f9ec84f02d8cabd2c07d4d8f55d7529b1dc9147afba28b322ae990","ssdeep":"","tlshash":"7641864639abb075133814b0a0b70c15a62859b0740ae85cb75dbcff39d69cee216f2c","size":2210,"data":"","first_seen":"2024-11-11T15:00:45.999332Z","last_seen":"2026-03-30T06:29:20.149055Z","times_seen":369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"fb33cfa969e699fcf36a60ade5bbcfb6","sha1":"4934398d448351089a01d77ad8162d5ef91462e3","sha256":"14c5457773d026659097b3bc35bd86789f965a4f169d4a59dcef8546e98a27ed","sha512":"7c46e9e683022dc63eaf0630aa700bce0eb2aef20d7a53d3a494fae57c7ce4f4f46e89d14640d06044bf548fa6aa36c93ad7b5a96d590e0a805ccec23ae25ed4","ssdeep":"","tlshash":"5f90029425c6500051222166006a9d855029542560096e544428e5d55a6747062af85c","size":51,"data":"","first_seen":"2024-11-11T15:00:46.089532Z","last_seen":"2026-06-09T14:57:37.360202Z","times_seen":1952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f8cb63e82d8acb03cb2d69c7de402ad7","sha1":"dd68d4bebced4e12eee70e65635092077a93b3c1","sha256":"360a6c2a45aa2bcd247e9ca8ce390bba78491145506253512beb2e4a355ff615","sha512":"6b8ce504753e185e210726a131a30c738dd355a2f201d3b6c4f683f4066443f13fada540cdac2abc8ead8dca0d59537b8ba55ae2e31e405d86ea3bf9a7ff5593","ssdeep":"","tlshash":"e751838235a6b07443162c91703158a6f3b8a9e17448a44cf35c9cee2df2d8d9265f39","size":2721,"data":"","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-14T00:27:08.602159Z","times_seen":2545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/preload-helper-BvmF3Jkl.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"65b193cb8ad22cc1a3508642d9304a48","sha1":"190f08343861ce13f4e3320310aa9f4e1ba343d1","sha256":"5d8765a3bb99b6653d44a94576c13bb395270f4a642b3de1a2d983aff0f10e56","sha512":"9a715e1d3c544ab6715fcaced157b7988c0482639ab7f3644084801752cc5fb47c4569e14f9e1f66a965407e7c7e41dd5b85ec1a3b7d334ab9efa565b9c1f5d2","ssdeep":"","tlshash":"4a21759666d5f13603781ed6b0b8f297fae0299274064044a00edc9abe1efc8e1dae45","size":1298,"data":"","first_seen":"2025-08-09T12:58:29.04215Z","last_seen":"2026-02-17T14:14:11.476747Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"103a92c8affdfd29673180ea5a78cd1e","sha1":"b6edf5faee1083c7f7f6a2631d484775d3561c1c","sha256":"a26b7cc0dbb0f0e2b2a662ab08039380f20cb01ef230f6b1f712946e2d2c46ee","sha512":"4ae7a66ebed7ff62f9eee5d03a545619005aa405d07df878ff5fb2bf18f3c68223b8c09fc83739edfff86bf420b2f6537e0ca8fc0557f87e12e9cf0c3676ab54","ssdeep":"","tlshash":"d09004d530c3501047ff155401d75dc45075547014444d51c054d45f1c75030573d45c","size":41,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.369501Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/multifactor/views/constants.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6e3fe09cabc4a7c9f91eefc7f0469f01","sha1":"cbf4b375325d2632cf8fdc2a0f80c42c58b74581","sha256":"c4c0c633944639201bae9d2539c4e1b4910905f9d4733705c331d1ec007de1ae","sha512":"b3f81557dba2afec57612130da1457b21e47a536b9ccddc16a4501835b990a42e5f678e532ce39d2ae16e664697f5d4f11b35dc34f1bbe87b732dabc6f88e2bf","ssdeep":"","tlshash":"d52132cb95648b37499703e6aa8341ced32b556df2aa90b2100e939d2c06db603e5eb1","size":1430,"data":"","first_seen":"2024-12-03T09:24:57.382035Z","last_seen":"2026-01-27T18:11:28.464819Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tooltip.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f1d7fd57e6c555d56fd95ed488dc7113","sha1":"db533ef9002ff3d3ff81753aa63572b192ffe3ad","sha256":"a428a0e51f7720eb9e0d8853f6b6d3b59733b997a0805c0f17190e47bfa8421a","sha512":"550a3a8b25a9a44694ef5f93e866303e8a6556e9b9fa2b787bad05f8292084126ad162fe636c1c95f2ae0d3299c7134a1556dda6c6520689ffd5a4289d9f5c0f","ssdeep":"","tlshash":"8e51e80ad032727301a10de9d042d6de63372667b1c754f190ae8fbe4b1acf21372ea6","size":2914,"data":"","first_seen":"2025-08-09T12:58:29.004981Z","last_seen":"2026-02-17T14:14:11.431823Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/locale.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ef47230a498125ef963eecf0010d675e","sha1":"7c50b287f1100826e6308f023f57d0fdc54e8b5b","sha256":"8c215b9ddfbfd3a275661c24a3bb23065a3ab678045691eee759d6ecdcd15bb8","sha512":"fa8cfa05128512e188054df9da0c145024d825f6ae408bddd0a5697ea49dbc5e559a2aeee17f1a6adeb3a0885bc6a43a97ecbc2f6bd32e0a8117b20fba2e7540","ssdeep":"96:n1xCkPfyTb74SVZ1pkdxbPf+x5tM4TyaFRDT3JpitV8AY:nqkXsb74SVHixbPf+ztM4TyaF9T3nish","tlshash":"83b1c51af0b1206b505559e9f016bc2203344d5a77c2be21a2cf9b76bf52cb9407ae6e","size":5395,"data":"","first_seen":"2025-08-09T12:58:29.080847Z","last_seen":"2025-08-31T18:20:20.713237Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/index-Dh_49yWa.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3c9c8ab496ab2cbb4d598e3fcd664945","sha1":"163094b99b17a49de3c5da7032d9f1c786c2a6c6","sha256":"e11a6472a49aa5b9db0b4b143ce5f6816f7515e055bb57733f1118677804f66e","sha512":"abdd25bc7c82c5cd1291c035e584e1c424b818b3fe4a0815b070d31cef846117451a012fa3ec9b84c3321abcd4500bbeeb4278e096a1efa914baf4296cf44022","ssdeep":"3072:1ozpzlXl7DD/DUBkrXrO3r2hurs7zCDDDsDD7PkH2freQrlhEKEmgHA:10pxW2d","tlshash":"98f4fe285a6bf744e858c0dbfa373d84c59de18aa44725d20f715bb34ba2753ea9cc03","size":732537,"data":"","first_seen":"2025-08-09T12:58:29.119512Z","last_seen":"2025-08-31T18:20:20.578971Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/theming/util.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c7a5097426e00dc5d5d59e1342646a2b","sha1":"6708a13f85976f1af851afecd28a933e01f4d40f","sha256":"df0f983e8e2e023195e1162e1481e12cebe7df1a1463edeb4b595a3e5da7ede0","sha512":"a836971f160d3a7629d1ebd555856954bd6ee9812e63300ccac1db77b94f1e1b7d455d867b1acaaef35da07d4720195356496b12ba5664a56f425efe90ce8a51","ssdeep":"","tlshash":"3d61daaea0b4f133124003fcd51f546b936dad51774b9e60909e47765e23c7ac139d58","size":3215,"data":"","first_seen":"2025-08-09T12:58:29.008727Z","last_seen":"2026-02-17T14:14:11.414395Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/support.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c8add290d5b961e8a99887d4454b2646","sha1":"e9b22ecf13b01ace5804662e0b0e9ccea64a0803","sha256":"37c7f7df2a53a138d5037d5b374e48f4b39ed608fe6cc0ad938f291f52da6b34","sha512":"5a164037ff2d5b159622d7a19dd2fcd945db70ed16271068d307587cb9d4f590c64986641c1d253708b6fcb5bb6a88aec341cc602ddc8e18323991724866dcf9","ssdeep":"48:J3sCK/Qyx2G6jLfNZ4qrEJ3ororS+NNBucte4mmWywvqvYpHRqERnC3AWmyYpguE:uCkP6PfNGqYFegU4VXbYpz2","tlshash":"4591b465f37db537451908c2e01b09af67739eb32ec3c662a0ce83b03c0061a915fe6a","size":4312,"data":"","first_seen":"2025-08-09T12:58:29.089045Z","last_seen":"2026-02-17T14:14:11.492256Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/gettext.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"62fbccfe41ae0a57ce5418090f7c2f85","sha1":"ea087a319f633b3484eec3770938365d691579d9","sha256":"e9162872f764d031bdd9a53a392341c18c0129ec1ad10946567f4ca8cc07f56b","sha512":"c9914ab2b62945decc4bb132d2f3100bdab58da57c90d723d96d70a4abb614babb1bdeda1f2af6601201c0ebf574474f92d661ba6317b87bbc8f60e9eb9f536e","ssdeep":"","tlshash":"bf31980fb060e3b708da19f4e107d09fd23f5566b25fd570109eabd50c1387a0257d69","size":1732,"data":"","first_seen":"2025-08-09T12:58:28.966755Z","last_seen":"2026-02-17T14:14:11.450312Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/multifactor.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8bc0c77d31055216d0cb76e31bbd2616","sha1":"05265baa6d1db0b7d0f167add4481fbffbc18dd0","sha256":"d2a859b8d8d281580c2dbffd6c735e75205e9117644b995db7dbfdb8f893fc9f","sha512":"5bf6db9060c70248e875441c497ce37c4cf7a3f83877eb933d25e99d91c02ed26b9f42e691f77edd1a2fc0b574ae9f35d32bda61c2a5e36e1f2686a636f38a25","ssdeep":"","tlshash":"3b51772ad5383c1d72588ca5dc259e5193e81e163bdfbf36c0ee16b4e6148acc126e3d","size":3111,"data":"","first_seen":"2025-08-09T12:58:28.936774Z","last_seen":"2025-08-31T18:20:20.556219Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/index.html.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8924ec4f5251ffe9822a8f1b95141a58","sha1":"be20894353016f891f4b8786eb3efe8ff0a4f23b","sha256":"1df756cb8971339d399caacdfd4dc6bec20a7cbc2c831df7044aa85a77e66d50","sha512":"6ee95e007772e7226795c06861b6f925d5626d2bd1cf16365ed681a901f3de286ec211a77cd8755cc0088e6f8b4777a9ee3bbf49e10d00b2dfe956c7e75bcc14","ssdeep":"96:VrqT6/cfQTHT9g3eBCsMuZoQOQU+c7ZthXTkFalsiLt1i9uwJaiB7FXhqX1v1:5/c4THT9g3eB1MmZpS7ZthDWsDt1i9XS","tlshash":"3b91d8a6a1c15e3b02a30265b023d245b9315953f68ba096e17e852c3371ddde237dfd","size":4599,"data":"","first_seen":"2025-08-09T12:58:29.125346Z","last_seen":"2026-02-17T14:14:11.504734Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/manifests-DjSAX-_Z.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"10be408a951dc5426da506a5bd279e4c","sha1":"f63730ce2ae44d4c2f8e4fd9a2ab74845a9c51ad","sha256":"7cac9aa9cbb0911362aba9139b8c96735c93e97d2fc837b6b256199823841366","sha512":"2641f4311dee9740702c4a113a956af744bd39239957d5cceed352ef6318e9869fb736d10e6ae58c4bcf9608afe3bf11ffe7fbbe8b45d3f10ed6ee90c10dfe68","ssdeep":"192:9DWVYk8/QMhqex0HT7nCzi0pGoKzGCXJmcgkRPAvhIQmUxnbPI:9Sk7a2zbGwwJjgkRIvhIQm0I","tlshash":"e312f89f70ece5b991a908f4e523108367e809e5254ea0e0662d42dcdd9d1d19b2bf3d","size":9444,"data":"","first_seen":"2025-08-09T12:58:28.943678Z","last_seen":"2025-08-31T18:20:20.713801Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/views/disposable.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9bc0cd844004511ce97d6683fca074e1","sha1":"47b746f744a44e6b2562225b191a86194626c703","sha256":"d9ec329c80062d106318adb41418102584726a5d6c94019bbf74a1c2394b394f","sha512":"2b5650771f44b41ef960b06d4fe65454046b7b55f57732dcb385de314d3adb9fe9cb06ffd731769095e54422e7276b0983e7917802068a0de9bc545fec291bcf","ssdeep":"","tlshash":"a731622ee434b637049499ec9002d9de43396e6777d76e74308e83f46f16cb95222db0","size":1847,"data":"","first_seen":"2025-08-09T12:58:28.97026Z","last_seen":"2025-09-27T05:38:56.40154Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/browser.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1b971d1cef718869de77fe95fa3fba2c","sha1":"488a85f2ee186343f79f847f3eb51bd6e410638a","sha256":"f728ea3f839cbff51ab0a8b3c4c891cec09415f61312d52e5adc35690ef08b4a","sha512":"5361bf3e6f76653329ebf813698cba02e6c0e682b9c7be8bee4d07e856eb0c2a4503b38e65bd6ed524b51e4bfc3c9d8239ab69003efc99f179bb2d7a53f7bf10","ssdeep":"96:3CkPPjO2D5m5R6MIg1vGHL5QoSDYOJLnTjqszRqoPQ6ewm/hTJoYIMP4S9:SkjOyk5QM9Ve9uHPbrPhe7/hTJ0MP44","tlshash":"a8e1b5479e8b327b0e7516c1617f1201f3272612358a9495e06a02067e23e9383ffeee","size":7332,"data":"","first_seen":"2025-08-09T12:58:29.121566Z","last_seen":"2025-09-30T03:27:29.244863Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"74dc5932b3ff12870ccddf7204981506","sha1":"a1cfb92a8593296e62cf55a07a0a68c6fca017df","sha256":"faee914a2e3f5215774ceb36386ea9a84e7342a8dda6d31d03e3af5c2f9dd504","sha512":"6011776cffa3374376b58d184e4e286da8ba91be2625acca39d0fb01be63b1df17fbac178eef4d57b8b252ddb6c49c106158db03bedcfa2a42bef22ac3fbde69","ssdeep":"","tlshash":"97a022c820ce000080322222003a8e800028282c2008ae000028e0c80e2303022a380c","size":58,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.337194Z","times_seen":2536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/guidedtours/i18n-ORsXC62r.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"522d9b704088665f6aca76fc19a5c1bb","sha1":"b562406a844a550b7f39b3d64a85d5e0373cc6c3","sha256":"10dc4f571ed4fce5db1830ea522fea3f8e9348b89e1a744104eaafbd9bb9619a","sha512":"56b41dc44fed5c46cb683c0683c0eb1dfaf858deb4529a3b073609e9ebb9c42154fdbc4ecba3f11623db558b3ff18ee9b8235726ab17f30c1519cd6c5cb080a3","ssdeep":"","tlshash":"c441a64635abb075133814b0a1b70c15a62819a0780afc5c776ebcef35d64cee215f7c","size":2174,"data":"","first_seen":"2024-11-11T15:00:46.00116Z","last_seen":"2026-04-17T03:11:43.202498Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/fixes.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b02693540a2dc6cc50933bb77f6d72c4","sha1":"add938c98fd6710c95e59f5839d85688db2896b4","sha256":"f7196324dac72772fd699f8bf2e0f19e5d0c6a8bb47edc6c87cd307b8e189662","sha512":"d2f9aad6469c4a9f7b3f8819d95dd16b6b9eb64bba3604cff8db0501b74c795398363809efd0392a78feed292a9d3e9f5caaf025946e703029b2ea87ac34c127","ssdeep":"","tlshash":"1b51883a7020b132096a14f8a50bae59433b2d6377c75960504ec7f46d65eaa81a3fac","size":2641,"data":"","first_seen":"2025-08-09T12:58:28.967954Z","last_seen":"2026-02-17T14:14:11.435299Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.dumpster.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"712dd8594885b6785559687b08188522","sha1":"08a0afa298ff973c93ca805fd5266759b26cbead","sha256":"3f4bd92c0c2372ebac508d5d58e76d94e947bd718a026ed28f3079326fef265f","sha512":"d0e1a448de38d6ad42e52ec43ee26410d3ce14642074c435dface3960c4423cc274debaff4853e207f7bae495f3d9efe747b72956c88417966ef1d81d55c50cc","ssdeep":"","tlshash":"b2c08c7fbcb0a0f0ab8e1ce8c37a800f3434b296a3331464a0402262083348e8e5fa02","size":175,"data":"","first_seen":"2024-03-27T20:50:27Z","last_seen":"2026-06-09T14:57:37.40296Z","times_seen":2534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/form.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"91a1838358eaa2f905992d832b692151","sha1":"0915e297479d0864794608400d733331aad8da8a","sha256":"9a705a3f2e356330a472be20b21d7de18871b305c450122f59fff905e74b9819","sha512":"975586c4c3c3bfc8768c02e45b403a8075c801dfb03ac4b65b07c9433d95fa7fd57d2a9c5ff5c9569a24a0ac725351d48ecb1e908c9d0feb8d3540160fa87206","ssdeep":"384:H4lfFZAfdMP9SrxPwXJGROLZCC4kmcpMAin0KSYi7G2m+mXm0GGeiELU62bYwp:H4l9ZjFSr9wprinyGHGGei0Uvt","tlshash":"eb52c69da43c2c1a250244e4b84258243b3a9c361582ff7abb7ec3796ffd9d8414b94f","size":13221,"data":"","first_seen":"2025-08-09T12:58:29.100593Z","last_seen":"2025-08-31T18:20:20.6622Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/_commonjsHelpers-C5mpvj56.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1d7828e6e51c0007857b4bb822985c7d","sha1":"5458e4b3d34ce321b7403c8878aaff2bb2a31238","sha256":"e29af2553180676e60e13afd57c00af0b5bf73cde8c16765b0b0a3d17ab1f885","sha512":"26d514ed2296d44c129a56d3d786522ba4682146e4bf6ed7e4f351f38a4b383895ec2066c29512783a788c2aac146ded194f79fe5f654ce7d4bf5621da453520","ssdeep":"","tlshash":"7c11239578f0e4f141f604f8803b3001f32e697e91ecf980a79ac5f054e415f9411b67","size":864,"data":"","first_seen":"2025-08-09T12:58:28.965546Z","last_seen":"2026-05-28T02:13:33.278665Z","times_seen":1254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/url.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d071a6d806e16d46cc3f9e7fba711bfb","sha1":"df2dc4d67e6ba92c4580f66840e9fda409f517fa","sha256":"8bd2633386160eb0ea92ca5224dd9ba893cfd834c814e01d64be2856abfa9f7f","sha512":"09e87031b1a294b9b226bec366d930c48d896f3c520906e34028f186e7a98ac300b01dce5bf2adaa8766e744d61443c4b1ac1b8b8538b83278cc4f3f06dfcc3a","ssdeep":"","tlshash":"0671e9cf30d1e9b213d144e345db226dd33d9ad23d8d9170909a62413835a7b43b6f68","size":3773,"data":"","first_seen":"2025-08-09T12:58:28.961308Z","last_seen":"2026-02-17T14:14:11.518044Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/rampup.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"115df46d5a05690448538e5e0984f0c1","sha1":"96e67810bd34f52dd2846b451dd008f4fc898886","sha256":"c5fdd8da75617f1e0fdb9042ebf43234dfcb2c52a6a678f4e1db55029851c023","sha512":"a258770fc6f8cb511901ec24457be02a73bf092744b3db2b8bde265ce998c664387ab44cea38196b07fc0a07cee8948ec537e29c739c1142398acf1545b46676","ssdeep":"48:jYY4HqtD//HD9PKh2PU95gK6BmQNHEyiuOnn9mk/f+onBh8/Qy6oHEaILO:jYY4GDHj9PKhHZQREP9mknDnBC4qaLO","tlshash":"8da1442691787d2e62849cf6e5196a2063f44e0237e6ff31d0fd2ab4db218d5c436e2c","size":4779,"data":"","first_seen":"2025-08-09T12:58:29.098351Z","last_seen":"2025-08-31T18:20:20.659584Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/global-event-handler.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed34fd0a8a0dd8435fb246f856fca0bb","sha1":"6805e78074af302ff2f02193e376a0081fc327e2","sha256":"387faa253541ef84b92b193123f7e913e1202f1c654da787b6846b72d44b3d3b","sha512":"8614c271830be79c43e4730e94fd695d3a3f8100131757188af2c8f70ed1be9774c851db6307b1cf75bd0406ec02a7c9eb35de4b98ed27bfe4a474db4cb98a1d","ssdeep":"","tlshash":"0f21110fe454927304941af9e607c1ee833b676773eac17090cf83b51e16d76c1a2da5","size":1378,"data":"","first_seen":"2025-08-09T12:58:29.087275Z","last_seen":"2026-02-17T14:14:11.421303Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/auth-BA37t2p9.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c077653eb8f74f80f82d1f46a565da7a","sha1":"a12fe3eb68b62a6373232674309a2c27d24d08fc","sha256":"3e7ac968b2f76fdf50006b40eb3bf3f72737d4c97f344c6743e55f234e5d4bef","sha512":"f7208839b1554866062b02b0ec4d9e6a908af6f74bb874523a52e366fd776fae116f639a5f9baa05a10c75a58d1e205689aa9dbe640e4da2147b3d052f3350fc","ssdeep":"384:u9JiZrb6nLq6NBP6K8T6B6uWA1WnzBgMINOX0P0FIdVDEPeKbXBYDd9:u9JiZrunLJNBiK8G6iWnlgMINOX0PGIh","tlshash":"4272f83db26c9abea6c309e06f179049e3df503831da90f0841e91f9dc27815c997ea9","size":17130,"data":"","first_seen":"2025-08-09T12:58:28.945828Z","last_seen":"2025-08-26T18:05:53.952822Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1d0fea878c99e102f09a95162e1d19a9","sha1":"8448a0ef874520889a84cfb1076e30845bea153e","sha256":"b06605a30f0cef2f99dc3cb5cb4aa6e796e9bca34d90950f9cb050e3a8f447e5","sha512":"a2565dcda0600efb8b1633b2b62141549c4630d58950aea4e07a201792831856180f42a6f09c9726f2ab79603ca63c299d3100adc14874fc652c821f7f48c501","ssdeep":"","tlshash":"e790029524c75000867e1178045b588450298c7226484ae0905098591c5502056a945d","size":47,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.371509Z","times_seen":2589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2e9d1caaf28a12e3cacc4a74fab822a9","sha1":"bd31b4ac236efae2e3d4d536ce1b32330abae70e","sha256":"154bcdec4d6a18e41a4080e76de57c243c244ea47b921b82288843d0577306b5","sha512":"9edf83b3495ce70098b34194fb44d6d02867d2f8649d1e12cd6d07b868502d65c86a436e6c6a76a4e0c85e2684d34f82fab47d8f692bfebfc46fcacec12e353d","ssdeep":"","tlshash":"0e9002d520c661048a6b11a804565e85502648b014484a50805094552855024562545c","size":43,"data":"","first_seen":"2024-03-27T20:50:29Z","last_seen":"2026-06-09T14:57:37.37003Z","times_seen":2555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/underscore-mixins.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ec324dabda73aec2208aed5d5e6bea55","sha1":"69c54752bbe88abd460b265a0a33caf742e40258","sha256":"309b31704cbf22cea154d973e1777bf7bbfad701d7be9c3113031ef372c547cb","sha512":"b17b6ec66ccc137432514bb112c4f4f064581be4d31e8b20768d8998a65bc18b65afad72ea2107a0e46c7b9331b456dbb45454c1cac467ecefea2491fafd32bb","ssdeep":"192:oRtk8XjGGr0AQj1ezF5ryQWxw2gQw0B5Nx291CWECBP4eJE4kwdzZ9zysD:T8Xh4AQj1+e1MQwbnOMyC","tlshash":"f41297dd35c2b071578551b8e8ab051bf33919e22f4ed0d4f04a51aa3a36ca4c272fed","size":9905,"data":"","first_seen":"2025-08-09T12:58:29.035002Z","last_seen":"2025-09-30T03:27:29.157191Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"3e9b125abf62536da7243beee8be3109","sha1":"3514a996c74e3f22652cb3fff0c5520a3d24cb2f","sha256":"4f507c51f1de5b9cf619939645632c8d343be336786eae695dd4281c208b0682","sha512":"6223e0520de68a9c58d8fe39f105b8b8289943bc59b543aec5b8249f17c91184c073b308807765f70cb66b8e1e6a8aa91cd9ac23452328e8caea68a4f8b79fa7","ssdeep":"","tlshash":"1090029524c35004477e1174005f6884502988722b484990815098591c5542096a945d","size":46,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.340764Z","times_seen":2592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/debug.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5106b6540d3b6a0a2e55950cce8fb384","sha1":"a3c2eb4a7cdc0256e70688940663d0d2400a55dc","sha256":"a6c1112cbebd6093fab5072dd35983d66102abcce922bc1610347b3ba7a71190","sha512":"3fadca04290618346cbbba69d577bda1976d938dae2055452ea3a50090025098d846176194117da75f614f135956d7af0db221bf48302f325ccca0f081d8bcc6","ssdeep":"","tlshash":"cf11020e5464d777448102e66a4781dfd31a696672ef90a1101bc3ad5c07db702b0db4","size":979,"data":"","first_seen":"2024-11-11T15:00:45.85254Z","last_seen":"2026-04-17T03:11:43.191343Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"41d9facf80865029fc5133eee9d88292","sha1":"f9a57252edee0f6f9e3b808a426a756553139f2f","sha256":"511c7ae32f6c674d72e1ec1a5ca98cb5ebbc9932dccb8b1ab7219bf46425df5d","sha512":"68256ae9750399b9ba839bdab05e5647db61b83029853eaccd99493058e9be7c5267d2ee3eff2cf9f2a4220ee31fe8af8fe5bca1397ff1992ea02e6254263044","ssdeep":"","tlshash":"ce90029520c294088aae11b404675a89502644a2145c4e50c064d45578a6023563946c","size":49,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.368966Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"9c8539a4fdf28706f7322690054a6fc2","sha1":"b25475470e7eb057ee45f9d9c9f92648676d68e1","sha256":"acdd3e6d3d47f67e7630f54de3ef6d124230573fc753111f29b82075f0598b5e","sha512":"c61461a88c46bc302324e429d1278fe721ff840827eacf5abfba8b56172072a16082d500157466ef899cb869a68bda1d3aa34687c26c9e95d8b77c292b68e137","ssdeep":"","tlshash":"6a9022c830ce0000c03202a0003a8e800028282020088c00803cc0800eab020002300c","size":56,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.426978Z","times_seen":2526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/helplink.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8b19c7fcd089be3076c05e8eba4afc8b","sha1":"8251a98bc6df6de14348f79c2bd171ae232db893","sha256":"21e537a51f49b6930eaca77fababb0bd539ecf49beab18eb8169c878769f02e2","sha512":"3988650e09b3b75b985c436d6da02d3a931697d7a331c5e091fd7be69d3975fe126bcd8c7370e1da6ce3f037b1ab9ddda5d7be9f7a26a372d900d81cf1d12db5","ssdeep":"","tlshash":"eb61103590387d2e73a49ce4c8105d1053fa4f52b7cb7f39a5bd06b6e2a0698d112e3d","size":3181,"data":"","first_seen":"2025-08-09T12:58:29.013129Z","last_seen":"2025-08-26T18:05:53.997601Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"454c3138101088c9522869ddf406c924","sha1":"6113a00985e2d604ae3fb267b3a6ba88b6102175","sha256":"6d90569c323721170558f88b53e5eb83a67e101bf6404f8418f654cd793377b8","sha512":"3cda010407939de134562dca357ddc05cc4694883e10847680b9a8720c5edca9b38d523050a8e089f615da7038d5c7d50ca18f02823c1d4827b6c70f5167ebbc","ssdeep":"","tlshash":"f690029520c250048aae11b404665989502644a1145c49508060d4556855020562546c","size":42,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.336185Z","times_seen":2593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"41d9facf80865029fc5133eee9d88292","sha1":"f9a57252edee0f6f9e3b808a426a756553139f2f","sha256":"511c7ae32f6c674d72e1ec1a5ca98cb5ebbc9932dccb8b1ab7219bf46425df5d","sha512":"68256ae9750399b9ba839bdab05e5647db61b83029853eaccd99493058e9be7c5267d2ee3eff2cf9f2a4220ee31fe8af8fe5bca1397ff1992ea02e6254263044","ssdeep":"","tlshash":"ce90029520c294088aae11b404675a89502644a2145c4e50c064d45578a6023563946c","size":49,"data":"","first_seen":"2023-04-16T19:17:48Z","last_seen":"2026-06-09T14:57:37.368966Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/externalcontentpopup.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24963eca14e5e48c6a8a2d62e068d3c3","sha1":"691ef6a3872123f00c29fa55affff3eee4327448","sha256":"fcc1f6eef68ba927cea0fe5e7e2801702400935d97ca60f8095f59220b513cad","sha512":"d4f7c67dd47ad55057e8a7963af4f4e86d9e49805210a1d64de063161960cf64f77b1313bc271beae94bc291909e318e8aa112bdda1bd327db3e05d89558b4bb","ssdeep":"","tlshash":"8451949231b6b0b443062cb061315896f2b566e1740ab85cf35c9cee3ef2d8ad261f3c","size":2825,"data":"","first_seen":"2023-05-15T10:40:11Z","last_seen":"2026-06-09T14:57:37.366071Z","times_seen":2540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/login/tabSession.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b5cc14b904fd469a98ccd462bcd865c","sha1":"ff859c6e83d7a8a92f55f4985dbaff7c51ce3884","sha256":"fea8b9578beef5a38a19ffeaddfdb6dcb57e0c0f7c744ddf5cf3d8f53d4efa2b","sha512":"8279f002fbada39069de20d00c5044af0e376e32922ab2b00c172f37229f4dfd9ef14fa14d9358365737f2081a12777628d6c8a2fad534b20b85822bf4e756b5","ssdeep":"","tlshash":"8941012fd174b633048498f8e005cee993b95d6337e6bf71a0de43749b02839c156c64","size":2026,"data":"","first_seen":"2025-08-09T12:58:29.028241Z","last_seen":"2026-02-17T14:14:11.525654Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/ox.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5467223c63911f5c0e919b55291ba820","sha1":"c2380317d2f895828583c342bd4df1f80856e5ca","sha256":"eaea3fe80e2d5470132fe86e7bd0c62105d77303fee52bd0b0990b71488c26fc","sha512":"193867d6fdaa7a8e4c37f2143822d0a02ce80ef78529b0f835c919624f6eb32ffbd961c2aaecb4e75b1d2952805bf0f23206eed8a3d343e10034c746dd6e96fe","ssdeep":"","tlshash":"b461a64d986ad33f42dd01e59627254c533f2467314af4a0801f8fa02b0ed9a93a7fd7","size":3241,"data":"","first_seen":"2025-08-09T12:58:28.949462Z","last_seen":"2026-02-17T14:14:11.484154Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"beac2f6a24227adaedbeaa548ec3d91e","sha1":"6a80387f61025acf859b440b43c2cbd7330730b0","sha256":"bc6348ffae676bc244140ef9317024d03c1f4270d51fd15bfa078b53dae8b8f2","sha512":"542877bab762f629820580682bf6709420d31013578bfb54b8c2455fb899a922fb6146b6116bd58378364e17f9035d0923f4941587eae7e7e6db472b6669663d","ssdeep":"","tlshash":"5190029564c36000467e1564006b98c89029987226485d90807098691c5d12156ad57d","size":52,"data":"","first_seen":"2024-02-14T08:52:49Z","last_seen":"2025-08-16T14:49:24.274715Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/version-check.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0023901281f8f014a28d1aede9badd8d","sha1":"aff2877c3df45fb8cd6a24a180dfc6860a95fa19","sha256":"83f8141ff6d2fcc3ec9efa89bed86b1b7f72da1afde2d12193eff359c35e49ab","sha512":"5517a4c47b898ae52080124f33d767525a62d7188dcb64e115b87ef259cd12969bb5580d352108d0fa61c7227518c2e128690018a59e5ccfa3a5acba8df5e39c","ssdeep":"","tlshash":"1071760ec478d1331aa065b9fd079269432e8b2b63d5b4a1a3ee07b117d7cbc8117e66","size":3547,"data":"","first_seen":"2025-08-09T12:58:28.959776Z","last_seen":"2026-02-17T14:14:11.43289Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/antiphishing.6fb231d8.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43d791d5a14cb9d8e6c43a009d086a92","sha1":"84d119077cd8f7b89cd2f0ac1720e0512caf106a","sha256":"24915bf03127be7e6e1b9488854b1807142569c27050ceeff52a7460fcf23a78","sha512":"c3b0218cecfb2b6dbd3c0fde72aca254b20f94443f99829f1371eefc241aa832f1943c391188391955ab77aace1ab9472aed583306a79c582c43f6b310a66255","ssdeep":"","tlshash":"b0c0126f54e460f0928d0ce9e659b88d212c649552331418363262e358294418e8e909","size":193,"data":"","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.402019Z","times_seen":2540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/lib/jquery.lazyload.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/lib/jquery.lazyload.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1011\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2601,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2556)","md5":"8b591fd0579d9f6099fc2e417e7c0c8b","sha1":"81bfe2b16630eecf1a11884111581a9c4ce21a38","sha256":"e5995cf0eebf8dd61a310f13a4dd508964e4507bb5f4784f5077ee7e0bca9d30","sha512":"46799bc1d8750a3171ba880ac4ddb2c03c659e9b5a61fc7d10c6a911fdc1291d6832855fb2ce508c5ae43562c4bb64300bd29e45c96e7fe64b32dde822a35c67","ssdeep":"","tlshash":"fd5195d47094f061f97654b9cc36b208522ab4576fc2c165f09e28e7adb1c6ab232d7c","first_seen":"2025-08-09T12:58:28.932533Z","last_seen":"2026-02-17T14:14:11.40899Z","times_seen":51,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/debug.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/debug.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 522\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":979,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"5106b6540d3b6a0a2e55950cce8fb384","sha1":"a3c2eb4a7cdc0256e70688940663d0d2400a55dc","sha256":"a6c1112cbebd6093fab5072dd35983d66102abcce922bc1610347b3ba7a71190","sha512":"3fadca04290618346cbbba69d577bda1976d938dae2055452ea3a50090025098d846176194117da75f614f135956d7af0db221bf48302f325ccca0f081d8bcc6","ssdeep":"","tlshash":"cf11020e5464d777448102e66a4781dfd31a696672ef90a1101bc3ad5c07db702b0db4","first_seen":"2024-11-11T15:00:45.85254Z","last_seen":"2026-04-17T03:11:43.191343Z","times_seen":326,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/capabilities.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/capabilities.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1259\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2245)","md5":"4ba54728884d1f178810719fb0f75691","sha1":"1249862cdae3752f8519fb9fc81f3fba0f8133ac","sha256":"d46610cdc7e38489881c7fe44065fd9aec5c3e20a159b2913c2a9457c51c5098","sha512":"e0dbc1ef24165276f92bd09e92ce1d6dd40b56eaacf55e129e8fcf519996d4e6da14005e0e505cba074585b8222807e1e70d6cde9d0240ee19db9a5c3933e10d","ssdeep":"","tlshash":"7751645ab5a43edb23846ca8d835591263bc8d4136cefe71a08c11fee62545cca2ad3d","first_seen":"2025-08-09T12:58:28.935699Z","last_seen":"2025-08-31T18:20:20.655565Z","times_seen":30,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/multifactor.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/multifactor.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1072\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1574)","md5":"8bc0c77d31055216d0cb76e31bbd2616","sha1":"05265baa6d1db0b7d0f167add4481fbffbc18dd0","sha256":"d2a859b8d8d281580c2dbffd6c735e75205e9117644b995db7dbfdb8f893fc9f","sha512":"5bf6db9060c70248e875441c497ce37c4cf7a3f83877eb933d25e99d91c02ed26b9f42e691f77edd1a2fc0b574ae9f35d32bda61c2a5e36e1f2686a636f38a25","ssdeep":"","tlshash":"3b51772ad5383c1d72588ca5dc259e5193e81e163bdfbf36c0ee16b4e6148acc126e3d","first_seen":"2025-08-09T12:58:28.936774Z","last_seen":"2025-08-31T18:20:20.556219Z","times_seen":30,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/yell.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/yell.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2081\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5289,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4480)","md5":"2c620f36e9330eae77a120bfac961e7a","sha1":"d509a47fc1d6129e16f6c3018a003d467b7aa029","sha256":"e9108ff25b09b1b814ed6f7d068b6995ee6b3cce552b87298410c10f61cc42b3","sha512":"ff90fc20a071a2d96601d11fb6337a1c59af908b4d54ae3c5372a329585f63668cd907c85d62a8e11a1fe19daae1525a9bf32a7400477a3651838752abf04541","ssdeep":"96:jg60OEAocidwbwecGUaeBu4BQ63FuH6ExlWWSRsDcUmEDGL0:EmEAZSwbwFIu2McH6EXWBSDcUmM","tlshash":"58b1d849a0353d6623b56df5f426560223f809633a8bf922d0ee06b9f660c64d347f3c","first_seen":"2025-08-09T12:58:28.938219Z","last_seen":"2025-09-27T05:38:56.463657Z","times_seen":44,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/contactsdumpster.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/contactsdumpster.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 908\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"c497d02303321594205cb7f89d97b00f","sha1":"7eed507fbf883b2cd02c0de8833f8e5528a968d0","sha256":"0ca013753e0edfcb4fc2ca125bbdd50619612ec7da764aea58349a7aaa30f55c","sha512":"d53bd51df69753cc35e76fe7a261f3d031329534aeb201f7ce5f637ab7740ad27ffcf767a2759e117fc533db53e2bd23570b625c117d247bd5b3d0793a2c1c72","ssdeep":"","tlshash":"fc31528536a6b0f0131819a0d0721c41e134aad0780aed9cfaa97cff39e788e9611e38","first_seen":"2024-11-11T15:00:46.016808Z","last_seen":"2026-06-09T14:57:37.416073Z","times_seen":2529,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/abstract.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/mini-views/abstract.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 811\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (553)","md5":"ba717b14d6980c80415e634136d2d6de","sha1":"f94c231940390186853bd4b23c1828a5b994cc5b","sha256":"822ddc2a956b24f74da789fb4123f02c2ae44ea3ff67a8de4655948688516ef4","sha512":"54787a933b36bed081ddb2e09cfcc6878053c56dcbbe86cde87dede2968eb004b5617c2abb0da1a44c869ffa4a3a6720114a77f2571ab7c70209e8bcc14676d3","ssdeep":"","tlshash":"2b31814e6178c3330cc841d87783a1cb839e6a6b3297a068346ef6f66c55da6507adb0","first_seen":"2025-08-09T12:58:28.940313Z","last_seen":"2026-02-17T14:14:11.505533Z","times_seen":51,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/locale/meta.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/locale/meta.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 4876\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17902,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16334)","md5":"dca8d420049c2206e839082e337ea54e","sha1":"9d5fba5a82940f6ea49e60b5b2d82655bd2c5727","sha256":"a64fb55038d7831d55f7f77cdd18531f89bf5e8487cbbf3052d42e3579f2b6d9","sha512":"45d9cc4b952e33e7ea0472f46e87e3ae2ba79725e8dcf855655d45159899ad381cab93c64e124d95b28d3179d73c222df13407bf2e4330612a552e5d9bb65ad9","ssdeep":"384:PMLh++9w29BowUx+Lq3lny/onOK2hwfn/kCX4K:Pi+qYRhLnOK2hW/H4K","tlshash":"d1820076cc3d3aa95a802c266b462cf037b41e51f723de3642ac5f747ba945de85b830","first_seen":"2025-08-09T12:58:28.941523Z","last_seen":"2025-08-31T18:20:20.637867Z","times_seen":30,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/main.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/main.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ndependencies: assets/main-ORQm3P_K.css\r\ncontent-encoding: br\r\ncontent-length: 30283\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110343,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42952)","md5":"aa4830584aa706d30b8dc27a23228317","sha1":"2e2b92595543fddad9d58aaac9bd4425c40e612d","sha256":"72c63153d23a02a3b0db8ff2ef2cb3dffcec9cec7cc71ba46270fc0f8325ea0d","sha512":"00e7d57bc9269b8448d0b6eb445f770186a35e457f3fe59e3ac4efb5814f22c4e154db53076933042ea1f923f7787f7787e31263248cd7a94f4b22f2d8210826","ssdeep":"1536:Q9jSFfCxGVESEfykhJNbW5QuwPZNxkKUOZ+u/iJueAZcNEOqRYp/:6GhcZuuNyruTaT29i","tlshash":"1eb3e88a71a5356203fba0b1515b120a7233697da846802c787dc9f66eb8d4c327ff7d","first_seen":"2025-08-09T12:58:28.942617Z","last_seen":"2025-08-31T18:20:20.612541Z","times_seen":30,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/manifests-DjSAX-_Z.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/manifests-DjSAX-_Z.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3791\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9444,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7057)","md5":"10be408a951dc5426da506a5bd279e4c","sha1":"f63730ce2ae44d4c2f8e4fd9a2ab74845a9c51ad","sha256":"7cac9aa9cbb0911362aba9139b8c96735c93e97d2fc837b6b256199823841366","sha512":"2641f4311dee9740702c4a113a956af744bd39239957d5cceed352ef6318e9869fb736d10e6ae58c4bcf9608afe3bf11ffe7fbbe8b45d3f10ed6ee90c10dfe68","ssdeep":"192:9DWVYk8/QMhqex0HT7nCzi0pGoKzGCXJmcgkRPAvhIQmUxnbPI:9Sk7a2zbGwwJjgkRIvhIQm0I","tlshash":"e312f89f70ece5b991a908f4e523108367e809e5254ea0e0662d42dcdd9d1d19b2bf3d","first_seen":"2025-08-09T12:58:28.943678Z","last_seen":"2025-08-31T18:20:20.713801Z","times_seen":30,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/login/standard.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/login/standard.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1447\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3576,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1346)","md5":"da0c888351e40caf2316c29d587b0c77","sha1":"b7c1b8ea18433cfdc0e95c8483b4a2b5467295ac","sha256":"99fce2348fa97489d8c5e76f96d5165729dcfe360739b28c7842d81a4d2bbbd4","sha512":"da96c26a80e4844e6600ba04a2f506c2290c0d13780295a13087e29e5d82e3e17480a52e877b57874b80493e454c6626a271423c68edd438a046d19c4ab9d775","ssdeep":"","tlshash":"5d715f3bd130786310894cf9e012ae2443798e9733c6af72c0ef4bb5ab21a75d056d3a","first_seen":"2025-08-09T12:58:28.944793Z","last_seen":"2025-08-31T18:20:20.786446Z","times_seen":30,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/auth-BA37t2p9.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/auth-BA37t2p9.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 4643\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17130,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2210)","md5":"c077653eb8f74f80f82d1f46a565da7a","sha1":"a12fe3eb68b62a6373232674309a2c27d24d08fc","sha256":"3e7ac968b2f76fdf50006b40eb3bf3f72737d4c97f344c6743e55f234e5d4bef","sha512":"f7208839b1554866062b02b0ec4d9e6a908af6f74bb874523a52e366fd776fae116f639a5f9baa05a10c75a58d1e205689aa9dbe640e4da2147b3d052f3350fc","ssdeep":"384:u9JiZrb6nLq6NBP6K8T6B6uWA1WnzBgMINOX0P0FIdVDEPeKbXBYDd9:u9JiZrunLJNBiK8G6iWnlgMINOX0PGIh","tlshash":"4272f83db26c9abea6c309e06f179049e3df503831da90f0841e91f9dc27815c997ea9","first_seen":"2025-08-09T12:58:28.945828Z","last_seen":"2025-08-26T18:05:53.952822Z","times_seen":27,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.unsubscribe.abf79198.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.unsubscribe.abf79198.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1622\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3747,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"1e1f3b6cec8c424fffcfd6385e73547a","sha1":"2e720fbe3ce8936fdb8e709a3deb87138a1938df","sha256":"549decfe15b95bd2cbda0bd8292a1106c62f2c4141a62f4f42dccd6627558e90","sha512":"ecb67fddb25e1eda82ac2803aaf98591b772f9a91b60c517100bd2d2a6cda6353a224aa7950e2879754c193223caf4d02563bcdeb40736f8c97e234d1a940764","ssdeep":"","tlshash":"f471945765a9b5b0436a3cb035652886f33076a031069449f2dc88ea7eb39cec263e98","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.408866Z","times_seen":2540,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/api/apps/manifests?action=config\u0026version=8.40.2","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/api/apps/manifests?action=config\u0026version=8.40.2 HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-robots-tag: none\r\nexpires: Sat, 06 May 1995 12:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\ncontent-type: application/json;charset=UTF-8\r\nset-cookie: appsuite-middleware-route=\"f581591764f56766\"; Max-Age=2592000; Path=/; HttpOnly\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3994,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b3b93a3ed35b0209c94afbb77f5fea5d","sha1":"8aacf0d37949da0cc000994aee6f276e53edb072","sha256":"f934aacd3ac32a03b2c72d0c53b720000fb9aa9eea4c8c2fc91e480fb1ad257f","sha512":"b5fda87c68a4d0bce31857a4d6defa0ad3b77a230e771f1898c28bb2f56e73b1cca0efbe2f344828409a1caad793d7127ae3797079b85b74b478a865bcf5d90f","ssdeep":"","tlshash":"89812f2d544146ff9f6649c9f99b6602cccfa00cb6a4ecde8bdce06d061c5c8629133b","first_seen":"2025-08-09T12:58:28.947526Z","last_seen":"2025-08-16T14:49:24.264322Z","times_seen":6,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tab/session.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/tab/session.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3027\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9898,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5499)","md5":"eece4aaceb8509ac7b4608681b2b04b8","sha1":"375c8b6f5ac92c3a617b20e209c0c81e30b7cb91","sha256":"27e378b55ca247b1948840e016d31c4665c6b3cfa136cb37104eefbe42385fbd","sha512":"b9bb6eae0f71117f7184b03ddbeea0dd6ad51635f63786dc81c081304d3e0fe2808d0ca09e7fe36229c70740be16dc2c09fed68ac19c876295cdb2715f71f9d9","ssdeep":"192:llBE76PBPJ38TnXFhTChqQwbzQhaoij3pCoP3Z0WF9HnbUfQPcb:llBE76ph38TnXFhTY2bzQEoijYoP3WWQ","tlshash":"07122018b2343e3e7290cca9ac355e5113f58d1837efbf60a5bd0577db95898802ae2c","first_seen":"2025-08-09T12:58:28.948497Z","last_seen":"2025-08-31T18:20:20.698413Z","times_seen":30,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/ox.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/ox.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1532\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3241,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1252)","md5":"5467223c63911f5c0e919b55291ba820","sha1":"c2380317d2f895828583c342bd4df1f80856e5ca","sha256":"eaea3fe80e2d5470132fe86e7bd0c62105d77303fee52bd0b0990b71488c26fc","sha512":"193867d6fdaa7a8e4c37f2143822d0a02ce80ef78529b0f835c919624f6eb32ffbd961c2aaecb4e75b1d2952805bf0f23206eed8a3d343e10034c746dd6e96fe","ssdeep":"","tlshash":"b461a64d986ad33f42dd01e59627254c533f2467314af4a0801f8fa02b0ed9a93a7fd7","first_seen":"2025-08-09T12:58:28.949462Z","last_seen":"2026-02-17T14:14:11.484154Z","times_seen":51,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/themes/default/illustrations/error-generic.svg","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/themes/default/illustrations/error-generic.svg HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: image/svg+xml\r\ndependencies: false\r\ncontent-encoding: br\r\ncontent-length: 1640\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4892,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8817d05e2460d26855394ad939429606","sha1":"4107f2ac8cd33f1028ca1755f43b11502bde5690","sha256":"dd1f79743bd3900c87f9272b8b7b5283d2870c9101319bb7ef32bf79b6754814","sha512":"d825d2f159bcd089e8fc96897fd3181343144ce667f4012341b324c2ecbe714955b977bbfab059fec7fda86a438836480ca846b09926d96f992dde42aed160e2","ssdeep":"48:1GTebs646ySoNIVZb6qw90m2RY9W/daUu80n8yhLGztiRW/a++E2slNvh94Ar6Gz:SOy1uZ3w9Z9DUN1zg8j+E2slNvh94ANn","tlshash":"25a1c5e4298c85eef84747d8cf98217e143e71ff28699964b99606f0df012ee287f446","first_seen":"2024-10-25T17:19:20.122933Z","last_seen":"2026-06-09T14:57:37.334393Z","times_seen":2557,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/themes/default/logo_180.png","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/themes/default/logo_180.png HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 9868\r\nlast-modified: Thu, 22 May 2025 20:25:06 GMT\r\nx-rgw-object-type: Normal\r\netag: \"db505ee02aadb5be458a2829179a2be1\"\r\nx-amz-request-id: tx000004c80695f530ba92c-00686f7152-175462225-msc1\r\nx-app-server: rgw14ham1\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"db505ee02aadb5be458a2829179a2be1","sha1":"dbe9aa38d9f69e9da06ec626b386f991ce4ebfd2","sha256":"577c7ef3bdba54f9b87d6e28f729b956ccc390b1dd1d86dafecbf438109e2b92","sha512":"39d4fdbcba4485b3f3941b242e0b53d722f7a1e0790a92a7706dd68d5a655b17df64cde529f872a352ba50af7afe6062e8993ceb7e30fd5bd5f7e3fb343cf4a3","ssdeep":"192:NkNfsCxw8ena7SnSbkz+ETgPQyxmnjh3IC5AMehcr9Mrcsq90M8hilqnNu+E77:uRHETCQy8jhE/hiLdyZ2qnM+q","tlshash":"2412a0c8a171f4c1137212a9f58ad180db56b112c5c9870cf9ebc4fd7c649f21ad3589","first_seen":"2023-09-13T20:01:03Z","last_seen":"2025-11-03T10:35:05.624423Z","times_seen":10,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/util.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/util.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2278\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5818,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4562)","md5":"eee6986ebee6aaba16c92b7dc63f7016","sha1":"9637495bad847a695a9006b40c6427b7f2a61e61","sha256":"f92f9b5a8108a4135a5e99199901a0f8979003a4b933aaa1e77e30fa333ded68","sha512":"6331ada0b1467b92f4d9bfeacc62e777fd52a5966840b07851b7ac34deb7321bdae82a73fcef1af73f8367f18ac235c6e05b446748f360f609750ab8c47221b4","ssdeep":"96:jXc2xTkv5rtXtQOaP7LA1XpD615OfexuPOP5tm/:I2xGrsTPHA1Xw1IfexuP0m/","tlshash":"73c1856851783c1b32a40ca0d8261d2223e98d557bdfffb495ac16f5fe75888c01ae7c","first_seen":"2025-08-09T12:58:28.951413Z","last_seen":"2025-08-31T18:20:20.533291Z","times_seen":30,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/jitsiReservationManager/settings.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/jitsiReservationManager/settings.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 767\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1673,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (574)","md5":"2f057884dd5d87f948471e1235ef9d7b","sha1":"f4d046e2dcc4f4df2823906bfd22a155bc0f5323","sha256":"c5008a1a84f6eb256f03fd296edda5b6b967c4a9e2f0c776e54b1a09745ea1ee","sha512":"27cb21c6c7965d6773394ad52a446cd2b82a7094b11eed83268da8f3f483ee70a502fd9e4f0fdafa2c5461cb5ed886974e1a103106510fafd537b56fca77ffb8","ssdeep":"","tlshash":"c331200bc074a636144009f8e502c5ead37a1a6373e7b97290df03b9da029b5c551ca4","first_seen":"2025-08-09T12:58:28.954596Z","last_seen":"2026-02-17T14:14:11.506352Z","times_seen":51,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/mandatorywizard.894649b8.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/mandatorywizard.894649b8.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1332\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2748,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"477f3a897a70c6bdc3896bc683b91418","sha1":"5c5362d83b5226e26d0f2af0b21bcfb128d56ec5","sha256":"1e8e7e91644deba9ea5424e522ff2c10a56c64ebe0ac915e13f2fda3df639c64","sha512":"7d86d28f7315079923e440bef09cd7353abd7be94cb8e61063527dacad82d206ab8c0a2fedd37ae8094cf6ddbe40cec5dc1785ea59c5ac9745501fa7510303d9","ssdeep":"","tlshash":"f951a28236a1b07443122ca43171489af2b569e13009f85cf36c9cee2df2cca9262f3c","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.372579Z","times_seen":2540,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/backbone-oPPGqYDF.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/backbone-oPPGqYDF.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 46103\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134175,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43907)","md5":"478ae9a4a4c500ae15d29f2a1efa9680","sha1":"685815399d381034e8410f24d11029ded6c97ec5","sha256":"b9e37122858d65d914e12868e8f48d6d2219158fb1d8d1e42860ca62af121bed","sha512":"827a0798da720279e9b731931ae5f1bce7fe44419b7d5ef6bea169b0a54dcc640d5c5e45db765fcb1f02085ff320633038b78d5c87992b9763a24f1cbc596ab0","ssdeep":"1536:wYeWXvtZZVhNjos26na3gAiapstbaLWvacpF36vg/D9vqh/ozGc0f4BT9cby7OSX:wOZhNjL2Rwq5gb9Stoz0fsBaCVSHlkE4","tlshash":"ebd3f5dc72c7b46283a760b9407f110bf27a6c99684cc510f068d8e9bcb8a49917bf7d","first_seen":"2025-08-09T12:58:28.956154Z","last_seen":"2026-02-17T14:14:11.452157Z","times_seen":51,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/version-check.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/version-check.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1440\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3547,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1938)","md5":"0023901281f8f014a28d1aede9badd8d","sha1":"aff2877c3df45fb8cd6a24a180dfc6860a95fa19","sha256":"83f8141ff6d2fcc3ec9efa89bed86b1b7f72da1afde2d12193eff359c35e49ab","sha512":"5517a4c47b898ae52080124f33d767525a62d7188dcb64e115b87ef259cd12969bb5580d352108d0fa61c7227518c2e128690018a59e5ccfa3a5acba8df5e39c","ssdeep":"","tlshash":"1071760ec478d1331aa065b9fd079269432e8b2b63d5b4a1a3ee07b117d7cbc8117e66","first_seen":"2025-08-09T12:58:28.959776Z","last_seen":"2026-02-17T14:14:11.43289Z","times_seen":51,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/url.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/url.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1644\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3773,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2647)","md5":"d071a6d806e16d46cc3f9e7fba711bfb","sha1":"df2dc4d67e6ba92c4580f66840e9fda409f517fa","sha256":"8bd2633386160eb0ea92ca5224dd9ba893cfd834c814e01d64be2856abfa9f7f","sha512":"09e87031b1a294b9b226bec366d930c48d896f3c520906e34028f186e7a98ac300b01dce5bf2adaa8766e744d61443c4b1ac1b8b8538b83278cc4f3f06dfcc3a","ssdeep":"","tlshash":"0671e9cf30d1e9b213d144e345db226dd33d9ad23d8d9170909a62413835a7b43b6f68","first_seen":"2025-08-09T12:58:28.961308Z","last_seen":"2026-02-17T14:14:11.518044Z","times_seen":51,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/events.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/events.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 616\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"37a8df536039fdad970069e008143da0","sha1":"b820051d90427b6d078b7b01f7ba940d4661d988","sha256":"63ee714b6bcf07eb382a9bfc54f5a87f56d714c1037f3d3df71d5357360890b8","sha512":"78e1d378274eafb190b17576be461fd713a60584168daedd8a259deab87b0c2a33d8a5242ffcf0895ec8bf4e2ba338d6f9028b9125819b832392b6e66c1a0cc8","ssdeep":"","tlshash":"d121411e54a0dbb7049102faa68b81cfd31aa4a271af80b2101ad6fd1c17db602a1cec","first_seen":"2024-08-18T11:00:48Z","last_seen":"2026-04-17T03:11:43.170165Z","times_seen":328,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tab/communication.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/tab/communication.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1907\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5576,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3614)","md5":"8a2814da3c2cceaa05d2e53c177ae0cf","sha1":"bbdc2e61ddeabfffa12d80083c6ed4836471c500","sha256":"6627a58f7256515a48790c724e0acad43eb0706bd17be6808e3d2073fd122160","sha512":"02f0437e634348def31d5a32b4e3764494149cab99fb088212e342b97d6010a754c3e88f88845c8842fd4559261c21c2cf57c6705260dfebcad7cff90cf39594","ssdeep":"96:j7Srxch+iZOjKGZyGBWSsM4k2dRXIdc8c0ILU6/NSSDobhzj7qB:HSrxI+iAjKnGUSJ4kORY6rHVSRhHeB","tlshash":"3bb1541561343d2e32b44da99d267f2023e48e6936cfbf70e09e5a71fa1548b801be6d","first_seen":"2025-08-09T12:58:28.964026Z","last_seen":"2025-08-31T18:20:20.656284Z","times_seen":30,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/_commonjsHelpers-C5mpvj56.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/_commonjsHelpers-C5mpvj56.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 430\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":864,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (809)","md5":"1d7828e6e51c0007857b4bb822985c7d","sha1":"5458e4b3d34ce321b7403c8878aaff2bb2a31238","sha256":"e29af2553180676e60e13afd57c00af0b5bf73cde8c16765b0b0a3d17ab1f885","sha512":"26d514ed2296d44c129a56d3d786522ba4682146e4bf6ed7e4f351f38a4b383895ec2066c29512783a788c2aac146ded194f79fe5f654ce7d4bf5621da453520","ssdeep":"","tlshash":"7c11239578f0e4f141f604f8803b3001f32e697e91ecf980a79ac5f054e415f9411b67","first_seen":"2025-08-09T12:58:28.965546Z","last_seen":"2026-05-28T02:13:33.278665Z","times_seen":1254,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/gettext.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/gettext.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 868\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1732,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (626)","md5":"62fbccfe41ae0a57ce5418090f7c2f85","sha1":"ea087a319f633b3484eec3770938365d691579d9","sha256":"e9162872f764d031bdd9a53a392341c18c0129ec1ad10946567f4ca8cc07f56b","sha512":"c9914ab2b62945decc4bb132d2f3100bdab58da57c90d723d96d70a4abb614babb1bdeda1f2af6601201c0ebf574474f92d661ba6317b87bbc8f60e9eb9f536e","ssdeep":"","tlshash":"bf31980fb060e3b708da19f4e107d09fd23f5566b25fd570109eabd50c1387a0257d69","first_seen":"2025-08-09T12:58:28.966755Z","last_seen":"2026-02-17T14:14:11.450312Z","times_seen":51,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/fixes.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/fixes.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1184\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2641,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1306)","md5":"b02693540a2dc6cc50933bb77f6d72c4","sha1":"add938c98fd6710c95e59f5839d85688db2896b4","sha256":"f7196324dac72772fd699f8bf2e0f19e5d0c6a8bb47edc6c87cd307b8e189662","sha512":"d2f9aad6469c4a9f7b3f8819d95dd16b6b9eb64bba3604cff8db0501b74c795398363809efd0392a78feed292a9d3e9f5caaf025946e703029b2ea87ac34c127","ssdeep":"","tlshash":"1b51883a7020b132096a14f8a50bae59433b2d6377c75960504ec7f46d65eaa81a3fac","first_seen":"2025-08-09T12:58:28.967954Z","last_seen":"2026-02-17T14:14:11.435299Z","times_seen":51,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/views/extensible.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/views/extensible.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1225\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2998,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1559)","md5":"64f74375ec48a0c4b837f5bbe37a7ebf","sha1":"d0cb4b432004787fd2b9574b63447e3cefef5b3b","sha256":"082eeba66234c358d75ec11cd53473f87ec8fee0596bf426e36cffbf549e9179","sha512":"6155ddcab9fdac09beeb0a68b95fee076c9420b953611ca13e3fdf681eb8a857d9c96b6af2774e9b29a5a5ac47027bdf59f606b0f89f062bb1a652322863280f","ssdeep":"","tlshash":"6a51b5197074f22201d984e5e40b09cfe3365db576c916f834dda2faad09eb68232e34","first_seen":"2025-08-09T12:58:28.968889Z","last_seen":"2025-09-27T05:38:56.458667Z","times_seen":44,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/views/disposable.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/views/disposable.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 871\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1847,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (507)","md5":"9bc0cd844004511ce97d6683fca074e1","sha1":"47b746f744a44e6b2562225b191a86194626c703","sha256":"d9ec329c80062d106318adb41418102584726a5d6c94019bbf74a1c2394b394f","sha512":"2b5650771f44b41ef960b06d4fe65454046b7b55f57732dcb385de314d3adb9fe9cb06ffd731769095e54422e7276b0983e7917802068a0de9bc545fec291bcf","ssdeep":"","tlshash":"a731622ee434b637049499ec9002d9de43396e6777d76e74308e83f46f16cb95222db0","first_seen":"2025-08-09T12:58:28.97026Z","last_seen":"2025-09-27T05:38:56.40154Z","times_seen":44,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/api/tab.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/api/tab.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1460\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3576,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1978)","md5":"15d59dc4112f7eedafc5e521511ab199","sha1":"14c9d377a1eab1d814c0ec16d3d2f0efd04a5d46","sha256":"81198cb023893c54fc4dfe699cd9185af432079e7439927b471eaa3422401462","sha512":"a01a6aa4ffaa9db1c575ee85a19dff58777786d25ef6b7f0bf179bf8f5ac00a10d23ab0882359f16567d43cf419934bb743c8b6d601267bc3aa4fc2b62155c2e","ssdeep":"","tlshash":"f571975af560b179025c48fad02a5f67d3793ef23a9b6920c09f47b87b12833c127d98","first_seen":"2025-08-09T12:58:28.971368Z","last_seen":"2026-02-17T14:14:11.410695Z","times_seen":51,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.login.links/register.363e034b.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:01.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.login.links/register.363e034b.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"; locale=en_US\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 543\r\ndate: Sat, 09 Aug 2025 12:58:01 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1195,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1148)","md5":"fc1be168cd65b55685a67b67f149590f","sha1":"e7a54c23a60e5b173628e3bd48065a44ff113a78","sha256":"7727ba88912075c4fdaefdba500130921df2bd4796005b208fa432b69385f4b9","sha512":"12e5465289d3a6924a4630c5adc8280b83ac32fd39747fb50cdefe9a088732e2ea29c08c24647f3aef0f07e22337686d89655475441ee8e5083aa6dddd7876c5","ssdeep":"","tlshash":"9621cd9db03e141253372c8a70171105d57b1cb49e02fae9d6ac04750fbbb0d3497e0c","first_seen":"2023-03-07T12:58:11Z","last_seen":"2026-06-09T14:57:37.437529Z","times_seen":2492,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/jquery.plugins.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/jquery.plugins.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2361\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5724,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4492)","md5":"1de350a1bd5b84ca25ab746b09caba72","sha1":"875b4af59f1378be79be0b4f5469802f4824b0f9","sha256":"f8e7321c846fcc0177f17368918aa3765165ed3430a123e80f94b3283fa21d4a","sha512":"9ef62d418c328413896098ed555ffd136ba3c996d0a1cb920f7d0bc7815a3f9096ea27beff89b68563163df722191a24ef341f3dc7f26ff990096e83df221e8a","ssdeep":"96:pWPCkPsAuHl/rFjFriEWUCVgKeWv3DglsCPCFkmX5RL5IVRg4Q2hpf:pWKk41eEW9v3DGtCF9Rt6Rg4Q2f","tlshash":"59c1d7897061b17382d5a4fe9037c24ee3362457b5c6d1d0b04c4eee2d2aea11126fae","first_seen":"2025-08-09T12:58:28.975522Z","last_seen":"2026-02-17T14:14:11.491676Z","times_seen":51,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/fixes.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/fixes.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1184\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2641,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1306)","md5":"b02693540a2dc6cc50933bb77f6d72c4","sha1":"add938c98fd6710c95e59f5839d85688db2896b4","sha256":"f7196324dac72772fd699f8bf2e0f19e5d0c6a8bb47edc6c87cd307b8e189662","sha512":"d2f9aad6469c4a9f7b3f8819d95dd16b6b9eb64bba3604cff8db0501b74c795398363809efd0392a78feed292a9d3e9f5caaf025946e703029b2ea87ac34c127","ssdeep":"","tlshash":"1b51883a7020b132096a14f8a50bae59433b2d6377c75960504ec7f46d65eaa81a3fac","first_seen":"2025-08-09T12:58:28.967954Z","last_seen":"2026-02-17T14:14:11.435299Z","times_seen":51,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/minimalapiconsent.0e902e90.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/minimalapiconsent.0e902e90.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1325\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2731,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"721d84ef1ad67dda77418e546fe5c63e","sha1":"0dcc6bee7f4b3ceed69901e84146d30d5609dc16","sha256":"520658a4e0d889d6204904ecd46268dbcc83cdcde420083efbdfff71bc77129a","sha512":"c52c51546123d4039945341224bbd866d373229aaaaa1346f4e71f32e6eeabfa8a7da2961134571b041ccfb5e08879db531a14cf2a4f8ab96f985965b0082778","ssdeep":"","tlshash":"3651968235f6b07413162ca061764896f6b956e13449e44cf35c9cee2df2dced262f38","first_seen":"2024-08-18T11:00:56Z","last_seen":"2026-06-09T14:57:37.43696Z","times_seen":2534,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.dumpster.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.dumpster.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"712dd8594885b6785559687b08188522","sha1":"08a0afa298ff973c93ca805fd5266759b26cbead","sha256":"3f4bd92c0c2372ebac508d5d58e76d94e947bd718a026ed28f3079326fef265f","sha512":"d0e1a448de38d6ad42e52ec43ee26410d3ce14642074c435dface3960c4423cc274debaff4853e207f7bae495f3d9efe747b72956c88417966ef1d81d55c50cc","ssdeep":"","tlshash":"b2c08c7fbcb0a0f0ab8e1ce8c37a800f3434b296a3331464a0402262083348e8e5fa02","first_seen":"2024-03-27T20:50:27Z","last_seen":"2026-06-09T14:57:37.40296Z","times_seen":2534,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/login/token.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/login/token.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1365\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3462,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1499)","md5":"542b539be391116403af2668db5ca70d","sha1":"449642b82995883afe60066654e4a58bc758b9d0","sha256":"2f79634aaa6565ce4055bad7f7884e3851c41faa73cab3c58bf3b8b68866786b","sha512":"e7750b18bc5d5652b18d05aeb3f1f8c21c10c3649bffefc517b8cfce550c3627145eb145a5e2dc8ebb44c90668d3804a094c73358649f3f60a9c91261918b3e1","ssdeep":"","tlshash":"b861502ae0b4793305c498e5d0628d65937e5c1333dbef71c0ee47b8af5096ac6a3934","first_seen":"2025-08-09T12:58:28.982315Z","last_seen":"2025-08-31T18:20:20.701719Z","times_seen":30,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/precore.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/precore.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1963\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4392,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1936)","md5":"3e64ebbb1be2c0dc10cda8c7d1e9e42d","sha1":"36c517f92b1611ad3f2936f703383d6301c04015","sha256":"46974da2ba7b3ce18e052de2323b8f6aef3202f61fb07de05c58849144ed2766","sha512":"1d988cc38d5d836b78bfd3f7577196ca17d75310d11a24725f3e8fd0ba44d5c36fc873377f6b4c5b335a7545bee608f87e9e02c51e85ff33f40b23d402bd25b3","ssdeep":"96:jgmtoFOaRC1W6kP+voZvgQbsOeINvIDuluD+:MmtoYa0W6kWm9HvIDulj","tlshash":"9391c52f5199eeb212cc2dd59e2360c476d80611b4dcd0f3672822abef3a54d0c69f3a","first_seen":"2025-08-09T12:58:28.984085Z","last_seen":"2025-08-31T18:20:20.566717Z","times_seen":30,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/_commonjsHelpers-C5mpvj56.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/_commonjsHelpers-C5mpvj56.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 430\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":864,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (809)","md5":"1d7828e6e51c0007857b4bb822985c7d","sha1":"5458e4b3d34ce321b7403c8878aaff2bb2a31238","sha256":"e29af2553180676e60e13afd57c00af0b5bf73cde8c16765b0b0a3d17ab1f885","sha512":"26d514ed2296d44c129a56d3d786522ba4682146e4bf6ed7e4f351f38a4b383895ec2066c29512783a788c2aac146ded194f79fe5f654ce7d4bf5621da453520","ssdeep":"","tlshash":"7c11239578f0e4f141f604f8803b3001f32e697e91ecf980a79ac5f054e415f9411b67","first_seen":"2025-08-09T12:58:28.965546Z","last_seen":"2026-05-28T02:13:33.278665Z","times_seen":1254,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/extensions.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/extensions.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3136\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8031,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"927d8cc23e0e18a831f0d739100c3dcb","sha1":"3a4ce9b909d66d1426ecf1a01ec44d6a125d8e7e","sha256":"175d086d2b8353310ba831263178fc05a06b36264132dbacd361f1dc212168f3","sha512":"c37de9ca68930c33091bc2a224f6019ce2a4f84250014ee6ebd05e35fa9c671852146c416b8474dddc7019178e9cfdb65e35984bc45f27f38ea4234cb7868511","ssdeep":"192:rvk2sGR05myW2hp5Qj6Tmu9M5qq/j38bFvBHCTIe:w2namMhpmj6Tmum5qQj3kHCTD","tlshash":"21f165c670a6f16246ebb4e4803f4116f33f9c99314c5168f08c95da7d7284aa63bf78","first_seen":"2025-08-09T12:58:28.989659Z","last_seen":"2026-02-17T14:14:11.484845Z","times_seen":51,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/conference/zoom-settings.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/conference/zoom-settings.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 738\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1644,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (574)","md5":"b83016bab26be22620c563ba7997c82d","sha1":"a67e850547317cb060737d1ca7bb6fa84fb4dabf","sha256":"1aaff0cfbf8b8227121c3de588d972ea43580328b18d67fdc58e8e8a0aede507","sha512":"395756fa2384c376fc1da88852e38da610480e783efced125d120f9e882da0e3a10252e1f6be0bdaa57873a8e0c1082365eed70e6df3f539b0e002c2c6a75711","ssdeep":"","tlshash":"a0311f0b9430a63b00800df4e502c5eed37a6e6773e7b97290df43bada039b5c651ca4","first_seen":"2025-08-09T12:58:28.991915Z","last_seen":"2026-02-17T14:14:11.442693Z","times_seen":51,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/manifests","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/manifests HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 11971\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":222087,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e03cf1474c71f1117f867e9607a48514","sha1":"39ccb2011ea74076c2f736d9f9820b0728f440a1","sha256":"b7927c42c8b35f892a2f57e528639e0b10cc8de4dc51bbee5eff26d0b8087553","sha512":"a765af64a8954af8954d6134df19614fc83e174a62691c0f0c4363b95f36598b14799f4062094e89905d779632ddfc2577fbb14d7064f2aaae0297ee3de3b4c6","ssdeep":"1536:3QwQZFM62Spz6D74Y8msSGsegegnRnl6etvbX4G+937pz6RkedvvedvP2jFX9LIR:NL0SO","tlshash":"2f24dc1942c4dc2a7b6c1cd8ff212bc116e98753a890f1586e6d07fce044b986d5ebbb","first_seen":"2025-08-09T12:58:28.998469Z","last_seen":"2025-08-26T18:05:54.019039Z","times_seen":27,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tab/session.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/tab/session.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3027\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9898,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5499)","md5":"eece4aaceb8509ac7b4608681b2b04b8","sha1":"375c8b6f5ac92c3a617b20e209c0c81e30b7cb91","sha256":"27e378b55ca247b1948840e016d31c4665c6b3cfa136cb37104eefbe42385fbd","sha512":"b9bb6eae0f71117f7184b03ddbeea0dd6ad51635f63786dc81c081304d3e0fe2808d0ca09e7fe36229c70740be16dc2c09fed68ac19c876295cdb2715f71f9d9","ssdeep":"192:llBE76PBPJ38TnXFhTChqQwbzQhaoij3pCoP3Z0WF9HnbUfQPcb:llBE76ph38TnXFhTY2bzQEoijYoP3WWQ","tlshash":"07122018b2343e3e7290cca9ac355e5113f58d1837efbf60a5bd0577db95898802ae2c","first_seen":"2025-08-09T12:58:28.948497Z","last_seen":"2025-08-31T18:20:20.698413Z","times_seen":30,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/jquery.plugins.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/jquery.plugins.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2361\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5724,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4492)","md5":"1de350a1bd5b84ca25ab746b09caba72","sha1":"875b4af59f1378be79be0b4f5469802f4824b0f9","sha256":"f8e7321c846fcc0177f17368918aa3765165ed3430a123e80f94b3283fa21d4a","sha512":"9ef62d418c328413896098ed555ffd136ba3c996d0a1cb920f7d0bc7815a3f9096ea27beff89b68563163df722191a24ef341f3dc7f26ff990096e83df221e8a","ssdeep":"96:pWPCkPsAuHl/rFjFriEWUCVgKeWv3DglsCPCFkmX5RL5IVRg4Q2hpf:pWKk41eEW9v3DGtCF9Rt6Rg4Q2f","tlshash":"59c1d7897061b17382d5a4fe9037c24ee3362457b5c6d1d0b04c4eee2d2aea11126fae","first_seen":"2025-08-09T12:58:28.975522Z","last_seen":"2026-02-17T14:14:11.491676Z","times_seen":51,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tooltip.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/tooltip.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1315\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1617)","md5":"f1d7fd57e6c555d56fd95ed488dc7113","sha1":"db533ef9002ff3d3ff81753aa63572b192ffe3ad","sha256":"a428a0e51f7720eb9e0d8853f6b6d3b59733b997a0805c0f17190e47bfa8421a","sha512":"550a3a8b25a9a44694ef5f93e866303e8a6556e9b9fa2b787bad05f8292084126ad162fe636c1c95f2ae0d3299c7134a1556dda6c6520689ffd5a4289d9f5c0f","ssdeep":"","tlshash":"8e51e80ad032727301a10de9d042d6de63372667b1c754f190ae8fbe4b1acf21372ea6","first_seen":"2025-08-09T12:58:29.004981Z","last_seen":"2026-02-17T14:14:11.431823Z","times_seen":51,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/question-octagon-4jz1mxRT.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/question-octagon-4jz1mxRT.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 548\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (492)","md5":"8706aa8f315b4107cb5c92b93bd1feb0","sha1":"48453d637e3be807438ee4e4dc5910312451afa9","sha256":"5e404ff28cac001a68e957d76e90a05de7963df34b540c96b52206f4b1a4707b","sha512":"d8b5b3aeae3582a6cacbcb9a4f30017724f77f0472090b66a1f735939b5b38085a3ad6924b821291c9deb8624d30e04b22371469b36aaa5892bb8deab8326d43","ssdeep":"","tlshash":"c7111ffe6a7c529ca20b8d326f1045a4536d70fcf806c5600a9fa7b95033894f99f4a0","first_seen":"2024-08-18T11:00:52Z","last_seen":"2026-05-28T02:13:33.319453Z","times_seen":1230,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/theming/util.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/theming/util.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1583\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3215,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1881)","md5":"c7a5097426e00dc5d5d59e1342646a2b","sha1":"6708a13f85976f1af851afecd28a933e01f4d40f","sha256":"df0f983e8e2e023195e1162e1481e12cebe7df1a1463edeb4b595a3e5da7ede0","sha512":"a836971f160d3a7629d1ebd555856954bd6ee9812e63300ccac1db77b94f1e1b7d455d867b1acaaef35da07d4720195356496b12ba5664a56f425efe90ce8a51","ssdeep":"","tlshash":"3d61daaea0b4f133124003fcd51f546b936dad51774b9e60909e47765e23c7ac139d58","first_seen":"2025-08-09T12:58:29.008727Z","last_seen":"2026-02-17T14:14:11.414395Z","times_seen":51,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/util.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/util.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 4411\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10453,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8836)","md5":"b6c291acf5a8a7a5b20bfc18f842c8fd","sha1":"9d00cf2ea5415423ab7a6e14e98b7625f3097e04","sha256":"c7f6c59b5580d1c2103a2569ea54ac42f59fa45478128116f702304d8a474e62","sha512":"3235d7b4cac654c44232dbc1adff924b4ac87885fe4b73e252172b5ce5f86d396cf8ff9d086262bcf4923040e9691ec15515f74180707bffa7769f258fd7d049","ssdeep":"192:Kko6oM4ioTrD0yS0sywzE5J21eXWEdrKtdroRJjF1D4teZwDbAgVZgw:5SMYTn0yVsywzE5UeXWGrK3roRJjzD4/","tlshash":"0022ea8d71a2b4638b5415f090fb101af37e9e612d4954a0e09e65f93e32edbc529f38","first_seen":"2025-08-09T12:58:29.011236Z","last_seen":"2026-02-17T14:14:11.477866Z","times_seen":32,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/helplink.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/mini-views/helplink.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1163\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3181,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2111)","md5":"8b19c7fcd089be3076c05e8eba4afc8b","sha1":"8251a98bc6df6de14348f79c2bd171ae232db893","sha256":"21e537a51f49b6930eaca77fababb0bd539ecf49beab18eb8169c878769f02e2","sha512":"3988650e09b3b75b985c436d6da02d3a931697d7a331c5e091fd7be69d3975fe126bcd8c7370e1da6ce3f037b1ab9ddda5d7be9f7a26a372d900d81cf1d12db5","ssdeep":"","tlshash":"eb61103590387d2e73a49ce4c8105d1053fa4f52b7cb7f39a5bd06b6e2a0698d112e3d","first_seen":"2025-08-09T12:58:29.013129Z","last_seen":"2025-08-26T18:05:53.997601Z","times_seen":27,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/jquery.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/jquery.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 619\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (323)","md5":"d8b4c140140788cbae4967440ffdecb1","sha1":"7e76b23c921e4c644dc821831d1ba1dc1cb37cc6","sha256":"0dc6ec470d96b4b651e88d452a97be1ef0d59ca5bd5c852faa28df3e2f40265f","sha512":"3760b5d0adffb6400100345e1211c8e6c588d99571e11212f720c07dfb4c562f4c19a5ccf8f4706e77bc5ce510f4a6045806ab4e61e3f940d57be12b2008f979","ssdeep":"","tlshash":"7521fd0fd054c63744801af9e502c1ee936b666773eac2b0509f83b91a168b681a2da5","first_seen":"2025-08-09T12:58:29.014754Z","last_seen":"2025-09-30T03:27:29.336348Z","times_seen":49,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/favicon.ico","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/favicon.ico HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 585\r\nlast-modified: Thu, 22 May 2025 20:25:05 GMT\r\nx-rgw-object-type: Normal\r\netag: \"cc8876a1394aa3fceb9c9e300c428b39\"\r\nx-amz-request-id: tx00000e716b915ed4b8188-00686f7152-1797aa0a5-msc1\r\nx-app-server: rgw15ham1\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":585,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 18 x 22, 8-bit/color RGBA, non-interlaced","md5":"cc8876a1394aa3fceb9c9e300c428b39","sha1":"4801f72b81449568a0c983b1ba375ca605889bb4","sha256":"0c2237164fde4b04ea551188f02f66caf3f2d0b13cef5557f8d381c8170eb477","sha512":"d0764fdce1d665c76ca5d39552f2b044069e900aa18f639977078576c889fd2fb57efe89d342e40574ffcbd1594477cc0b29546ca4ac3bd6d0d39a0d6abf0b0f","ssdeep":"","tlshash":"58f047de7df44c29ec8ecde1816f42d0ac3254bd8f13795d450c6071b448aa8696cac1","first_seen":"2023-09-13T20:01:03Z","last_seen":"2026-05-19T15:00:45.587648Z","times_seen":11,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/version.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/version.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 526\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":990,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"5d9bc3377827cd1bd714a850a416796a","sha1":"f19aaf6654c6aa608e5e038989a0b63385a1b1d4","sha256":"358b70f45fe4f22efd4ecb28584b8777b88d6584e21deb71248358d534abaa01","sha512":"69822ceb704a2a3f56bd81e97a25d87c55857eb2942c6b8ee595637d9f7dd840f9fae543a195502a8673aee6f62cb88645325b70451fcb7b17891452a58319df","ssdeep":"","tlshash":"f511210e95a4cb37448502ea6a4780dfd32b68a6b2ef90a1201ad7ed5c17db702b5df4","first_seen":"2025-08-09T12:58:29.017246Z","last_seen":"2025-08-31T18:20:20.548104Z","times_seen":30,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/a11y.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/a11y.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3274\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9947,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8646)","md5":"415150ca20fccb47a5589256907d673f","sha1":"86009bf09e3d94c74baaaaae0af3416901f65874","sha256":"f412be7235e7f3a9b5b4698b926233a51833981e353a441519e6bfbf5575e130","sha512":"794ab07dc1f8c244ce1f3eae08326b0069aa84885fbd59934ad9c0e30e6542f05ace64e795d444a53a058112fcf8438242cafa229245a657c01ddc38a5ab3028","ssdeep":"192:lky6xItS3BmO3NoW3ZVtBbGZP0GWKYkGaPZy99Z3vy3n7wEgED6nbMnHN9nZtzLX:GlqtQg0NostBbGZMGWKYkGaPZony37wG","tlshash":"5b22ba1c3191b1b255fb15d839a38e03f37b9c12bc13c564a41e87602d79e7252eae7d","first_seen":"2025-08-09T12:58:29.019937Z","last_seen":"2026-02-17T14:14:11.477314Z","times_seen":51,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/theming/util.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/theming/util.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1583\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3215,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1881)","md5":"c7a5097426e00dc5d5d59e1342646a2b","sha1":"6708a13f85976f1af851afecd28a933e01f4d40f","sha256":"df0f983e8e2e023195e1162e1481e12cebe7df1a1463edeb4b595a3e5da7ede0","sha512":"a836971f160d3a7629d1ebd555856954bd6ee9812e63300ccac1db77b94f1e1b7d455d867b1acaaef35da07d4720195356496b12ba5664a56f425efe90ce8a51","ssdeep":"","tlshash":"3d61daaea0b4f133124003fcd51f546b936dad51774b9e60909e47765e23c7ac139d58","first_seen":"2025-08-09T12:58:29.008727Z","last_seen":"2026-02-17T14:14:11.414395Z","times_seen":51,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/multifactor/api.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/multifactor/api.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1431\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3845,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2147)","md5":"3d433c0eb493bf954c7645cfdd755036","sha1":"76d2926dd7e6b9a5067634441912d77d9175956c","sha256":"103e65df6286a0fe3b56c939244ff432d1b47e1093a9cfa59dfa73d3572acb17","sha512":"f56dd36a8dc43a115db6054050b1f8b393f3729d783f0a90c8047474b5547efd8fda6a2e39593da209e114e8b2239bb9a53f5879992bc94250f96847bc039e09","ssdeep":"","tlshash":"428165aae925f53701960df8f4128189e337198275fa8061d0cf9774ee22d79c912be9","first_seen":"2025-08-09T12:58:29.022471Z","last_seen":"2025-09-27T05:38:56.425408Z","times_seen":44,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/manifests.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/manifests.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 323\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (816)","md5":"ad90c8f47dfaaede39c01b316e7e5789","sha1":"6e093787377bb58c4cad0fdcdb501430aab58428","sha256":"9f5c2fd42c7b24169396ccf7fd7f34632820854d3c9b21eb67cd404b0f414d0a","sha512":"899416450fec796b17f18526a4c4aa171a9bc70802754734465c48f1f60406676298446cc3c5b4730b8795fbedeb401fefa25a19e7f8297a46146e71817c885c","ssdeep":"","tlshash":"1711690bc82864556164dcf5d020d9b213794e1737d2bb37d4ee13b5e3415b8c526536","first_seen":"2025-08-09T12:58:29.02393Z","last_seen":"2025-08-31T18:20:20.737212Z","times_seen":30,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/office/main.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/office/main.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1150\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2210,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"29df600d3aa0c34a67e443bf2573cabd","sha1":"2854ccef581ad37919b4d2245446f1254ff5e53c","sha256":"6f30fbca20874a0989a7f0374df909e831c8ef1b0b65b580fb37b9a2bcdfe283","sha512":"15bd0d462c543dbdeb56940ad324c0b02d52c4be0bf020d7af16e62f21e8b2c03b60fbf9c9f9ec84f02d8cabd2c07d4d8f55d7529b1dc9147afba28b322ae990","ssdeep":"","tlshash":"7641864639abb075133814b0a0b70c15a62859b0740ae85cb75dbcff39d69cee216f2c","first_seen":"2024-11-11T15:00:45.999332Z","last_seen":"2026-03-30T06:29:20.149055Z","times_seen":369,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/guard/i18n.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/guard/i18n.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 5093\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20531,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"053d68540b13fada1a07bf0669588e2b","sha1":"57122973586fb7b789c3c3c8fb623d8a8bad96d9","sha256":"960572fc20465c6d6219720b82368b01be9fcc3bcef42e0b33efcdde5bb5b879","sha512":"6530068f7c9dc9d84bcafc820ccc63fae24072ee263f3bd5243d9fe1de7dfa1e4162a80d30ce95dc11fb42656f87197ab0c11e10eb75c8fba766543f96b83c35","ssdeep":"384:smPepMUMDrg9RHpIuN8cdcfSkT3l+xfocMUgUzHRsRtExaoj+QL:ZgMv+RJ6SWT3l+lUaFKQL","tlshash":"7c92e74b9a896fd10fc252b2f804e1237da3973ee72125451efc815c33bfd47226aa56","first_seen":"2024-12-03T09:24:57.386264Z","last_seen":"2026-01-27T18:11:28.511924Z","times_seen":315,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/ai-sdTGiesH.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/ai-sdTGiesH.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 881\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1814,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"b66422288299ac9e56e05bc6dfdf5512","sha1":"8e86592f51aa38c1cb4fbd62f4799d59ee40cffc","sha256":"94bcc296c0b5bc44b05dc360613050a1b0645d6a18f9d3c26f35ddf52e402882","sha512":"039d5bb48dec9384fccc2b74dc8cf45ef07ff417838f3829e4d71c490be67018fa9604cc6a07114293ea99d9d08a72c975a683f68f5d425b6fea4eb4fb83e0e6","ssdeep":"","tlshash":"a331244635a3b0b5132c04a1d0b31c05e578a590780ee85cfba9bcef39a758ed352e7c","first_seen":"2025-03-30T03:25:28.340436Z","last_seen":"2026-03-30T06:29:20.151081Z","times_seen":352,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/login/tabSession.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/login/tabSession.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 877\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2026,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (727)","md5":"0b5cc14b904fd469a98ccd462bcd865c","sha1":"ff859c6e83d7a8a92f55f4985dbaff7c51ce3884","sha256":"fea8b9578beef5a38a19ffeaddfdb6dcb57e0c0f7c744ddf5cf3d8f53d4efa2b","sha512":"8279f002fbada39069de20d00c5044af0e376e32922ab2b00c172f37229f4dfd9ef14fa14d9358365737f2081a12777628d6c8a2fad534b20b85822bf4e756b5","ssdeep":"","tlshash":"8941012fd174b633048498f8e005cee993b95d6337e6bf71a0de43749b02839c156c64","first_seen":"2025-08-09T12:58:29.028241Z","last_seen":"2026-02-17T14:14:11.525654Z","times_seen":51,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1167\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2241,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"ade8a83150f733e5c73061b572889ad6","sha1":"9061da5ec178b3badcfcb4a11ffb66ca46953413","sha256":"6adf9a7075d48a56a397f201f72a050091a6334971fb1f24b41f9da00d777f2e","sha512":"f830745752ccaacb6561f22d93f9e12953dc5a2a7a757ba833f06f34284c3ed4cbc9619cabff13a11a387d50e1618dc4ed1fa8a2086fed129f8e75adeff32173","ssdeep":"","tlshash":"e141a94639b6b075133914f0a1730c55a62829a1740af85cb7debcef36975cad251f2c","first_seen":"2024-12-03T09:24:57.3302Z","last_seen":"2026-04-17T03:11:43.124406Z","times_seen":369,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/loginproxy/form.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/loginproxy/form.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1110\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2859,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2858)","md5":"9e5af57bd8e4482f30a1e53347726bfb","sha1":"b2f73a525babd1ddb1f3489ddbbb89cf4c7ace0b","sha256":"983ef9d594565130c4ae60541712eef8c26ec64085996c2c94bc46941919a410","sha512":"579b67c017eb68238e15f190619843cae2d1e93816fe7174ee5129b34bc054163bf9e48e7f780a8681567afe93e9ae52af5529b4fbb577fe238044e7c13ee71b","ssdeep":"","tlshash":"a15156ccf5e93400265391fc60234613a33a29e9180d8f29b72f85663dbcd6ec61be4d","first_seen":"2024-11-11T15:00:46.058988Z","last_seen":"2026-06-09T14:57:37.338272Z","times_seen":2473,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/popkeep.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/popkeep.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 909\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1861,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"dd36b6227623c08e47a892836c4b4d55","sha1":"512a8e924df2c894196017d5521ef87ddb57e749","sha256":"97b303cc347aac59a064538d62c2cb3fcc945b60bbce5749e549e08b08966958","sha512":"db8f70bacbaed6b947d78a5dd92fc5258ffae0ce12edff7d39e5bb5af3473950fa1b84b410d24f9036e5280b824212c1a40a582a5a8dde3514ee3bbcecfe1977","ssdeep":"","tlshash":"f431428631a6f0b5231914b090725c55f2745ad1740fe99cbb6eacef39e788e8211e78","first_seen":"2024-11-11T15:00:46.022819Z","last_seen":"2026-06-09T14:57:37.38948Z","times_seen":2529,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/yell.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/yell.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2081\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5289,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4480)","md5":"2c620f36e9330eae77a120bfac961e7a","sha1":"d509a47fc1d6129e16f6c3018a003d467b7aa029","sha256":"e9108ff25b09b1b814ed6f7d068b6995ee6b3cce552b87298410c10f61cc42b3","sha512":"ff90fc20a071a2d96601d11fb6337a1c59af908b4d54ae3c5372a329585f63668cd907c85d62a8e11a1fe19daae1525a9bf32a7400477a3651838752abf04541","ssdeep":"96:jg60OEAocidwbwecGUaeBu4BQ63FuH6ExlWWSRsDcUmEDGL0:EmEAZSwbwFIu2McH6EXWBSDcUmM","tlshash":"58b1d849a0353d6623b56df5f426560223f809633a8bf922d0ee06b9f660c64d347f3c","first_seen":"2025-08-09T12:58:28.938219Z","last_seen":"2025-09-27T05:38:56.463657Z","times_seen":44,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/url.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/url.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1644\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3773,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2647)","md5":"d071a6d806e16d46cc3f9e7fba711bfb","sha1":"df2dc4d67e6ba92c4580f66840e9fda409f517fa","sha256":"8bd2633386160eb0ea92ca5224dd9ba893cfd834c814e01d64be2856abfa9f7f","sha512":"09e87031b1a294b9b226bec366d930c48d896f3c520906e34028f186e7a98ac300b01dce5bf2adaa8766e744d61443c4b1ac1b8b8538b83278cc4f3f06dfcc3a","ssdeep":"","tlshash":"0671e9cf30d1e9b213d144e345db226dd33d9ad23d8d9170909a62413835a7b43b6f68","first_seen":"2025-08-09T12:58:28.961308Z","last_seen":"2026-02-17T14:14:11.518044Z","times_seen":51,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/extPatterns/stage.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/extPatterns/stage.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1177\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2630,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1250)","md5":"24ad8f26b108334d9740a424205e8059","sha1":"cfceddfdee782b2ebd8ff0919d9838a64ad42a59","sha256":"224a4d24bf6e8354eed3801189f749e6722fa3331f8b6a1747d4e22a61de7ed9","sha512":"ee8b8273509806aa8b8c49da92b0dab69ea00fbc85f08282316b8ff2ea1ae4f1ea6035e7b1905885d94521c29739b44edafc7ca6065d8ea279c507824e6c703f","ssdeep":"","tlshash":"7151865bb0b0b132008429f9d11bc66f933b6e6533d55aa1419e43781d23c299662f5d","first_seen":"2025-08-09T12:58:29.032205Z","last_seen":"2026-02-17T14:14:11.417856Z","times_seen":51,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/purify.es-CgBxVarD.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/purify.es-CgBxVarD.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 8356\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21865,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21250)","md5":"004d3e148a3e52bd8d52eed666b37ac6","sha1":"7cdbdb18918a281fa71544ac53a7245c6ceac1f2","sha256":"699875b16625b06309d4cf8384373c0a49bc05cbd5f16595193c953d99e5eea9","sha512":"4dddbc4cfb86b7b3cca26fc8d61edbf172496686e8a3630ecad977cadb61dce50eaedd0a674f34ebc9f7d78760947e562d750fbf07ffdff65b23ff6632233da8","ssdeep":"384:OE7X5VqJzVKwv8PUMm6I5qxqUM145DE9xpvwXTitrPYMulXt9kDF9Zkgu7kXSRy2:XD5eVXv8MMml5qxqUM1EY/pvwXTitrwl","tlshash":"a3a23c6dbd856d765bdb01e860bb6e0ca5bc100a700cc450e6cdedb518bae49206bf2f","first_seen":"2025-07-14T20:51:20.475365Z","last_seen":"2026-02-17T14:14:11.48347Z","times_seen":119,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/underscore-mixins.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/underscore-mixins.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3737\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9905,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8609)","md5":"ec324dabda73aec2208aed5d5e6bea55","sha1":"69c54752bbe88abd460b265a0a33caf742e40258","sha256":"309b31704cbf22cea154d973e1777bf7bbfad701d7be9c3113031ef372c547cb","sha512":"b17b6ec66ccc137432514bb112c4f4f064581be4d31e8b20768d8998a65bc18b65afad72ea2107a0e46c7b9331b456dbb45454c1cac467ecefea2491fafd32bb","ssdeep":"192:oRtk8XjGGr0AQj1ezF5ryQWxw2gQw0B5Nx291CWECBP4eJE4kwdzZ9zysD:T8Xh4AQj1+e1MQwbnOMyC","tlshash":"f41297dd35c2b071578551b8e8ab051bf33919e22f4ed0d4f04a51aa3a36ca4c272fed","first_seen":"2025-08-09T12:58:29.035002Z","last_seen":"2025-09-30T03:27:29.157191Z","times_seen":49,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/views/modal.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/views/modal.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3707\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10693,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8862)","md5":"b621475c864f22a513af5359a94d2661","sha1":"1599eaa5c5f3f336d70759e91a6ddb58e4ffb323","sha256":"45c8dbcc1ce17b52eb09d81445b4141dc5e56a2462d0060fb9b01fdaeafc520f","sha512":"cf5b627fbadb1adc1e6ceb62dc61af4f8fdd60269281f51286842924e393e987bef3b81dfbedc73f5c6f63e0d9d7bc9412927cdf5d2c13aa2d5db47ee3213b24","ssdeep":"192:H8k6IFMRbzvRCNpQxG8FEY5XSXE75JzVOtHzmHQXEbggdFRXJ3Q3jWSpcf:n6IiJypk3EY5XSXE79OtTmwXfm9pqCBf","tlshash":"f122d866b038712207ff84e6601b061aa33199357847845cb0fcaafe2de9f912176e36","first_seen":"2025-08-09T12:58:29.03729Z","last_seen":"2025-09-27T05:38:56.426377Z","times_seen":44,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/lib/jquery.lazyload.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/lib/jquery.lazyload.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1011\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2601,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2556)","md5":"8b591fd0579d9f6099fc2e417e7c0c8b","sha1":"81bfe2b16630eecf1a11884111581a9c4ce21a38","sha256":"e5995cf0eebf8dd61a310f13a4dd508964e4507bb5f4784f5077ee7e0bca9d30","sha512":"46799bc1d8750a3171ba880ac4ddb2c03c659e9b5a61fc7d10c6a911fdc1291d6832855fb2ce508c5ae43562c4bb64300bd29e45c96e7fe64b32dde822a35c67","ssdeep":"","tlshash":"fd5195d47094f061f97654b9cc36b208522ab4576fc2c165f09e28e7adb1c6ab232d7c","first_seen":"2025-08-09T12:58:28.932533Z","last_seen":"2026-02-17T14:14:11.40899Z","times_seen":51,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/extPatterns/stage.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/extPatterns/stage.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1177\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2630,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1250)","md5":"24ad8f26b108334d9740a424205e8059","sha1":"cfceddfdee782b2ebd8ff0919d9838a64ad42a59","sha256":"224a4d24bf6e8354eed3801189f749e6722fa3331f8b6a1747d4e22a61de7ed9","sha512":"ee8b8273509806aa8b8c49da92b0dab69ea00fbc85f08282316b8ff2ea1ae4f1ea6035e7b1905885d94521c29739b44edafc7ca6065d8ea279c507824e6c703f","ssdeep":"","tlshash":"7151865bb0b0b132008429f9d11bc66f933b6e6533d55aa1419e43781d23c299662f5d","first_seen":"2025-08-09T12:58:29.032205Z","last_seen":"2026-02-17T14:14:11.417856Z","times_seen":51,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.gdpr.db34b815.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.gdpr.db34b815.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":187,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"fbed87d213b9a2ca8c6013744b5badfa","sha1":"5ffa12648ffaace2a897223fe10c811db1131ea7","sha256":"746ba18cb287037df23433ae4578926473aa64669f90ac6f0c2ffccff84d0bb2","sha512":"48829882736c0c68f89a99d83def7df9c6db04cf242aa08bb11456a806f5a843d1a92581c76bdf7fcf0be6b09ad50fc6b80c0e2991d7a121481858e9e2462d9a","ssdeep":"","tlshash":"0bc0122f2ca061b6864e0ee8c365a00d3924726ac32320a4541062615a7484a8e8fa06","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.387012Z","times_seen":2540,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/mx-checker.e099b1ce.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/mx-checker.e099b1ce.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1333\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2768,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"238898992fc149d98a13de9259d98eab","sha1":"2c0d5059fe94d5259a4915a66792c653a33850b3","sha256":"eb7017c768df9a81121c0d1b25b96caec8948f68cdb9925e22c037c858c9bf9a","sha512":"f594039f89b37513032aff8538cfc5b1ca300e7a75d1170d40a058c3d4973b80e876336be84e5fd09ca48e44f91f50113ea5638690486ec3a67f98a56f354da9","ssdeep":"","tlshash":"9f51b48635b5b4b413122ca07031489af2b466e13409f84cf35c9cee2df2dcac262f38","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.357013Z","times_seen":2540,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.alt-login/register.0cd180a7.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.alt-login/register.0cd180a7.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":587,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (540)","md5":"4d1f7528def2d0e1c49cfb690af561c8","sha1":"394a916b8b2af4229b2e4b1a43ef0ce81e66c922","sha256":"cc90122bfc32713e120f09289185724cb97f632a1691e1a9a83a08ed9b98512e","sha512":"075fa0f8019312c9ec60e09778f703ecaa48866d51b5ee7e3569ebdc0ee2ef001282b4f819f045a848a6fd36becaffc361fb0a29fc391aebd9c65c56c3ca5004","ssdeep":"","tlshash":"12f0815da1781926c9282bea7588210457bca5155d466e84f27d13673b20c0b784a96e","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.438646Z","times_seen":2540,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/preload-helper-BvmF3Jkl.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/preload-helper-BvmF3Jkl.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 680\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1298,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1245)","md5":"65b193cb8ad22cc1a3508642d9304a48","sha1":"190f08343861ce13f4e3320310aa9f4e1ba343d1","sha256":"5d8765a3bb99b6653d44a94576c13bb395270f4a642b3de1a2d983aff0f10e56","sha512":"9a715e1d3c544ab6715fcaced157b7988c0482639ab7f3644084801752cc5fb47c4569e14f9e1f66a965407e7c7e41dd5b85ec1a3b7d334ab9efa565b9c1f5d2","ssdeep":"","tlshash":"4a21759666d5f13603781ed6b0b8f297fae0299274064044a00edc9abe1efc8e1dae45","first_seen":"2025-08-09T12:58:29.04215Z","last_seen":"2026-02-17T14:14:11.476747Z","times_seen":115,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/main.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/main.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ndependencies: assets/main-ORQm3P_K.css\r\ncontent-encoding: br\r\ncontent-length: 30283\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110343,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42952)","md5":"aa4830584aa706d30b8dc27a23228317","sha1":"2e2b92595543fddad9d58aaac9bd4425c40e612d","sha256":"72c63153d23a02a3b0db8ff2ef2cb3dffcec9cec7cc71ba46270fc0f8325ea0d","sha512":"00e7d57bc9269b8448d0b6eb445f770186a35e457f3fe59e3ac4efb5814f22c4e154db53076933042ea1f923f7787f7787e31263248cd7a94f4b22f2d8210826","ssdeep":"1536:Q9jSFfCxGVESEfykhJNbW5QuwPZNxkKUOZ+u/iJueAZcNEOqRYp/:6GhcZuuNyruTaT29i","tlshash":"1eb3e88a71a5356203fba0b1515b120a7233697da846802c787dc9f66eb8d4c327ff7d","first_seen":"2025-08-09T12:58:28.942617Z","last_seen":"2025-08-31T18:20:20.612541Z","times_seen":30,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/main.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/main.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2551\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7061,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5760)","md5":"8f033688610ffecb7cd8f4c5e9c4190a","sha1":"c64ac6e271a881f66bfcf27fb3893516e90a1a94","sha256":"556dee4d97c64a51aa33a03f2872f11a0a0dacd546b2a397ddab595a10cadff0","sha512":"aa686da76215b8627acfcc6fba2c515e610e8f55c58e276082400f44209daa1a68d31af219c00646d772414c6c7ab9b7dea26ace3f5a62560831bf5438f1ae67","ssdeep":"192:OVt5YZ3w4MLly0Et1jMNT+AZBgCCyZcMn:OVt5Y24sly0ejMNzBgzyZcMn","tlshash":"8be1401a91383d2922a48ce8c4252e5013f90d167bcbff35d5fd12b4ef5558e852ae39","first_seen":"2025-08-09T12:58:29.044232Z","last_seen":"2025-08-31T18:20:20.635415Z","times_seen":30,"resource_available":true,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":546,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/abstract.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/mini-views/abstract.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 811\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (553)","md5":"ba717b14d6980c80415e634136d2d6de","sha1":"f94c231940390186853bd4b23c1828a5b994cc5b","sha256":"822ddc2a956b24f74da789fb4123f02c2ae44ea3ff67a8de4655948688516ef4","sha512":"54787a933b36bed081ddb2e09cfcc6878053c56dcbbe86cde87dede2968eb004b5617c2abb0da1a44c869ffa4a3a6720114a77f2571ab7c70209e8bcc14676d3","ssdeep":"","tlshash":"2b31814e6178c3330cc841d87783a1cb839e6a6b3297a068346ef6f66c55da6507adb0","first_seen":"2025-08-09T12:58:28.940313Z","last_seen":"2026-02-17T14:14:11.505533Z","times_seen":51,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/components.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/components.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2791\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6940,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5320)","md5":"172ee6b006931b3e39e5b437f4e680ba","sha1":"dc84313a1b4d1f2e7639681ea67b0149cc10397e","sha256":"b69c1eb0dc7319196d1386ec072240c12aed8040e080a7e6f52fd2a3d28df159","sha512":"87a73b78931b34c8e7b415bef16167b1a3ae9219aa1312ddc7a05b2f1bad8bfb72be4ecf7a37649a3095a138283ada9065ea68f1b5fd62f4604b27dad90d2e37","ssdeep":"192:Gckf4aWoKmV9Z20xQr8fY55BTqQUZP3LKh:Gnf4alKw9Z2cw5TqfKh","tlshash":"69e1e988b0f4b071c10609e5e05f526ba2340723fac7cc25d1eedbae3a35864b126d6f","first_seen":"2025-08-09T12:58:29.046587Z","last_seen":"2025-09-30T03:27:29.290587Z","times_seen":49,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1306\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"f8cb63e82d8acb03cb2d69c7de402ad7","sha1":"dd68d4bebced4e12eee70e65635092077a93b3c1","sha256":"360a6c2a45aa2bcd247e9ca8ce390bba78491145506253512beb2e4a355ff615","sha512":"6b8ce504753e185e210726a131a30c738dd355a2f201d3b6c4f683f4066443f13fada540cdac2abc8ead8dca0d59537b8ba55ae2e31e405d86ea3bf9a7ff5593","ssdeep":"","tlshash":"e751838235a6b07443162c91703158a6f3b8a9e17448a44cf35c9cee2df2d8d9265f39","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-14T00:27:08.602159Z","times_seen":2545,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.dumpster-f4301a77.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.dumpster-f4301a77.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1553\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3149,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"52467eb3315d612c4b23f0f91dc6606c","sha1":"6a494d129200e7c22c1edc86509607370f129c4d","sha256":"4b3505b5c28ffb46b1d92165aa74a3c12287f3ce2fb58079473be8a2d16a2c0c","sha512":"b0349feefd6a6706a92e7b1258add461f729ddd63830bac9fd11730cac8c0520aa41d59aa7bbb86dbc6aa40efa9fb13eb38b3516d363f9bd6ba514c1958affe8","ssdeep":"","tlshash":"7a51d58634e5b071433938e021614896e27826a1340ee84cf35c9cef2df6dced2a2f68","first_seen":"2023-09-05T20:03:34Z","last_seen":"2026-06-09T14:57:37.420712Z","times_seen":2542,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/announcements.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/announcements.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1052\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2098,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"d7fbb15ce22744a08adf1198d0be2bbb","sha1":"b267346bc5e278c4a8394466fc7560be5e7d63da","sha256":"76102dc3c276a385ae251186d18459c3b2163728875b1b9484d46fb5b99520da","sha512":"d9f3f165ccd40e7c379789e3bfaa801b77eab605eb38d3978eb144c9bea9f0b005b66638da696b6ed63a5d49cb1aaca704ae1704ad6ed8bb21763636828f20a9","ssdeep":"","tlshash":"1241458539a6b075233c15e190f20c01a5686990780af85cf7a978ff39a698ea652e7c","first_seen":"2024-11-11T15:00:46.014769Z","last_seen":"2026-06-09T14:57:37.394434Z","times_seen":2529,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/backbone-D7zN1VIy.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/backbone-D7zN1VIy.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 616\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1120,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"a21fa1e71539bdbb57012e5137710eb2","sha1":"387b8c9dc6af496ab72b7f5d0ddc0c82ba918e47","sha256":"08ee9e086e528430bb9a656f3ecd970993d6a5c5ad5c9a22589cf0eb4cac160d","sha512":"f44b85010a0ccfd58fa7b8d9145a7bfc6b918d611a9b9e9dc53b16345df11d7207822143d0a4b87c20082bb392a0eeb5fe32ca518b00ac794b94f32ba7a01ca2","ssdeep":"","tlshash":"d621331f54a4c77744440ae9660791cfc31e69b673ef90a0101b93a94c27db342b1eb4","first_seen":"2025-08-09T12:58:29.052081Z","last_seen":"2026-02-17T14:14:11.416697Z","times_seen":51,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/debug.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/debug.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 522\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":979,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"5106b6540d3b6a0a2e55950cce8fb384","sha1":"a3c2eb4a7cdc0256e70688940663d0d2400a55dc","sha256":"a6c1112cbebd6093fab5072dd35983d66102abcce922bc1610347b3ba7a71190","sha512":"3fadca04290618346cbbba69d577bda1976d938dae2055452ea3a50090025098d846176194117da75f614f135956d7af0db221bf48302f325ccca0f081d8bcc6","ssdeep":"","tlshash":"cf11020e5464d777448102e66a4781dfd31a696672ef90a1101bc3ad5c07db702b0db4","first_seen":"2024-11-11T15:00:45.85254Z","last_seen":"2026-04-17T03:11:43.191343Z","times_seen":326,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/backbone-oPPGqYDF.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/backbone-oPPGqYDF.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 46103\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134175,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43907)","md5":"478ae9a4a4c500ae15d29f2a1efa9680","sha1":"685815399d381034e8410f24d11029ded6c97ec5","sha256":"b9e37122858d65d914e12868e8f48d6d2219158fb1d8d1e42860ca62af121bed","sha512":"827a0798da720279e9b731931ae5f1bce7fe44419b7d5ef6bea169b0a54dcc640d5c5e45db765fcb1f02085ff320633038b78d5c87992b9763a24f1cbc596ab0","ssdeep":"1536:wYeWXvtZZVhNjos26na3gAiapstbaLWvacpF36vg/D9vqh/ozGc0f4BT9cby7OSX:wOZhNjL2Rwq5gb9Stoz0fsBaCVSHlkE4","tlshash":"ebd3f5dc72c7b46283a760b9407f110bf27a6c99684cc510f068d8e9bcb8a49917bf7d","first_seen":"2025-08-09T12:58:28.956154Z","last_seen":"2026-02-17T14:14:11.452157Z","times_seen":51,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/question-octagon-4jz1mxRT.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/question-octagon-4jz1mxRT.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 548\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1026,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (492)","md5":"8706aa8f315b4107cb5c92b93bd1feb0","sha1":"48453d637e3be807438ee4e4dc5910312451afa9","sha256":"5e404ff28cac001a68e957d76e90a05de7963df34b540c96b52206f4b1a4707b","sha512":"d8b5b3aeae3582a6cacbcb9a4f30017724f77f0472090b66a1f735939b5b38085a3ad6924b821291c9deb8624d30e04b22371469b36aaa5892bb8deab8326d43","ssdeep":"","tlshash":"c7111ffe6a7c529ca20b8d326f1045a4536d70fcf806c5600a9fa7b95033894f99f4a0","first_seen":"2024-08-18T11:00:52Z","last_seen":"2026-05-28T02:13:33.319453Z","times_seen":1230,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/locale/meta.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/locale/meta.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 4876\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17902,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16334)","md5":"dca8d420049c2206e839082e337ea54e","sha1":"9d5fba5a82940f6ea49e60b5b2d82655bd2c5727","sha256":"a64fb55038d7831d55f7f77cdd18531f89bf5e8487cbbf3052d42e3579f2b6d9","sha512":"45d9cc4b952e33e7ea0472f46e87e3ae2ba79725e8dcf855655d45159899ad381cab93c64e124d95b28d3179d73c222df13407bf2e4330612a552e5d9bb65ad9","ssdeep":"384:PMLh++9w29BowUx+Lq3lny/onOK2hwfn/kCX4K:Pi+qYRhLnOK2hW/H4K","tlshash":"d1820076cc3d3aa95a802c266b462cf037b41e51f723de3642ac5f747ba945de85b830","first_seen":"2025-08-09T12:58:28.941523Z","last_seen":"2025-08-31T18:20:20.637867Z","times_seen":30,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/ox-metrics.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/ox-metrics.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1463\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3014,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"7083d0083bda662af0a6baddab47faa2","sha1":"0a8d27cdb805c7ec101990734fa9de4e78ce467a","sha256":"21335be9eab70d10ca8334355d0f806575ade11714bae9ce44c0fb85f00cd35d","sha512":"4b6aaed828e80a758d4a22734905117d1ca6d3253d9c46a68b220acefc47d424139bd722047295edab2c13cc511155549488078e1f37694983a081542c9db609","ssdeep":"","tlshash":"dd51838634e5b075831228a061615996e6b86ad1340aa85cf31d9cef3df6dcac3a1f7c","first_seen":"2024-08-18T11:00:56Z","last_seen":"2026-06-09T14:57:37.368133Z","times_seen":2532,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/minimalapiconsent.0e902e90.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/minimalapiconsent.0e902e90.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1325\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2731,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"721d84ef1ad67dda77418e546fe5c63e","sha1":"0dcc6bee7f4b3ceed69901e84146d30d5609dc16","sha256":"520658a4e0d889d6204904ecd46268dbcc83cdcde420083efbdfff71bc77129a","sha512":"c52c51546123d4039945341224bbd866d373229aaaaa1346f4e71f32e6eeabfa8a7da2961134571b041ccfb5e08879db531a14cf2a4f8ab96f985965b0082778","ssdeep":"","tlshash":"3651968235f6b07413162ca061764896f6b956e13449e44cf35c9cee2df2dced262f38","first_seen":"2024-08-18T11:00:56Z","last_seen":"2026-06-09T14:57:37.43696Z","times_seen":2534,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/loginproxy.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/loginproxy.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1050\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2127,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"cdb5e3551431471f9f832d89dc57c27b","sha1":"5fa25f056cccdb55b522750d428742217c524785","sha256":"fdbc6f297842a79eadc40f265c9c2663ff6f398df0e860f6721aa9fa3c01a7b6","sha512":"edb64aabbdfaa8484d331f36f8b2a745f8f76cba668cbb327eed1bc2591c1daab11db151e94eb31d5ae16baad055b930f59204b16707a200e851db4fa314ff78","ssdeep":"","tlshash":"314177463aaab071133c14e190b70c44e5355990780eed5cb7a9bcff399698ed252f7c","first_seen":"2024-11-11T15:00:46.019102Z","last_seen":"2026-06-09T14:57:37.373622Z","times_seen":2529,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/version.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/version.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 526\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":990,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"5d9bc3377827cd1bd714a850a416796a","sha1":"f19aaf6654c6aa608e5e038989a0b63385a1b1d4","sha256":"358b70f45fe4f22efd4ecb28584b8777b88d6584e21deb71248358d534abaa01","sha512":"69822ceb704a2a3f56bd81e97a25d87c55857eb2942c6b8ee595637d9f7dd840f9fae543a195502a8673aee6f62cb88645325b70451fcb7b17891452a58319df","ssdeep":"","tlshash":"f511210e95a4cb37448502ea6a4780dfd32b68a6b2ef90a1201ad7ed5c17db702b5df4","first_seen":"2025-08-09T12:58:29.017246Z","last_seen":"2025-08-31T18:20:20.548104Z","times_seen":30,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/moment-Czs3iPlw.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/moment-Czs3iPlw.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 19299\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60981,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56807)","md5":"a43036b6505f786b086255a6fde68925","sha1":"a555ff4ef6092dce00d694fdd81ede7f7bad39b0","sha256":"adba443bdab9429503173764648ef1a75838d9a6574b4e9b91e6e776f16a4516","sha512":"7eb41f54247f3f9e8322d334ab3afd36a7002c1c9e6d18f3d219e8391dc6bfccec1088e5bb13a1d62ea6289ccf813a40045a1a9c2ce6289e286dc1eeabac1d44","ssdeep":"768:tZR4jbdRFGZBraNQQRwUSOKl00ZdqipSR4MW5arV2sceyNrx1niCIVs6tS3BHh:WoZBrWqxOP0+QkrieqrxZihZS3BB","tlshash":"2d53b5ca3146b112976612b408af4907f33d5ca6684e8d1cf50ce9dd7938d6e42bbfb8","first_seen":"2024-08-18T11:00:52Z","last_seen":"2025-08-31T18:20:20.680497Z","times_seen":94,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/login/openid.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/login/openid.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1791\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4518,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2535)","md5":"751333828ef9ed102ab515ea64fc2e2e","sha1":"3aee26c2514f306c1f53cc42e301a1d81e0396bd","sha256":"60295835927c0251d73ec4002749ee2c3da73140232352eecb7601236a6bc6cb","sha512":"52964a727c170b2f1d87e0be8a2bef0b1a8f347334867650c00077fc228f43aaa9c2e7b777bec28bc9ca69c1143dc8bbafe46b42f65476335ac005873dcce5bd","ssdeep":"96:eAeCkPdJeo31TZuEhKJQqIBmaoBYPdMuxlgDqCzF:eYkFgEhKyXboBWLDguAF","tlshash":"9091645ab174b63601845af9e0335e18937a0d533789af71d0ee4274af14d1bc229e6d","first_seen":"2025-08-09T12:58:29.062103Z","last_seen":"2025-08-31T18:20:20.764638Z","times_seen":30,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/dropdown-desktop.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:01.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/mini-views/dropdown-desktop.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"; locale=en_US\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1296\r\ndate: Sat, 09 Aug 2025 12:58:01 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3326,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1931)","md5":"b41769785d7047b94e52a2ee04cf73cc","sha1":"0250231cb660b8bc966ade343177ed4ebd174886","sha256":"6097a79998fe4d11a0cf88f89d330fa0b6e5966852a3eae1b05d3630e88bac9b","sha512":"865d87358b41ab26ad75c86bc4cc79c74dfa120c31006c1ae52fd7b625def37cb3060e5a1e0f4c3d86704a5777f2351021e9c2ea5e0395a4772d647546a46320","ssdeep":"","tlshash":"5161547bf1303937c280099ec540858e5326aa2b7393ef7b30bd5af56902862177edb5","first_seen":"2025-08-09T12:58:29.064507Z","last_seen":"2025-09-30T03:27:29.299387Z","times_seen":43,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/loginproxy/form.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/loginproxy/form.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1110\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2859,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2858)","md5":"9e5af57bd8e4482f30a1e53347726bfb","sha1":"b2f73a525babd1ddb1f3489ddbbb89cf4c7ace0b","sha256":"983ef9d594565130c4ae60541712eef8c26ec64085996c2c94bc46941919a410","sha512":"579b67c017eb68238e15f190619843cae2d1e93816fe7174ee5129b34bc054163bf9e48e7f780a8681567afe93e9ae52af5529b4fbb577fe238044e7c13ee71b","ssdeep":"","tlshash":"a15156ccf5e93400265391fc60234613a33a29e9180d8f29b72f85663dbcd6ec61be4d","first_seen":"2024-11-11T15:00:46.058988Z","last_seen":"2026-06-09T14:57:37.338272Z","times_seen":2473,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/http.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/http.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 8405\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (20451)","md5":"63601a387248f06594daba935632fc90","sha1":"c86bcad7d2f27bbe99042505d63df01e268a7f77","sha256":"beb2941dcbc3c91f62af663394751eb649a0baa2c484ae385319ba090f870dec","sha512":"0b645d5ca9fe06cf046929551813e4a2e3280b6f2511a88d6c3b4d57790d50a52fc127dd86928a925d4afdeeac7af3ea925d2fb2dba71790580b76fb6968f99c","ssdeep":"384:wmtycYZT3ZSK0kQNi+Mw3A7pELBzibG2t4lhjOmbGaC4NOk5dLB6zH+A3DRBBMRm:wmtJ4T3ZSpi+Mw3ANELgbG2t4lhambGR","tlshash":"31a21b9db966b4730999d1f2e4f70014a23d645c780d0c90e3ed87ba2d76e81a6e3f36","first_seen":"2025-08-09T12:58:29.06653Z","last_seen":"2025-09-30T03:27:29.142377Z","times_seen":49,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/settings.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/settings.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2256\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6677,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6049)","md5":"254d96f7d867037be548cb52beee75fa","sha1":"fcd5d9c9011cdf0bd8efabf24cb07c71c0c1aadb","sha256":"14f8ff4b08b32460a707464df4a4d863f061c70004d1b7d6c11c085cdb034d3b","sha512":"503e3283668caa79c6f24efe6699802235cb5967b3a014573a15e80a09354a5d4f9ab14f146434b1de649e0c5685e7cf85934be580270531e4fbd8e0b74bd3fd","ssdeep":"96:jyuXf+EefS1szAXLzdd3FSQwgPjWKARyfU8Wk6URni:euXffSmEAXLzr1SQZX0FIni","tlshash":"f1d184833296e91141d84da5e8348333a2686cd674cafd7df0ac25fd6a2e491f035fb5","first_seen":"2025-08-09T12:58:29.069113Z","last_seen":"2026-02-17T14:14:11.449628Z","times_seen":32,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/config.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/config.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1197\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2717,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (904)","md5":"5244599084cb0f4abb50b6aa165927da","sha1":"bf60a881c641ac8ab2624756fd54740737ad42d1","sha256":"cd84009bfced4a51278e5b90aac1017734f00be24d12f30c9b25dd025c8df843","sha512":"d6021fec1978825253510f603d43ba756374083e4250593213e0bc1982d4e882efd0f6796d8189991b39bc0ba02d9653c5ba710f5d0d2bfae8a5703466d00a15","ssdeep":"","tlshash":"9751501bd030b53304884cf5e0169a69a3280e6733d6ff62d1ef5379a7098bac052e78","first_seen":"2025-08-09T12:58:29.071419Z","last_seen":"2025-08-31T18:20:20.721722Z","times_seen":30,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/multifactor.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/multifactor.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1072\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3111,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1574)","md5":"8bc0c77d31055216d0cb76e31bbd2616","sha1":"05265baa6d1db0b7d0f167add4481fbffbc18dd0","sha256":"d2a859b8d8d281580c2dbffd6c735e75205e9117644b995db7dbfdb8f893fc9f","sha512":"5bf6db9060c70248e875441c497ce37c4cf7a3f83877eb933d25e99d91c02ed26b9f42e691f77edd1a2fc0b574ae9f35d32bda61c2a5e36e1f2686a636f38a25","ssdeep":"","tlshash":"3b51772ad5383c1d72588ca5dc259e5193e81e163bdfbf36c0ee16b4e6148acc126e3d","first_seen":"2025-08-09T12:58:28.936774Z","last_seen":"2025-08-31T18:20:20.556219Z","times_seen":30,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/loginproxy.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/loginproxy.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1050\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2127,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"cdb5e3551431471f9f832d89dc57c27b","sha1":"5fa25f056cccdb55b522750d428742217c524785","sha256":"fdbc6f297842a79eadc40f265c9c2663ff6f398df0e860f6721aa9fa3c01a7b6","sha512":"edb64aabbdfaa8484d331f36f8b2a745f8f76cba668cbb327eed1bc2591c1daab11db151e94eb31d5ae16baad055b930f59204b16707a200e851db4fa314ff78","ssdeep":"","tlshash":"314177463aaab071133c14e190b70c44e5355990780eed5cb7a9bcff399698ed252f7c","first_seen":"2024-11-11T15:00:46.019102Z","last_seen":"2026-06-09T14:57:37.373622Z","times_seen":2529,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tab/handling.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/tab/handling.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1771\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4786,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3289)","md5":"55d9c8a058afec6ea322ff415701fe1a","sha1":"81acaee4a8307ae1fb41ce114cfaee2256f13e12","sha256":"d17d8c6625f9a0616e2f2644ff354aef5431ea12e94aa5fa91522c736ccdd089","sha512":"e016521cbe1134e0152329af4c815daa4235cefcb7558ac52cf38fd0e1c9253acd4336e3aed4d5a1b5cd39f34d2cb4ff14f615d54d0d4ef506edf151719357b1","ssdeep":"48:QCK/Qyx2Ghcp48Ca+lepMCXjyYaPhokFOm5/NxGJNWu0mPCnIDMUR2CQ2zJNYemc:QCkPhe46+Huk5VxlNCyQQnemYMPtq","tlshash":"84a1b10af1e0757101b808b1d6573fa673741a3a3185a1a9e0ae58b73d02427c26faf8","first_seen":"2025-08-09T12:58:29.073634Z","last_seen":"2026-02-17T14:14:11.439822Z","times_seen":51,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/views/modal.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/views/modal.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3707\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10693,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8862)","md5":"b621475c864f22a513af5359a94d2661","sha1":"1599eaa5c5f3f336d70759e91a6ddb58e4ffb323","sha256":"45c8dbcc1ce17b52eb09d81445b4141dc5e56a2462d0060fb9b01fdaeafc520f","sha512":"cf5b627fbadb1adc1e6ceb62dc61af4f8fdd60269281f51286842924e393e987bef3b81dfbedc73f5c6f63e0d9d7bc9412927cdf5d2c13aa2d5db47ee3213b24","ssdeep":"192:H8k6IFMRbzvRCNpQxG8FEY5XSXE75JzVOtHzmHQXEbggdFRXJ3Q3jWSpcf:n6IiJypk3EY5XSXE79OtTmwXfm9pqCBf","tlshash":"f122d866b038712207ff84e6601b061aa33199357847845cb0fcaafe2de9f912176e36","first_seen":"2025-08-09T12:58:29.03729Z","last_seen":"2025-09-27T05:38:56.426377Z","times_seen":44,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/underscore.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/underscore.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 603\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1207,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"862ccbf4093d289646f6a8a9f63ffa58","sha1":"870d5470bd31344df496de153667d111dbb4c183","sha256":"def1a7d193331890061fe98e144f81d527cbb9a6d3f9faa3c05c396ea404f875","sha512":"fdf1be9d988d401b8c970dcdaa3f9a3e51298ef05fb7eceb55ca8181703f894192e7d31a9e7332cf4f7a7b730fd422bfaf3d40a4a36df1fda8f54389b91f1fd5","ssdeep":"","tlshash":"bf210f0fd454c73744801af9e503c1ee932f566773eac170509f83b91a06cb681a1db5","first_seen":"2025-08-09T12:58:29.076186Z","last_seen":"2025-09-30T03:27:29.140265Z","times_seen":49,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/login/standard.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/login/standard.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1447\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3576,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1346)","md5":"da0c888351e40caf2316c29d587b0c77","sha1":"b7c1b8ea18433cfdc0e95c8483b4a2b5467295ac","sha256":"99fce2348fa97489d8c5e76f96d5165729dcfe360739b28c7842d81a4d2bbbd4","sha512":"da96c26a80e4844e6600ba04a2f506c2290c0d13780295a13087e29e5d82e3e17480a52e877b57874b80493e454c6626a271423c68edd438a046d19c4ab9d775","ssdeep":"","tlshash":"5d715f3bd130786310894cf9e012ae2443798e9733c6af72c0ef4bb5ab21a75d056d3a","first_seen":"2025-08-09T12:58:28.944793Z","last_seen":"2025-08-31T18:20:20.786446Z","times_seen":30,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/session.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/session.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1815\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4280,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2465)","md5":"0a009744d219e897aeb41b0d0b37ddc1","sha1":"b38588c9fcbff4c075ebafb1e9160f302cd1dc1b","sha256":"02d7b625fac58ae475e8281161716339c85cb0f96a7f468f509474a0ca389d0e","sha512":"ff7b600f20a3fa067b37fd5215878d80c2248bfb1d01df697ef05f35c2c750f36b182fd001851445933809104084d21524ef3ec47a853e9cf2a8bd52b9a3e85e","ssdeep":"48:/0RH+CK/Qyx2Gm3ZyR7530q175v5hYhGGhFjtTlgQtgB3p5YAChK5uC3bv2:/CeCkPgZy5O6vNGbx/O3pSvhKkE2","tlshash":"a691850ef071a537028424f9e4338145633a156732ebdab0e0ef87b57f21a6dc2a2d6c","first_seen":"2025-08-09T12:58:29.07815Z","last_seen":"2025-08-31T18:20:20.70538Z","times_seen":30,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/locale.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/locale.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2128\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5395,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3254)","md5":"ef47230a498125ef963eecf0010d675e","sha1":"7c50b287f1100826e6308f023f57d0fdc54e8b5b","sha256":"8c215b9ddfbfd3a275661c24a3bb23065a3ab678045691eee759d6ecdcd15bb8","sha512":"fa8cfa05128512e188054df9da0c145024d825f6ae408bddd0a5697ea49dbc5e559a2aeee17f1a6adeb3a0885bc6a43a97ecbc2f6bd32e0a8117b20fba2e7540","ssdeep":"96:n1xCkPfyTb74SVZ1pkdxbPf+x5tM4TyaFRDT3JpitV8AY:nqkXsb74SVHixbPf+ztM4TyaF9T3nish","tlshash":"83b1c51af0b1206b505559e9f016bc2203344d5a77c2be21a2cf9b76bf52cb9407ae6e","first_seen":"2025-08-09T12:58:29.080847Z","last_seen":"2025-08-31T18:20:20.713237Z","times_seen":30,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tab/handling.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/tab/handling.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1771\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4786,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3289)","md5":"55d9c8a058afec6ea322ff415701fe1a","sha1":"81acaee4a8307ae1fb41ce114cfaee2256f13e12","sha256":"d17d8c6625f9a0616e2f2644ff354aef5431ea12e94aa5fa91522c736ccdd089","sha512":"e016521cbe1134e0152329af4c815daa4235cefcb7558ac52cf38fd0e1c9253acd4336e3aed4d5a1b5cd39f34d2cb4ff14f615d54d0d4ef506edf151719357b1","ssdeep":"48:QCK/Qyx2Ghcp48Ca+lepMCXjyYaPhokFOm5/NxGJNWu0mPCnIDMUR2CQ2zJNYemc:QCkPhe46+Huk5VxlNCyQQnemYMPtq","tlshash":"84a1b10af1e0757101b808b1d6573fa673741a3a3185a1a9e0ae58b73d02427c26faf8","first_seen":"2025-08-09T12:58:29.073634Z","last_seen":"2026-02-17T14:14:11.439822Z","times_seen":51,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/login/saml.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/login/saml.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1724\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4394,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2461)","md5":"05b9e22764c75bd7f87b2a857738cc47","sha1":"49a1d905d0365185ad21ac5edf714091a878a3c9","sha256":"3fda7d828fd1938b1af36e832f173d398457640d5c015c3f97a0da514d4d03cf","sha512":"80c766d74051c017e5074b6696ced4639abd213822d5716db96b10330545cb4729430f7654eddeb4fd205257ae655e8e919d27be44e6893ccb511a7aa7303b2b","ssdeep":"96:bAeCkP6mh5xmhi1WCFlu2BDgoZQkc0hoZ0380BZ4z:bYkyYQiLFlD5gOQUhO0380j4z","tlshash":"4691c61ee078b03304d908ead2031e19532a4e6337cadf71d4dd9375ae1592ec66ae7a","first_seen":"2025-08-09T12:58:29.083048Z","last_seen":"2025-08-31T18:20:20.539488Z","times_seen":30,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/api/login?action=autologin\u0026client=open-xchange-appsuite\u0026rampup=false\u0026version=8.40.2","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/api/login?action=autologin\u0026client=open-xchange-appsuite\u0026rampup=false\u0026version=8.40.2 HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-robots-tag: none\r\nexpires: Sat, 06 May 1995 12:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f661dbad7145826e36deb4451f65e460","sha1":"26e0f6df125a37623ad4ba26e4d7dac5cb9e8a0a","sha256":"105a7e44282416227fac34dd69159040bb3748a82c9e75a8d8d2231c3e593cdf","sha512":"dafb1a083ebc8bc4686d7f33594aa4877630efc09f3f6ebf04a021047f95789ea2c1035db496a1f9e10d1b922a4b68ac81104ad90a18ebbdc16c5d028a79823b","ssdeep":"","tlshash":"b5d09515069d38f30b415383c09b2c754bfd80c4212c5cb86e14d50d5d0005827decc9","first_seen":"2025-08-09T12:58:29.08517Z","last_seen":"2025-08-09T12:58:29.08517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/global-event-handler.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/global-event-handler.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 688\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1378,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (323)","md5":"ed34fd0a8a0dd8435fb246f856fca0bb","sha1":"6805e78074af302ff2f02193e376a0081fc327e2","sha256":"387faa253541ef84b92b193123f7e913e1202f1c654da787b6846b72d44b3d3b","sha512":"8614c271830be79c43e4730e94fd695d3a3f8100131757188af2c8f70ed1be9774c851db6307b1cf75bd0406ec02a7c9eb35de4b98ed27bfe4a474db4cb98a1d","ssdeep":"","tlshash":"0f21110fe454927304941af9e607c1ee833b676773eac17090cf83b51e16d76c1a2da5","first_seen":"2025-08-09T12:58:29.087275Z","last_seen":"2026-02-17T14:14:11.421303Z","times_seen":51,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/support.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/support.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1469\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4312,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2728)","md5":"c8add290d5b961e8a99887d4454b2646","sha1":"e9b22ecf13b01ace5804662e0b0e9ccea64a0803","sha256":"37c7f7df2a53a138d5037d5b374e48f4b39ed608fe6cc0ad938f291f52da6b34","sha512":"5a164037ff2d5b159622d7a19dd2fcd945db70ed16271068d307587cb9d4f590c64986641c1d253708b6fcb5bb6a88aec341cc602ddc8e18323991724866dcf9","ssdeep":"48:J3sCK/Qyx2G6jLfNZ4qrEJ3ororS+NNBucte4mmWywvqvYpHRqERnC3AWmyYpguE:uCkP6PfNGqYFegU4VXbYpz2","tlshash":"4591b465f37db537451908c2e01b09af67739eb32ec3c662a0ce83b03c0061a915fe6a","first_seen":"2025-08-09T12:58:29.089045Z","last_seen":"2026-02-17T14:14:11.492256Z","times_seen":51,"resource_available":true,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/event.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/event.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1062\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1059)","md5":"1147eea07ae4d6db58151d111fea32d8","sha1":"03df5ed3a00320c5ccba456bdda066dc5cf94795","sha256":"2b23fb9f2b70b0196e96796ab268ee142e57c41588afd560ca24851e86d1ccf5","sha512":"a7d992432668fd4b845916d5034013522e6e8950510c2f6be76015152b9e035554e1bd21f5a30a501a910c12fb8126e382f84361fe92ce44a873f4cbdf856fdd","ssdeep":"","tlshash":"7f41578f7460b23201cd15f9d50bc18ba37a6a5a7a9795f4f08eaff05d15c358022ef8","first_seen":"2025-08-09T12:58:29.090572Z","last_seen":"2026-02-17T14:14:11.454478Z","times_seen":51,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1167\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2241,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"ade8a83150f733e5c73061b572889ad6","sha1":"9061da5ec178b3badcfcb4a11ffb66ca46953413","sha256":"6adf9a7075d48a56a397f201f72a050091a6334971fb1f24b41f9da00d777f2e","sha512":"f830745752ccaacb6561f22d93f9e12953dc5a2a7a757ba833f06f34284c3ed4cbc9619cabff13a11a387d50e1618dc4ed1fa8a2086fed129f8e75adeff32173","ssdeep":"","tlshash":"e141a94639b6b075133914f0a1730c55a62829a1740af85cb7debcef36975cad251f2c","first_seen":"2024-12-03T09:24:57.3302Z","last_seen":"2026-04-17T03:11:43.124406Z","times_seen":369,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/support.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/support.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1469\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4312,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2728)","md5":"c8add290d5b961e8a99887d4454b2646","sha1":"e9b22ecf13b01ace5804662e0b0e9ccea64a0803","sha256":"37c7f7df2a53a138d5037d5b374e48f4b39ed608fe6cc0ad938f291f52da6b34","sha512":"5a164037ff2d5b159622d7a19dd2fcd945db70ed16271068d307587cb9d4f590c64986641c1d253708b6fcb5bb6a88aec341cc602ddc8e18323991724866dcf9","ssdeep":"48:J3sCK/Qyx2G6jLfNZ4qrEJ3ororS+NNBucte4mmWywvqvYpHRqERnC3AWmyYpguE:uCkP6PfNGqYFegU4VXbYpz2","tlshash":"4591b465f37db537451908c2e01b09af67739eb32ec3c662a0ce83b03c0061a915fe6a","first_seen":"2025-08-09T12:58:29.089045Z","last_seen":"2026-02-17T14:14:11.492256Z","times_seen":51,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/rampup.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/rampup.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1662\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4779,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3903)","md5":"115df46d5a05690448538e5e0984f0c1","sha1":"96e67810bd34f52dd2846b451dd008f4fc898886","sha256":"c5fdd8da75617f1e0fdb9042ebf43234dfcb2c52a6a678f4e1db55029851c023","sha512":"a258770fc6f8cb511901ec24457be02a73bf092744b3db2b8bde265ce998c664387ab44cea38196b07fc0a07cee8948ec537e29c739c1142398acf1545b46676","ssdeep":"48:jYY4HqtD//HD9PKh2PU95gK6BmQNHEyiuOnn9mk/f+onBh8/Qy6oHEaILO:jYY4GDHj9PKhHZQREP9mknDnBC4qaLO","tlshash":"8da1442691787d2e62849cf6e5196a2063f44e0237e6ff31d0fd2ab4db218d5c436e2c","first_seen":"2025-08-09T12:58:29.098351Z","last_seen":"2025-08-31T18:20:20.659584Z","times_seen":30,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/form.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/form.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 4237\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13221,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5928)","md5":"91a1838358eaa2f905992d832b692151","sha1":"0915e297479d0864794608400d733331aad8da8a","sha256":"9a705a3f2e356330a472be20b21d7de18871b305c450122f59fff905e74b9819","sha512":"975586c4c3c3bfc8768c02e45b403a8075c801dfb03ac4b65b07c9433d95fa7fd57d2a9c5ff5c9569a24a0ac725351d48ecb1e908c9d0feb8d3540160fa87206","ssdeep":"384:H4lfFZAfdMP9SrxPwXJGROLZCC4kmcpMAin0KSYi7G2m+mXm0GGeiELU62bYwp:H4l9ZjFSr9wprinyGHGGei0Uvt","tlshash":"eb52c69da43c2c1a250244e4b84258243b3a9c361582ff7abb7ec3796ffd9d8414b94f","first_seen":"2025-08-09T12:58:29.100593Z","last_seen":"2025-08-31T18:20:20.6622Z","times_seen":30,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.gdpr/io.ox.gdpr-c98277dd.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.gdpr/io.ox.gdpr-c98277dd.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1310\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2709,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"7091d0ac91c5db7290a1eee1bed9deac","sha1":"672f789681c3c9f6efd1856a0bac03cff8d49f74","sha256":"f11fe45821740b2a50ada7d43ef2a22205076c7ce31443c4fbde876a72db5c8f","sha512":"44a5493e2f4b95bbb0f0efc789a4b3a7bbd3aeb88e60c8141744234d89cd2bb2492e32999f7a8e1f88d97dad225cd2222b7b11808e12b8212b27c7ddb27ebec2","ssdeep":"","tlshash":"bd51938235b6b07453122c9061318896f2b516e17009e84cf31c9cee2db2dced366f38","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-14T00:27:08.64312Z","times_seen":2545,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/api/tab.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/api/tab.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1460\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3576,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1978)","md5":"15d59dc4112f7eedafc5e521511ab199","sha1":"14c9d377a1eab1d814c0ec16d3d2f0efd04a5d46","sha256":"81198cb023893c54fc4dfe699cd9185af432079e7439927b471eaa3422401462","sha512":"a01a6aa4ffaa9db1c575ee85a19dff58777786d25ef6b7f0bf179bf8f5ac00a10d23ab0882359f16567d43cf419934bb743c8b6d601267bc3aa4fc2b62155c2e","ssdeep":"","tlshash":"f571975af560b179025c48fad02a5f67d3793ef23a9b6920c09f47b87b12833c127d98","first_seen":"2025-08-09T12:58:28.971368Z","last_seen":"2026-02-17T14:14:11.410695Z","times_seen":51,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/auth-B61b_1c-.css","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/auth-B61b_1c-.css HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: text/css\r\ndependencies: false\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ece41471f50d68c4850736c334a288fc","sha1":"b1a30a19b8f9f9a66e1205d1842d09a0d6d71dca","sha256":"293b97fc942a87b13be431bd1151b06ce58fe9e29f680e9b9b95447214887bf1","sha512":"5c8f786b6894f74bcbf02f2aa1d8b6862b8e380e4b126de90222b497fcfa280798c7252a5eb18edb308a1817b2e7b1e78880285b16b11b918ac9e494f894b16c","ssdeep":"","tlshash":"4aa0220e00e88330c88b23800ee32382fca32caf20e0c2338c83c300c00b02a03e0b32","first_seen":"2025-04-09T10:17:36.30953Z","last_seen":"2026-06-04T21:04:35.694558Z","times_seen":2484,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/locale.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/locale.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2128\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5395,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3254)","md5":"ef47230a498125ef963eecf0010d675e","sha1":"7c50b287f1100826e6308f023f57d0fdc54e8b5b","sha256":"8c215b9ddfbfd3a275661c24a3bb23065a3ab678045691eee759d6ecdcd15bb8","sha512":"fa8cfa05128512e188054df9da0c145024d825f6ae408bddd0a5697ea49dbc5e559a2aeee17f1a6adeb3a0885bc6a43a97ecbc2f6bd32e0a8117b20fba2e7540","ssdeep":"96:n1xCkPfyTb74SVZ1pkdxbPf+x5tM4TyaFRDT3JpitV8AY:nqkXsb74SVHixbPf+ztM4TyaF9T3nish","tlshash":"83b1c51af0b1206b505559e9f016bc2203344d5a77c2be21a2cf9b76bf52cb9407ae6e","first_seen":"2025-08-09T12:58:29.080847Z","last_seen":"2025-08-31T18:20:20.713237Z","times_seen":30,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/ox.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/ox.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1532\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3241,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1252)","md5":"5467223c63911f5c0e919b55291ba820","sha1":"c2380317d2f895828583c342bd4df1f80856e5ca","sha256":"eaea3fe80e2d5470132fe86e7bd0c62105d77303fee52bd0b0990b71488c26fc","sha512":"193867d6fdaa7a8e4c37f2143822d0a02ce80ef78529b0f835c919624f6eb32ffbd961c2aaecb4e75b1d2952805bf0f23206eed8a3d343e10034c746dd6e96fe","ssdeep":"","tlshash":"b461a64d986ad33f42dd01e59627254c533f2467314af4a0801f8fa02b0ed9a93a7fd7","first_seen":"2025-08-09T12:58:28.949462Z","last_seen":"2026-02-17T14:14:11.484154Z","times_seen":51,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/multifactor/api.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/multifactor/api.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1431\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3845,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2147)","md5":"3d433c0eb493bf954c7645cfdd755036","sha1":"76d2926dd7e6b9a5067634441912d77d9175956c","sha256":"103e65df6286a0fe3b56c939244ff432d1b47e1093a9cfa59dfa73d3572acb17","sha512":"f56dd36a8dc43a115db6054050b1f8b393f3729d783f0a90c8047474b5547efd8fda6a2e39593da209e114e8b2239bb9a53f5879992bc94250f96847bc039e09","ssdeep":"","tlshash":"428165aae925f53701960df8f4128189e337198275fa8061d0cf9774ee22d79c912be9","first_seen":"2025-08-09T12:58:29.022471Z","last_seen":"2025-09-27T05:38:56.425408Z","times_seen":44,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/multifactor/views/constants.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/multifactor/views/constants.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 728\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1430,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (472)","md5":"6e3fe09cabc4a7c9f91eefc7f0469f01","sha1":"cbf4b375325d2632cf8fdc2a0f80c42c58b74581","sha256":"c4c0c633944639201bae9d2539c4e1b4910905f9d4733705c331d1ec007de1ae","sha512":"b3f81557dba2afec57612130da1457b21e47a536b9ccddc16a4501835b990a42e5f678e532ce39d2ae16e664697f5d4f11b35dc34f1bbe87b732dabc6f88e2bf","ssdeep":"","tlshash":"d52132cb95648b37499703e6aa8341ced32b556df2aa90b2100e939d2c06db603e5eb1","first_seen":"2024-12-03T09:24:57.382035Z","last_seen":"2026-01-27T18:11:28.464819Z","times_seen":295,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/multifactor/views/constants.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/multifactor/views/constants.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 728\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1430,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (472)","md5":"6e3fe09cabc4a7c9f91eefc7f0469f01","sha1":"cbf4b375325d2632cf8fdc2a0f80c42c58b74581","sha256":"c4c0c633944639201bae9d2539c4e1b4910905f9d4733705c331d1ec007de1ae","sha512":"b3f81557dba2afec57612130da1457b21e47a536b9ccddc16a4501835b990a42e5f678e532ce39d2ae16e664697f5d4f11b35dc34f1bbe87b732dabc6f88e2bf","ssdeep":"","tlshash":"d52132cb95648b37499703e6aa8341ced32b556df2aa90b2100e939d2c06db603e5eb1","first_seen":"2024-12-03T09:24:57.382035Z","last_seen":"2026-01-27T18:11:28.464819Z","times_seen":295,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/minimalapiconsent.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/minimalapiconsent.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"9f52e15f0dd3fde0c039c1ce8b13a533","sha1":"dd4455d689ad5ff2adad135b31bf53e0eea53615","sha256":"560b674d8f9e01de05e57dcdc4199f7737bb151347981a9a5cc2f70380f01082","sha512":"0c432ed042f5fd9b6e1e1de9f450afcb000f8b3078fdd6a9e4e4c93d70c05904f13874f81d88f48efec2765afb1a21cb9faffb0d2786bd8de43010c5a87a98bd","ssdeep":"","tlshash":"20c0801e14f56675674d4cf4839f804f3c7576555e236564705015719476c418e4ba11","first_seen":"2024-08-18T11:00:59Z","last_seen":"2026-06-09T14:57:37.386079Z","times_seen":2534,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/antiphishing/antiphishing-9209b04e.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/antiphishing/antiphishing-9209b04e.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1383\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"0d6c62b24ba6613a2323ee5c58db0150","sha1":"8cd03547ce3552314c90d2df9bce68b20a8da90a","sha256":"26a3de554672ac091979d87f5f600ab1fa96464741a262ee39e058378bc706e8","sha512":"f95f3ac04249bf57cae1e1c7d142967cc362d83247d39d4e9f6e30a3a9a8eaa52f7e8712bf0f36b241c99bc82e9ca1756cf1bfacb8a9eea741f040c71f24ee02","ssdeep":"","tlshash":"a851b58635b6b4b403012ca071315895f2b966e13409e85cf22d9cee2df2d8ad262e7c","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-14T00:27:08.614401Z","times_seen":2545,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.gdpr/io.ox.gdpr-c98277dd.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.gdpr/io.ox.gdpr-c98277dd.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1310\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2709,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"7091d0ac91c5db7290a1eee1bed9deac","sha1":"672f789681c3c9f6efd1856a0bac03cff8d49f74","sha256":"f11fe45821740b2a50ada7d43ef2a22205076c7ce31443c4fbde876a72db5c8f","sha512":"44a5493e2f4b95bbb0f0efc789a4b3a7bbd3aeb88e60c8141744234d89cd2bb2492e32999f7a8e1f88d97dad225cd2222b7b11808e12b8212b27c7ddb27ebec2","ssdeep":"","tlshash":"bd51938235b6b07453122c9061318896f2b516e17009e84cf31c9cee2db2dced366f38","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-14T00:27:08.64312Z","times_seen":2545,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/settings.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/settings.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2256\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6677,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6049)","md5":"254d96f7d867037be548cb52beee75fa","sha1":"fcd5d9c9011cdf0bd8efabf24cb07c71c0c1aadb","sha256":"14f8ff4b08b32460a707464df4a4d863f061c70004d1b7d6c11c085cdb034d3b","sha512":"503e3283668caa79c6f24efe6699802235cb5967b3a014573a15e80a09354a5d4f9ab14f146434b1de649e0c5685e7cf85934be580270531e4fbd8e0b74bd3fd","ssdeep":"96:jyuXf+EefS1szAXLzdd3FSQwgPjWKARyfU8Wk6URni:euXffSmEAXLzr1SQZX0FIni","tlshash":"f1d184833296e91141d84da5e8348333a2686cd674cafd7df0ac25fd6a2e491f035fb5","first_seen":"2025-08-09T12:58:29.069113Z","last_seen":"2026-02-17T14:14:11.449628Z","times_seen":32,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/events.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/events.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 616\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1155,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"37a8df536039fdad970069e008143da0","sha1":"b820051d90427b6d078b7b01f7ba940d4661d988","sha256":"63ee714b6bcf07eb382a9bfc54f5a87f56d714c1037f3d3df71d5357360890b8","sha512":"78e1d378274eafb190b17576be461fd713a60584168daedd8a259deab87b0c2a33d8a5242ffcf0895ec8bf4e2ba338d6f9028b9125819b832392b6e66c1a0cc8","ssdeep":"","tlshash":"d121411e54a0dbb7049102faa68b81cfd31aa4a271af80b2101ad6fd1c17db602a1cec","first_seen":"2024-08-18T11:00:48Z","last_seen":"2026-04-17T03:11:43.170165Z","times_seen":328,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/a11y.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/a11y.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3274\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9947,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8646)","md5":"415150ca20fccb47a5589256907d673f","sha1":"86009bf09e3d94c74baaaaae0af3416901f65874","sha256":"f412be7235e7f3a9b5b4698b926233a51833981e353a441519e6bfbf5575e130","sha512":"794ab07dc1f8c244ce1f3eae08326b0069aa84885fbd59934ad9c0e30e6542f05ace64e795d444a53a058112fcf8438242cafa229245a657c01ddc38a5ab3028","ssdeep":"192:lky6xItS3BmO3NoW3ZVtBbGZP0GWKYkGaPZy99Z3vy3n7wEgED6nbMnHN9nZtzLX:GlqtQg0NostBbGZMGWKYkGaPZony37wG","tlshash":"5b22ba1c3191b1b255fb15d839a38e03f37b9c12bc13c564a41e87602d79e7252eae7d","first_seen":"2025-08-09T12:58:29.019937Z","last_seen":"2026-02-17T14:14:11.477314Z","times_seen":51,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/conference/zoom-settings.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/conference/zoom-settings.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 738\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1644,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (574)","md5":"b83016bab26be22620c563ba7997c82d","sha1":"a67e850547317cb060737d1ca7bb6fa84fb4dabf","sha256":"1aaff0cfbf8b8227121c3de588d972ea43580328b18d67fdc58e8e8a0aede507","sha512":"395756fa2384c376fc1da88852e38da610480e783efced125d120f9e882da0e3a10252e1f6be0bdaa57873a8e0c1082365eed70e6df3f539b0e002c2c6a75711","ssdeep":"","tlshash":"a0311f0b9430a63b00800df4e502c5eed37a6e6773e7b97290df43bada039b5c651ca4","first_seen":"2025-08-09T12:58:28.991915Z","last_seen":"2026-02-17T14:14:11.442693Z","times_seen":51,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/session.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/session.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1815\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4280,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2465)","md5":"0a009744d219e897aeb41b0d0b37ddc1","sha1":"b38588c9fcbff4c075ebafb1e9160f302cd1dc1b","sha256":"02d7b625fac58ae475e8281161716339c85cb0f96a7f468f509474a0ca389d0e","sha512":"ff7b600f20a3fa067b37fd5215878d80c2248bfb1d01df697ef05f35c2c750f36b182fd001851445933809104084d21524ef3ec47a853e9cf2a8bd52b9a3e85e","ssdeep":"48:/0RH+CK/Qyx2Gm3ZyR7530q175v5hYhGGhFjtTlgQtgB3p5YAChK5uC3bv2:/CeCkPgZy5O6vNGbx/O3pSvhKkE2","tlshash":"a691850ef071a537028424f9e4338145633a156732ebdab0e0ef87b57f21a6dc2a2d6c","first_seen":"2025-08-09T12:58:29.07815Z","last_seen":"2025-08-31T18:20:20.70538Z","times_seen":30,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/externalcontentpopup.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/externalcontentpopup.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1358\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2825,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"24963eca14e5e48c6a8a2d62e068d3c3","sha1":"691ef6a3872123f00c29fa55affff3eee4327448","sha256":"fcc1f6eef68ba927cea0fe5e7e2801702400935d97ca60f8095f59220b513cad","sha512":"d4f7c67dd47ad55057e8a7963af4f4e86d9e49805210a1d64de063161960cf64f77b1313bc271beae94bc291909e318e8aa112bdda1bd327db3e05d89558b4bb","ssdeep":"","tlshash":"8451949231b6b0b443062cb061315896f2b566e1740ab85cf35c9cee3ef2d8ad261f3c","first_seen":"2023-05-15T10:40:11Z","last_seen":"2026-06-09T14:57:37.366071Z","times_seen":2540,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/tetpopups.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/tetpopups.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 910\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1865,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"953e276bf6eb96c6e2cec5f357508e74","sha1":"326efa7ce3e832fa01f99d64415957eb6d123c5f","sha256":"5bed8a83ed480f24a14239d493862d39a91f274700d1d65478132dadc3d01156","sha512":"5071f95cddc976d7a9a5b5f4f6cda3f120e419b92d3ef2d7c70aa125060a876ce0653c5cd6c45f634925615aab0ed730d8fe94878370a6b879d84ee5a50398ae","ssdeep":"","tlshash":"4531448536a6b0b4231819a1c0b21c45e1746a90780bed5cfaad7cff39a798e9611f7c","first_seen":"2024-11-11T15:00:46.021177Z","last_seen":"2026-06-09T14:57:37.427497Z","times_seen":2529,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/loginproxy/register.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/loginproxy/register.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 823\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1653,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1543)","md5":"713d4b902dca9c4b24ab93f437037c96","sha1":"e6b9c8091703818f88f83b5e50cf8e341c388aac","sha256":"14cb3a5d7e30ba471892889c1aaa1c9256155b996657e1ad1bffa56ed39d1cbf","sha512":"62357120da5c638d7558db2fd5a6d29d0ed86fd128fdce6a5a0a00226fe5b41fef76f1fc89b41415d74b3f34ce6338321b988246c7680e2ad007195d39090989","ssdeep":"","tlshash":"4f31a64653d8a83a00b41cf9f0b8b3a1e7f41b62b809586d922d4c959e1afcfd4c9f0d","first_seen":"2024-11-11T15:00:46.041851Z","last_seen":"2026-06-09T14:57:37.39249Z","times_seen":2529,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/backbone-D7zN1VIy.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/backbone-D7zN1VIy.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 616\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1120,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"a21fa1e71539bdbb57012e5137710eb2","sha1":"387b8c9dc6af496ab72b7f5d0ddc0c82ba918e47","sha256":"08ee9e086e528430bb9a656f3ecd970993d6a5c5ad5c9a22589cf0eb4cac160d","sha512":"f44b85010a0ccfd58fa7b8d9145a7bfc6b918d611a9b9e9dc53b16345df11d7207822143d0a4b87c20082bb392a0eeb5fe32ca518b00ac794b94f32ba7a01ca2","ssdeep":"","tlshash":"d621331f54a4c77744440ae9660791cfc31e69b673ef90a0101b93a94c27db342b1eb4","first_seen":"2025-08-09T12:58:29.052081Z","last_seen":"2026-02-17T14:14:11.416697Z","times_seen":51,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/extensions.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/extensions.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3136\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8031,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"927d8cc23e0e18a831f0d739100c3dcb","sha1":"3a4ce9b909d66d1426ecf1a01ec44d6a125d8e7e","sha256":"175d086d2b8353310ba831263178fc05a06b36264132dbacd361f1dc212168f3","sha512":"c37de9ca68930c33091bc2a224f6019ce2a4f84250014ee6ebd05e35fa9c671852146c416b8474dddc7019178e9cfdb65e35984bc45f27f38ea4234cb7868511","ssdeep":"192:rvk2sGR05myW2hp5Qj6Tmu9M5qq/j38bFvBHCTIe:w2namMhpmj6Tmum5qQj3kHCTD","tlshash":"21f165c670a6f16246ebb4e4803f4116f33f9c99314c5168f08c95da7d7284aa63bf78","first_seen":"2025-08-09T12:58:28.989659Z","last_seen":"2026-02-17T14:14:11.484845Z","times_seen":51,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/purify.es-CgBxVarD.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/purify.es-CgBxVarD.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 8356\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21865,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21250)","md5":"004d3e148a3e52bd8d52eed666b37ac6","sha1":"7cdbdb18918a281fa71544ac53a7245c6ceac1f2","sha256":"699875b16625b06309d4cf8384373c0a49bc05cbd5f16595193c953d99e5eea9","sha512":"4dddbc4cfb86b7b3cca26fc8d61edbf172496686e8a3630ecad977cadb61dce50eaedd0a674f34ebc9f7d78760947e562d750fbf07ffdff65b23ff6632233da8","ssdeep":"384:OE7X5VqJzVKwv8PUMm6I5qxqUM145DE9xpvwXTitrPYMulXt9kDF9Zkgu7kXSRy2:XD5eVXv8MMml5qxqUM1EY/pvwXTitrwl","tlshash":"a3a23c6dbd856d765bdb01e860bb6e0ca5bc100a700cc450e6cdedb518bae49206bf2f","first_seen":"2025-07-14T20:51:20.475365Z","last_seen":"2026-02-17T14:14:11.48347Z","times_seen":119,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/antiphishing/antiphishing-9209b04e.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/antiphishing/antiphishing-9209b04e.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1383\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2813,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"0d6c62b24ba6613a2323ee5c58db0150","sha1":"8cd03547ce3552314c90d2df9bce68b20a8da90a","sha256":"26a3de554672ac091979d87f5f600ab1fa96464741a262ee39e058378bc706e8","sha512":"f95f3ac04249bf57cae1e1c7d142967cc362d83247d39d4e9f6e30a3a9a8eaa52f7e8712bf0f36b241c99bc82e9ca1756cf1bfacb8a9eea741f040c71f24ee02","ssdeep":"","tlshash":"a851b58635b6b4b403012ca071315895f2b966e13409e85cf22d9cee2df2d8ad262e7c","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-14T00:27:08.614401Z","times_seen":2545,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/office/assets/preload-helper-BvmF3Jkl.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/office/assets/preload-helper-BvmF3Jkl.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 680\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1298,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1245)","md5":"65b193cb8ad22cc1a3508642d9304a48","sha1":"190f08343861ce13f4e3320310aa9f4e1ba343d1","sha256":"5d8765a3bb99b6653d44a94576c13bb395270f4a642b3de1a2d983aff0f10e56","sha512":"9a715e1d3c544ab6715fcaced157b7988c0482639ab7f3644084801752cc5fb47c4569e14f9e1f66a965407e7c7e41dd5b85ec1a3b7d334ab9efa565b9c1f5d2","ssdeep":"","tlshash":"4a21759666d5f13603781ed6b0b8f297fae0299274064044a00edc9abe1efc8e1dae45","first_seen":"2025-08-09T12:58:29.04215Z","last_seen":"2026-02-17T14:14:11.476747Z","times_seen":115,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/views/extensible.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/views/extensible.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1225\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2998,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1559)","md5":"64f74375ec48a0c4b837f5bbe37a7ebf","sha1":"d0cb4b432004787fd2b9574b63447e3cefef5b3b","sha256":"082eeba66234c358d75ec11cd53473f87ec8fee0596bf426e36cffbf549e9179","sha512":"6155ddcab9fdac09beeb0a68b95fee076c9420b953611ca13e3fdf681eb8a857d9c96b6af2774e9b29a5a5ac47027bdf59f606b0f89f062bb1a652322863280f","ssdeep":"","tlshash":"6a51b5197074f22201d984e5e40b09cfe3365db576c916f834dda2faad09eb68232e34","first_seen":"2025-08-09T12:58:28.968889Z","last_seen":"2025-09-27T05:38:56.458667Z","times_seen":44,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.alt-login/forgot-password-link.07472780.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.alt-login/forgot-password-link.07472780.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"; locale=en_US\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 09 Aug 2025 12:58:01 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":483,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (424)","md5":"ecd43378215e1e07d837dc33f7eebeb0","sha1":"fc85ea0dc1bed00c9c295f7ad9a7b4dd931de6f3","sha256":"81063e6e23642d2a30fa32891e9f3271c65ea934c841e88f03d95b935fc6e499","sha512":"107fb34905610e95dae4f0f63d60c1d6fb6ffbf506765d66729615111e1b617102eb3d4e7611ca4db9e6345ca80ad8e06aa61f365478194c7b6e4754baef6931","ssdeep":"","tlshash":"ddf09e1c64601dbb0cad2ce8731d310aa3de037158045459b96543861738d47549e9a9","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.423072Z","times_seen":2492,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/dropdown.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/mini-views/dropdown.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3722\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11212,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9387)","md5":"b6359cef6c3f334d8dd18b51b889e291","sha1":"f31446d2c98cbaa86a2aaca86b1a7fa14c3be02a","sha256":"c0182844ee4d29d468dbac98408538cd42a3003d6bfb124f28770a816196f5c8","sha512":"ebf56335e081cd534e1b1fe41853e4be49fa4d8db845e7e8b1a13dda673c6f7b86bb5adc08382dca16564762ec8adf584a012744236141201b2d24ff439ead70","ssdeep":"192:NR/1GiZBbVthAs+3Gql0dKc7K7olCSKzoTroyNaYB043ecapxP5:NRhF+pl0n7F4MT0yNjB040Px","tlshash":"7d32b827b070365b635588d454005d1163aa5e29b54b9f2c78bdaefefa04fe03066e3d","first_seen":"2025-08-09T12:58:29.113975Z","last_seen":"2025-08-31T18:20:20.653323Z","times_seen":30,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/email-backup.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/email-backup.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 906\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1863,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"b3a70bcff0be339a6bee06bcafeef8b5","sha1":"4b19f1cfcc2facb538d5c89ca25d417fb45def8e","sha256":"cae46d0545bfea5dd90c3d3d683ee47aa2babd86117c6637b611a7d68e890d5f","sha512":"ad87fc802d10cf12e245a30934735d20d06328507f8684da6d6a6e07cb638221f2b4f6df7dcd681205ffe4bfba9f0e4c4fcc5652dab6b0f472610dff801c09a0","ssdeep":"","tlshash":"ee31448532a6b0b1131849a1c0b21c45e1346a90780eed5dfb6d7cff39e788e9611f7c","first_seen":"2025-07-14T20:51:20.496171Z","last_seen":"2026-06-09T14:57:37.382525Z","times_seen":2478,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/multifactor/login/error_handler.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/multifactor/login/error_handler.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 515\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1877,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1834)","md5":"e56b9219337056b6869ffa9119dc9c8a","sha1":"56d60fed87d977ba8e5a6496970c6ccc77c882e6","sha256":"6ab3805772500447280964d2117051c45a0e9182e151923a4f9255ec9fd885ec","sha512":"3c09129d2ab9c1f0440c1f17070650499404b660653dfa4fb4ce602e2bb31b6b6cfc2c85ee5aabe1b50bab6c133e20ad4182362d820ca0ace2b84ded1f33d6f6","ssdeep":"","tlshash":"e8411c6ae238342715649cf4d021de6193ba1e13b7d2bf37c8ef0772d7006b8d556a26","first_seen":"2025-08-09T12:58:29.117313Z","last_seen":"2025-08-26T18:05:53.96808Z","times_seen":27,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/components.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/components.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2791\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6940,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5320)","md5":"172ee6b006931b3e39e5b437f4e680ba","sha1":"dc84313a1b4d1f2e7639681ea67b0149cc10397e","sha256":"b69c1eb0dc7319196d1386ec072240c12aed8040e080a7e6f52fd2a3d28df159","sha512":"87a73b78931b34c8e7b415bef16167b1a3ae9219aa1312ddc7a05b2f1bad8bfb72be4ecf7a37649a3095a138283ada9065ea68f1b5fd62f4604b27dad90d2e37","ssdeep":"192:Gckf4aWoKmV9Z20xQr8fY55BTqQUZP3LKh:Gnf4alKw9Z2cw5TqfKh","tlshash":"69e1e988b0f4b071c10609e5e05f526ba2340723fac7cc25d1eedbae3a35864b126d6f","first_seen":"2025-08-09T12:58:29.046587Z","last_seen":"2025-09-30T03:27:29.290587Z","times_seen":49,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/manifests-DjSAX-_Z.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/manifests-DjSAX-_Z.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3791\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9444,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7057)","md5":"10be408a951dc5426da506a5bd279e4c","sha1":"f63730ce2ae44d4c2f8e4fd9a2ab74845a9c51ad","sha256":"7cac9aa9cbb0911362aba9139b8c96735c93e97d2fc837b6b256199823841366","sha512":"2641f4311dee9740702c4a113a956af744bd39239957d5cceed352ef6318e9869fb736d10e6ae58c4bcf9608afe3bf11ffe7fbbe8b45d3f10ed6ee90c10dfe68","ssdeep":"192:9DWVYk8/QMhqex0HT7nCzi0pGoKzGCXJmcgkRPAvhIQmUxnbPI:9Sk7a2zbGwwJjgkRIvhIQm0I","tlshash":"e312f89f70ece5b991a908f4e523108367e809e5254ea0e0662d42dcdd9d1d19b2bf3d","first_seen":"2025-08-09T12:58:28.943678Z","last_seen":"2025-08-31T18:20:20.713801Z","times_seen":30,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/jitsiReservationManager/settings.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/jitsiReservationManager/settings.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 767\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1673,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (574)","md5":"2f057884dd5d87f948471e1235ef9d7b","sha1":"f4d046e2dcc4f4df2823906bfd22a155bc0f5323","sha256":"c5008a1a84f6eb256f03fd296edda5b6b967c4a9e2f0c776e54b1a09745ea1ee","sha512":"27cb21c6c7965d6773394ad52a446cd2b82a7094b11eed83268da8f3f483ee70a502fd9e4f0fdafa2c5461cb5ed886974e1a103106510fafd537b56fca77ffb8","ssdeep":"","tlshash":"c331200bc074a636144009f8e502c5ead37a1a6373e7b97290df03b9da029b5c551ca4","first_seen":"2025-08-09T12:58:28.954596Z","last_seen":"2026-02-17T14:14:11.506352Z","times_seen":51,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/index-Dh_49yWa.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/index-Dh_49yWa.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 31022\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":732537,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65123)","md5":"3c9c8ab496ab2cbb4d598e3fcd664945","sha1":"163094b99b17a49de3c5da7032d9f1c786c2a6c6","sha256":"e11a6472a49aa5b9db0b4b143ce5f6816f7515e055bb57733f1118677804f66e","sha512":"abdd25bc7c82c5cd1291c035e584e1c424b818b3fe4a0815b070d31cef846117451a012fa3ec9b84c3321abcd4500bbeeb4278e096a1efa914baf4296cf44022","ssdeep":"3072:1ozpzlXl7DD/DUBkrXrO3r2hurs7zCDDDsDD7PkH2freQrlhEKEmgHA:10pxW2d","tlshash":"98f4fe285a6bf744e858c0dbfa373d84c59de18aa44725d20f715bb34ba2753ea9cc03","first_seen":"2025-08-09T12:58:29.119512Z","last_seen":"2025-08-31T18:20:20.578971Z","times_seen":30,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/capabilities.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/capabilities.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1259\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2956,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2245)","md5":"4ba54728884d1f178810719fb0f75691","sha1":"1249862cdae3752f8519fb9fc81f3fba0f8133ac","sha256":"d46610cdc7e38489881c7fe44065fd9aec5c3e20a159b2913c2a9457c51c5098","sha512":"e0dbc1ef24165276f92bd09e92ce1d6dd40b56eaacf55e129e8fcf519996d4e6da14005e0e505cba074585b8222807e1e70d6cde9d0240ee19db9a5c3933e10d","ssdeep":"","tlshash":"7751645ab5a43edb23846ca8d835591263bc8d4136cefe71a08c11fee62545cca2ad3d","first_seen":"2025-08-09T12:58:28.935699Z","last_seen":"2025-08-31T18:20:20.655565Z","times_seen":30,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/auth-BA37t2p9.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/auth-BA37t2p9.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 4643\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17130,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2210)","md5":"c077653eb8f74f80f82d1f46a565da7a","sha1":"a12fe3eb68b62a6373232674309a2c27d24d08fc","sha256":"3e7ac968b2f76fdf50006b40eb3bf3f72737d4c97f344c6743e55f234e5d4bef","sha512":"f7208839b1554866062b02b0ec4d9e6a908af6f74bb874523a52e366fd776fae116f639a5f9baa05a10c75a58d1e205689aa9dbe640e4da2147b3d052f3350fc","ssdeep":"384:u9JiZrb6nLq6NBP6K8T6B6uWA1WnzBgMINOX0P0FIdVDEPeKbXBYDd9:u9JiZrunLJNBiK8G6iWnlgMINOX0PGIh","tlshash":"4272f83db26c9abea6c309e06f179049e3df503831da90f0841e91f9dc27815c997ea9","first_seen":"2025-08-09T12:58:28.945828Z","last_seen":"2025-08-26T18:05:53.952822Z","times_seen":27,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/browser.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/browser.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2931\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7332,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6226)","md5":"1b971d1cef718869de77fe95fa3fba2c","sha1":"488a85f2ee186343f79f847f3eb51bd6e410638a","sha256":"f728ea3f839cbff51ab0a8b3c4c891cec09415f61312d52e5adc35690ef08b4a","sha512":"5361bf3e6f76653329ebf813698cba02e6c0e682b9c7be8bee4d07e856eb0c2a4503b38e65bd6ed524b51e4bfc3c9d8239ab69003efc99f179bb2d7a53f7bf10","ssdeep":"96:3CkPPjO2D5m5R6MIg1vGHL5QoSDYOJLnTjqszRqoPQ6ewm/hTJoYIMP4S9:SkjOyk5QM9Ve9uHPbrPhe7/hTJ0MP44","tlshash":"a8e1b5479e8b327b0e7516c1617f1201f3272612358a9495e06a02067e23e9383ffeee","first_seen":"2025-08-09T12:58:29.121566Z","last_seen":"2025-09-30T03:27:29.244863Z","times_seen":49,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/favicon.svg?version=0","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/favicon.svg?version=0 HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Sat, 09 Aug 2025 12:58:01 GMT\r\ncontent-type: application/xml\r\nx-amz-request-id: tx00000de45c24c729ac418-00689745d9-17c961743-msc1\r\nx-app-server: rgw15ham1\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249,"size_decoded":0,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text, with no line terminators","md5":"af900e41001cb965415de3f595b7c51e","sha1":"330822b0c71c05b43588aafc0db6b286414143c0","sha256":"a595b7a596e3a2e99a3d53e16fb98b0b895ef94ca39aa9a156405d0713ecc92e","sha512":"259c74116e0cdee04875ec4d851eff6ab5a380747a666896e159068e5d66003d4f5907f8dc28d9c64d1776bd21e0d9bc552569c02a489fd1e2d225e933ac7031","ssdeep":"","tlshash":"f1d09729b740b8bad52080a5be7ff1a23700f33323c290326ba18bc30f490830c34634","first_seen":"2025-08-09T12:58:29.123616Z","last_seen":"2025-08-09T12:58:29.123616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":954,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/index.html.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/index.html.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2131\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4599,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4289)","md5":"8924ec4f5251ffe9822a8f1b95141a58","sha1":"be20894353016f891f4b8786eb3efe8ff0a4f23b","sha256":"1df756cb8971339d399caacdfd4dc6bec20a7cbc2c831df7044aa85a77e66d50","sha512":"6ee95e007772e7226795c06861b6f925d5626d2bd1cf16365ed681a901f3de286ec211a77cd8755cc0088e6f8b4777a9ee3bbf49e10d00b2dfe956c7e75bcc14","ssdeep":"96:VrqT6/cfQTHT9g3eBCsMuZoQOQU+c7ZthXTkFalsiLt1i9uwJaiB7FXhqX1v1:5/c4THT9g3eB1MmZpS7ZthDWsDt1i9XS","tlshash":"3b91d8a6a1c15e3b02a30265b023d245b9315953f68ba096e17e852c3371ddde237dfd","first_seen":"2025-08-09T12:58:29.125346Z","last_seen":"2026-02-17T14:14:11.504734Z","times_seen":115,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/util.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/util.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2278\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5818,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4562)","md5":"eee6986ebee6aaba16c92b7dc63f7016","sha1":"9637495bad847a695a9006b40c6427b7f2a61e61","sha256":"f92f9b5a8108a4135a5e99199901a0f8979003a4b933aaa1e77e30fa333ded68","sha512":"6331ada0b1467b92f4d9bfeacc62e777fd52a5966840b07851b7ac34deb7321bdae82a73fcef1af73f8367f18ac235c6e05b446748f360f609750ab8c47221b4","ssdeep":"96:jXc2xTkv5rtXtQOaP7LA1XpD615OfexuPOP5tm/:I2xGrsTPHA1Xw1IfexuP0m/","tlshash":"73c1856851783c1b32a40ca0d8261d2223e98d557bdfffb495ac16f5fe75888c01ae7c","first_seen":"2025-08-09T12:58:28.951413Z","last_seen":"2025-08-31T18:20:20.533291Z","times_seen":30,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/util.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/util.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 4411\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10453,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8836)","md5":"b6c291acf5a8a7a5b20bfc18f842c8fd","sha1":"9d00cf2ea5415423ab7a6e14e98b7625f3097e04","sha256":"c7f6c59b5580d1c2103a2569ea54ac42f59fa45478128116f702304d8a474e62","sha512":"3235d7b4cac654c44232dbc1adff924b4ac87885fe4b73e252172b5ce5f86d396cf8ff9d086262bcf4923040e9691ec15515f74180707bffa7769f258fd7d049","ssdeep":"192:Kko6oM4ioTrD0yS0sywzE5J21eXWEdrKtdroRJjF1D4teZwDbAgVZgw:5SMYTn0yVsywzE5UeXWGrK3roRJjzD4/","tlshash":"0022ea8d71a2b4638b5415f090fb101af37e9e612d4954a0e09e65f93e32edbc529f38","first_seen":"2025-08-09T12:58:29.011236Z","last_seen":"2026-02-17T14:14:11.477866Z","times_seen":32,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/gettext.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/gettext.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 868\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1732,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (626)","md5":"62fbccfe41ae0a57ce5418090f7c2f85","sha1":"ea087a319f633b3484eec3770938365d691579d9","sha256":"e9162872f764d031bdd9a53a392341c18c0129ec1ad10946567f4ca8cc07f56b","sha512":"c9914ab2b62945decc4bb132d2f3100bdab58da57c90d723d96d70a4abb614babb1bdeda1f2af6601201c0ebf574474f92d661ba6317b87bbc8f60e9eb9f536e","ssdeep":"","tlshash":"bf31980fb060e3b708da19f4e107d09fd23f5566b25fd570109eabd50c1387a0257d69","first_seen":"2025-08-09T12:58:28.966755Z","last_seen":"2026-02-17T14:14:11.450312Z","times_seen":51,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/config.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/config.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1197\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2717,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (904)","md5":"5244599084cb0f4abb50b6aa165927da","sha1":"bf60a881c641ac8ab2624756fd54740737ad42d1","sha256":"cd84009bfced4a51278e5b90aac1017734f00be24d12f30c9b25dd025c8df843","sha512":"d6021fec1978825253510f603d43ba756374083e4250593213e0bc1982d4e882efd0f6796d8189991b39bc0ba02d9653c5ba710f5d0d2bfae8a5703466d00a15","ssdeep":"","tlshash":"9751501bd030b53304884cf5e0169a69a3280e6733d6ff62d1ef5379a7098bac052e78","first_seen":"2025-08-09T12:58:29.071419Z","last_seen":"2025-08-31T18:20:20.721722Z","times_seen":30,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":510,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/views/disposable.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/views/disposable.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 871\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1847,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (507)","md5":"9bc0cd844004511ce97d6683fca074e1","sha1":"47b746f744a44e6b2562225b191a86194626c703","sha256":"d9ec329c80062d106318adb41418102584726a5d6c94019bbf74a1c2394b394f","sha512":"2b5650771f44b41ef960b06d4fe65454046b7b55f57732dcb385de314d3adb9fe9cb06ffd731769095e54422e7276b0983e7917802068a0de9bc545fec291bcf","ssdeep":"","tlshash":"a731622ee434b637049499ec9002d9de43396e6777d76e74308e83f46f16cb95222db0","first_seen":"2025-08-09T12:58:28.97026Z","last_seen":"2025-09-27T05:38:56.40154Z","times_seen":44,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/preload-helper-BvmF3Jkl.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/preload-helper-BvmF3Jkl.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 680\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1298,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1245)","md5":"65b193cb8ad22cc1a3508642d9304a48","sha1":"190f08343861ce13f4e3320310aa9f4e1ba343d1","sha256":"5d8765a3bb99b6653d44a94576c13bb395270f4a642b3de1a2d983aff0f10e56","sha512":"9a715e1d3c544ab6715fcaced157b7988c0482639ab7f3644084801752cc5fb47c4569e14f9e1f66a965407e7c7e41dd5b85ec1a3b7d334ab9efa565b9c1f5d2","ssdeep":"","tlshash":"4a21759666d5f13603781ed6b0b8f297fae0299274064044a00edc9abe1efc8e1dae45","first_seen":"2025-08-09T12:58:29.04215Z","last_seen":"2026-02-17T14:14:11.476747Z","times_seen":115,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/precore.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/precore.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1963\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4392,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1936)","md5":"3e64ebbb1be2c0dc10cda8c7d1e9e42d","sha1":"36c517f92b1611ad3f2936f703383d6301c04015","sha256":"46974da2ba7b3ce18e052de2323b8f6aef3202f61fb07de05c58849144ed2766","sha512":"1d988cc38d5d836b78bfd3f7577196ca17d75310d11a24725f3e8fd0ba44d5c36fc873377f6b4c5b335a7545bee608f87e9e02c51e85ff33f40b23d402bd25b3","ssdeep":"96:jgmtoFOaRC1W6kP+voZvgQbsOeINvIDuluD+:MmtoYa0W6kWm9HvIDulj","tlshash":"9391c52f5199eeb212cc2dd59e2360c476d80611b4dcd0f3672822abef3a54d0c69f3a","first_seen":"2025-08-09T12:58:28.984085Z","last_seen":"2025-08-31T18:20:20.566717Z","times_seen":30,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/moment-Czs3iPlw.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/moment-Czs3iPlw.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 19299\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60981,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (56807)","md5":"a43036b6505f786b086255a6fde68925","sha1":"a555ff4ef6092dce00d694fdd81ede7f7bad39b0","sha256":"adba443bdab9429503173764648ef1a75838d9a6574b4e9b91e6e776f16a4516","sha512":"7eb41f54247f3f9e8322d334ab3afd36a7002c1c9e6d18f3d219e8391dc6bfccec1088e5bb13a1d62ea6289ccf813a40045a1a9c2ce6289e286dc1eeabac1d44","ssdeep":"768:tZR4jbdRFGZBraNQQRwUSOKl00ZdqipSR4MW5arV2sceyNrx1niCIVs6tS3BHh:WoZBrWqxOP0+QkrieqrxZihZS3BB","tlshash":"2d53b5ca3146b112976612b408af4907f33d5ca6684e8d1cf50ce9dd7938d6e42bbfb8","first_seen":"2024-08-18T11:00:52Z","last_seen":"2025-08-31T18:20:20.680497Z","times_seen":94,"resource_available":true,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/version-check.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/version-check.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1440\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3547,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1938)","md5":"0023901281f8f014a28d1aede9badd8d","sha1":"aff2877c3df45fb8cd6a24a180dfc6860a95fa19","sha256":"83f8141ff6d2fcc3ec9efa89bed86b1b7f72da1afde2d12193eff359c35e49ab","sha512":"5517a4c47b898ae52080124f33d767525a62d7188dcb64e115b87ef259cd12969bb5580d352108d0fa61c7227518c2e128690018a59e5ccfa3a5acba8df5e39c","ssdeep":"","tlshash":"1071760ec478d1331aa065b9fd079269432e8b2b63d5b4a1a3ee07b117d7cbc8117e66","first_seen":"2025-08-09T12:58:28.959776Z","last_seen":"2026-02-17T14:14:11.43289Z","times_seen":51,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tab/communication.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/tab/communication.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1907\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5576,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3614)","md5":"8a2814da3c2cceaa05d2e53c177ae0cf","sha1":"bbdc2e61ddeabfffa12d80083c6ed4836471c500","sha256":"6627a58f7256515a48790c724e0acad43eb0706bd17be6808e3d2073fd122160","sha512":"02f0437e634348def31d5a32b4e3764494149cab99fb088212e342b97d6010a754c3e88f88845c8842fd4559261c21c2cf57c6705260dfebcad7cff90cf39594","ssdeep":"96:j7Srxch+iZOjKGZyGBWSsM4k2dRXIdc8c0ILU6/NSSDobhzj7qB:HSrxI+iAjKnGUSJ4kORY6rHVSRhHeB","tlshash":"3bb1541561343d2e32b44da99d267f2023e48e6936cfbf70e09e5a71fa1548b801be6d","first_seen":"2025-08-09T12:58:28.964026Z","last_seen":"2025-08-31T18:20:20.656284Z","times_seen":30,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.dumpster-f4301a77.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.dumpster-f4301a77.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1553\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3149,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"52467eb3315d612c4b23f0f91dc6606c","sha1":"6a494d129200e7c22c1edc86509607370f129c4d","sha256":"4b3505b5c28ffb46b1d92165aa74a3c12287f3ce2fb58079473be8a2d16a2c0c","sha512":"b0349feefd6a6706a92e7b1258add461f729ddd63830bac9fd11730cac8c0520aa41d59aa7bbb86dbc6aa40efa9fb13eb38b3516d363f9bd6ba514c1958affe8","ssdeep":"","tlshash":"7a51d58634e5b071433938e021614896e27826a1340ee84cf35c9cef2df6dced2a2f68","first_seen":"2023-09-05T20:03:34Z","last_seen":"2026-06-09T14:57:37.420712Z","times_seen":2542,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-09T12:57:57.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/?user_domain=mail.emlgroup.com HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: text/html; charset=utf-8\r\ndependencies: false\r\ncontent-encoding: gzip\r\ncontent-length: 4157\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17358,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"231b5f53576797e11d6715357fe465ba","sha1":"fe61722c9d81db75eec8b17a0c508a84fae7aef7","sha256":"5e400156aeabb9291f67e7398072f3268331be054fdca1d79cfb752b6be91dfa","sha512":"47c0955c71b4e0be423a5f7b8f3b205ce993cdc7390b2492885613550b7a3a545b9753e3a8aeea52b169ccd0396cf087d41f3d03cc22c471f305597358c29889","ssdeep":"384:R8MQe0uvbY0bERdbuDBmNVZm08OVBAXvTZuvdUYKo0urVu:kYEUYUYKoo","tlshash":"bf72522484f90439505380d47ef1aa0a2f51ea1bca4a6a1977fc5bd48fdbec7cc87369","first_seen":"2025-08-09T12:58:29.127421Z","last_seen":"2026-01-11T19:33:44.839545Z","times_seen":113,"resource_available":false,"data":null}},"time_used":987,"timings":{"blocked":434,"dns":77,"connect":114,"send":0,"wait":117,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/http.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/http.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 8405\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (20451)","md5":"63601a387248f06594daba935632fc90","sha1":"c86bcad7d2f27bbe99042505d63df01e268a7f77","sha256":"beb2941dcbc3c91f62af663394751eb649a0baa2c484ae385319ba090f870dec","sha512":"0b645d5ca9fe06cf046929551813e4a2e3280b6f2511a88d6c3b4d57790d50a52fc127dd86928a925d4afdeeac7af3ea925d2fb2dba71790580b76fb6968f99c","ssdeep":"384:wmtycYZT3ZSK0kQNi+Mw3A7pELBzibG2t4lhjOmbGaC4NOk5dLB6zH+A3DRBBMRm:wmtJ4T3ZSpi+Mw3ANELgbG2t4lhambGR","tlshash":"31a21b9db966b4730999d1f2e4f70014a23d645c780d0c90e3ed87ba2d76e81a6e3f36","first_seen":"2025-08-09T12:58:29.06653Z","last_seen":"2025-09-30T03:27:29.142377Z","times_seen":49,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/main.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/main.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2551\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7061,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5760)","md5":"8f033688610ffecb7cd8f4c5e9c4190a","sha1":"c64ac6e271a881f66bfcf27fb3893516e90a1a94","sha256":"556dee4d97c64a51aa33a03f2872f11a0a0dacd546b2a397ddab595a10cadff0","sha512":"aa686da76215b8627acfcc6fba2c515e610e8f55c58e276082400f44209daa1a68d31af219c00646d772414c6c7ab9b7dea26ace3f5a62560831bf5438f1ae67","ssdeep":"192:OVt5YZ3w4MLly0Et1jMNT+AZBgCCyZcMn:OVt5Y24sly0ejMNzBgzyZcMn","tlshash":"8be1401a91383d2922a48ce8c4252e5013f90d167bcbff35d5fd12b4ef5558e852ae39","first_seen":"2025-08-09T12:58:29.044232Z","last_seen":"2025-08-31T18:20:20.635415Z","times_seen":30,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/antiphishing.6fb231d8.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/antiphishing.6fb231d8.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"43d791d5a14cb9d8e6c43a009d086a92","sha1":"84d119077cd8f7b89cd2f0ac1720e0512caf106a","sha256":"24915bf03127be7e6e1b9488854b1807142569c27050ceeff52a7460fcf23a78","sha512":"c3b0218cecfb2b6dbd3c0fde72aca254b20f94443f99829f1371eefc241aa832f1943c391188391955ab77aace1ab9472aed583306a79c582c43f6b310a66255","ssdeep":"","tlshash":"b0c0126f54e460f0928d0ce9e659b88d212c649552331418363262e358294418e8e909","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-09T14:57:37.402019Z","times_seen":2540,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/login/redeem-token.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/login/redeem-token.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1184\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2746,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1060)","md5":"221e6ff5dfacf11fe19beac65426a9fb","sha1":"30f2db3466d5ea812082a21b3c4528b6c02367d7","sha256":"5549a74250174b653c2d3fb1ae0bdf935657e61ddadab133971724a2546dc7a7","sha512":"7d01b5544d5c5e388ecd82af5025fd196895fc322ed802ba7c381baa9ae6ffefbf27bade51cbf5efe597db2c486f56b37265d006130f91195659bf988df7dcfd","ssdeep":"","tlshash":"b451212bd078792310485cf8d4158eaa93b90e6333d6af71d0df47b8af019758562d79","first_seen":"2025-08-09T12:58:29.130178Z","last_seen":"2025-08-31T18:20:20.732451Z","times_seen":30,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/manifests.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/manifests.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 323\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":855,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (816)","md5":"ad90c8f47dfaaede39c01b316e7e5789","sha1":"6e093787377bb58c4cad0fdcdb501430aab58428","sha256":"9f5c2fd42c7b24169396ccf7fd7f34632820854d3c9b21eb67cd404b0f414d0a","sha512":"899416450fec796b17f18526a4c4aa171a9bc70802754734465c48f1f60406676298446cc3c5b4730b8795fbedeb401fefa25a19e7f8297a46146e71817c885c","ssdeep":"","tlshash":"1711690bc82864556164dcf5d020d9b213794e1737d2bb37d4ee13b5e3415b8c526536","first_seen":"2025-08-09T12:58:29.02393Z","last_seen":"2025-08-31T18:20:20.737212Z","times_seen":30,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/guidedtours/i18n-ORsXC62r.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/guidedtours/i18n-ORsXC62r.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1126\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"522d9b704088665f6aca76fc19a5c1bb","sha1":"b562406a844a550b7f39b3d64a85d5e0373cc6c3","sha256":"10dc4f571ed4fce5db1830ea522fea3f8e9348b89e1a744104eaafbd9bb9619a","sha512":"56b41dc44fed5c46cb683c0683c0eb1dfaf858deb4529a3b073609e9ebb9c42154fdbc4ecba3f11623db558b3ff18ee9b8235726ab17f30c1519cd6c5cb080a3","ssdeep":"","tlshash":"c441a64635abb075133814b0a1b70c15a62819a0780afc5c776ebcef35d64cee215f7c","first_seen":"2024-11-11T15:00:46.00116Z","last_seen":"2026-04-17T03:11:43.202498Z","times_seen":326,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.blackwhitelist.811cfd8a.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.blackwhitelist.811cfd8a.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":217,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"23cebe3680aa17439cfe6d5154ffb5c8","sha1":"38a363564bde5353a0e1558901844700c1b4534d","sha256":"c0236282fc42d67d26308e6a550117d3fd99b4a97818bdc7f243742e82d8fe07","sha512":"6b65dbf86a02146db630ede5ff79c98394ff6efad89e83f28045931c91d46df693d6a05c5e4d626ae0b4d86e57ae8cb1fe21a26af8e2d7144183ee6009cf393a","ssdeep":"","tlshash":"c3d0123f5db9a0f857ee0cdeab26944d362ce9e6c63310d552405ae3047848d8e2eb03","first_seen":"2023-03-13T19:31:29Z","last_seen":"2025-09-30T03:27:29.305053Z","times_seen":113,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/underscore-mixins.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/underscore-mixins.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3737\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9905,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8609)","md5":"ec324dabda73aec2208aed5d5e6bea55","sha1":"69c54752bbe88abd460b265a0a33caf742e40258","sha256":"309b31704cbf22cea154d973e1777bf7bbfad701d7be9c3113031ef372c547cb","sha512":"b17b6ec66ccc137432514bb112c4f4f064581be4d31e8b20768d8998a65bc18b65afad72ea2107a0e46c7b9331b456dbb45454c1cac467ecefea2491fafd32bb","ssdeep":"192:oRtk8XjGGr0AQj1ezF5ryQWxw2gQw0B5Nx291CWECBP4eJE4kwdzZ9zysD:T8Xh4AQj1+e1MQwbnOMyC","tlshash":"f41297dd35c2b071578551b8e8ab051bf33919e22f4ed0d4f04a51aa3a36ca4c272fed","first_seen":"2025-08-09T12:58:29.035002Z","last_seen":"2025-09-30T03:27:29.157191Z","times_seen":49,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/dropdown.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/mini-views/dropdown.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 3722\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11212,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9387)","md5":"b6359cef6c3f334d8dd18b51b889e291","sha1":"f31446d2c98cbaa86a2aaca86b1a7fa14c3be02a","sha256":"c0182844ee4d29d468dbac98408538cd42a3003d6bfb124f28770a816196f5c8","sha512":"ebf56335e081cd534e1b1fe41853e4be49fa4d8db845e7e8b1a13dda673c6f7b86bb5adc08382dca16564762ec8adf584a012744236141201b2d24ff439ead70","ssdeep":"192:NR/1GiZBbVthAs+3Gql0dKc7K7olCSKzoTroyNaYB043ecapxP5:NRhF+pl0n7F4MT0yNjB040Px","tlshash":"7d32b827b070365b635588d454005d1163aa5e29b54b9f2c78bdaefefa04fe03066e3d","first_seen":"2025-08-09T12:58:29.113975Z","last_seen":"2025-08-31T18:20:20.653323Z","times_seen":30,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/rampup.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/rampup.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1662\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4779,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3903)","md5":"115df46d5a05690448538e5e0984f0c1","sha1":"96e67810bd34f52dd2846b451dd008f4fc898886","sha256":"c5fdd8da75617f1e0fdb9042ebf43234dfcb2c52a6a678f4e1db55029851c023","sha512":"a258770fc6f8cb511901ec24457be02a73bf092744b3db2b8bde265ce998c664387ab44cea38196b07fc0a07cee8948ec537e29c739c1142398acf1545b46676","ssdeep":"48:jYY4HqtD//HD9PKh2PU95gK6BmQNHEyiuOnn9mk/f+onBh8/Qy6oHEaILO:jYY4GDHj9PKhHZQREP9mknDnBC4qaLO","tlshash":"8da1442691787d2e62849cf6e5196a2063f44e0237e6ff31d0fd2ab4db218d5c436e2c","first_seen":"2025-08-09T12:58:29.098351Z","last_seen":"2025-08-31T18:20:20.659584Z","times_seen":30,"resource_available":true,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/tooltip.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/tooltip.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1315\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1617)","md5":"f1d7fd57e6c555d56fd95ed488dc7113","sha1":"db533ef9002ff3d3ff81753aa63572b192ffe3ad","sha256":"a428a0e51f7720eb9e0d8853f6b6d3b59733b997a0805c0f17190e47bfa8421a","sha512":"550a3a8b25a9a44694ef5f93e866303e8a6556e9b9fa2b787bad05f8292084126ad162fe636c1c95f2ae0d3299c7134a1556dda6c6520689ffd5a4289d9f5c0f","ssdeep":"","tlshash":"8e51e80ad032727301a10de9d042d6de63372667b1c754f190ae8fbe4b1acf21372ea6","first_seen":"2025-08-09T12:58:29.004981Z","last_seen":"2026-02-17T14:14:11.431823Z","times_seen":51,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/global-event-handler.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/global-event-handler.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 688\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1378,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (323)","md5":"ed34fd0a8a0dd8435fb246f856fca0bb","sha1":"6805e78074af302ff2f02193e376a0081fc327e2","sha256":"387faa253541ef84b92b193123f7e913e1202f1c654da787b6846b72d44b3d3b","sha512":"8614c271830be79c43e4730e94fd695d3a3f8100131757188af2c8f70ed1be9774c851db6307b1cf75bd0406ec02a7c9eb35de4b98ed27bfe4a474db4cb98a1d","ssdeep":"","tlshash":"0f21110fe454927304941af9e607c1ee833b676773eac17090cf83b51e16d76c1a2da5","first_seen":"2025-08-09T12:58:29.087275Z","last_seen":"2026-02-17T14:14:11.421303Z","times_seen":51,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/login/auto.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/login/auto.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1067\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2529,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1052)","md5":"8eff811117c6b7fa09286f02acd08a90","sha1":"5911b57ae026b5f91464f10c05dc9306ef0761a2","sha256":"5603fb6489cecfac294fbecdb165cab567eb7ae066977475fabd19d6d0b81637","sha512":"4499d23adb70124dc0d006e137865d3de095aa754ded5c3856e3653afe2dbfbe43ee8eabd566adc1fece1c5e1c9cf19b06d1bf8fe795cb266b6e8d31524cf0b4","ssdeep":"","tlshash":"cd510d2bd034b623014858f4d0069eaa93794e9733daaf76d0df03b9af0197dc5a5d78","first_seen":"2025-08-09T12:58:29.133314Z","last_seen":"2025-08-31T18:20:20.794488Z","times_seen":30,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/brands/5/logo","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /brands/5/logo HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 4342\r\nlast-modified: Thu, 22 May 2025 20:24:57 GMT\r\nx-rgw-object-type: Normal\r\netag: \"8d74d147618554291f8cb17959e22450\"\r\nx-amz-request-id: tx00000c90c3e226158fc2f-00686f70f4-1797aa0a5-msc1\r\nx-app-server: rgw15ham1\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4342,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PNG image data, 154 x 62, 8-bit/color RGBA, non-interlaced","md5":"8d74d147618554291f8cb17959e22450","sha1":"4602c88a77f1ae4832e5943a9f31e6dc46c4019c","sha256":"38f4cd5c0c12b0655856bb8470b15392154ebad70467d63a577ff730e8f248df","sha512":"5677c216106a72ea816b3c44ff3e62a72d1ecf6661c8c18c3e7b885577ddd582df401dc7e3220d9a5894faf63547c79bfb6dacbd33d510161461ebcaa39cfb69","ssdeep":"96:DScG+WWD284hWhWlN1UQ9AXZ1DDlkA9R2S/hcOd8EBOv:DScEw28aW6AkA9R2S5cOOEBOv","tlshash":"53917dd6a9c04cc6dbeb4d3ad295b8ebc26e0fb90043e51844fad539431bc10c7ae1ad","first_seen":"2023-05-01T23:08:16Z","last_seen":"2026-06-12T00:05:58.511354Z","times_seen":5011,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/backbone/mini-views/helplink.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/backbone/mini-views/helplink.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1163\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3181,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2111)","md5":"8b19c7fcd089be3076c05e8eba4afc8b","sha1":"8251a98bc6df6de14348f79c2bd171ae232db893","sha256":"21e537a51f49b6930eaca77fababb0bd539ecf49beab18eb8169c878769f02e2","sha512":"3988650e09b3b75b985c436d6da02d3a931697d7a331c5e091fd7be69d3975fe126bcd8c7370e1da6ce3f037b1ab9ddda5d7be9f7a26a372d900d81cf1d12db5","ssdeep":"","tlshash":"eb61103590387d2e73a49ce4c8105d1053fa4f52b7cb7f39a5bd06b6e2a0698d112e3d","first_seen":"2025-08-09T12:58:29.013129Z","last_seen":"2025-08-26T18:05:53.997601Z","times_seen":27,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/switchboard-CyjQ4kEt.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/switchboard-CyjQ4kEt.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1098\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2147,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"fc6c2aaad815aaa1c6cb4219bbb0d562","sha1":"7aed13700c2d95a5b9c0417f28bf98edbfb7b42a","sha256":"14240877b5e9bf4dbcb6f6a9ecc2b2d024b95919f7d14178ecd84e2194920e46","sha512":"8b5d5627793154102f39729fd5f0c41a0781eaaec9b115d079bc0785b4598d4212e79bdb06da722ac7ecc7a6db34fa03bc4b30eb60bc064c098c35dad546deae","ssdeep":"","tlshash":"6041974636a6b0b5133814b090b60c55a22819a0780af85c776ebcef36d74ced211f6c","first_seen":"2024-11-11T15:00:46.010949Z","last_seen":"2026-03-30T06:29:20.04285Z","times_seen":369,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:58:00.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox.blackwhitelist/io.ox.blackwhitelist-df4f5308.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: appsuite-middleware-route=\"f581591764f56766\"\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1306\r\ndate: Sat, 09 Aug 2025 12:58:00 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"f8cb63e82d8acb03cb2d69c7de402ad7","sha1":"dd68d4bebced4e12eee70e65635092077a93b3c1","sha256":"360a6c2a45aa2bcd247e9ca8ce390bba78491145506253512beb2e4a355ff615","sha512":"6b8ce504753e185e210726a131a30c738dd355a2f201d3b6c4f683f4066443f13fada540cdac2abc8ead8dca0d59537b8ba55ae2e31e405d86ea3bf9a7ff5593","ssdeep":"","tlshash":"e751838235a6b07443162c91703158a6f3b8a9e17448a44cf35c9cee2df2d8d9265f39","first_seen":"2023-03-13T19:31:29Z","last_seen":"2026-06-14T00:27:08.602159Z","times_seen":2545,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/main-ORQm3P_K.css","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/main-ORQm3P_K.css HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: text/css\r\ndependencies: false\r\ncontent-encoding: br\r\ncontent-length: 51436\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355236,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61471)","md5":"226f4b5126473087a947212de4e6f6f7","sha1":"b5465e3b0ddcee571b41ce81681a290c220035d4","sha256":"4a4780bc3949881ce496749a47c56f3d06010e8c2aa7c32fe6a7f1f3d20077eb","sha512":"872f435ce60dacc36503f7eacf186cd18bd7559c5933d2ec222e14257bd995306b721f32f5a75f390b1c3787107a383404584a3de17ca1576f6bb65adced73f6","ssdeep":"3072:WVf0HQ0SFDk4sMt7lRXtWZaKX4b3eOzo5:of0HQ0SFDk4sMt7lRXe4b3eOzo5","tlshash":"8574d614a310303e3867c06679c4bd97ba16a05fdc6a4bfaf46694a803ce5d72237f76","first_seen":"2025-08-09T12:58:29.136974Z","last_seen":"2025-12-14T13:03:46.613036Z","times_seen":41,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/browser.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/browser.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 2931\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7332,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6226)","md5":"1b971d1cef718869de77fe95fa3fba2c","sha1":"488a85f2ee186343f79f847f3eb51bd6e410638a","sha256":"f728ea3f839cbff51ab0a8b3c4c891cec09415f61312d52e5adc35690ef08b4a","sha512":"5361bf3e6f76653329ebf813698cba02e6c0e682b9c7be8bee4d07e856eb0c2a4503b38e65bd6ed524b51e4bfc3c9d8239ab69003efc99f179bb2d7a53f7bf10","ssdeep":"96:3CkPPjO2D5m5R6MIg1vGHL5QoSDYOJLnTjqszRqoPQ6ewm/hTJoYIMP4S9:SkjOyk5QM9Ve9uHPbrPhe7/hTJ0MP44","tlshash":"a8e1b5479e8b327b0e7516c1617f1201f3272612358a9495e06a02067e23e9383ffeee","first_seen":"2025-08-09T12:58:29.121566Z","last_seen":"2025-09-30T03:27:29.244863Z","times_seen":49,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/event.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/event.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 1062\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2361,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1059)","md5":"1147eea07ae4d6db58151d111fea32d8","sha1":"03df5ed3a00320c5ccba456bdda066dc5cf94795","sha256":"2b23fb9f2b70b0196e96796ab268ee142e57c41588afd560ca24851e86d1ccf5","sha512":"a7d992432668fd4b845916d5034013522e6e8950510c2f6be76015152b9e035554e1bd21f5a30a501a910c12fb8126e382f84361fe92ce44a873f4cbdf856fdd","ssdeep":"","tlshash":"7f41578f7460b23201cd15f9d50bc18ba37a6a5a7a9795f4f08eaff05d15c358022ef8","first_seen":"2025-08-09T12:58:29.090572Z","last_seen":"2026-02-17T14:14:11.454478Z","times_seen":51,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/assets/index-Dh_49yWa.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:58.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/assets/index-Dh_49yWa.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 31022\r\ndate: Sat, 09 Aug 2025 12:57:58 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":732537,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65123)","md5":"3c9c8ab496ab2cbb4d598e3fcd664945","sha1":"163094b99b17a49de3c5da7032d9f1c786c2a6c6","sha256":"e11a6472a49aa5b9db0b4b143ce5f6816f7515e055bb57733f1118677804f66e","sha512":"abdd25bc7c82c5cd1291c035e584e1c424b818b3fe4a0815b070d31cef846117451a012fa3ec9b84c3321abcd4500bbeeb4278e096a1efa914baf4296cf44022","ssdeep":"3072:1ozpzlXl7DD/DUBkrXrO3r2hurs7zCDDDsDD7PkH2freQrlhEKEmgHA:10pxW2d","tlshash":"98f4fe285a6bf744e858c0dbfa373d84c59de18aa44725d20f715bb34ba2753ea9cc03","first_seen":"2025-08-09T12:58:29.119512Z","last_seen":"2025-08-31T18:20:20.578971Z","times_seen":30,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webmail-oxcs.register.com/appsuite/io.ox/core/boot/form.js","fqdn":"webmail-oxcs.register.com","domain":"register.com","tld":"com"},"ip":{"addr":"74.208.176.40","port":443,"asn":8560,"as":"IONOS SE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webmail-oxcs.register.com/appsuite/?user_domain=mail.emlgroup.com","date":"2025-08-09T12:57:59.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.register.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 16 Sep 2024 00:00:00 GMT","end":"Tue, 16 Sep 2025 23:59:59 GMT"},"fingerprint":{"sha1":"41:1F:85:AD:A0:7B:84:C8:B2:FE:7C:F4:B4:05:10:2B:D0:77:86:9D","sha256":"42:CF:0B:E5:7E:C8:59:79:CC:ED:A6:77:86:D0:69:FF:2E:64:F0:91:4E:14:72:42:BA:CF:53:5F:9C:41:1B:57"}}},"request":{"raw":"GET /appsuite/io.ox/core/boot/form.js HTTP/1.1\r\nHost: webmail-oxcs.register.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nx-dns-prefetch-control: off\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: *\r\nversion: 1681226576\r\nlatest-version: 1681226576\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: br\r\ncontent-length: 4237\r\ndate: Sat, 09 Aug 2025 12:57:59 GMT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload;\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13221,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5928)","md5":"91a1838358eaa2f905992d832b692151","sha1":"0915e297479d0864794608400d733331aad8da8a","sha256":"9a705a3f2e356330a472be20b21d7de18871b305c450122f59fff905e74b9819","sha512":"975586c4c3c3bfc8768c02e45b403a8075c801dfb03ac4b65b07c9433d95fa7fd57d2a9c5ff5c9569a24a0ac725351d48ecb1e908c9d0feb8d3540160fa87206","ssdeep":"384:H4lfFZAfdMP9SrxPwXJGROLZCC4kmcpMAin0KSYi7G2m+mXm0GGeiELU62bYwp:H4l9ZjFSr9wprinyGHGGei0Uvt","tlshash":"eb52c69da43c2c1a250244e4b84258243b3a9c361582ff7abb7ec3796ffd9d8414b94f","first_seen":"2025-08-09T12:58:29.100593Z","last_seen":"2025-08-31T18:20:20.6622Z","times_seen":30,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}