{"report_id":"8634a235-904b-4e6d-bf85-5dbcf81243e4","version":6,"status":"done","tags":[],"date":"2026-03-25T15:51:27Z","url":{"schema":"http","addr":"rh.cloud-dirve.com/i/a2bc40f839c234b3e97a77cdcacad8d05","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"title":"Microsoft","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rh.cloud-dirve.com/i/a2bc40f839c234b3e97a77cdcacad8d05","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T15:51:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rh.cloud-dirve.com","ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2023-07-07","domain_rank":0,"first_seen":"2026-03-23T15:35:45.741442Z","last_seen":"2026-03-23T15:35:45.741442Z","alert_count":14,"request_count":14,"received_data":688928,"sent_data":7507,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"google.com","ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1,"first_seen":"2013-10-02T17:25:49Z","last_seen":"2026-03-23T12:46:16.209031Z","alert_count":0,"request_count":3,"received_data":99536,"sent_data":1860,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-22T22:42:38.000244Z","alert_count":0,"request_count":5,"received_data":2702749,"sent_data":2401,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1070,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8538718ba7ef910d11638d1a3c8f9330","sha1":"c70fee6b0957002934dd48f553d9cc7dd14e3fa3","sha256":"f37453fcdc4bd8d53e4f3aae68672cfa78e41777487ae684e3f805e6a8906eed","sha512":"920c145d211d48931af49b951dff07d2421049418c71aec6064cb1ff8d875a13da91848409c6c363cec08a77f36c273d128730fb4cf4448260caa24f1dd9dc9e","ssdeep":"","tlshash":"cca00255dd557490e476e5e5b4c79224d351a4402bc74d3020104d5c6a6a5455153f8b","size":64,"data":"","first_seen":"2026-03-19T07:58:56.374022Z","last_seen":"2026-03-29T06:58:36.148719Z","times_seen":6894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","size":870949,"data":"","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"670b2d90955d69455451b12ed7cb870e","sha1":"b61610eb83574a17acf7e67ca30fdbd1157562cb","sha256":"f8a0289db692b5e53d2d21586150f80cbdbe3d1d953e76d52338cb055f1efd21","sha512":"d99e24d296147c940a616828ec557503d09477d64b1be549531a2fc106a599adf10aee7ff5ea61472f134ab4cd98b59ca0c277486ee6319697e5099148b9b638","ssdeep":"384:0h/aiBk7oegujWQurL2q+UUy1gPb+Gnae8J06Jq7T647dY/SAsW:idBbwW1HV+KgDHaex6sW","tlshash":"c7c2b6dcf671b0b9c1a3b1f4996b1109f3fa2851e4086838f154d5e42e71d9e812bfaa","size":27108,"data":"","first_seen":"2026-03-25T15:51:31.955869Z","last_seen":"2026-03-26T02:37:05.65494Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/jqueryui/jquery-ui.min.js?tn=261214474892","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4baecb73b7a75044853d7f4d363cb49","sha1":"cee14f8598c3c7f75ed141896f976fe94ed286a0","sha256":"9d9b75e6bf99296f7797ed12f73137f52966dbb02180ff054c6c01680c7bdb1d","sha512":"b5e6510052414b90c694c0a01835a7b49c73801757bc12f0afa7bb96808fc63e474a38cc7c28adcf3a4a43d145be9dccf0a1923a405777fe3d2fd06474583229","ssdeep":"3072:nDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:TNdIVWjNS9cdzAV","tlshash":"c344f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255089,"data":"","first_seen":"2023-03-11T15:29:49Z","last_seen":"2026-04-09T08:56:10.467202Z","times_seen":1546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/jquery/jquery.min.js?tn=261214474892","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-04-09T07:42:22.538036Z","times_seen":17491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/bootstrap/js/bootstrap.min.js?tn=261214474892","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","size":39685,"data":"","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-04-09T08:56:10.466677Z","times_seen":1809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/js/recaptcha.js","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c84b2ef5c7f7bc0d24bebaa2b2aa19a","sha1":"203d2dc676fc1cb34d3a2083b0d26929d0dc7d3c","sha256":"561208968098ef019f6b94a63a516fba9c22af0772a1656ed9afdd56911521d9","sha512":"09637e5c4ff7a514794517a51ebd487f32680e1c002099c627271a962610503643236381dba92bf4eae500fa60b67a9734a0801af35a5c35e4264c3160652b74","ssdeep":"","tlshash":"ef41612f227112b00c337af5cb0fe592f749422ba12086053c6edb804f324ad97d2ee9","size":2125,"data":"","first_seen":"2024-10-17T16:36:49.835842Z","last_seen":"2026-04-09T08:56:10.458544Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48bc84334ec80725fb0f1643d16a0b81","sha1":"2499468b69fddba868ce27c6b612814073be76aa","sha256":"9f2410bfc108e649a935c80f88219cdac2bb522638f5a62e23e50479a427c072","sha512":"103398de71fecdcb236c3844579e56946849d260cf15acf1c70acc7194abb27a4fd20fa418760707250c52cef708203902b2bee2992c692c7607bd49b7a90a4c","ssdeep":"","tlshash":"62113eb22a06b0344b7209e1d2ffca75e852741cb15888dce905cac42ea9ccbce04681","size":1006,"data":"","first_seen":"2026-03-17T23:58:29.247575Z","last_seen":"2026-03-25T15:51:31.941227Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"887dd63e845d0327e7a2f35e91fbb668","sha1":"0f0f52ff52739b42f84131d457f60e3e49afd5d3","sha256":"cce323ee4781811713e5cb29c3e99fb8635d86668ca6607e5d88f7fcb157b431","sha512":"88b50e22941c74edeed185bd3187d7dbe834a2582b857422ba2147921ae06dde2b046acd717896c02943c7b81ffdc083a265c30a6221451a31e9f0b7e123a3c5","ssdeep":"","tlshash":"3fc0922b61baa801433710a9bbab68142f1a78578203aa90390dea891f593a5455d59c","size":154,"data":"","first_seen":"2023-03-07T18:51:15Z","last_seen":"2026-04-09T08:56:10.473164Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"31507e190f383a3f27839016a049b50b","sha1":"056f9a0822a847b4735ffb6fd89b45f8a10e26c6","sha256":"70ffb4953af216d4bf886c46225356e8f743b9d273c97ee3b3d5867b4ca1507b","sha512":"669587f8bd4426177a31bc247eebd00a5bc9b8d0b6d895a3fb91dc808f4949c71d6e7037d31cecd521dfa43842692f2bdb87f16d8a67c52b780cb23985fe204b","ssdeep":"","tlshash":"3fb0223b0832800a23cbf3e82f8c0c20a020302bbaa0b0cb3c0c0320cfc380820c0b88","size":94,"data":"","first_seen":"2025-05-23T14:13:30.294128Z","last_seen":"2026-04-09T08:56:10.473714Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bd0965a77446c4f7b75162448b0993e","sha1":"26eb25a62dcd6a427f52d966d9c8d034837efccb","sha256":"9197a5c1dd4387b26c3addf243669a22d9d4c2886e7d0d847a73aa6912b94230","sha512":"df9a5a303a4ab2f342ea86eb4c14812d0bcb7bffd060c49cd64f274b1a3f78d9644439e32f73570cc81a562d6050250a72851b8ed4b89e4ca34a606fb8ec996d","ssdeep":"","tlshash":"5dc0922b0c1309a06ab7482a4727b6448a289e334200e8a8fa6c05689f419002a98723","size":167,"data":"","first_seen":"2024-12-09T11:10:50.445878Z","last_seen":"2026-04-09T08:56:10.474737Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d140d9278a201b8ccea389fb5e43f99e","sha1":"38875a2ed5cedb9108cf89a00aa2a3c5cbae8977","sha256":"7ee16cffdeb91144eeb0f7120196ffd5be0899310c08bb3dba7ccf02e948b2ec","sha512":"2b59652c32623047973591ff2e0506bdf84406de2079906215d810ea3770401c270a893362c370b3da580a471f8071c3ff2d670e3ba46d139e830f0931f33bba","ssdeep":"","tlshash":"dfa002f3193584218e6285508943fa98e593611dfd45c59870254fdea3e19d7c100990","size":65,"data":"","first_seen":"2023-03-10T15:14:43Z","last_seen":"2026-04-09T08:56:10.472254Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"aba89c72d6fcb7b6ba8ea0ba53a38a52","sha1":"4b3ff2f8fd788aa8671dc417b92eb74286e2b122","sha256":"f75031f3a2e6206040f0ab6c6158ce093ca84758f3960350fc01446c26a7201b","sha512":"a8e2f1eee98bd4627fc14f2fbaf818cae927f8fc1fa92c9da9d4c358bea39b2dc7ce9c9b285627eb7ae56e1ca3b53cf3436a95a7f2efeb0d5946c68e54196a82","ssdeep":"","tlshash":"7670000b2c08b000003232a0080f088a0232008000220e00000000802c3208a0802a0a","size":22,"data":"","first_seen":"2026-03-19T07:58:56.345449Z","last_seen":"2026-03-29T06:58:36.147946Z","times_seen":6894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/js/userInteraction.js","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff6837888c07861026b755b8340c433c","sha1":"38cf8bd4bf79981b9a242973977fbb3cb5ff5b18","sha256":"47f3edf6ffe21688cba4fcc764eebb816d07062d5c1a694aa231631ab4855204","sha512":"201537c5f38f0dd936ecc05fca4cd05cdaa5f2a8deab1ddc4f541f1f76f3ec39a97b4cdf9b922c2a46c636a03f270344f19515de4a5aa6fa9d42f58a9e012574","ssdeep":"","tlshash":"68411166126610710d7333a28f17e156e716826b0215860a7c3d87cc2f71834b765eff","size":2276,"data":"","first_seen":"2024-10-17T16:36:49.832778Z","last_seen":"2026-04-09T08:56:10.467776Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef6acdca095e833e644d5b74f75b7f9a","sha1":"6fb0caa3edf0e36792f8602c91e4c08569b6bea6","sha256":"96e47c4a1823308469b568e6b7309086a39e0c9cc8853fae5af800631d878425","sha512":"895df0edc1d276348b1004036859d09c4401d66fddc796900f8dc6484a8498c65a160a1998452f0e1504218411dda5cc7f8bc0131dd1bdc9adbd825858a9a2b2","ssdeep":"","tlshash":"d2215c6731b7053346fbb1bd0647cb84b471810b0045de147dac8f899f2acb68aa2749","size":1402,"data":"","first_seen":"2026-03-23T15:35:47.686555Z","last_seen":"2026-03-25T15:51:31.960673Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","size":870949,"data":"","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cba23adc03b0320e449eb54a801b430c","sha1":"1c4a2c523a5c787e00a6a56a46b3398046d67b7b","sha256":"b39a81c1b6b85b1a3e398478c648efb952ae69fa7371ce477891c4460dacdf37","sha512":"ab3a04055dfa4bfe1572469c590d993868ae5f4046e723b6901644e77b32830421c620da00016742a5a9af39d9194fde111becf3656cfc8f6263dcdad8631ec0","ssdeep":"1536:65Os2rJpbTex1YioCyMKHXk2xGTz/Kozb62EloqEd+D3:fcW5xMKU9P5fF+","tlshash":"9a73d027a50738dfef7ddb008be5a6aa133de196209244dd19bb18d1093add677380ec","size":77420,"data":"","first_seen":"2026-03-25T15:51:31.963506Z","last_seen":"2026-03-25T15:51:31.963506Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2b565d39eed367e11033d2fd5f6df9d5","sha1":"c7fb7308a72b01ab93572ccd991479dc9e5b9f9a","sha256":"f97d7fd6a7eac56930cf6f24e81dd70d50ff1251808d7036083af368414dfa21","sha512":"d99104978c384a62bb6284d3e6f2f22b688a8b8fecfec3f17825df9920a116fb70a7bc6b5b704f435c1cd93a100d3773710f6f8090ef259520863ceef3cd134e","ssdeep":"384:+h/KiBk7oegujWQurL2q+UUy1gPbqGnae8J06Jq7T647dY/SAsW:gtBbwW1HV+KgDjaex6sW","tlshash":"aca2c8dcf671f0b8c1a3b1f4597b1109f3fa2951a8086838f154d5e42e71d9e812bfaa","size":22045,"data":"","first_seen":"2026-03-19T07:58:56.333055Z","last_seen":"2026-03-29T06:58:36.165095Z","times_seen":6887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c7d43e246593b6a8974eef961791349e","sha1":"4678f5d93d2e192b97e864d759a39179c265f4b4","sha256":"f5e7d82dc192b6edf368a5801fba8cb56703dbc605a01da2d9f158884eb61765","sha512":"d1bcce46a00991731203c482421c9cd7527ebf123b025fbb16d51c02be67cd7fb9a220aacdc08956bc063f5c88e41001e0612775ce07de1d4d9228e6d984ce99","ssdeep":"","tlshash":"0d70000a2c08b000003232200acf028a02b2808000200300000880802c3208a0802a08","size":22,"data":"","first_seen":"2026-03-19T07:58:56.32782Z","last_seen":"2026-03-29T06:58:36.145402Z","times_seen":6889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/jqueryui/jquery-ui.min.css","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.min.css HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 7882\r\nContent-Type: text/css\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":32109,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29164), with CRLF line terminators","md5":"4ef4ec09fd03e96ac23fb3cb85c16746","sha1":"a1a208b1ef92c7e604ae53ea283492eeb045d1d7","sha256":"b0b53ea606e7397f37666242cd8d63d17186b3cc8513d49a9852bf4828a1fc46","sha512":"cc021c31550069f904fa63dcde06124cd77c74b61976f68c40756c80835ca51e06f3f7886fab886cef861eb7ff3b22a492cde7ea705206f0aa388967d3d9649d","ssdeep":"384:6CwiEtw1cR8lOXHc11evBMzymUh+4x6GcOzDBSc7nfZBhVi:plEtPXHcEBMznURx6GcOzDfBhA","tlshash":"dee25430a5c2242dfe33c23061e11ef4523bc146eda65fbda09af65953ea8e4c47b971","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-04-09T08:56:10.464642Z","times_seen":129,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/bootstrap/js/bootstrap.min.js?tn=261214474892","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/bootstrap/js/bootstrap.min.js?tn=261214474892 HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 10945\r\nContent-Type: application/x-javascript\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":39685,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (39553), with CRLF line terminators","md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-04-09T08:56:10.466677Z","times_seen":1809,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/jqueryui/jquery-ui.min.js?tn=261214474892","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.min.js?tn=261214474892 HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 67989\r\nContent-Type: application/x-javascript\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":255089,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64394), with CRLF line terminators","md5":"b4baecb73b7a75044853d7f4d363cb49","sha1":"cee14f8598c3c7f75ed141896f976fe94ed286a0","sha256":"9d9b75e6bf99296f7797ed12f73137f52966dbb02180ff054c6c01680c7bdb1d","sha512":"b5e6510052414b90c694c0a01835a7b49c73801757bc12f0afa7bb96808fc63e474a38cc7c28adcf3a4a43d145be9dccf0a1923a405777fe3d2fd06474583229","ssdeep":"3072:nDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:TNdIVWjNS9cdzAV","tlshash":"c344f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-11T15:29:49Z","last_seen":"2026-04-09T08:56:10.467202Z","times_seen":1546,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/js/userInteraction.js","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/js/userInteraction.js HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1181\r\nContent-Type: application/x-javascript\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"dea712c0d1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":2276,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ff6837888c07861026b755b8340c433c","sha1":"38cf8bd4bf79981b9a242973977fbb3cb5ff5b18","sha256":"47f3edf6ffe21688cba4fcc764eebb816d07062d5c1a694aa231631ab4855204","sha512":"201537c5f38f0dd936ecc05fca4cd05cdaa5f2a8deab1ddc4f541f1f76f3ec39a97b4cdf9b922c2a46c636a03f270344f19515de4a5aa6fa9d42f58a9e012574","ssdeep":"","tlshash":"68411166126610710d7333a28f17e156e716826b0215860a7c3d87cc2f71834b765eff","first_seen":"2024-10-17T16:36:49.832778Z","last_seen":"2026-04-09T08:56:10.467776Z","times_seen":68,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"F8:90:A0:F9:74:3F:20:44:F3:3A:FB:A7:89:DC:37:89:3C:83:4D:03","sha256":"BE:A4:BF:EB:A3:08:0B:22:38:7C:32:95:9D:25:3C:CB:F8:42:AD:54:32:60:4C:1D:43:C5:81:2C:4E:AF:DE:AE"}}},"request":{"raw":"GET /recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 25 Mar 2026 15:51:04 GMT\r\ndate: Wed, 25 Mar 2026 15:51:04 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1006,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1006), with no line terminators","md5":"48bc84334ec80725fb0f1643d16a0b81","sha1":"2499468b69fddba868ce27c6b612814073be76aa","sha256":"9f2410bfc108e649a935c80f88219cdac2bb522638f5a62e23e50479a427c072","sha512":"103398de71fecdcb236c3844579e56946849d260cf15acf1c70acc7194abb27a4fd20fa418760707250c52cef708203902b2bee2992c692c7607bd49b7a90a4c","ssdeep":"","tlshash":"62113eb22a06b0344b7209e1d2ffca75e852741cb15888dce905cac42ea9ccbce04681","first_seen":"2026-03-17T23:58:29.247575Z","last_seen":"2026-03-25T15:51:31.941227Z","times_seen":5,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":178,"dns":11,"connect":21,"send":0,"wait":36,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","date":"2026-03-25T15:51:05.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 11:03:25 GMT\r\nexpires: Thu, 25 Mar 2027 11:03:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 17260\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83366,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f85ea9249eb9545e59913387fc758490","sha1":"634c279c5a8f4484b2ed12eb314b72d1b9a650c4","sha256":"f185130589517d6b00eefbe9144c50320297d37c73792a012cf2d7faebe233e7","sha512":"e02abecb04f2bf6cb2ae4238f7aa36293f6ee36690f45d2084202392bfa5a70f7bcc7307dfce0d3f9d22ef65da523452f8646e267e695c052dc389e33865ef9f","ssdeep":"1536:K7Rpgh9C9ToL9gTNfWNfK4RxvDldthXwW5l1Dx7:K7ArC9ULiTYNC4RxLX1","tlshash":"29838e7338913a1afc2b8b616196bdfdf21cc923e5515bfaa5497a20c3cb0978213747","first_seen":"2026-03-12T21:14:04.643151Z","last_seen":"2026-03-27T18:21:46.942434Z","times_seen":10797,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","date":"2026-03-25T15:51:05.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 10:42:58 GMT\r\nexpires: Thu, 25 Mar 2027 10:42:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 18487\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/jqueryui/jquery-ui.theme.min.css","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.theme.min.css HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2328\r\nContent-Type: text/css\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":13880,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13746), with CRLF line terminators","md5":"74fb9452a91ef09555eb92aa59516997","sha1":"b74731af5b28a90cca86fa1097c75d8f8419ab87","sha256":"11e1cf2b2ee76191e1556d414a6eebb8e9a357b5930ebbc06858162174b1683d","sha512":"0107fde1e003f418b9da20d5dc38ae6d6397e70c239406343ed995470c934e032c833a4b01fe6e776c699646d64c3d2d376c2a21d9b1180cd4b3d41764b6f318","ssdeep":"192:LwGIzlzymUh+4pQ8l6GcIPRBGWLTxBm9v5B6xBpYPzFhCNBjVs5y6sybYw9QoFYG:L7MzymUh+4x6GcOzDBSc7nfZBhVi","tlshash":"8652e850a4c2212dff13d53161e11ef0513b9281eda61f7c64aafbad62d28f8c4779b2","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-04-09T08:56:10.471401Z","times_seen":118,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":94,"dns":1,"connect":33,"send":0,"wait":32,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/js/recaptcha.js","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/js/recaptcha.js HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1062\r\nContent-Type: application/x-javascript\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"dea712c0d1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2c84b2ef5c7f7bc0d24bebaa2b2aa19a","sha1":"203d2dc676fc1cb34d3a2083b0d26929d0dc7d3c","sha256":"561208968098ef019f6b94a63a516fba9c22af0772a1656ed9afdd56911521d9","sha512":"09637e5c4ff7a514794517a51ebd487f32680e1c002099c627271a962610503643236381dba92bf4eae500fa60b67a9734a0801af35a5c35e4264c3160652b74","ssdeep":"","tlshash":"ef41612f227112b00c337af5cb0fe592f749422ba12086053c6edb804f324ad97d2ee9","first_seen":"2024-10-17T16:36:49.835842Z","last_seen":"2026-04-09T08:56:10.458544Z","times_seen":50,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","date":"2026-03-25T15:51:05.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 18:54:18 GMT\r\nexpires: Thu, 18 Mar 2027 18:54:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 593807\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-09T09:07:48.091129Z","times_seen":724806,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":37,"dns":2,"connect":7,"send":0,"wait":9,"receive":10,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","date":"2026-03-25T15:51:05.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 18:54:18 GMT\r\nexpires: Thu, 18 Mar 2027 18:54:18 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 593807\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-09T09:07:48.091129Z","times_seen":724806,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/i/a2bc40f839c234b3e97a77cdcacad8d05","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T15:51:03.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /i/a2bc40f839c234b3e97a77cdcacad8d05 HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 346\r\nContent-Type: text/html; charset=utf-8\r\nDate: Wed, 25 Mar 2026 15:51:03 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"930f6ecfbeee2c7059603ae39fab4a07","sha1":"58eee1b78f5043bc415a2ce01bf4af7466eda233","sha256":"4daba7da065bd6fa09a7d27fb0649262596c328334d088c13044c9ffb39c37ec","sha512":"34fdab39a12bf6efa3fa61c910e1c5defd966c091dfe96084296c84a4b9b5df819461c797d26ad66b04aea28b4b57132e8c901d39e3b363a14cbda442e4fef8f","ssdeep":"","tlshash":"d5d02bee2c408c4065b0d23125f16268980322868b41555a70c875135b7577b4f475eb","first_seen":"2026-03-25T15:51:31.946251Z","last_seen":"2026-03-25T15:51:31.946251Z","times_seen":1,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":156,"dns":90,"connect":28,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/jqueryui/jquery-ui.structure.min.css","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/jqueryui/jquery-ui.structure.min.css HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 4962\r\nContent-Type: text/css\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":15552,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15418), with CRLF line terminators","md5":"909ce025471e11a770dfeb266d02384a","sha1":"b915957fc131db3ec221e130af9b2023d039d458","sha256":"4e2ec0490ffa766a812249114b99f7b2b578c750619f3175d948be265f07af11","sha512":"82888f071c8f992d6e33f2bf3e7e8a19bd1cedd4d7f9923151d02947cac846e61b061dbe855706d12ead3dac762e16d4429ff675c5192c9af86239acd58fe77d","ssdeep":"192:Ly4ncR8lOG1bRCNPbtqxlhIuxrjv572hk/k52bZuQEjQDMsrsUR9P:L1cR8lOXHc11evs","tlshash":"c6629730e6572d3ebc33c25064a19efea319c167ebb291eff146910287ad49146bf858","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-04-09T08:56:10.470398Z","times_seen":120,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":95,"dns":1,"connect":33,"send":0,"wait":34,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/css/rp_bubbles.css","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/css/rp_bubbles.css HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2399\r\nContent-Type: text/css\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12677,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"e9b944b679bc0716e7c506ac6684ba28","sha1":"b7d753886ac0e8aa16f792ab354025f60376516e","sha256":"4bc5a823bc0d699486b8da7c703f02935d4e050fdf7e139ca77c6e744f9899f6","sha512":"50362fa9c95e04b2e32eb154429ca1d30e1777120d47d8f64f0b177bf47739bb53c7369eac6cf7888f3ad94bd885ec8eb8980b90214e56c181f507da2fdeddcf","ssdeep":"192:yxN1jBGISrhFui5bAmhfQYquf2ssl1eFSm5TvzSFUMGTyjsDt5E2YeFdpOHej:yxHjBcFFAmhJYet","tlshash":"8f42f1b8e50122095317dac7abdc4aede6945013be0b3694b5fc143fabcabbc0e614c5","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-04-09T08:56:10.465173Z","times_seen":118,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":92,"dns":0,"connect":32,"send":0,"wait":30,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/media/a/tgmedia_61523fa9a9264ca5bcd594f3cb1e72a7/microsoftlogowhite.jpg","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /media/a/tgmedia_61523fa9a9264ca5bcd594f3cb1e72a7/microsoftlogowhite.jpg HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 10233\r\nContent-Type: image/jpeg\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: public, max-age=3280\r\nExpires: Wed, 25 Mar 2026 16:45:45 GMT\r\nLast-Modified: Wed, 25 Mar 2026 15:45:45 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 255x65, components 3","md5":"19dc551d754d20f404c228c20a9f36ba","sha1":"a345a40d6aec4e13668363fc1c5042cf71f9c6d4","sha256":"f5aca7fbfab7095806a89a440134ae7073fa2f450cc4db4e17b04192de31ca36","sha512":"47d62590fd87bf85877bd836e4420a680aa4fb336b6f3d31633700510c4562d45f9e260fd0252edea9a1d32574a6e98db75eba4bc13a4e2312cd59caee7c309f","ssdeep":"192:zFPG1OEL6CyEmQqSE2buKU6SBlm9L4yeKVrHqBnLuYa0Zf:zU1O3Em8buKDYOJiLk2","tlshash":"f8229e3db79ae57085861dbee2fc3c27d2c2b6821cf8bc27ae010e1ed5a8c60504746d","first_seen":"2026-03-23T15:35:47.663764Z","last_seen":"2026-03-25T15:51:31.94813Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","date":"2026-03-25T15:51:05.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"F8:90:A0:F9:74:3F:20:44:F3:3A:FB:A7:89:DC:37:89:3C:83:4D:03","sha256":"BE:A4:BF:EB:A3:08:0B:22:38:7C:32:95:9D:25:3C:CB:F8:42:AD:54:32:60:4C:1D:43:C5:81:2C:4E:AF:DE:AE"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Wed, 25 Mar 2026 15:51:05 GMT\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ba5f8ab036327a2d0db94fd411ca555d","sha1":"650f19f36ca742cdaf99b327250d2e1d894828aa","sha256":"1f924f494bd000c6d079ce85dbb1bb27c778eb98cccaacd0f43f3d6b5d9ca3b7","sha512":"ee72209926367e2b0b30df98885cb6a3ab91877a54a807fcfd43a6190d749480e34f54bf2b96293150e64f8ce8fbe2d874f1360169b6c2f246fbb618c2b1cf21","ssdeep":"","tlshash":"dbb012371e11c8280c100143c577a7b8e0014079ee9080f9a07c0fd411901b38001690","first_seen":"2026-03-12T21:14:04.610711Z","last_seen":"2026-03-27T18:21:46.943865Z","times_seen":10300,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/webworker.js?hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW","date":"2026-03-25T15:51:05.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 10:42:58 GMT\r\nexpires: Thu, 25 Mar 2027 10:42:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 18487\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/bootstrap/css/bootstrap.css","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/bootstrap/css/bootstrap.css HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 23025\r\nContent-Type: text/css\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173441,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"cb7bd9e2b45319f4e7c2e613b8f6c0e8","sha1":"6175c12bf84a28c6a281ab923752481b6fe58056","sha256":"2797160125a75dddc44d8cbee398bad6770dbfe2f57479ca65c3f4142e1a9df0","sha512":"dcdc72d350803257cfe7729215a4b3ac99ad9c6cdd04d466b570eea3cde3f5225d82ffba496ee7f171dc65650314fa95f2a4132840ec74c9cf060027295fc9fa","ssdeep":"768:yER2n1QySUVLqqkXZTMegYFomDquiMRNTHU44DMIMETn5VBKCkcuZGB2Vcx/cXiC:Wn1QyiLZGB2VKcXihoiL3yFITMK4fWS","tlshash":"0504769de60131c22633d768bba38d42ff062263c606c97abfed62544fb94545631f8e","first_seen":"2023-10-13T13:05:14Z","last_seen":"2026-04-09T08:56:10.469866Z","times_seen":359,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/css/rp_tooltips.css","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/css/rp_tooltips.css HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2514\r\nContent-Type: text/css\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":13532,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b2f2bce67a3c4ab9b0f17372f010918","sha1":"eb379f291a848680ddd5d3ecb4e59818f9a602e3","sha256":"9bddcf9a5fc7baf7e7bdfe849437591ee53dca4206b1b8af6a705ada50fbadba","sha512":"0c6ddfcdb4ee038c98c1eb9faa6af8df0d55bd5f74704f2ab51b20e6c107b8757be11640fd5753c4a955a64e451fff661357c2c61c769ed9b6209416bf9bcb27","ssdeep":"384:yxiQ952UOM7FEOBO57QNZhgfR6H9CWXkOX:s52UOM7FEOBO57QNZhgfR6H9CWXkOX","tlshash":"6152755ade1220825333d35cebf20754eb653023ca824479faec619ddfb8758aa51fc9","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-04-09T08:56:10.456671Z","times_seen":118,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":93,"dns":1,"connect":32,"send":0,"wait":30,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/common/jquery/jquery.min.js?tn=261214474892","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /common/jquery/jquery.min.js?tn=261214474892 HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 30987\r\nContent-Type: application/x-javascript\r\nDate: Wed, 25 Mar 2026 15:51:04 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":89503,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-04-09T07:42:22.538036Z","times_seen":17491,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":90,"dns":1,"connect":30,"send":0,"wait":31,"receive":27,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:04.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/\r\nOrigin: https://rh.cloud-dirve.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 370760\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 10:42:58 GMT\r\nexpires: Thu, 25 Mar 2027 10:42:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 09 Mar 2026 04:00:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 18487\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870949,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"e33d3fff53511a365c0af8a5fbccdcf9","sha1":"055a7d4cc0fdb08f16301c5b82e59b5f7c9d02bb","sha256":"c24c29289bd8cfbd1c11e5fcc63c925a266da16f4d0eff7ece9f4c0e7baea016","sha512":"cf6b9f3237b2618ac72d922be3ae323751fdbb4116837d94e60b96112b644657777c7d91fade414bcdd08816376f9542891fbe71df785c0ae61bfce46156710c","ssdeep":"12288:zbaHsMmJQlnr/7Itc3zuCmY3n2LWYJPkwNaAkalab:PaMMm2RktUzuBYG6HTAkalc","tlshash":"c9054bea744274ea6272b4f940bb1408a3bd95aed41c0c5eb199c4f12f7680d70b6fb7","first_seen":"2026-03-12T21:14:04.564301Z","last_seen":"2026-03-27T18:26:18.3083Z","times_seen":12906,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":95,"dns":1,"connect":21,"send":0,"wait":23,"receive":91,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.142.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","date":"2026-03-25T15:51:05.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"F8:90:A0:F9:74:3F:20:44:F3:3A:FB:A7:89:DC:37:89:3C:83:4D:03","sha256":"BE:A4:BF:EB:A3:08:0B:22:38:7C:32:95:9D:25:3C:CB:F8:42:AD:54:32:60:4C:1D:43:C5:81:2C:4E:AF:DE:AE"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 25 Mar 2026 15:51:05 GMT\r\ncontent-security-policy: script-src 'nonce--nsQsYUmuqMk9e6NSnjQMA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95826,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (47152)","md5":"0542e2e1fefedd1002c1779fa3f5567f","sha1":"6e09e643735a394c0573d45a5b2772059c419f56","sha256":"9c8f8dd68ef58d64c712e63a4c96020da964c34f4c9921c37326b86ce2971318","sha512":"29a3b2913ce7a95b7762559bfbe957d03db8e6b9ec2d0e7b4e693b36e3dd51dcc8fbedc272a8273a10cd0f89ea2e85291371d1886412481adff05fdcb329cc65","ssdeep":"1536:y+kLyG5Os2rJpbTex1YioCyMKHXk2xGTz/Kozb62EloqEd+De:y+kLCcW5xMKU9P5fF1","tlshash":"8093be2144073446ef6f8d9153dabf35f63ed151304280a92bfe5aa21dabcd762782ec","first_seen":"2026-03-25T15:51:31.952084Z","last_seen":"2026-03-25T15:51:31.952084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cHM6Ly9yaC5jbG91ZC1kaXJ2ZS5jb206NDQz\u0026hl=en\u0026v=qm3PSRIx10pekcnS9DjGnjPW\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=khcd1635wtsw","date":"2026-03-25T15:51:05.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/qm3PSRIx10pekcnS9DjGnjPW/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 05:17:42 GMT\r\nexpires: Mon, 30 Mar 2026 05:17:42 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 210803\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-04-09T09:07:48.256941Z","times_seen":548062,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rh.cloud-dirve.com/page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05","fqdn":"rh.cloud-dirve.com","domain":"cloud-dirve.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T15:51:03.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloud-dirve.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:27:24 GMT","end":"Thu, 11 Jun 2026 23:27:23 GMT"},"fingerprint":{"sha1":"A0:FE:B3:B2:01:61:2F:2C:0F:2A:90:65:4A:42:24:EB:90:B9:54:8E","sha256":"51:84:B8:2A:B7:A4:25:D5:50:48:A3:01:B4:7A:94:99:51:BF:3B:3F:9A:25:53:80:2C:B9:44:7D:B3:C8:1C:31"}}},"request":{"raw":"GET /page/5f0737db3ebb40eeaaf97ed0670f9300/a2bc40f839c234b3e97a77cdcacad8d05 HTTP/1.1\r\nHost: rh.cloud-dirve.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rh.cloud-dirve.com/i/a2bc40f839c234b3e97a77cdcacad8d05\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 3990\r\nContent-Type: text/html; charset=utf-8\r\nDate: Wed, 25 Mar 2026 15:51:03 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":10381,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"61bef3a1c392f3e363644f6a981be982","sha1":"cab322f7eec32397ec5f15b0af3afe46a3a63c72","sha256":"425603b50a5ad8753dc09d5958105d224bd60f7a8de30c688d64378d691cfdfe","sha512":"a606e2f45730006ab799b1259e56e4447c9bd61cf0870d9663a8f4e233e24ccfc3fc445f595feb6c3f41d158ebadd6a796c1d747e939c8a59752f69eff27197a","ssdeep":"192:5qqVv4gNnAOVyS840VgsBkq/9EBsvfdcxvgk9wiNyu:wusg8lkO4R","tlshash":"7b22966ed5420c430333d2a57bb1578dea6511078b01892d7eeca78a8fbb9e48d53f8c","first_seen":"2026-03-25T14:46:21.908125Z","last_seen":"2026-03-25T15:51:31.954474Z","times_seen":2,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"rh.cloud-dirve.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}