{"report_id":"9b8c9176-331f-4f8b-8960-9d8421e3347e","version":6,"status":"done","tags":["docusign","phishing"],"date":"2026-05-03T13:40:42Z","url":{"schema":"http","addr":"www.chadwondermagic.com/SHalom-questMarch-3f8d9c2b_6e4a_12df_9b7c_8a3f2e1d0c5b.html","fqdn":"www.chadwondermagic.com","domain":"chadwondermagic.com","tld":"com"},"ip":{"addr":"50.6.224.231","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.chadwondermagic.com/SHalom-questMarch-3f8d9c2b_6e4a_12df_9b7c_8a3f2e1d0c5b.html","fqdn":"www.chadwondermagic.com","domain":"chadwondermagic.com","tld":"com"},"title":"DocuSign","dom":{"size":7300,"mime_type":"text/html; charset=utf-8","magic":"C++ source, Unicode text, UTF-8 text","md5":"b7062ed3368efa6ba4e9af63578903d4","sha1":"08e6156d700e48baf5417c999f8232540b058e59","sha256":"48448afdbc5c51d4aad4ed815fd8b91ecd2c810d3908fa820c504b16383aade3","sha512":"28a14da049e579614634e76a4683036d634672044cdc3a61e90512184ee05ace99676e9995e9687cb2c10842a602b7d3c69fa09cbec49f1ce17f70ae14b88b9d","ssdeep":"192:BrKvdIGRSxyqX65GthUKyGH9v7khPo6zGJevVIKo15svOtFwXJ0drLZ7pfvgGj:BrKvdITpiSZvsvOtFdrLZl","tlshash":"13e1a64639e1144522c3c1a17fb3d7442332e54bb449ca79be6d5348cf88b59a6b3bf8","dom_hash":"domhash6868ad01da888eed7b85eb97a9600b90","first_seen":"2026-03-14T11:55:40.108887Z","last_seen":"2026-05-03T13:40:46.114967Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.chadwondermagic.com/SHalom-questMarch-3f8d9c2b_6e4a_12df_9b7c_8a3f2e1d0c5b.html","fqdn":"www.chadwondermagic.com","domain":"chadwondermagic.com","tld":"com"},"ip":{"addr":"50.6.224.231","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-07T13:40:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-03","alert":"Phishing Block","trigger":"www.chadwondermagic.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"www.chadwondermagic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"www.chadwondermagic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"www.chadwondermagic.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]},"summary":[{"fqdn":"www.chadwondermagic.com","ip":{"addr":"50.6.224.231","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2011-08-05","domain_rank":0,"first_seen":"2026-04-16T23:56:10.932233Z","last_seen":"2026-04-16T23:56:10.932233Z","alert_count":5,"request_count":1,"received_data":7478,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"crypto-js:4.1.1","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"images.ctfassets.net","ip":{"addr":"54.240.174.59","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-28","domain_rank":23334,"first_seen":"2017-09-20T16:27:05Z","last_seen":"2026-04-30T10:03:14.822161Z","alert_count":0,"request_count":1,"received_data":11997,"sent_data":544,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-26T22:34:03.62582Z","alert_count":0,"request_count":1,"received_data":49332,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"meta-q.cdn.bubble.io","ip":{"addr":"104.17.123.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-01-05","domain_rank":3683358,"first_seen":"2023-10-29T20:57:31Z","last_seen":"2026-04-26T03:27:20.593911Z","alert_count":0,"request_count":1,"received_data":23422,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.chadwondermagic.com/SHalom-questMarch-3f8d9c2b_6e4a_12df_9b7c_8a3f2e1d0c5b.html","fqdn":"www.chadwondermagic.com","domain":"chadwondermagic.com","tld":"com"},"ip":{"addr":"50.6.224.231","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd41eef61049a48d7fee483ccee16e4e","sha1":"63234f8e6d31680c90179052dbd9b81142128333","sha256":"126db06bf5c0026d37ba88183e58c0cee5749babfc1bed3c73457a062ff6dd30","sha512":"31dbf15ec908e4a77cfa29495fd4c08dc76e77f914da97a312826b87f91a271763a234fdb99c21f08db532e771e38f90394c2bdf0ebfb837e66f79247e60c651","ssdeep":"","tlshash":"9e51f2853cf2646406d394a31fb7e2046232b54b3888ca59bb2e53094f44f5577b3bf4","size":3136,"data":"","first_seen":"2026-03-14T11:55:40.116991Z","last_seen":"2026-05-03T13:40:46.123597Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","size":48316,"data":"","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-08-10T19:40:49.364054Z","times_seen":153648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.chadwondermagic.com/SHalom-questMarch-3f8d9c2b_6e4a_12df_9b7c_8a3f2e1d0c5b.html","fqdn":"www.chadwondermagic.com","domain":"chadwondermagic.com","tld":"com"},"ip":{"addr":"50.6.224.231","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-03T13:40:20.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.chadwondermagic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 20:12:05 GMT","end":"Tue, 07 Jul 2026 20:12:04 GMT"},"fingerprint":{"sha1":"EA:15:51:17:32:74:38:D5:62:15:D5:00:45:3C:A2:08:A5:4B:94:7E","sha256":"CB:E4:1E:46:04:A4:F5:F5:AB:EF:C2:D4:CF:2A:97:EC:A7:B7:EE:EB:12:DE:44:2D:95:6E:23:06:B0:24:C7:89"}}},"request":{"raw":"GET /SHalom-questMarch-3f8d9c2b_6e4a_12df_9b7c_8a3f2e1d0c5b.html HTTP/1.1\r\nHost: www.chadwondermagic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 13 Mar 2026 16:44:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7273\r\ncontent-type: text/html\r\ndate: Sun, 03 May 2026 13:40:20 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]},{"name":"crypto-js:4.1.1","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":7273,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"344e200a0f02efb4519a5b0d780a7592","sha1":"8720fb8ac0c25cb2c119efed1f55a08a9abbc8cd","sha256":"07eca02251d1cac7b0444f6f460aa1c60a5ba9c9301ce84fcf4964996d2e6131","sha512":"8c74abc2ded495609d09f148385298dfff5ce371f1d12aa09e76ec30161a7b77f2a04e78d3799fc88ac1dc572db6f2bd3983d0c6bf2f7f09cc1235142329a552","ssdeep":"192:vrKvdIGRSxyqX65GthUKyGH9v7khPo6zGJev8PR1CLvOtFwXJ0drLZ7pfvgS:vrKvdITpi4pYLvOtFdrLZz","tlshash":"e6e1958629e1144622c3c1a17fb3d3443332e54bb449ca69be6d5348cf89b51a6b3be8","first_seen":"2026-03-14T11:55:40.113142Z","last_seen":"2026-05-03T13:40:46.117443Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1287,"timings":{"blocked":595,"dns":394,"connect":97,"send":0,"wait":97,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-03","alert":"Phishing Block","trigger":"www.chadwondermagic.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"www.chadwondermagic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"www.chadwondermagic.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"www.chadwondermagic.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - DocuSign","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with DocuSign phishing","tags":["docusign","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"images.ctfassets.net/3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"54.240.174.59","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.chadwondermagic.com/SHalom-questMarch-3f8d9c2b_6e4a_12df_9b7c_8a3f2e1d0c5b.html","date":"2026-05-03T13:40:21.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.chadwondermagic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 11460\r\nlast-modified: Mon, 10 Jun 2024 21:10:48 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Sun, 03 May 2026 05:38:13 GMT\r\ncache-control: max-age=31536000\r\netag: \"a74f925f8c71704166ffa3433e9b96d5\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 1c0UowhB5zV-imjDypKZxsHEfvp-ySaVgE-dYDfSOZJSzS1qdx8GMw==\r\nage: 28929\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11460,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1107 x 391, 8-bit/color RGBA, non-interlaced","md5":"a74f925f8c71704166ffa3433e9b96d5","sha1":"e621c220c2f75d184dd3202ce6df1e586bdc3aa5","sha256":"326b79b9d1123740137a2eadd44ed4db857d8a7928f095a385fa1593526471bf","sha512":"8b75b9b327371180546e62169a7d589c671423edd606937bb4b660aaaeaeb93819ad9505a6522af0bf86c772203986bef89a85cf3bfde9c4338e1afc4e2711cc","ssdeep":"192:3S7kxV4aS6F4CzlcIGCVTuHMiCXyaOYpukk9dlfFHXvdIdTiWwB1GNHe3333333r:i7kxmAGCmCBYD5F35H1GRe","tlshash":"9b32496eef09cfa4a81a6d2077546b15fb3a97c85643d06349a16eb54f0f8338a36384","first_seen":"2025-01-14T12:40:44.080764Z","last_seen":"2026-08-05T19:46:20.82574Z","times_seen":478,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":72,"dns":67,"connect":1,"send":0,"wait":24,"receive":1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.chadwondermagic.com/SHalom-questMarch-3f8d9c2b_6e4a_12df_9b7c_8a3f2e1d0c5b.html","date":"2026-05-03T13:40:21.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.chadwondermagic.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:40:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 13972\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"61182885-3694\"\r\nlast-modified: Sat, 14 Aug 2021 20:33:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2185954\r\nexpires: Fri, 23 Apr 2027 13:40:21 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w67Yoz%2FrlULgySDNPxTz44R1Sd2eYTIHdnMX8BCzEavYqaP3LXsGWpdi8D0WiHEvK4Y08P7Z%2BOiW7A%2FwdRAFiTyHQu7e%2FNuCfLcVJz4WYZBBTTTGduFvJPNhe53qEA1s4thCC22r\"}]}\r\ncf-ray: 9f5fad50dd4cb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48316,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48316), with no line terminators","md5":"2ca03ad87885ab983541092b87adb299","sha1":"1a17f60bf776a8c468a185c1e8e985c41a50dc27","sha256":"8e3b0117f4df4be452c0b6af5b8f0a0acf9d4ade23d08d55d7e312af22077762","sha512":"13c412bd66747822c6938926de1c52b0d98659b2ed48249471ec0340f416645ea9114f06953f1ae5f177db03a5d62f1fb5d321b2c4eb17f3a1c865b0a274dc5c","ssdeep":"768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS","tlshash":"19231ac5a19c605152a774c40d7f704b7463352a070d8aacf668e9eeecfcaea9039d7c","first_seen":"2023-03-07T01:31:53Z","last_seen":"2026-08-10T19:40:49.364054Z","times_seen":153648,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meta-q.cdn.bubble.io/f1718227932057x822365466237625200/DOCU-60cafc67.png","fqdn":"meta-q.cdn.bubble.io","domain":"meta-q.cdn.bubble.io","tld":"cdn.bubble.io"},"ip":{"addr":"104.17.123.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.chadwondermagic.com/SHalom-questMarch-3f8d9c2b_6e4a_12df_9b7c_8a3f2e1d0c5b.html","date":"2026-05-03T13:40:21.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bubble.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 31 Mar 2026 02:45:40 GMT","end":"Mon, 29 Jun 2026 03:45:37 GMT"},"fingerprint":{"sha1":"18:85:D9:CF:46:49:2E:17:22:5E:D8:56:89:E8:D5:D6:66:DC:7D:CB","sha256":"14:5D:D9:6D:62:ED:56:71:08:92:E4:93:93:CB:CE:02:29:5C:37:49:FA:6B:45:E7:58:5A:D4:04:0F:AF:3F:17"}}},"request":{"raw":"GET /f1718227932057x822365466237625200/DOCU-60cafc67.png HTTP/1.1\r\nHost: meta-q.cdn.bubble.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.chadwondermagic.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 13:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 22658\r\nserver: cloudflare\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=33006\r\nlast-modified: Wed, 12 Jun 2024 21:32:13 GMT\r\ncache-control: public,max-age=86400\r\netag: \"282ba85a1c65bfadc21a004e2a4a9ad5\"\r\nx-amz-id-2: ceXUydcp6EAs/OZblvKkETJpNdWi0JeGYg9lQidHUJLcNiC1OGrUQzjPkrOaNNvxFsuqsOXZTSU=\r\nx-amz-meta-app-version: live\r\nx-amz-meta-appname: meta\r\nx-amz-request-id: PYXAYR22FQQDKA78\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: VJwr9ehspq7Y4Hruul9084tFCPC0kb1W\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000\r\ncf-ray: 9f5fad51cbb9dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1547 x 1549, 8-bit/color RGBA, non-interlaced","md5":"46806c0a76d512c9f288cfc281014a25","sha1":"415f8375fcd54b42ce1eaf595246176129a10623","sha256":"6e94e824fa297ec921f1c19ac18d1fc91a51699af955925b4514a40b6ccf2599","sha512":"5a4970be36ead808b4f1f1bfe20f8b5ed28cdf5236adab14d5d21a1e8258ce8ce7b8ddbcb01c53d952d39c4821dd2e84cf0a2f5b90452a783d0ca026ffdea946","ssdeep":"384:ZJ6fU/QK65OOF/pGgMRPJz6mF8wPEUSZJZZo1k:ZJLQ3DFyZ787USjo1k","tlshash":"b6a2b4aadb164ecbf6746074cb7e1f023bb535ce0b98b71463ba557a7e0bc3014a0158","first_seen":"2025-01-14T19:17:35.038341Z","last_seen":"2026-05-03T13:40:46.122423Z","times_seen":226,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":21,"connect":1,"send":0,"wait":376,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}