{"report_id":"a01962a9-574d-422b-8741-a3e2fd1ddb07","version":6,"status":"done","tags":[],"date":"2026-03-31T20:20:41Z","url":{"schema":"https","addr":"workdrive.zoho.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zoho.com","domain":"zoho.com","tld":"com"},"ip":{"addr":"136.143.189.177","port":0,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"title":"Chapman University-encrypted.pdf - Zoho WorkDrive","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"workdrive.zoho.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zoho.com","domain":"zoho.com","tld":"com"},"ip":{"addr":"136.143.189.177","port":0,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-05T20:20:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-31","alert":"Hunting_JS_WebAssembly","trigger":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/build/pdf.worker.min.mjs","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"static.zohocdn.com","ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"domain_registered":"2019-04-16","domain_rank":77506,"first_seen":"2019-11-06T12:49:13Z","last_seen":"2026-03-25T22:08:47.901235Z","alert_count":1,"request_count":26,"received_data":11759710,"sent_data":13698,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"workdrive.zoho.com","ip":{"addr":"136.143.189.177","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"domain_registered":"2004-01-16","domain_rank":591565,"first_seen":"2019-01-08T09:02:06Z","last_seen":"2026-03-27T16:11:44.887763Z","alert_count":0,"request_count":1,"received_data":90579,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"workdrive.zohoexternal.com","ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"domain_registered":"2019-06-18","domain_rank":687464,"first_seen":"2019-08-23T10:33:14Z","last_seen":"2026-03-24T07:28:13.923151Z","alert_count":0,"request_count":4,"received_data":107035,"sent_data":2939,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"files-accl.zohoexternal.com","ip":{"addr":"169.148.128.21","port":443,"asn":205111,"as":"ZOHO Corporation B.V","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-06-18","domain_rank":3246359,"first_seen":"2022-08-25T19:53:51Z","last_seen":"2026-03-23T06:37:38.319728Z","alert_count":0,"request_count":2,"received_data":72410,"sent_data":1317,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"previewengine-accl.zohoexternal.com","ip":{"addr":"169.148.128.14","port":443,"asn":205111,"as":"ZOHO Corporation B.V","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-06-18","domain_rank":2024534,"first_seen":"2020-03-25T08:03:14Z","last_seen":"2026-03-28T18:29:10.551252Z","alert_count":0,"request_count":1,"received_data":384,"sent_data":590,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"3ceb71f0fed67df5ac8d4c82f9ff5877","sha1":"7c45823fac831bff2e9948bc64488e4ef242e42d","sha256":"d1b26f36a1f409a381bfd88e2d105fcd4096d20417f269c7e11754b71084b469","sha512":"8baac7ffcc99bb5251caa4b29087a4d51391e4ad022984a38edd9c9570b31bae888620d9fe290f7a63736076e282f1806a71bff50504da74d7fea37b4ccab329","magic":"PDF document, version 1.7 (zip deflate encoded)","size":71360,"url":{"schema":"https","addr":"files-accl.zohoexternal.com/public/workdrive-external/previewdata/2ekps5d7dbfad624d4b9cb474ca832a884a8c?orig=true\u0026version=1.0","fqdn":"files-accl.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"169.148.128.21","port":443,"asn":205111,"as":"ZOHO Corporation B.V","country":"The Netherlands","country_code":"NL"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/build/pdf.worker.min.mjs","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d58eee7f8eb7d9d4ecc081e8d9878e88","sha1":"3813e8c771de8257ff66ef6147c10d0bdb8ce0a1","sha256":"bac96d55b9b76ba76430659dde18f2d4428c2a2594df288b9b1dd29ecb815864","sha512":"d30cc09f28c748b0cc5b56c0fae746e218f9dd93c05661744ed8002c2fdfe2f428cc9b9834a8bf5941e1bc8734bb2d49873e9e6393cf98e4d79b945064b6cb18","ssdeep":"24576:5YPaaDE6n5bhkKONHTxDsxM65DCY/y0t9SvKYzn+8j3WTQYfeq19NCxmnqm0bjor:5YPaaDE6n5bhk9HmlDNFt9SSYzn+8jm7","tlshash":"d9557cb123716d7793a145d3106b1602eaadb427f40c89acf86dcce274758d622ba7fc","size":1405864,"data":"","first_seen":"2025-11-26T17:06:23.575653Z","last_seen":"2026-04-01T23:32:25.346328Z","times_seen":16,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-31","alert":"Hunting_JS_WebAssembly","trigger":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/build/pdf.worker.min.mjs","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"191e421bf876cf594c39c77dc8265fd3","sha1":"39b2d8e7484a459212f0294afe6ca3f2277b5cfb","sha256":"3b84d2ee7dab797da5638a7ff625db665980e09b25742b57aebb5a7b5542723d","sha512":"834e0eef72619c90a3c74f44a0cd1bb5fb81b0ca34a40975e63267ee5f02cac35f28bd6cd5fd439f564da996d54f1698f7c1a83857b146d91a713bd3e0b91fcd","ssdeep":"","tlshash":"2ff0249972c98d2fa2930129383d5e8cacb51f102216e409844ce8f17e34e635c27c3a","size":503,"data":"","first_seen":"2023-03-10T14:26:26Z","last_seen":"2026-04-04T14:18:47.174472Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/murphysdk/2.11.1/murphy.min.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"a34b810dfdd4ddf7c466b640857ae030","sha1":"0404c57f36ad35408581655aa03bb04ba4d01f4c","sha256":"1f1289e704009d3d034ee2d73512591455d0e59fb16cfe9f394e386d0998f97b","sha512":"6ee8ba79ab87311c9ad7c4e6b321e6390461c357ba16e39b4662a204a52920f73701a65e2c209c0ff12518fe3be71c80a449dc15d65de6145735dbfc820137e2","ssdeep":"768:bpitsE5n2itsE5n2vmt3Oqxv/aHnuue3ddPNsKS/tTLAV3vycUbBgaAWlrazj1m9:aRnR2v63Fue3vPNEIKcJWYkFGlg","tlshash":"bf232bcd3356757292e210bba47f3616633a9d807c4d4811b552fbd43c68a0dd2b2bae","size":48082,"data":"","first_seen":"2024-12-23T15:06:10.958154Z","last_seen":"2026-04-04T14:18:47.117946Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/v126/csp-handler.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"5504b70c39c0c68879d5bb563ebfbc9d","sha1":"708a5c5a23ef2c5b5db7eaeb659db757ab0a9570","sha256":"40e8443290b784c974fb84b86ac22352c98c5569a92340478a9af25b153632d7","sha512":"4c700a4ad383a48cdf825514221e0877b06e03e1401aad641acc3a0a12ed72cc62fcf5695593e15f9b3cafb5faff55dec931bfd9c18c868f2907c8d16a27e000","ssdeep":"","tlshash":"df4153daad28d0e353e507e1956c1b84912f245d2e0cc1eefd318bd24524dda82af1db","size":2135,"data":"","first_seen":"2026-01-13T22:40:36.301344Z","last_seen":"2026-04-04T14:18:47.130257Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/web/pdf_viewer.mjs","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03dd680b1d23b36f732b9ed2f8b3a67","sha1":"8026cb0dd727b065d9e65c4d3a2035fd3cd92b84","sha256":"ae76e7f5385e0fbc9422b0c7f40a88700700a49227c1ea2d77d64b6cacc38a14","sha512":"273baf485be35489d4584e10f208524286eeff9f72b22c39e337d6e474e222b1abc97f287b082a05a60c24e111b6f9af419bb423a0f2aad33fc949cdd8443924","ssdeep":"3072:uQyaN+i8dgnx6W46sZRWU/I1/MKGiGTtPdDKxp1LpnPw8DN+qBXjMZ80tyK/UW72:uQys0dYcI1/tIzKP1LpnPw8DN+qBXIZc","tlshash":"a6143ad63265243257ee46e2683a5107f3361996340d946cb32cecee646f8c4a37bf39","size":193809,"data":"","first_seen":"2025-11-26T16:01:23.824062Z","last_seen":"2026-04-04T14:18:47.165195Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bfde73a296071f3cee41aa9d0c900ea","sha1":"993790e795017a94d102eed9d2e3069d06d84df5","sha256":"8169e8aa529a222bff80e86ebf7eb4cdf56c2e26ff593cc5f2b125d2c2db6f32","sha512":"57cdcc92b96090aa38ac554508260d7a305958e22c338c782ba144d3633fe99e5fdaa708c08d10e606fac834d435d9e1e4be35ad7399dc9fb7c46bafe00d572e","ssdeep":"96:+nV4pWnVgiL247MjKOGW0F+hyBT+OX0XZfjMfUYhxr4O9:+nSYlL24AjGV+yBT+OX0XttYh94O9","tlshash":"83a1836beec5f92157853fecd16bc9ad982c42311e09c045b0ecbcc467b3f6a4e1a454","size":4938,"data":"","first_seen":"2026-02-02T15:54:23.457276Z","last_seen":"2026-04-04T14:18:47.176287Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fd4c077c59df5964962f34f91cac872","sha1":"9313ad03b361685b9a555877b7f2fc7dd1887940","sha256":"191d267312ce6b944bccfd62a882e1f94affff545eb55b379e8dde8c95842cbc","sha512":"870fab99e8d9f1f6641bb60c92f322d31a461c9bf60afef2ababe5e2aacaac54dffdd47eb51a6aeff91e6b9acac36a4b766fdfea6a3e314f859b3016c2739061","ssdeep":"768:I3r3+N7Tgekr7GZr7An+nvrMyr0DduXpsIUUd29srMr3cny/D8JIOcEXR2ZwT2FE:I3r3+NgdrQr0+vrBr3psIUUdYsQr3cnH","tlshash":"f9038617b3c72ef27f7126d99613374a747a830b5ac2c4eac1b0194c71e05ea979b0e6","size":38501,"data":"","first_seen":"2026-03-31T20:20:53.844909Z","last_seen":"2026-04-01T23:32:25.322749Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"35937136069fff07a90e526a6b9aefb4","sha1":"3bd50ea6984fadb77957a3b3368a83929cbab247","sha256":"27e71c37f4a2031f2b844780f56b1fd1c658c9eb5a10dbbcda4cfe5410d3d76b","sha512":"a927120d865d1140c873744c73e824c454c4b5bac909069cb3394b1e9cbd359497d6ff12bfe110899738d70235ff85fb0506a63fd397eff23be46dab107d18a3","ssdeep":"","tlshash":"4a115965cd6f060fb270b2f27c0566b95a7854820b1ff8254b8aee5ca68ec5c9c83864","size":1032,"data":"","first_seen":"2025-08-20T18:02:11.861496Z","last_seen":"2026-04-04T14:18:47.178904Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cd85b95c5d9927d9f28774120dd506a","sha1":"fa69d31d76cf54b70da6f70469f6771e1c89837b","sha256":"c1710d903f3d6b37eb65492a4bc3f8ce2c2cd6a029b81b26cce99d822cea138a","sha512":"2ce6bb2b1f23927f0cad7fe3fe77b3410c3b366fee3bde2020fe9718a9312f2581c6d34a448835c07926a1ed7e9dc876905b1bd809c12f516760924d271c1848","ssdeep":"192:654POqaDaqy7yPYdaMwuUooy5i5ZV6VKoMYSYaYAIY8qiS:vqcyYaMHoy5i5ZV6VK7l37IpqiS","tlshash":"c3129568dbe4ea376b752ed5c63eb9c91a354f47da08d02c90f954c03510e3397cb86a","size":9202,"data":"","first_seen":"2026-03-31T20:20:53.853843Z","last_seen":"2026-03-31T20:20:53.853843Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/zohosecurity/v7.3.2/js/security-html-sanitizer.min.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f949a904014b8e0c168b563b5a99ae8","sha1":"487d05333d4bd649729637c94fc085f39af8f169","sha256":"f4edd1ab7ea12b3a7a4e97279d70a69e09e97fe6e1e05b847d3125050ccfabd2","sha512":"bf252bce637883d67c090c7f0c3c38dbeb580077865003987ddcd125fc448668ec3760ae1071f7d7b66a2ca6b2ec0cd3c03cfc86fefe038977e7bd0174b619fa","ssdeep":"768:0Y6RZZv8yMGUzvEWFS6SwpjWeoSL6J5pwEE:0YYd8cEvEWFbSwpjWXE","tlshash":"50035c6a666470769be312ec942f990ab03d189f782c8090f19bdcf908f9f95102fd5f","size":38663,"data":"","first_seen":"2025-11-26T16:01:23.840139Z","last_seen":"2026-04-04T14:18:47.109796Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/engines-dist/wd-chooser-components/assets/engine-560babfb40172ffe371d79b01cc343eb.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"77ff1e7dd4e186a0930def2fb0531cf7","sha1":"ecdfba700b671af1166fb0d43c0e2e01f5dc1b9f","sha256":"e02fd3d33da12efe3b6d05fe28dc1d33b0ad5409bf25574582e8715ae7930725","sha512":"78e77f4fe84aaaccb3cb1a914a648c5cc72b033ec043861694e154ce21f966406cf87dd5e3fcae47480feb666995bb518a47c988028ed05805f38ab8521ff6fc","ssdeep":"3072:fQe8GVhUvKejtMSE0OxBAYCkvLXOPqE0cE0QMurZVR+a74rfW48ewsRBIqr76:fQe8GVhUvDjtPE0OxBAYCkvLXOPwqr76","tlshash":"ed04d753c008d77d99c68e3593b87c0794eca6c6e48bdde1f2eacbb417abcc640425a5","size":176191,"data":"","first_seen":"2026-03-16T12:41:44.936758Z","last_seen":"2026-04-04T14:18:47.145911Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/engines-dist/zd-file-preview/assets/engine-a56d99731000d80b2478d4461452148c.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"d698360b062604c298fae17263d49fc3","sha1":"4f7f2f7baef853731c15bb7ba081aad4ef4e55f3","sha256":"a4a18af669fcf60b29c42de5f624683b758230807c2f1ad56f07022ed3d8edd7","sha512":"86b29abaaa1cf134de1a14ff962c488eaebd5e27c9d24433bad3b52a4366f1705cb3903723d8fa40ba900add9db22a3e3d0cb977a5d8247ea02d4a4a2954936b","ssdeep":"24576:gSbDfQdtmFPTRFRPI7D/x+F912GVoO66YFH7eVxZXLF0eA7AcSuOFh727cFLFZ4c:jQdtCz12GVoO6G","tlshash":"3015c7b79054db79aa8e8d7699b1e80a5c7c66459408ebf4f2ec9b3c2f71cc30056327","size":930255,"data":"","first_seen":"2026-03-31T20:20:53.720862Z","last_seen":"2026-04-04T14:18:47.120334Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/build/pdf.min.mjs","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c5aee17f619f4c18b131fbc92e011dd","sha1":"0c88e8009ab9fd5f0d9f140d5b86682dafef9982","sha256":"8540234a681121c8372fc1b2c9e46aeb425de644b2f0b7f159f9ee5ec5e7eb16","sha512":"a5251ac9d940ddf51a3ee3e187402c729f724d71d28918c2f46fbe88bda1c92e89d7c4bc64b49111fa9386052ac9f16308eea1dce680c1d2e829baca3dffb519","ssdeep":"12288:uM/wE6MPwI6ll+MKrV0h8EFuI04XXxvTtrWY6USg360plq3:mEQ1Hv6tg360pW","tlshash":"a48439e63255643232d941d368786603e7266455780bc8bcb56cdcdf28af8c532baf3e","size":393298,"data":"","first_seen":"2025-11-26T16:01:23.829181Z","last_seen":"2026-04-04T14:18:47.167145Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/dev/jquery/jquery.min-dc5e7f18c8d36ac1d3d4753a87c98d0a.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"5dbe4bb7fe9a5c0875783e83f40ba7d1","sha1":"93cc961c758dfe56657bfd38858873032f796b18","sha256":"3260e71f812bd689a42bd34db1562100def4c4e0b468abe7b0cbbf304bed2496","sha512":"39a4c5194de82b2c6a04d8cfda976ae4885ddb1b63bcdc6b9584b04859b20036b76a9279f681be553660da8ccb65a8d4fe08ce65bd207e57945632e731c25c78","ssdeep":"","tlshash":"951121ad3465b27e1ba314e4a137974bf2b111b8205c14328b6dd8f57c74caf8633984","size":1000,"data":"","first_seen":"2023-04-18T07:29:33Z","last_seen":"2026-04-05T13:51:10.845482Z","times_seen":2680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/assets/files-5efbc1225a39f549afe37420aaf601be.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"f510e9f5d07bb3cf8d6ede4a9faff621","sha1":"e75e6ea487dd966778d07202563828be27bc8314","sha256":"049ab3891ff2e94122ab6277548bb4e190c4730ee8d00d2644a927e1f57af459","sha512":"15ec30374a925d5edb16fb46f99385606249f2816660253c3bbf11dac22e98d6e394951109b1b3d7d288904e6991ccea59315edb365ea00a03323fc96b45e17b","ssdeep":"6144:GEYEAOPZgHAI9q+eU4CAgwIsoIFQWA3odc0O2uCaE6e6egNAG/u4kOkUuEkwAce+:GEYEAOPZgHAI9q+eU4CAgwIsoIFQWAOu","tlshash":"7c74863572d4ecf043c3a1d4483b640af0a99daba42370c477f69e9abba55c930d2d5b","size":359985,"data":"","first_seen":"2026-03-26T19:57:48.604401Z","last_seen":"2026-04-04T14:18:47.164083Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/v126/murphyInitializer.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e721ad39a9d14a521b26b505b429d57","sha1":"c506db4164ceb72db9983c3145a1dccc51d60972","sha256":"2c1136057b53279829509160040271c6f17ea5c58db957c6c81b883d0f7a3325","sha512":"e0930bd23537b31a189a81deab06242ed1ae5b94524d0f5e03fb40541af3f4b9f081c81ef5002bfda1fdba8ed9367dd3fb11efdc5b5706e01647492fed3186d0","ssdeep":"192:WljR5zKp+OuXHa9wlzf27JSU4wvSlboXVubTi:41927QV2ubTi","tlshash":"90f162c7e7fd70131278242e8936b185397d49b3094fc47fbdc166a8a45017bc62eeaa","size":8081,"data":"","first_seen":"2026-03-31T20:20:53.752587Z","last_seen":"2026-04-01T23:32:25.286274Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/assets/vendor-d8f7d2b54ad23fd05f32d3300feff822.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"124844141bebac91ec671efee4c46f48","sha1":"348fe1a7082571f32456cfef1e0402de54b9aea1","sha256":"bea6b327eac132d45f1245e4419d448eec3430726b5ac9c2fffac04fa1561199","sha512":"2207b6f68d018ed5b1b2772d72f4f5c2efe668a91da3da56cdeff8d4bc26f0be8c2020858cfd07e2418b8da8bced95ddfc620441dfc22c0a8a652dce9bd94707","ssdeep":"49152:UrK1wQU0YdnX5FlBSxZkACufkVlVa2LSnCnyXrUE5THCn:+VdikVlYb4e+","tlshash":"70163a97a154faba9b8a9ab1c8325806a83c54495408e5f8f2fcdfb52b75cc30077737","size":4030961,"data":"","first_seen":"2026-03-31T20:20:53.86275Z","last_seen":"2026-04-01T23:32:25.335138Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/quartz/feedback/v2/zquartz-tracker.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f76a3e214c5bb5b221972a6d574cdfe","sha1":"c1b0e5047ad69c105b193d1fb53f2924698f6803","sha256":"dc3be83f6eaeabf9c2c4c87988ee6b7573243e85f15f6a6b7c606a89b513b432","sha512":"43856bd492cd532356886ba44ad4838077f41a7a2978e96d0aaa5124eb605c51f2a7bb84d8d6714a46180f3eeaaf6c7e9d9bc5a2cbe9efc150dcacfb5b3767cb","ssdeep":"384:ARM1onsmk+tc+ckk9a2vvEJLG0Mn++wNiskySV5xQ+THu0qSlSXnUiCIYyitkLa6:R1onsmk+tvc79Vvvj0Mn+i7DXru0qwCh","tlshash":"05a2d7c3779014b38aea02a4dc794b10b166f95a354ec87c7e68b8df5858bcf05e1b78","size":22076,"data":"","first_seen":"2026-03-06T12:42:59.20505Z","last_seen":"2026-04-05T04:14:45.644228Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c8995d257fe643f8eaa5ddbbb2a9b32","sha1":"fef70299d0f4836f02176504b9d82602e6a3e63b","sha256":"497a9748b25facd13514beaa5a42ca5eff734420d9dc1ae4c7ba5819c75c4d66","sha512":"cbc96f935bbc7fb08b084864991b009b911c6d02a017d48a7534344d478cc0ce3388026f2a5e5ffab0083c9967483981cddd6ad627530292518d5a0399a8c723","ssdeep":"192:TiOK7YzKEPydaMwPcM6Ux+OCfyaFBMCpYBgxuhx28YkMiJk5H:TiOK4KEPOaMbMZx+OUpYBx28YkMiJk1","tlshash":"ae2240170f84e97bd651d37cad6d7e2257be47173406aa5eee944a0d20f22f72386007","size":9934,"data":"","first_seen":"2026-03-31T20:20:53.870396Z","last_seen":"2026-03-31T20:20:53.870396Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/dev/intl/js/team/team-7733fec4adfba551c7a0bfa335d42eb1.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"7eeaef65ba9c40480ed1b5806b329d03","sha1":"6475b20189b46125c33a47123f64e0a1b0641b55","sha256":"24ce924983f47d45cd5f33a733c2dbac2d8c4015229be1377d5b9e82b3c336ef","sha512":"2a74c80ab6db7780006614d1b3fde207b8dcba506be5c5ba88b9676ed5e7bdc87d10bb4b5b3a9b4fddd26503f9c521bc251e2f86f07c1f1c65c3b8fd167d45bf","ssdeep":"","tlshash":"c911a7039c9a5f8bedfc9f2334713c0210486a1b04ddaea2fa15bd3d6cc17968a16810","size":1000,"data":"","first_seen":"2026-03-05T12:47:07.980937Z","last_seen":"2026-03-31T20:20:53.877006Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/dev/svg-icons/icon-list-31928f4197542fec37733a619d9d023d.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"661921bde1d07c6f443e01353848f903","sha1":"e93c49f9b87b07a0ba1e3fd8b3f74044e506453b","sha256":"5d0897a90cda3df8cc17d835fd50a20b8fff9cb00e2ac562c099f46d83fddecd","sha512":"46bd48df4b1f1fcc96b9e42659d7173acf1886788a1ede1e8de018b4773fecf61113ec1043e1267f39e868dd9cb3edca90adaed159e9362df44b236fd0b0f24c","ssdeep":"","tlshash":"4811edeb0f9c97dc255f9da88f3ed124439cd4b5b46dc2d0099d85b990530e9e62be10","size":1000,"data":"","first_seen":"2025-04-10T16:14:08.518862Z","last_seen":"2026-03-31T20:20:53.879999Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/engines-dist/wd-application/assets/engine-17cfefe4e58086693ee856635c00ba66.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"c642d1f976537ba8dc95a48d1c139612","sha1":"cfae9bf4fcc7fc5c5641a4b185d92417f87dcdb4","sha256":"7468c1af60c38622b0169713789c2864680255c3b429cd83a6aee1858029f3e3","sha512":"e07e545d1966d04d438c24f7daf03759b7367c815148512d90ecbf3db7533d04c9498d082cc1392295be540c6bef2c580ffc2fc08f22f58150f87d22e264f314","ssdeep":"768:H6Om/ThaQuY2ccp81N//ojyx9FUZ/BlHJEXQglqg0hJf4tO08IqoaczDVEd1l1/i:H6Om/ThaQuY2ccp81N//ojyx9FUZ/BlQ","tlshash":"9ff25fe2575d05784dea20aa177e7c5320b2acfbeee3d042379a09dc07df5884d5a8b4","size":37488,"data":"","first_seen":"2026-03-03T17:41:21.794929Z","last_seen":"2026-04-04T14:18:47.161932Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/engines-dist/wd-docs-menu/assets/engine-856ab7861eacb09d857b2aafe7127a3f.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"7980d4e29985fa0d5d76247f8b53023f","sha1":"d308dbaefd2185a72dfcf3cd3ee9eeee2f9739a6","sha256":"8d01074d7a6a3cbbf6b3a15a3ba18fcc2cd65c5349b27797b4945f01b5400deb","sha512":"f7e4d34ce6567c5bcacf447ed2fb9468997270e8624bcade2232f215b1cf263d9fecdda40f30c8103a2c26f67a82272cb8cf862f8fbf468544ab14373c3498f1","ssdeep":"3072:gxF6P+FVopGeBIUd5Xhx2u8zZHCPqq6XTXKCn:gxFu+FVopGeR2Eqq6jXKCn","tlshash":"86e3e882d8dea27112da10a55b760c0753319cd6fe4e9c05f3f88dac1bbdac522e74b9","size":145005,"data":"","first_seen":"2026-03-31T20:20:53.758827Z","last_seen":"2026-04-04T14:18:47.11964Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"static.zohocdn.com/zohofonts/zohopuvi/4.0/Zoho_Puvi_Medium.woff2","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /zohofonts/zohopuvi/4.0/Zoho_Puvi_Medium.woff2 HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.zohocdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 55176\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"16e20a7a44555d3c89b8f169f87d189d\"\r\ncontent-language: en-US\r\nlast-modified: Sat, 06 Dec 2025 08:27:44 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: c13cd195d4c96cd70e9fb7829d73d82f\r\nz-origin-id: ex1-c698f02cc2a64aa2a4ec27d9f550e2d3\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55176,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 55176, version 4.0","md5":"0a9250d09bb665a32174d1e1815a14b4","sha1":"4a4a5dfd0e0c0cfe4fb6af1bec9e041a9d58063c","sha256":"bac9a1e0823048221d5d628ef895519f4219bf7a63befe66d9082ba92140b547","sha512":"2caf2d9ba98404974948c2e91876e7079394e7d837d8f63b7b4df5692a8068f315b5230f46c2f1a84cd7a71864be490b6731fa530df5b3cfa8ff6988f6c64327","ssdeep":"1536:Nh5v7X3RyY8cn0FNOTwikEX2ePAtWw7LEYEg:N7wL0ki/yLEYd","tlshash":"e04302ea73f5c020a3075779bdc56cb4f6e5c9168fdaca9fea1ce9364500ed492420d4","first_seen":"2023-06-18T09:55:06Z","last_seen":"2026-04-05T06:44:27.131904Z","times_seen":486,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zoho.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zoho.com","domain":"zoho.com","tld":"com"},"ip":{"addr":"136.143.189.177","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T20:20:13.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zoho.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 22 Sep 2025 00:00:00 GMT","end":"Thu, 22 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"39:3C:16:96:A4:A3:22:77:4E:35:38:4F:CE:3D:DA:07:19:F8:E7:00","sha256":"95:F8:65:83:A2:BE:E7:FC:5C:67:D4:92:07:6C:9D:C5:02:C7:51:A7:E2:D2:D3:3C:90:46:BA:63:D5:C2:3F:C8"}}},"request":{"raw":"GET /file/2ekps5d7dbfad624d4b9cb474ca832a884a8c HTTP/1.1\r\nHost: workdrive.zoho.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:13 GMT\r\ncontent-length: 0\r\nlocation: https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c\r\nx-content-type-options: nosniff\r\nset-cookie: zalb_9eb55d8a61=9197d070108fdbfb5de7570d1c3932f7; Path=/; Secure; HttpOnly\nzpcc=bb9546ba-521e-423d-86b2-10e10e9a848e;path=/;SameSite=None;Secure;priority=high\r\ncache-control: private,no-cache,no-store,max-age=0,must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ncontent-security-policy: default-src 'none';script-src 'nonce-oQz8whTQP97iiyhNsVgi4g==' https://*.zohocdn.com https://desk.zoho.com https://admin.zoho.com https://js.zohostatic.com https://static.zohocdn.com.cn https://desk.zoho.in https://dre.zoho.com https://js.zohostatic.in 'wasm-unsafe-eval' https://js-stratus.zohostatic.com.cn;style-src 'unsafe-inline' https://*.zohocdn.com https://webfonts.zoho.com https://css.zohostatic.com https://static.zohocdn.com.cn https://css.zohostatic.in https://js-stratus.zohostatic.com.cn;img-src blob: data: https://*.zohocdn.com https://*.zoho.com https://*.zohopublic.com https://*.zohoexternal.com data: https://us-previewenginepublic.nimbuspop.com https://us-previewengine.nimbuspop.com https://zdblogs.zohocorp.com https://www.zohowebstatic.com https://*.zohostatic.com https://static.zohocdn.com.cn https://desk.zoho.in 'self';connect-src 'self' blob: https://*.zohocdn.com https://*.zoho.com https://*.zohopublic.com https://*.zohoexternal.com ws: data: https://us-previewenginepublic.nimbuspop.com https://us-previewengine.nimbuspop.com https://zdblogs.zohocorp.com https://www.zohowebstatic.com https://*.zohostatic.com https://*.zohocdn.com.cn https://desk.zoho.in;font-src data: https://*.zohocdn.com https://webfonts.zohowebstatic.com https://static.zohocdn.com.cn https://js-stratus.zohostatic.com.cn;frame-src 'self' blob: genie: Zoho.WdGenie: https://*.zoho.com https://*.zohopublic.com https://*.zohoexternal.com https://zohohelp.com https://desk.zoho.in https://workdrive.zohoexternal.com;media-src blob: https://*.zoho.com https://*.zohocdn.com https://*.zohopublic.com https://*.zohoexternal.com data: https://us-previewenginepublic.nimbuspop.com https://us-previewengine.nimbuspop.com https://zdblogs.zohocorp.com https://www.zohowebstatic.com;worker-src 'self' blob:;report-uri https://logsapi.zoho.com/csplog?service=TeamDrive\r\nstrict-transport-security: max-age=64072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88087,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":990,"timings":{"blocked":401,"dns":64,"connect":159,"send":0,"wait":182,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-31T20:20:13.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohoexternal.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Sat, 02 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:94:7C:9A:37:1C:81:B7:88:65:76:2F:6D:42:3B:4C:DF:40:16:26","sha256":"60:A6:EF:75:97:1A:7C:B3:E8:4F:66:38:B3:02:6C:E0:52:07:62:69:4D:3D:E2:D3:F8:3F:D7:F4:E2:34:DE:AC"}}},"request":{"raw":"GET /file/2ekps5d7dbfad624d4b9cb474ca832a884a8c HTTP/1.1\r\nHost: workdrive.zohoexternal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nx-content-type-options: nosniff\r\nset-cookie: zalb_bf956ea90a=205dad7d7b9552af4ce629ec9ab419e8; Path=/; Secure; HttpOnly\nzpcc=d0682580-cb37-40c8-8abb-a1241bdeaf98;path=/;SameSite=None;Secure;priority=high\n2ekps5d7dbfad624d4b9cb474ca832a884a8c_user_uuid=$2771233969185177716; Max-Age=21600; Expires=Wed, 01 Apr 2026 02:20:14 GMT; Domain=zohoexternal.com; Path=/; Secure; HttpOnly\r\ncontent-security-policy: default-src 'none';script-src 'nonce-pihppcToZZ5yA6UdVYvP4g==' https://*.zohocdn.com https://desk.zoho.com https://admin.zoho.com https://js.zohostatic.com https://static.zohocdn.com.cn https://desk.zoho.in https://dre.zoho.com https://js.zohostatic.in 'wasm-unsafe-eval' https://js-stratus.zohostatic.com.cn;style-src 'unsafe-inline' https://*.zohocdn.com https://webfonts.zoho.com https://css.zohostatic.com https://static.zohocdn.com.cn https://css.zohostatic.in https://js-stratus.zohostatic.com.cn;img-src blob: data: https://*.zohocdn.com https://*.zoho.com https://*.zohopublic.com https://*.zohoexternal.com data: https://us-previewenginepublic.nimbuspop.com https://us-previewengine.nimbuspop.com https://zdblogs.zohocorp.com https://www.zohowebstatic.com https://*.zohostatic.com https://static.zohocdn.com.cn https://desk.zoho.in 'self';connect-src 'self' blob: https://*.zohocdn.com https://*.zoho.com https://*.zohopublic.com https://*.zohoexternal.com ws: data: https://us-previewenginepublic.nimbuspop.com https://us-previewengine.nimbuspop.com https://zdblogs.zohocorp.com https://www.zohowebstatic.com https://*.zohostatic.com https://*.zohocdn.com.cn https://desk.zoho.in;font-src data: https://*.zohocdn.com https://webfonts.zohowebstatic.com https://static.zohocdn.com.cn https://js-stratus.zohostatic.com.cn;frame-src 'self' blob: genie: Zoho.WdGenie: https://*.zoho.com https://*.zohopublic.com https://*.zohoexternal.com https://zohohelp.com https://desk.zoho.in https://workdrive.zohoexternal.com;media-src blob: https://*.zoho.com https://*.zohocdn.com https://*.zohopublic.com https://*.zohoexternal.com data: https://us-previewenginepublic.nimbuspop.com https://us-previewengine.nimbuspop.com https://zdblogs.zohocorp.com https://www.zohowebstatic.com;worker-src 'self' blob:;report-uri https://logsapi.zoho.com/csplog?service=TeamDrive\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=64072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88087,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (17865)","md5":"fc99629ba63ded37d087b2145dee58f5","sha1":"b42895c019969b8b3044a7a61b5289c61356c29f","sha256":"537fcec74e93d8d98199d0eb80272e33743a82b050b14013147f67b1ff728603","sha512":"d2bee212f17775b35fda09e0f16413f43c202999a923f9f31fac319c03d1b6b5a834ca65f88c2fc96016b7a744a04b685327423f1c89670b6444e88e30339305","ssdeep":"1536:m7b/GLIGUyoAe3r3+NgdrQr0+vrBr3psIUUdYsQr3cnCzOcEXR2ZwTm5Ne33V9Hm:m2gPqlvOQ8","tlshash":"7e83e613abf51d6a2f3162c5c61f3b4666398f0be981f469a1f8188c30d1afa17c7176","first_seen":"2026-03-31T20:20:53.673195Z","last_seen":"2026-03-31T20:20:53.673195Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1034,"timings":{"blocked":405,"dns":47,"connect":149,"send":0,"wait":223,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/dev/jquery/jquery.min-dc5e7f18c8d36ac1d3d4753a87c98d0a.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:14.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/ui-lab/dist/assets/dev/jquery/jquery.min-dc5e7f18c8d36ac1d3d4753a87c98d0a.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 30055\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\netag: \"a7379902148b22d488a8eae76cd659c0\"\r\ncontent-language: en-US\r\nlast-modified: Mon, 01 Dec 2025 08:21:36 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: adfa9a3c58f15bce4c505799d256cb36\r\nz-origin-id: ex2-2a348e76c8364e11aacf61a80dd1f07b\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-05T14:48:47.433978Z","times_seen":218080,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/dev/svg-icons/icon-list-31928f4197542fec37733a619d9d023d.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:14.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/ui-lab/dist/assets/dev/svg-icons/icon-list-31928f4197542fec37733a619d9d023d.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 78838\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"0c1345861883310467588a4be60f7246\"\r\ncontent-language: en-US\r\nlast-modified: Wed, 11 Mar 2026 11:51:26 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: c846eec9a37b44476e4c24b6957dca91\r\nz-origin-id: ex1-1454e7d7b2d748d39f87ec9466fe2cdf\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":288133,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"31928f4197542fec37733a619d9d023d","sha1":"cbff9cd07ccc38d1609bfca15b6871bbcb41915b","sha256":"0181a7ba89369a0599670604ef4044ec3453154ff7dd9b982dea90e3a48f9d90","sha512":"9a12a53c344d94d4c3238dd5170805a2ba3a6b477d36f4beb559d5434637a94e00224b4eea4900dfb2bf5a13e773c1949464414ee9207e3e40b47edd168f6928","ssdeep":"3072:jyfIomf9KUy/HYO8UktMXaAtc5nBxgE/Ax80DwSUZuMbuJ8U:jhW/HYOJXRa9ALUQ","tlshash":"015462fa5b2c62dca487da5c9f3ba861531ee4f9b57d85b00e6fc6b850474c0fa27810","first_seen":"2026-03-16T12:41:44.928127Z","last_seen":"2026-04-04T14:18:47.145154Z","times_seen":14,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/zohosecurity/v7.3.2/js/security-html-sanitizer.min.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:15.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /zohosecurity/v7.3.2/js/security-html-sanitizer.min.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:15 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 12711\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=7776000, immutable\r\netag: \"b1defe6174e3a91e1aa2ee593f02f125\"\r\ncontent-language: en-US\r\nlast-modified: Thu, 30 Oct 2025 13:52:55 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 4a259a94f26bf8eea968f731716a0616\r\nz-origin-id: ex2-53426a37cb3a49958045db798c42e3d0\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38663,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (38662)","md5":"8f949a904014b8e0c168b563b5a99ae8","sha1":"487d05333d4bd649729637c94fc085f39af8f169","sha256":"f4edd1ab7ea12b3a7a4e97279d70a69e09e97fe6e1e05b847d3125050ccfabd2","sha512":"bf252bce637883d67c090c7f0c3c38dbeb580077865003987ddcd125fc448668ec3760ae1071f7d7b66a2ca6b2ec0cd3c03cfc86fefe038977e7bd0174b619fa","ssdeep":"768:0Y6RZZv8yMGUzvEWFS6SwpjWeoSL6J5pwEE:0YYd8cEvEWFbSwpjWXE","tlshash":"50035c6a666470769be312ec942f990ab03d189f782c8090f19bdcf908f9f95102fd5f","first_seen":"2025-11-26T16:01:23.840139Z","last_seen":"2026-04-04T14:18:47.109796Z","times_seen":65,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/engines-dist/wd-chooser-components/assets/engine-560babfb40172ffe371d79b01cc343eb.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/files/dist/engines-dist/wd-chooser-components/assets/engine-560babfb40172ffe371d79b01cc343eb.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:16 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 25188\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\netag: \"9b9989a4ea11317b08a93a84a6587bb8\"\r\ncontent-language: en-US\r\nlast-modified: Mon, 16 Mar 2026 08:22:22 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: d90847cb09248bba85cfb1eb694a1430\r\nz-origin-id: ex1-4c5c6670bce34cb7b7118ae6f67044c9\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176191,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"77ff1e7dd4e186a0930def2fb0531cf7","sha1":"ecdfba700b671af1166fb0d43c0e2e01f5dc1b9f","sha256":"e02fd3d33da12efe3b6d05fe28dc1d33b0ad5409bf25574582e8715ae7930725","sha512":"78e77f4fe84aaaccb3cb1a914a648c5cc72b033ec043861694e154ce21f966406cf87dd5e3fcae47480feb666995bb518a47c988028ed05805f38ab8521ff6fc","ssdeep":"3072:fQe8GVhUvKejtMSE0OxBAYCkvLXOPqE0cE0QMurZVR+a74rfW48ewsRBIqr76:fQe8GVhUvDjtPE0OxBAYCkvLXOPwqr76","tlshash":"ed04d753c008d77d99c68e3593b87c0794eca6c6e48bdde1f2eacbb417abcc640425a5","first_seen":"2026-03-16T12:41:44.936758Z","last_seen":"2026-04-04T14:18:47.145911Z","times_seen":12,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/build/pdf.worker.min.mjs","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:18.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/build/pdf.worker.min.mjs HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.zohocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:18 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 363300\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"267db9458af948d6deeb9562f719fa19\"\r\ncontent-language: en-US\r\nlast-modified: Wed, 19 Nov 2025 12:13:40 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 45cee814ba9fd0927b09b8451d63f11d\r\nz-origin-id: ex1-f8fe2d78b95e4cbcb902663f383b6b8d\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1405864,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1603), with escape sequences","md5":"3036a89597f6018e8da5a9979ede71c5","sha1":"4e2992133b3ad8a2347079ddd8d420dfc4d1282e","sha256":"aa7fcc111a355bcfce6cae7efb3dc3df44d997906562f6419041cd421cc68285","sha512":"708ec068e25dd26a63c3cd9fa1d220c2e4b4b7d9d583b2dd720e02fdfcff6f07aba559201f57b95da2c7dc59f8a881a1138a840359f1a33bc670a573448e7374","ssdeep":"24576:5YPaaDE6n5bhkKONHTxDsxM65DCY/y0t9SvKYzn+8j3WTQYfeq19NCxmnK:5YPaaDE6n5bhk9HmlDNFt9SSYzn+8jmO","tlshash":"71257db523626e7b93904a93105b1b05ac9cf567f40c4aacfc19cde2a4758fa017e7f8","first_seen":"2025-11-26T16:01:23.821008Z","last_seen":"2026-04-04T14:18:47.13867Z","times_seen":62,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-31","alert":"Hunting_JS_WebAssembly","trigger":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/build/pdf.worker.min.mjs","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/assetMap-d6bf2d734fa0fb008400fcd7177b32d4.json","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:14.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/ui-lab/dist/assets/assetMap-d6bf2d734fa0fb008400fcd7177b32d4.json HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://workdrive.zohoexternal.com/\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: application/json\r\ncontent-length: 16302\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"d9999107ea1988ff1dfa1cfb969cd9b5\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 27 Mar 2026 07:17:25 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: a1b42f48534778ae4f727aced7f258f5\r\nz-origin-id: ex1-34d96111dffc48b88b51ae2339e0fad8\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85602,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d6bf2d734fa0fb008400fcd7177b32d4","sha1":"5606c62841014f5c39f69df3917c129278104b0a","sha256":"5230cbce736dee447de5bd43f487dfab1d55706d60c08e2c0c53a25c0b068ef9","sha512":"f12e213381e9f99cff1ca3e6cdd604f01ef567fbf6a3911835a1880ad85602452374de53b1b2afedaf37a8e37dc911511da3d3982dc7c72afb6f384463fc118d","ssdeep":"768:kR3ai4VZhFmYZVXuPcrRFIxZscPa7CVg7of4YBxJUvmE6:k12VZh3VXuPcr4xZsD0g7of4YB/UvmE6","tlshash":"06839231c4801d937869d736da6b19c200c62fc358f9e90c67707e79b79ec9984a2ef9","first_seen":"2026-03-31T20:20:53.70309Z","last_seen":"2026-04-01T23:32:25.194665Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/assets/assetMap-ef7ff449505b54a6b0b2c8371c854d6d.json","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:14.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/files/dist/assets/assetMap-ef7ff449505b54a6b0b2c8371c854d6d.json HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://workdrive.zohoexternal.com/\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: application/json\r\ncontent-length: 641\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"b8e598197b83ef4665a1a18644a7b0f0\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 27 Mar 2026 07:17:27 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 59dc1b8b1fa751fec9c616b983b98850\r\nz-origin-id: ex1-3d970b780ded4bd9b5da16f627074f30\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ef7ff449505b54a6b0b2c8371c854d6d","sha1":"956a258ea2cb8887c348dbf723e2b895f16bbf78","sha256":"0487abe7d96d64a8b3cb04da94be80078b57c1c8127f52e58303078f781ec733","sha512":"cfeb0df6f56d068287f393a4364c30d3b2737d31070de01fff8c94f94e6857e505bee6675337381d40454169c2df871c488a46419721a315b2cb4af7557630b6","ssdeep":"","tlshash":"a0517839d2d43e0205d1fb85d5205fc223ac6b834e26e42c3272950c3a1fca936e29f9","first_seen":"2026-03-31T20:20:53.70899Z","last_seen":"2026-04-01T23:32:25.236741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/quartz/feedback/v2/zquartz-tracker.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:15.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /quartz/feedback/v2/zquartz-tracker.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:15 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 6561\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=10800, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"4d3e2e83253179fec82b4d2e47409481\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 06 Mar 2026 11:35:03 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 27b90942a2f43c83562cf08df95c2823\r\nz-origin-id: ex1-0673edebff6a48f1b1f8375005734dcc\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22076,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (584)","md5":"3f76a3e214c5bb5b221972a6d574cdfe","sha1":"c1b0e5047ad69c105b193d1fb53f2924698f6803","sha256":"dc3be83f6eaeabf9c2c4c87988ee6b7573243e85f15f6a6b7c606a89b513b432","sha512":"43856bd492cd532356886ba44ad4838077f41a7a2978e96d0aaa5124eb605c51f2a7bb84d8d6714a46180f3eeaaf6c7e9d9bc5a2cbe9efc150dcacfb5b3767cb","ssdeep":"384:ARM1onsmk+tc+ckk9a2vvEJLG0Mn++wNiskySV5xQ+THu0qSlSXnUiCIYyitkLa6:R1onsmk+tvc79Vvvj0Mn+i7DXru0qwCh","tlshash":"05a2d7c3779014b38aea02a4dc794b10b166f95a354ec87c7e68b8df5858bcf05e1b78","first_seen":"2026-03-06T12:42:59.20505Z","last_seen":"2026-04-05T04:14:45.644228Z","times_seen":31,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/engines-dist/zd-file-preview/assets/engine-a56d99731000d80b2478d4461452148c.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/files/dist/engines-dist/zd-file-preview/assets/engine-a56d99731000d80b2478d4461452148c.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:16 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 133491\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\netag: \"1ad87d1d590426c3cf0654cb36ea8e30\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 27 Mar 2026 07:17:10 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 3f8a1556bc6de659e1c8c1e57c381e30\r\nz-origin-id: ex1-4335d69be1434ecf9b86f16f9718ece0\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":930255,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d698360b062604c298fae17263d49fc3","sha1":"4f7f2f7baef853731c15bb7ba081aad4ef4e55f3","sha256":"a4a18af669fcf60b29c42de5f624683b758230807c2f1ad56f07022ed3d8edd7","sha512":"86b29abaaa1cf134de1a14ff962c488eaebd5e27c9d24433bad3b52a4366f1705cb3903723d8fa40ba900add9db22a3e3d0cb977a5d8247ea02d4a4a2954936b","ssdeep":"24576:gSbDfQdtmFPTRFRPI7D/x+F912GVoO66YFH7eVxZXLF0eA7AcSuOFh727cFLFZ4c:jQdtCz12GVoO6G","tlshash":"3015c7b79054db79aa8e8d7699b1e80a5c7c66459408ebf4f2ec9b3c2f71cc30056327","first_seen":"2026-03-31T20:20:53.720862Z","last_seen":"2026-04-04T14:18:47.120334Z","times_seen":3,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/build/pdf.min.mjs","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/build/pdf.min.mjs HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:16 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 104078\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"a0d6e131b9b8f1827b06f1514f994e55\"\r\ncontent-language: en-US\r\nlast-modified: Wed, 19 Nov 2025 12:14:00 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 1892765e47bca6e57f6b6ee3eba1522d\r\nz-origin-id: ex1-8fc7626cc15746fab1e9101b8917be5b\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":393298,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2540)","md5":"6c5aee17f619f4c18b131fbc92e011dd","sha1":"0c88e8009ab9fd5f0d9f140d5b86682dafef9982","sha256":"8540234a681121c8372fc1b2c9e46aeb425de644b2f0b7f159f9ee5ec5e7eb16","sha512":"a5251ac9d940ddf51a3ee3e187402c729f724d71d28918c2f46fbe88bda1c92e89d7c4bc64b49111fa9386052ac9f16308eea1dce680c1d2e829baca3dffb519","ssdeep":"12288:uM/wE6MPwI6ll+MKrV0h8EFuI04XXxvTtrWY6USg360plq3:mEQ1Hv6tg360pW","tlshash":"a48439e63255643232d941d368786603e7266455780bc8bcb56cdcdf28af8c532baf3e","first_seen":"2025-11-26T16:01:23.829181Z","last_seen":"2026-04-04T14:18:47.167145Z","times_seen":62,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/v126/csp-handler.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:15.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/ui-lab/dist/assets/v126/csp-handler.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.zohocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:15 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 812\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"7198ffeb27f5ac70cd226146dc60d7d4\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 27 Mar 2026 07:17:22 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 2ced1cb6672795146af83df8b83822fe\r\nz-origin-id: ex1-52de765416804f0ea07a9568e66b51bc\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2135,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2135), with no line terminators","md5":"5504b70c39c0c68879d5bb563ebfbc9d","sha1":"708a5c5a23ef2c5b5db7eaeb659db757ab0a9570","sha256":"40e8443290b784c974fb84b86ac22352c98c5569a92340478a9af25b153632d7","sha512":"4c700a4ad383a48cdf825514221e0877b06e03e1401aad641acc3a0a12ed72cc62fcf5695593e15f9b3cafb5faff55dec931bfd9c18c868f2907c8d16a27e000","ssdeep":"","tlshash":"df4153daad28d0e353e507e1956c1b84912f245d2e0cc1eefd318bd24524dda82af1db","first_seen":"2026-01-13T22:40:36.301344Z","last_seen":"2026-04-04T14:18:47.130257Z","times_seen":20,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files-accl.zohoexternal.com/public/workdrive-external/previewdata/2ekps5d7dbfad624d4b9cb474ca832a884a8c?orig=true\u0026version=1.0","fqdn":"files-accl.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"169.148.128.21","port":443,"asn":205111,"as":"ZOHO Corporation B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:17.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.zohoexternal.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Fri, 08 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C8:72:64:0B:28:54:46:9E:66:F5:9F:8B:3B:34:B1:6C:D3:62:DE:79","sha256":"DF:92:7A:F3:68:6E:64:2C:7C:74:6B:69:64:B9:6A:5C:71:1F:7E:90:8A:DD:B7:99:63:06:5C:97:2F:74:6C:FF"}}},"request":{"raw":"GET /public/workdrive-external/previewdata/2ekps5d7dbfad624d4b9cb474ca832a884a8c?orig=true\u0026version=1.0 HTTP/1.1\r\nHost: files-accl.zohoexternal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br, identity\r\nRange: bytes=0-2097151\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nCookie: 2ekps5d7dbfad624d4b9cb474ca832a884a8c_user_uuid=$2771233969185177716\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nAccess-Control-Allow-Origin: https://workdrive.zohoexternal.com\r\nAccept-Ranges: bytes\r\nContent-Length: 71360\r\nAccess-Control-Expose-Headers: x-uploadid, x-error, Content-Length, x-msg, Accept-Ranges, Content-Disposition, Content-Range, Waf-Encryption-Key, Waf-Encryption-Id\r\nStrict-Transport-Security: max-age=15768000\r\nAccess-Control-Allow-Credentials: true\r\nContent-Range: bytes 0-71359/71360\r\nDate: Tue, 31 Mar 2026 20:20:17 UTC\r\nRequest-Served-By: US4\r\nContent-Disposition: inline;filename*=\"Chapman University-encrypted.pdf\"\r\nContent-Type: application/pdf\r\nSet-Cookie: drscc=013360f8-08ab-4ad6-aec7-55a606462509;Path=/;Secure;HttpOnly;Priority=high;SameSite=None;\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71360,"size_decoded":0,"mime_type":"application/pdf","magic":"PDF document, version 1.7 (zip deflate encoded)","md5":"3ceb71f0fed67df5ac8d4c82f9ff5877","sha1":"7c45823fac831bff2e9948bc64488e4ef242e42d","sha256":"d1b26f36a1f409a381bfd88e2d105fcd4096d20417f269c7e11754b71084b469","sha512":"8baac7ffcc99bb5251caa4b29087a4d51391e4ad022984a38edd9c9570b31bae888620d9fe290f7a63736076e282f1806a71bff50504da74d7fea37b4ccab329","ssdeep":"1536:pAu/DrT6INpyws6Ct/Z5/g9NzXkxuQmS/cwxTcz6R/736G:pjDnN69PIAxuQmS/cwtcOT","tlshash":"046302a19b3caa00450da721cacd1f02a08b87f764555a03b6ffc6cabf9d9c96612dd4","first_seen":"2026-03-31T20:20:53.738788Z","last_seen":"2026-03-31T20:20:53.738788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1412,"timings":{"blocked":-1,"dns":72,"connect":29,"send":0,"wait":215,"receive":283,"ssl":555},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/engines-dist/wd-application/assets/engine-17cfefe4e58086693ee856635c00ba66.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:14.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/files/dist/engines-dist/wd-application/assets/engine-17cfefe4e58086693ee856635c00ba66.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 5176\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"8aaeb4c8023be2aefbbff24326652fba\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 27 Feb 2026 09:24:31 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: d548f4915ce2128d9f7ecfd4381c1289\r\nz-origin-id: ex1-2aee72ce077c41f7a25b6a39053027e9\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37488,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37488), with no line terminators","md5":"c642d1f976537ba8dc95a48d1c139612","sha1":"cfae9bf4fcc7fc5c5641a4b185d92417f87dcdb4","sha256":"7468c1af60c38622b0169713789c2864680255c3b429cd83a6aee1858029f3e3","sha512":"e07e545d1966d04d438c24f7daf03759b7367c815148512d90ecbf3db7533d04c9498d082cc1392295be540c6bef2c580ffc2fc08f22f58150f87d22e264f314","ssdeep":"768:H6Om/ThaQuY2ccp81N//ojyx9FUZ/BlHJEXQglqg0hJf4tO08IqoaczDVEd1l1/i:H6Om/ThaQuY2ccp81N//ojyx9FUZ/BlQ","tlshash":"9ff25fe2575d05784dea20aa177e7c5320b2acfbeee3d042379a09dc07df5884d5a8b4","first_seen":"2026-03-03T17:41:21.794929Z","last_seen":"2026-04-04T14:18:47.161932Z","times_seen":18,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/assets/files-5efbc1225a39f549afe37420aaf601be.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:14.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/files/dist/assets/files-5efbc1225a39f549afe37420aaf601be.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 40850\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\netag: \"92097c1fbc26545b491d6fdbe72f35b2\"\r\ncontent-language: en-US\r\nlast-modified: Wed, 25 Mar 2026 13:27:14 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: f236a038ef12d2c0f062acd70e33d9b7\r\nz-origin-id: ex1-f3160816433f43668cd6cda8d90fb838\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":359985,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f510e9f5d07bb3cf8d6ede4a9faff621","sha1":"e75e6ea487dd966778d07202563828be27bc8314","sha256":"049ab3891ff2e94122ab6277548bb4e190c4730ee8d00d2644a927e1f57af459","sha512":"15ec30374a925d5edb16fb46f99385606249f2816660253c3bbf11dac22e98d6e394951109b1b3d7d288904e6991ccea59315edb365ea00a03323fc96b45e17b","ssdeep":"6144:GEYEAOPZgHAI9q+eU4CAgwIsoIFQWA3odc0O2uCaE6e6egNAG/u4kOkUuEkwAce+:GEYEAOPZgHAI9q+eU4CAgwIsoIFQWAOu","tlshash":"7c74863572d4ecf043c3a1d4483b640af0a99daba42370c477f69e9abba55c930d2d5b","first_seen":"2026-03-26T19:57:48.604401Z","last_seen":"2026-04-04T14:18:47.164083Z","times_seen":9,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/v126/murphyInitializer.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:15.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/ui-lab/dist/assets/v126/murphyInitializer.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.zohocdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:15 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 2326\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"f6890afb4bd92aa7948e4d63ea7733af\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 27 Mar 2026 07:17:20 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 1b890d04b51342f4ae751d95125f43ad\r\nz-origin-id: ex1-86fad05f2cc54eca933d1631c2e28d11\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8081,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"3e721ad39a9d14a521b26b505b429d57","sha1":"c506db4164ceb72db9983c3145a1dccc51d60972","sha256":"2c1136057b53279829509160040271c6f17ea5c58db957c6c81b883d0f7a3325","sha512":"e0930bd23537b31a189a81deab06242ed1ae5b94524d0f5e03fb40541af3f4b9f081c81ef5002bfda1fdba8ed9367dd3fb11efdc5b5706e01647492fed3186d0","ssdeep":"192:WljR5zKp+OuXHa9wlzf27JSU4wvSlboXVubTi:41927QV2ubTi","tlshash":"90f162c7e7fd70131278242e8936b185397d49b3094fc47fbdc166a8a45017bc62eeaa","first_seen":"2026-03-31T20:20:53.752587Z","last_seen":"2026-04-01T23:32:25.286274Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/engines-dist/wd-docs-menu/assets/engine-856ab7861eacb09d857b2aafe7127a3f.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/files/dist/engines-dist/wd-docs-menu/assets/engine-856ab7861eacb09d857b2aafe7127a3f.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:16 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 20129\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\netag: \"ac9808589d00bde690f8096d6de9c999\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 27 Mar 2026 07:17:24 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 74a81c844a210d7282b24690f8fccbd0\r\nz-origin-id: ex1-2a2fca2fe3ba4a1691b3d56b40592dd3\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":145005,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators","md5":"7980d4e29985fa0d5d76247f8b53023f","sha1":"d308dbaefd2185a72dfcf3cd3ee9eeee2f9739a6","sha256":"8d01074d7a6a3cbbf6b3a15a3ba18fcc2cd65c5349b27797b4945f01b5400deb","sha512":"f7e4d34ce6567c5bcacf447ed2fb9468997270e8624bcade2232f215b1cf263d9fecdda40f30c8103a2c26f67a82272cb8cf862f8fbf468544ab14373c3498f1","ssdeep":"3072:gxF6P+FVopGeBIUd5Xhx2u8zZHCPqq6XTXKCn:gxFu+FVopGeR2Eqq6jXKCn","tlshash":"86e3e882d8dea27112da10a55b760c0753319cd6fe4e9c05f3f88dac1bbdac522e74b9","first_seen":"2026-03-31T20:20:53.758827Z","last_seen":"2026-04-04T14:18:47.11964Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/zohofonts/zohopuvi/4.0/Zoho_Puvi_Bold.woff2","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /zohofonts/zohopuvi/4.0/Zoho_Puvi_Bold.woff2 HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.zohocdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 54808\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"9973d522ed8c68148b38b27b821d6b32\"\r\ncontent-language: en-US\r\nlast-modified: Sat, 06 Dec 2025 08:27:45 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 9f6d0cc7b1d136b511638888e1b8ba14\r\nz-origin-id: ex1-6665d09fbc81453d9e2f4ad634ecf763\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54808,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 54808, version 4.0","md5":"157a357b6f47d13a8049cfcde2663433","sha1":"191fd8ef96021baf07bad93c83b2cda15db1fa43","sha256":"f01f22be37d334c729ae73555ca608f672bbb9f3014d034459a6b31c4e0f7bc5","sha512":"c2e9bc6362c0cc7cf3eb9df8b1260a99b93a302c27f4c50ddbcd62408358457d144a356529879ca3ccab5bd37953fe844f7705f716efe813190735558c1c0cf4","ssdeep":"1536:BCenuJ41hF0NY7A++NYyahMrGaq3l4uccdbnSTMa:BDuJWh2m7AXynhMrqIG8","tlshash":"ed3302fbec33f8ae9377fc6487f13814d921eaa14090e9c688a91d3853957acb107275","first_seen":"2023-05-11T08:55:21Z","last_seen":"2026-04-05T06:44:27.137164Z","times_seen":685,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/images/pdf_password_protected-4d6cc03ef3eba9d926f16c8b40cdd1bc.svg","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:18.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/static-resources/dist/assets/static/preview/images/pdf_password_protected-4d6cc03ef3eba9d926f16c8b40cdd1bc.svg HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 452\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\netag: \"0bf031137a6617afc2927b30056e4fa7\"\r\ncontent-language: en-US\r\nlast-modified: Mon, 01 Dec 2025 08:21:37 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: d990b130e64c38c01bbb646015dd88f9\r\nz-origin-id: ex1-a423490cc65d4b508f97280ba3acd7b8\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1527,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d6cc03ef3eba9d926f16c8b40cdd1bc","sha1":"9aea7e3f3e4466690ac82abe43f596a1782df044","sha256":"526d43bde461e129938577823b5b0ed7cb241a64fbab84d3cbcc8ae6afa16813","sha512":"4b4579df5fbcd53e133e68281096b9f8f5aa2737902df524bede77beedaabe4c2d89af4752b1d96e7342614b9a46c6ff7183d68893524dbb47bc667251d0c035","ssdeep":"","tlshash":"363158b5630c0d3cf9674974d39a72b2622e00a6270a3d74983d61342d4516efaffad8","first_seen":"2026-03-27T05:48:03.674419Z","last_seen":"2026-04-01T23:32:25.173518Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/public/api/v1/events","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:26.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohoexternal.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Sat, 02 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:94:7C:9A:37:1C:81:B7:88:65:76:2F:6D:42:3B:4C:DF:40:16:26","sha256":"60:A6:EF:75:97:1A:7C:B3:E8:4F:66:38:B3:02:6C:E0:52:07:62:69:4D:3D:E2:D3:F8:3F:D7:F4:E2:34:DE:AC"}}},"request":{"raw":"POST /public/api/v1/events HTTP/1.1\r\nHost: workdrive.zohoexternal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json; charset=utf-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 143\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c\r\nCookie: zalb_bf956ea90a=205dad7d7b9552af4ce629ec9ab419e8; zpcc=d0682580-cb37-40c8-8abb-a1241bdeaf98; 2ekps5d7dbfad624d4b9cb474ca832a884a8c_user_uuid=$2771233969185177716\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":143,"data":"{\"data\":{\"type\":\"events\",\"attributes\":{\"resource_id\":\"2ekps5d7dbfad624d4b9cb474ca832a884a8c\",\"action_status\":\"4\",\"opened_time\":1774988426224}}}"}},"response":{"raw":"HTTP/2 201 Created\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:26 GMT\r\ncontent-type: application/vnd.api+json;charset=UTF-8\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=64072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":326,"size_decoded":0,"mime_type":"application/vnd.api+json; charset=UTF-8","magic":"JSON text data","md5":"6e1df3f3f87bf34cf2041fa424af17db","sha1":"780c02eb01212260de1be7e36a9e784598a60132","sha256":"b5a12831b75f5f61ef833bba3414186c74ef51aeb48ef2d3e188faa9cde36929","sha512":"2df4705a78886c744ec3dc759dbd5580e119f3906a23e8ca9b352c2fc569a712eac1ac99c20e7fa24db18c2914687b697b0423510ec3b87f8fbf1cf986aad54c","ssdeep":"","tlshash":"f4e07d1399d017f65f2611cb819e4822abb22127f4d7a8ee80b92d6108ee1e8d240f17","first_seen":"2026-03-31T20:20:53.773099Z","last_seen":"2026-03-31T20:20:53.773099Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/zohofonts/zohopuvi/4.0/Zoho_Puvi_Regular.woff2","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /zohofonts/zohopuvi/4.0/Zoho_Puvi_Regular.woff2 HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.zohocdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 59724\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"3fbf8ba947bc9daaa1ca8a768d72ff9f\"\r\ncontent-language: en-US\r\nlast-modified: Sat, 06 Dec 2025 08:27:46 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 3fa32132c80a4de72e97027993c8ab6e\r\nz-origin-id: ex1-58afd8a7473744c9bafb373be6530df2\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59724,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 59724, version 4.0","md5":"2442199a236fde3e5439f4d3d8a58da6","sha1":"aeb60e05579ae47d72750e074e9cdce94cb86018","sha256":"4c572c9bc44f0180718999ad4b7b1729ecadeb2272dc10acc4656a5c970d4023","sha512":"580775bc30a17130719c2cad35b0f5513effe6052caee997ecb137d680f023b0c3a6897352c6198485acfc5826e30e199b64dd08288380e1c331bffbeeabe32f","ssdeep":"1536:+KCK+L0/BMi7Jfbm1BHKipZYMLlZ+FMIwx17SiIgRGnaqP:HCN0/BMyJ8KQ7yFXwuLPnF","tlshash":"f4430251897f406bc85ca5f904659ebcf46f31706dad8ca528829b9c07ef4d93f046a3","first_seen":"2023-05-11T08:55:21Z","last_seen":"2026-04-05T07:43:27.905453Z","times_seen":749,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/web/pdf_viewer-be254860b6544b9d1ad62b2035a42e2b.css","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/web/pdf_viewer-be254860b6544b9d1ad62b2035a42e2b.css HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:16 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-length: 12695\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"51d12dac62ed6384f54fc03fa0cda378\"\r\ncontent-language: en-US\r\nlast-modified: Wed, 19 Nov 2025 12:14:01 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 51a0442e2129f5214be785f92308cf73\r\nz-origin-id: ex1-b9039d2d48824108beda38af0168978e\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100297,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"be254860b6544b9d1ad62b2035a42e2b","sha1":"1d291d2f2d08de7e934fcc8144278a7e40bb3529","sha256":"f684e5c55f3baa4516519e8e0d4543726ab2c4223a0ded8c71ed9d5bf3782e7b","sha512":"ba03f293925b00901cc578bb0fb0c91d7a9acac14ca07c21b10ef938ef232d28345fe7d0719b3134e9c3cc32160b06242c5ec72f13d22f993478f69c09d08b25","ssdeep":"768:0jMZRo77zHOqzWxNW8eO3v9tLeRjFho0aQuDWeRSvYTz6dH1:0jeqzWq8eO3vOvhoAlH1","tlshash":"24a351fefa5705316c2b411f2baf518992b0b4c3ac05eb81becc61484fc72e57356a66","first_seen":"2025-11-26T16:01:23.844442Z","last_seen":"2026-04-05T08:58:20.692748Z","times_seen":63,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/public/api/v1/files/2ekps5d7dbfad624d4b9cb474ca832a884a8c","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:15.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohoexternal.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Sat, 02 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:94:7C:9A:37:1C:81:B7:88:65:76:2F:6D:42:3B:4C:DF:40:16:26","sha256":"60:A6:EF:75:97:1A:7C:B3:E8:4F:66:38:B3:02:6C:E0:52:07:62:69:4D:3D:E2:D3:F8:3F:D7:F4:E2:34:DE:AC"}}},"request":{"raw":"GET /public/api/v1/files/2ekps5d7dbfad624d4b9cb474ca832a884a8c HTTP/1.1\r\nHost: workdrive.zohoexternal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.api+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c\r\nX-ZCSRF-TOKEN: zpcr=d0682580-cb37-40c8-8abb-a1241bdeaf98\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: zalb_bf956ea90a=205dad7d7b9552af4ce629ec9ab419e8; zpcc=d0682580-cb37-40c8-8abb-a1241bdeaf98; 2ekps5d7dbfad624d4b9cb474ca832a884a8c_user_uuid=$2771233969185177716\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:15 GMT\r\ncontent-type: application/vnd.api+json;charset=UTF-8\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=64072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14354,"size_decoded":0,"mime_type":"application/vnd.api+json; charset=UTF-8","magic":"JSON text data","md5":"35a65b8f65e7e14d6a4e404d8c6bd94a","sha1":"e3b69a21e24abf9cab23aa9beadf2c87b5ac595b","sha256":"0013aed63af9be45850058ec601de9a6278b319b580096452404dcb26418a273","sha512":"e38a8ff7c4eda5aac99db927367c732427f1fedb920b8997a5e1dca4d905dc8ee7dee2fba2f4ee96457691cc77d58d5f25cbcc56a1c34aae482a7de4ade4ebd6","ssdeep":"192:/J5zx7dxlCbalpuhkj6dwosEoxUYI62b6ZLBNZxdyYVOJNK6guBP1rnOaZ/hBGok:zVxxcml8hi6dwosEW0PhOaRGhAy","tlshash":"8c527c7b8e984ff78f2173d2816b2616f7a35027e8cfae8987e4220234d14ed63c5556","first_seen":"2026-03-31T20:20:53.786509Z","last_seen":"2026-03-31T20:20:53.786509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdrive.zohoexternal.com/public/api/v1/files/2ekps5d7dbfad624d4b9cb474ca832a884a8c/previewinfo","fqdn":"workdrive.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"136.143.191.16","port":443,"asn":2639,"as":"ZOHO-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohoexternal.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Sat, 02 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:94:7C:9A:37:1C:81:B7:88:65:76:2F:6D:42:3B:4C:DF:40:16:26","sha256":"60:A6:EF:75:97:1A:7C:B3:E8:4F:66:38:B3:02:6C:E0:52:07:62:69:4D:3D:E2:D3:F8:3F:D7:F4:E2:34:DE:AC"}}},"request":{"raw":"GET /public/api/v1/files/2ekps5d7dbfad624d4b9cb474ca832a884a8c/previewinfo HTTP/1.1\r\nHost: workdrive.zohoexternal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.api+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c\r\nX-ZCSRF-TOKEN: zpcr=d0682580-cb37-40c8-8abb-a1241bdeaf98\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: zalb_bf956ea90a=205dad7d7b9552af4ce629ec9ab419e8; zpcc=d0682580-cb37-40c8-8abb-a1241bdeaf98; 2ekps5d7dbfad624d4b9cb474ca832a884a8c_user_uuid=$2771233969185177716\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:16 GMT\r\ncontent-type: application/vnd.api+json;charset=UTF-8\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=64072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":797,"size_decoded":0,"mime_type":"application/vnd.api+json; charset=UTF-8","magic":"JSON text data","md5":"bdc7889f3e1f5e48c56b6701b7b97224","sha1":"2c37b2d6811eee1b8591314065af3f5af1f90d21","sha256":"6c92baaa4979d459d92687f4388563f67a0f888c7c9c8c1a6dc1649eb39f86f1","sha512":"f32d99658d3fd9007d2781aa8a45dc603467455ea40b19c7b9a48833869ccfb50ee61f9202781eaf9b64ceeb86cddc74783f2c06360d30aa82af2e400e35bc8d","ssdeep":"","tlshash":"5a0149374d8c4bf79b22a2e086876121ebbb312790c6afc5c3e4530a24f50a951c5507","first_seen":"2026-03-31T20:20:53.791674Z","last_seen":"2026-03-31T20:20:53.791674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/dev/default_theme-bb1edd50004554489b706bb85a79ed80.css","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:14.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/ui-lab/dist/assets/dev/default_theme-bb1edd50004554489b706bb85a79ed80.css HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-length: 184141\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"910c8e7c040900d293658d0fe1322abe\"\r\ncontent-language: en-US\r\nlast-modified: Mon, 16 Mar 2026 08:23:04 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: 5f38f5433eed2af2111bead9cbacc3ff\r\nz-origin-id: ex1-e795659268bb4c61a87260987817f0f9\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2504590,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65374)","md5":"2f105cda3373780012a55ed9f8a4a3cb","sha1":"90e11c0872a5a9e1b673151e69030c44007f82a2","sha256":"aba81197f2303cd528b00de971e22381726d38e83516fbdb04c4f46a221d16b0","sha512":"6fbf24b0f499224b54bc9749ff31f9e855badbd4bc613d4d2d6fba4b95a4e99aafbc6b2ab9c3030e9d8d6c95c959fc8a6dc60f0722279cb07f78c906ac2deb39","ssdeep":"3072:C8ew6V3FK0Otdu0JqJb0EJLv0f0Q80DRto0loKR00pvb0YqldUefdNrL9IHdakEn:2d3FOFYChnVvWXOdYyigyT/XEztU9i6","tlshash":"8825a32279cd393846224c03a0c4f5a8ff6d6261d75ddfa7ea71912d8d8aca334773a4","first_seen":"2026-03-16T12:41:44.92041Z","last_seen":"2026-04-04T14:18:47.160139Z","times_seen":14,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/ui-lab/dist/assets/dev/intl/js/team/team-7733fec4adfba551c7a0bfa335d42eb1.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:14.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/ui-lab/dist/assets/dev/intl/js/team/team-7733fec4adfba551c7a0bfa335d42eb1.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 122437\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"f19d2505ad2b0b226d83b5ac6021a144\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 27 Mar 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: f745bbd8c4751b00917e5477224e80cc\r\nz-origin-id: ex1-d5cf4a95889849a2a657463944845888\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":705769,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7733fec4adfba551c7a0bfa335d42eb1","sha1":"9953197cdeeb1303fff4f91a3d0a53b11554918e","sha256":"918f45e4c9f4fd9af5f323571f7531f222f628c6641b409b9d11f4726bbf1457","sha512":"6564c30421807c0dc02aaf3bbf53b0b300baef11cda701df6042f77945f067062bc7537043feb3872f91c27884f206844b3eddaf50ba7f3d67860875781d99e3","ssdeep":"12288:VRlDSJPZy7Y6vef7zoxntLi6SZiVfODZ7iN9ryn7If9nXML8:ZDS69ryn7IFnk8","tlshash":"e9e4fa1b6e548337889e49b3f919ba47b138804d72a58db0fd298d3c61c37e5a2bf5c1","first_seen":"2026-03-31T20:20:53.801663Z","last_seen":"2026-04-01T23:32:25.254903Z","times_seen":2,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/files/dist/assets/vendor-d8f7d2b54ad23fd05f32d3300feff822.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:14.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/files/dist/assets/vendor-d8f7d2b54ad23fd05f32d3300feff822.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 662799\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\netag: \"e7d85dfa92cdbeafac619a0c5e12cce3\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 27 Mar 2026 07:17:05 GMT\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: f4d9fac549004846b7b2d0df5ea52954\r\nz-origin-id: ex1-a966d7ef78f84cf1821eb86697879138\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4030961,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"200e4d7a92ddc5c5ab9c11cf60baafae","sha1":"113660e18f4ae5ae002d1fbb2a313a45c7278de8","sha256":"2ec0a0fc9a2a1b66f174e15b3cdedbcd63fa7e729dd0a2f6dd1f43cd4c0dc910","sha512":"cd0f28556a97ba4d8a1d638f8433a0ad684515f84c531f608b11b10960a485231e50c13b5ba0a664c1aad54edb2aa1eef07b3f73f49435e3979792c304062f7d","ssdeep":"24576:UrKJvkvQAox4UQ0Ydn/PytzSxSWvFleF/rgX:UrK1wQU0YdnX5FX","tlshash":"9b252a863385f4b647d251e5c43a0403e2396819580da06cf7ececeb7a6adc9617bb37","first_seen":"2026-03-16T12:41:44.939279Z","last_seen":"2026-04-01T23:32:25.192291Z","times_seen":12,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"previewengine-accl.zohoexternal.com/thumbnail/WD/2ekps5d7dbfad624d4b9cb474ca832a884a8c?size=l","fqdn":"previewengine-accl.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"169.148.128.14","port":443,"asn":205111,"as":"ZOHO Corporation B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohoexternal.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Fri, 08 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C8:72:64:0B:28:54:46:9E:66:F5:9F:8B:3B:34:B1:6C:D3:62:DE:79","sha256":"DF:92:7A:F3:68:6E:64:2C:7C:74:6B:69:64:B9:6A:5C:71:1F:7E:90:8A:DD:B7:99:63:06:5C:97:2F:74:6C:FF"}}},"request":{"raw":"GET /thumbnail/WD/2ekps5d7dbfad624d4b9cb474ca832a884a8c?size=l HTTP/1.1\r\nHost: previewengine-accl.zohoexternal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nCookie: 2ekps5d7dbfad624d4b9cb474ca832a884a8c_user_uuid=$2771233969185177716\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 423 Locked\r\nx-content-type-options: nosniff\r\nvary: Origin,Access-Control-Request-Headers\r\nset-cookie: zpcc=95e89cb0-6869-46a3-ac23-c957f3905299;path=/;SameSite=Strict;Secure;priority=high\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private,no-cache,no-store,max-age=0,must-revalidate\r\ncontent-length: 0\r\ndate: Tue, 31 Mar 2026 20:20:17 GMT\r\nserver: ZGS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"423","status_text":"Locked","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":1603,"timings":{"blocked":697,"dns":97,"connect":26,"send":0,"wait":204,"receive":0,"ssl":576},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files-accl.zohoexternal.com/public/workdrive-external/previewdata/2ekps5d7dbfad624d4b9cb474ca832a884a8c?orig=true\u0026version=1.0","fqdn":"files-accl.zohoexternal.com","domain":"zohoexternal.com","tld":"com"},"ip":{"addr":"169.148.128.21","port":443,"asn":205111,"as":"ZOHO Corporation B.V","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.zohoexternal.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Fri, 08 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"C8:72:64:0B:28:54:46:9E:66:F5:9F:8B:3B:34:B1:6C:D3:62:DE:79","sha256":"DF:92:7A:F3:68:6E:64:2C:7C:74:6B:69:64:B9:6A:5C:71:1F:7E:90:8A:DD:B7:99:63:06:5C:97:2F:74:6C:FF"}}},"request":{"raw":"OPTIONS /public/workdrive-external/previewdata/2ekps5d7dbfad624d4b9cb474ca832a884a8c?orig=true\u0026version=1.0 HTTP/1.1\r\nHost: files-accl.zohoexternal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: range\r\nReferer: https://workdrive.zohoexternal.com/\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Max-Age: 1800\r\nAccess-Control-Allow-Origin: https://workdrive.zohoexternal.com\r\nAccess-Control-Allow-Headers: range\r\nContent-Length: 0\r\nAccess-Control-Allow-Methods: POST,GET,HEAD\r\nStrict-Transport-Security: max-age=15768000\r\nAccess-Control-Allow-Credentials: true\r\nRequest-Served-By: US4\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":1605,"timings":{"blocked":699,"dns":70,"connect":41,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/global/dist/assets/v126/assetMap-fp.json","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:14.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/global/dist/assets/v126/assetMap-fp.json HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://workdrive.zohoexternal.com/\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:14 GMT\r\ncontent-type: application/json\r\ncontent-length: 539\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"467f41bc4810c01e89bbd60db6335c80\"\r\ncontent-language: en-US\r\nlast-modified: Fri, 27 Mar 2026 07:17:23 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: f9ac96ee7b39f3cb3a166f7c15408de5\r\nz-origin-id: ex1-5d21b575790148428fb6a1c4b5691ba4\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1906,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b696a66606401966771480848c689b5c","sha1":"4953edf3d27ad9e60c18b3886724a2fa47cd1128","sha256":"2aacc876a33e4f5d861263716bd338da0fc803a6aab80f5fc6c41600b6218aa7","sha512":"2db687668069c14b8f2649e0e4ba49751a05fe839fe73219e2d6665caf37b2e82a3a76d166f9e937866bbe227e04f9ddd7c58726ed50313367ae05e58811fc5e","ssdeep":"","tlshash":"0b417388980e17161ab876ffe9532f8d18596f28d456c73f0473270834e9c206f66cf9","first_seen":"2026-03-31T20:20:53.812536Z","last_seen":"2026-04-01T23:32:25.23401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":152,"dns":66,"connect":16,"send":0,"wait":16,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/murphysdk/2.11.1/murphy.min.js","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:15.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /murphysdk/2.11.1/murphy.min.js HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:15 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 15192\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=7776000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"8f90d54f46d86a3f52ad534832777c08\"\r\ncontent-language: en-US\r\nlast-modified: Mon, 16 Dec 2024 13:28:48 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: fbf3eb23f8b665fd40baf9eeb26f8631\r\nz-origin-id: ex1-5b739a138e284eaf99e803acf29e4912\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48082,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (48082), with no line terminators","md5":"a34b810dfdd4ddf7c466b640857ae030","sha1":"0404c57f36ad35408581655aa03bb04ba4d01f4c","sha256":"1f1289e704009d3d034ee2d73512591455d0e59fb16cfe9f394e386d0998f97b","sha512":"6ee8ba79ab87311c9ad7c4e6b321e6390461c357ba16e39b4662a204a52920f73701a65e2c209c0ff12518fe3be71c80a449dc15d65de6145735dbfc820137e2","ssdeep":"768:bpitsE5n2itsE5n2vmt3Oqxv/aHnuue3ddPNsKS/tTLAV3vycUbBgaAWlrazj1m9:aRnR2v63Fue3vPNEIKcJWYkFGlg","tlshash":"bf232bcd3356757292e210bba47f3616633a9d807c4d4811b552fbd43c68a0dd2b2bae","first_seen":"2024-12-23T15:06:10.958154Z","last_seen":"2026-04-04T14:18:47.117946Z","times_seen":163,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.zohocdn.com/personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/web/pdf_viewer.mjs","fqdn":"static.zohocdn.com","domain":"zohocdn.com","tld":"com"},"ip":{"addr":"185.20.209.147","port":443,"asn":41913,"as":"Computerline GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://workdrive.zohoexternal.com/file/2ekps5d7dbfad624d4b9cb474ca832a884a8c","date":"2026-03-31T20:20:16.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.zohocdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 07 Oct 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:A0:7E:26:F1:65:1A:35:47:FA:5F:EB:FF:70:28:BE:54:96:6B:D6","sha256":"81:B7:2C:A2:E2:98:BF:D8:03:13:E7:0E:E7:E9:F4:48:78:93:B0:5F:74:1A:F8:AC:B6:1C:A7:2A:22:0F:BA:F9"}}},"request":{"raw":"GET /personal/stable/jsapps/static-resources/dist/assets/static/preview/pdfjs_4_10_38/legacy/web/pdf_viewer.mjs HTTP/1.1\r\nHost: static.zohocdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://workdrive.zohoexternal.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://workdrive.zohoexternal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ZGS\r\ndate: Tue, 31 Mar 2026 20:20:16 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 54737\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=5184000, immutable\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\netag: \"666ddea98a238c56443eeaee9420e207\"\r\ncontent-language: en-US\r\nlast-modified: Wed, 19 Nov 2025 12:13:58 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15768000\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nnb-request-id: a131f0a5c2600816d7fc917d63f56481\r\nz-origin-id: ex1-2001a4b94d9a455a8e400f050b8c3400\r\ncross-origin-resource-policy: cross-origin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193809,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1071)","md5":"f03dd680b1d23b36f732b9ed2f8b3a67","sha1":"8026cb0dd727b065d9e65c4d3a2035fd3cd92b84","sha256":"ae76e7f5385e0fbc9422b0c7f40a88700700a49227c1ea2d77d64b6cacc38a14","sha512":"273baf485be35489d4584e10f208524286eeff9f72b22c39e337d6e474e222b1abc97f287b082a05a60c24e111b6f9af419bb423a0f2aad33fc949cdd8443924","ssdeep":"3072:uQyaN+i8dgnx6W46sZRWU/I1/MKGiGTtPdDKxp1LpnPw8DN+qBXjMZ80tyK/UW72:uQys0dYcI1/tIzKP1LpnPw8DN+qBXIZc","tlshash":"a6143ad63265243257ee46e2683a5107f3361996340d946cb32cecee646f8c4a37bf39","first_seen":"2025-11-26T16:01:23.824062Z","last_seen":"2026-04-04T14:18:47.165195Z","times_seen":62,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}