{"report_id":"a14aa048-4fee-42c5-81c4-17ed792d97fd","version":6,"status":"done","tags":["microsoft","phishing"],"date":"2025-02-27T18:01:19Z","url":{"schema":"https","addr":"candodock.shared.it.com/CYazP/","fqdn":"candodock.shared.it.com","domain":"it.com","tld":"com"},"ip":{"addr":"172.67.209.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"candodock.shared.it.com/CYazP/","fqdn":"candodock.shared.it.com","domain":"it.com","tld":"com"},"title":"Sign in to your account"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-05-08T18:01:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-02-26T02:09:06.127317Z","alert_count":0,"request_count":1,"received_data":2465,"sent_data":495,"comment":"","tags":null,"fingerprints":null},{"fqdn":"candodock.shared.it.com","ip":{"addr":"172.67.209.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1992-10-23","domain_rank":0,"first_seen":"2025-02-27T18:01:20.91349Z","last_seen":"2025-02-27T18:01:20.91349Z","alert_count":2,"request_count":2,"received_data":41311,"sent_data":1243,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1505662699.sbs","ip":{"addr":"69.49.246.64","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"2025-02-19","domain_rank":0,"first_seen":"2025-02-27T18:01:20.914861Z","last_seen":"2025-02-27T18:01:20.914861Z","alert_count":1,"request_count":1,"received_data":343,"sent_data":526,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":12905,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-02-26T02:19:40.848553Z","alert_count":0,"request_count":1,"received_data":86563,"sent_data":452,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-02-26T01:56:20.028526Z","alert_count":0,"request_count":1,"received_data":20203,"sent_data":499,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aadcdn.msauth.net","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":1421,"first_seen":"2018-11-19T10:50:03Z","last_seen":"2025-02-27T01:37:17.823392Z","alert_count":0,"request_count":2,"received_data":19343,"sent_data":1004,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":2467,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2025-02-26T07:28:08.952229Z","alert_count":0,"request_count":1,"received_data":51996,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2025-02-26T02:42:41.593709Z","alert_count":0,"request_count":9,"received_data":330564,"sent_data":6644,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-02-26T02:29:41.835544Z","alert_count":0,"request_count":1,"received_data":24489,"sent_data":472,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":724,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2025-02-26T03:47:43.29782Z","alert_count":0,"request_count":1,"received_data":15853,"sent_data":491,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1505662699-1317754460.cos.ap-bangkok.myqcloud.com","ip":{"addr":"43.128.193.190","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Thailand","country_code":"TH"},"domain_registered":"2013-04-24","domain_rank":0,"first_seen":"2025-02-27T18:01:20.920994Z","last_seen":"2025-02-27T18:01:20.920994Z","alert_count":0,"request_count":1,"received_data":553430,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aadcdn.msftauth.net","ip":{"addr":"23.36.77.176","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2018-10-25","domain_rank":1455,"first_seen":"2018-11-19T10:50:32Z","last_seen":"2025-02-26T02:23:47.178707Z","alert_count":0,"request_count":1,"received_data":1350,"sent_data":511,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-02-27T18:01:04Z","timestamp":1740679264,"ip_dst":{"addr":"43.128.193.190","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Thailand","country_code":"TH"},"ip_src":{"addr":"172.18.0.22","port":45666,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-02-27T18:01:04.901507+0000\",\"flow_id\":184999951250822,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":45666,\"dest_ip\":\"43.128.193.190\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"1505662699-1317754460.cos.ap-bangkok.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"699a80bdb17efe157c861f92c5bf5d1d\",\"string\":\"771,49199,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1606,\"start\":\"2025-02-27T18:01:04.374150+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-02-27T18:01:05Z","timestamp":1740679265,"ip_dst":{"addr":"43.128.193.10","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Thailand","country_code":"TH"},"ip_src":{"addr":"172.18.0.22","port":54068,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)","source":"{\"timestamp\":\"2025-02-27T18:01:05.023107+0000\",\"flow_id\":996607036263261,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":54068,\"dest_ip\":\"43.128.193.10\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2050737,\"rev\":1,\"signature\":\"ET INFO Observed Tencent Cloud Storage Domain (myqcloud .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2024_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_02_06\"]}},\"tls\":{\"sni\":\"1505662699-1317754460.cos.ap-bangkok.myqcloud.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"699a80bdb17efe157c861f92c5bf5d1d\",\"string\":\"771,49199,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":915,\"bytes_toclient\":1606,\"start\":\"2025-02-27T18:01:04.625501+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","size":69597,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-05-04T14:52:13.808451Z","times_seen":77834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candodock.shared.it.com/CYazP/","fqdn":"candodock.shared.it.com","domain":"it.com","tld":"com"},"ip":{"addr":"172.67.209.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae0e2e1c4468ea7103b5a7bc62d4310a","sha1":"81d4b95c819e1b9ac6aa0c18e39bc7e0344ce344","sha256":"f491fd4214cf59c4fc9659d18bdbe9a8763466770c6cbf7f729fa0c7581dc82e","sha512":"5c38a9f7b934dbfe5dba805b87cf0095d85e31ecb454cab74d50982ed3ad3cb3f14c3acbc2e21630b61c8ce07dbba0d20436c8e05b0d121bab47b2a2cf3315b9","ssdeep":"768:iMPNI2d5qGow1kmkuzqjA6Z82G5gBG0Elu02HgyuxW1H3oGquzUoEo6z8w:iMVdUGorjwwpuxW1PUJzR","tlshash":"7f03844a299baa044fcb133a732d4683946ccf9233c9d8d1e750fa13ed59513f9b0b66","size":38686,"data":"","first_seen":"2025-02-27T18:01:24.240154Z","last_seen":"2025-02-27T18:01:24.240154Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"eef7cae09623da27cb518378e40d567b","sha1":"8e0a9e2f3e0b09591ff3e6dcfe3814b9438baf15","sha256":"ebd06ec898abf0cfe05a5e6401ccf524bcf33d6b414d086a5bf6f6c599dd34e1","sha512":"ba1f8f903e33b073743e008cab28d1d3493bb93be233b1bcc590aedf89f9ff36c649d91d9618045a30f41ddbe02fd67d0b069177a597e094c0c2122c8de5217d","ssdeep":"","tlshash":"a2f0a2755120c03c0240265fcb9f9e92003f7d760d31c04cbf0e5521931be27e421ec5","size":609,"data":"","first_seen":"2025-02-27T18:01:24.241128Z","last_seen":"2025-02-27T18:01:24.241128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","size":48944,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-04T14:52:13.824683Z","times_seen":105662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-04T15:00:54.920691Z","times_seen":276105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","size":19188,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-04T14:52:13.820137Z","times_seen":106390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","size":51039,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-04T14:51:32.087147Z","times_seen":122520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1505662699-1317754460.cos.ap-bangkok.myqcloud.com/bootstrap.min.js","fqdn":"1505662699-1317754460.cos.ap-bangkok.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"43.128.193.190","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Thailand","country_code":"TH"},"introduction_type":"scriptElement","is_inline":false,"md5":"10558f5bbfc3ae218503a280d02a0cdc","sha1":"b407fdd054a571c34731bf3159a28e15e5aa690f","sha256":"7810396deff6331d4f26a6e86da15aa08c0fe3c6a4ee7fc25b92bbbba9f38ea7","sha512":"cec4cd8a9fd23064631d3ca97c2886cb8b6a87a5708a89018cfa75a429e8460a1eaf31a6360db8b573db81625befe68ceee25e64dea07347dddeb23f6b2dd4ee","ssdeep":"3072:RHnbk+KukFN5mEL+Ly+ZEI56LT8D7vHTlMmh2WLLVMtQT:RHbk+KukFN5mIqJ6LT4HlMmhJLLVMKT","tlshash":"91c42ebc7800914f5116573b6618bcb9d373380ba645cbfae94329bda297331eb7443a","size":553001,"data":"","first_seen":"2025-02-27T18:01:24.233685Z","last_seen":"2025-02-27T18:01:24.233685Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"59966a4f47d6e7bceda4f02892cdf647","sha1":"2c01c84af9eb16b6d07a79970f724b0b26f2973c","sha256":"a516cd672d4104e35bba9965970cf55929c34482ac3632a4a4bb5dbe59b8cc1e","sha512":"e51a49e9130cbcc02247a6f8bd4a9600a6b05e343abf41e2283b1857747a2bba21b8dc1c9c87b4326ce7b8ef5f3fa9f53efcd685d86925a2bb62282f7f3d4ec1","ssdeep":"3:N/BKL1Xg:eL1w","tlshash":"305504c4554430700430dc00d15c1d555c05040110170c07705f1cfd1f700001410555","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.242285Z","last_seen":"2025-02-27T18:01:24.242285Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1d2acc5165080dd018feaf08ea69e588","sha1":"26698128d62a4d0c2c902723f8eb8d62043dab06","sha256":"6d5c9f536080a954f2b1bfcc1f1273fda5a5d464111900b8fe9c7c49c6f2b9dc","sha512":"f7d043666452e754ff920d140259646db50571fcdf5d04fa1c747ff91fcf01b8f31319eba8a82512d3037f6bcd70bd7f1aa85f0fae796916b00b9a20cff4fdda","ssdeep":"","tlshash":"8fb0125027e22020d313d034c84b9804f008074630a80404745953300f0056b857d7a8","size":87,"data":"","first_seen":"2025-02-20T12:03:37.091719Z","last_seen":"2026-05-01T07:36:23.077288Z","times_seen":21490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"da66c1112416c91330273ffa10a1f4ce","sha1":"fbbc42efacf4441dc25d58e8edde57985a9347c7","sha256":"a165637070ee2e9a5e5fd301b86af502d7430faa054af4689ad957e40d3a365f","sha512":"eee2c835f3840051f533bcd7b0d44a9a8a8d9592dbb74d7a3fdae28aba8bedd9567e37cc2f97e7da2d48cb0f9dec846f494e78e2cdd7c0c99bdcff06b611bd53","ssdeep":"","tlshash":"d2510ae1b7442330e6b105d31e2f045e44b95a319b6da4918706eaf59c97f9c703af17","size":2830,"data":"","first_seen":"2025-02-27T18:01:24.243739Z","last_seen":"2025-02-27T18:01:24.243739Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"dd00f173cf60716c69acd98a485736c3","sha1":"023b4094bbf0a8f586132ae509f9281af29d7564","sha256":"2355172d1345ec8586e701cb13713a36184e0c6dc30a6d8cc73628c232a63877","sha512":"ec52ebeb4129863e6502f20467e2b6b99f0e8b97d4d13c704878b372f9a58068f2f8b72f62e21fe13d7db54bf724b375930c5935c006d9b98d0888583eb85aee","ssdeep":"3:N/BKL1X7:eL1L","tlshash":"5c5504c0554430700430dc00d15c1c155c0d040110170407705f14f43f701001c10555","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.244781Z","last_seen":"2025-02-27T18:01:24.244781Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ca897fb253cc8807c5aafc947eb02fb6","sha1":"25137d68712ada7d3ad424c80bc0d688a696f7bb","sha256":"57f9c536daa79c4d770534dbafbe2e7b2b2aa48b9eb2617b4e670b8a78a4a4ce","sha512":"187200763128b83b777932b28834f8a21adf5824c5b9f8635249168aaefcc2451885b26da07411ccd56a52146f9b8cc2524647ebf2df4c1474f80d219d893f64","ssdeep":"","tlshash":"d96000030c00cc300033000c0003003f30f00c3003cc300c033003f003c030c0000030","size":16,"data":"","first_seen":"2024-12-12T23:50:40.144885Z","last_seen":"2026-05-01T12:56:59.005936Z","times_seen":261656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-05-04T15:05:07.521145Z","times_seen":694481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"17ccee0446431d3e78436820ed42414c","sha1":"0706fd7ec13e446698f23637c4de2750766bdfe7","sha256":"c2e5c09e3abae42130e399662d26f021ad43c3831d453cb832aa75431e124e58","sha512":"37ac7e6b047474a5f03323daff58f74111b9c6168cf8d9487041d6d704dd4d97316c47ae60bd621651b902af811bcc6afc75f08fac36eb2905c9e8e08aa54cfd","ssdeep":"","tlshash":"16c08c2ea13c5cac523730bb38a27629001bd104d60b29c826c7824003030b38300e3b","size":159,"data":"","first_seen":"2025-02-20T12:03:37.073343Z","last_seen":"2025-03-02T06:12:55.39717Z","times_seen":1209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"84cbbbaf3b6e498ff4128a5baef0fc07","sha1":"8aa6af19964e6812f672c9d29fb294bc0a4a839e","sha256":"5d3a300639fade77e7abc8b65d00c2a265d8f58a2defa5eb2a3c1362091affb3","sha512":"5e233cfadc0f9f8708383d6ec64442ce683548c5e12187776afcc838e521affa349a1d6496f05baa4b0ac7d4ea20c2f28c684ce05ca090ad6ac8f0c88a37c7dc","ssdeep":"","tlshash":"c8510be177583330e7f20ad31e1f085e447d5631ab6c9882830ae9e49c59ec8a03af16","size":2815,"data":"","first_seen":"2025-02-27T18:01:24.247457Z","last_seen":"2025-02-27T18:01:24.247457Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1960b69fa7969ca480844211dc9b7abe","sha1":"aa6d901779df91ce03074158b450ef6b63e97800","sha256":"792172388a3f993d3add643348acb0353d2c48bb6a6cd9b25905f7a5664fc116","sha512":"586522ab8ffc6440c04773fc29f2e077d90ba287e1d17f88faae6d193c0d14d65990cb5fefcf44171252f8f06e53b274cf9576d3526b2ff1eb369f1a8cf2101d","ssdeep":"3:N/BKL1XDSn:eL1TS","tlshash":"a85504c055c030f00510dc00d17c1c1d5c051c0130170507705f14f41ff00001450551","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.24841Z","last_seen":"2025-02-27T18:01:24.24841Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"03730104f8bdade7553e3934f75fe968","sha1":"ad06182f988b3b0ccb515428482de7aa26d378b9","sha256":"e4e7ce1f46f171535228321942c686c8fe5451dc44772a75786caf72305f1585","sha512":"4daa52e1b1f8c0d11e33a3b4d56d5d02ba142f9e5a9041f11f9449ae64888f45271f53f5e9faf39d225a1fddabb2e14ca4d0db95f63b2326887c3e419ebd6d6c","ssdeep":"3:N/BKL1XQc:eL1gc","tlshash":"435504c4554030700410dc00d15c3d155c05040130170407705f14f43f744001410d51","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.249142Z","last_seen":"2025-02-27T18:01:24.249142Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"705392f9e3587543c47cac03d11d64e9","sha1":"01583c2d75dcb23a2d8b63fdce3abd205720a033","sha256":"2de58cd8be780cf42879e382884a132f5d0ff69a10ed9398854e5d99e08207eb","sha512":"f3fd0464a75480ee1f47251e80c6bb277376df864e06c14cd0b6e9b61b13481bace6b9917a96e064b0836aa6cb8dd94acccf3c067d8733d667977e700bc96d1c","ssdeep":"3:N/BKL1XPb:eL1fb","tlshash":"8e5504c45f4030f10410dc00d15c1c155c050c01101f0407705f14f41f700001414551","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.250181Z","last_seen":"2025-02-27T18:01:24.250181Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f47389d2f1abd47dbebeef3e2d3ae8a7","sha1":"dde5aa75f9a647e73d3e2d3fdda68898f850f72d","sha256":"30893b81b3c71cdbd5cf34b54fb52f8eef50b27d8a3f2498a28d2b89bd987fda","sha512":"3524a8ed2b83fe9d62a0708424707959d6cc8e89a918407da7c46540b5982fea9230792acffc47517cf5d009231375b00d5ec2ff5689bfb74ea6a3c926653318","ssdeep":"","tlshash":"56b0028869e5a404e21975a5495fd144f12cc802148a0515658885515f114294167868","size":94,"data":"","first_seen":"2024-12-12T23:50:40.522517Z","last_seen":"2026-05-01T12:56:59.043697Z","times_seen":261167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"09dd7ba1c95f7ad4320cb8050588eae5","sha1":"bc05c33d5a2971237176effd1e8c81eb3fe993b0","sha256":"7e35619bfdb9c71eba042aeb135111d0a865ba7b2af8ce91e064dee7916a5765","sha512":"ac6cdd64edd60fb3ba2f28dc3786c23133317af814bdf5dfefb343961a641153d848fb74e3882c3f2470d3b4ce24da7092c1dd1b1c8fb9e8ec78f1eb1692a489","ssdeep":"3:N/BKL1XvcSn:eL1Ln","tlshash":"215504c175d030700c10dc00d17c1c155c0515011017054370df14fc1f700011014d51","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.251613Z","last_seen":"2025-02-27T18:01:24.251613Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7d515d9ffd0b19c7044fd1df58d72639","sha1":"b941029fd27f1a437c461fe6ce365aeb6722889c","sha256":"e3996f705c145f57a76f7e47d5edd09056ae5e3cd8c3eb9645e2ab72253ee720","sha512":"b9f25f752b9d3b1bc4da271c34decd92c5b785d26f6b4694a4ed6e3b01c50929490ce51f4ec0fcf138c8aeb691f0c2da55812c5c219e3d67a2a872e148ca4771","ssdeep":"3:N/BKL1X5:eL1J","tlshash":"305504c0d5c030740c10dc00d17c1c155c05040310170c07705f1dfc17700001014553","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.252393Z","last_seen":"2025-02-27T18:01:24.252393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9077b6a5b97ce07a8341a6f503455c30","sha1":"292e90140bc80c0ddb452f5684c8c8c8905cf580","sha256":"dd96a0e8d1fe6210896703d711ef9a5400aae4bac927a87af1d5e36ad197e475","sha512":"6c2a1dc7b3c0e67f00acb9ede0b1b3bf8283d640eb9dc26d5fb3194af9d4b73d0b861213c5a71906a1eb7917bb0870637544f1fb2bb685253351cadfe685761b","ssdeep":"","tlshash":"1221989d2ee82cb22372a0c949fa2106c163fc48980568698900d6c87e73b98441ffb9","size":1127,"data":"","first_seen":"2025-02-27T18:01:24.253115Z","last_seen":"2025-02-27T18:01:24.253115Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ca283d414758edbcacd94f1bb5cfd20c","sha1":"2e59b487b3ab39f672142df73a02c6cb9988de72","sha256":"d3fd8ab02d8cd093a149962d81b016e53bab70712f0986902769fd8355f2a817","sha512":"b74ad77351ad18a3a044f7b75c3266ab2fac0bb4c4edd02d4a49fdd0fa8c926752ac0803b3154b37969624bbd9027823423c2df7d457b4b4d22feb932107db81","ssdeep":"3:N/BKL1XbTdn:eL1rTdn","tlshash":"fc5504c05d4030700410fc00d15c1c155c4504011017040770df14f51f700013410551","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.25403Z","last_seen":"2025-02-27T18:01:24.25403Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"33ff6022e88df59f8dfc9eb546435e9c","sha1":"7f2ad96c0a1276fbc858c652a6e2d0b3c9d4d3e4","sha256":"a1c845cab782ea7dec04543ec72e0b354cb8e9aae23acc02ee02b1832e3acd9a","sha512":"99820974c649620d8dfd487054edee4863ca41025de5a87fcd6fddfafbecb53668799fdde6f7b809112fec178b18f28a9ff8e190d298aff5a29c6795ad639c25","ssdeep":"","tlshash":"0c600000c0303003000f3000f00000033cc000f0cccc3003030c00f000c000c0cc000c","size":14,"data":"","first_seen":"2024-12-12T23:50:40.556614Z","last_seen":"2026-05-01T12:56:58.96029Z","times_seen":264119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d49c307e44189055443dac60647846f5","sha1":"c82b37afaa4143bd875d34a6e26b418dd518fdcf","sha256":"560a3271ed3a22611a8dd8b5ec658870606ba3805b276cbc277ff0f28ef94b3d","sha512":"4bea5a81ee622e82b8f3a8bed14a1c5c90525a8b7fa1a524de4b2288fbca84011e9046759e1c386d5f6a33648c9c657ec39be1739f32cd773043a4df345d65ae","ssdeep":"3:N/BKL1XpRc:eL1Pc","tlshash":"f95504c47d4030700410dc00d35d1c15dc05044314170c03705f14fc1f700011014551","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.255447Z","last_seen":"2025-02-27T18:01:24.255447Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"65e1c5e29b5256d9bba8d767283f7efd","sha1":"e07637acd784009f730db6811bbe6e312d9b7850","sha256":"613b2fc4dc469b328478b6007858f8aa859af112278a255db2241f3faf80dada","sha512":"8df5c2c9c6fe84d3f41eb42f2e5f5b539babe62f08e1f0a47bd0e206c9b1d87f4bbbefc822ab9ea16dc93240bdfa4baa87d4a7be9762f76b5c2f153c1ae6b682","ssdeep":"3:N/BKL1Xx:eL1B","tlshash":"565504c0554030700410dc01d15d1c1f5c05440110170407705f14f41f700005510751","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.256422Z","last_seen":"2025-02-27T18:01:24.256422Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fefbc35dd5f2f6c1be47aaea33609106","sha1":"47222047c4fe80726aed4ab7ffc2d50bc0e524d2","sha256":"2b9fb47b9bde39352e799ce4f09817053ed1c1318f8afc6e1d7a6b334095f111","sha512":"0590e8a3979de627543592292621367b330140902863e331fe4b12b7bc67d6eb0400d7ba3b0a532584717ea1325326e1e212ed52a75e42dc7f31982903dac3ff","ssdeep":"","tlshash":"aba0020ef436188b4207a13079372405297d3959458552a0966609b54b502875449e65","size":61,"data":"","first_seen":"2025-02-20T12:03:37.081306Z","last_seen":"2025-03-02T06:12:55.390733Z","times_seen":1208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ff03fc8f0c3179fb4dcf4389f88a1c16","sha1":"05ff911d7ddf2d7c14b4316a87fd08f42c618f9f","sha256":"025229ec6bb50e915572750c5045d22c5fe16851fd077f1411f41b19aa1dfece","sha512":"4acb3551ec49556a2a64f4a47e480df29f611f67d0ef4b2474e90f7b86caed3dedb0b56eba12e577f1401d4d701c9a4f0898a06eee8f6d7dbe3b4b5283a854e8","ssdeep":"","tlshash":"4f60000000c000000000030cc00300003cc0003300fc0300c30c003000cf3cc0000000","size":14,"data":"","first_seen":"2024-12-12T23:50:40.182598Z","last_seen":"2026-05-01T12:56:58.912641Z","times_seen":262850,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ebe1c881f915341f1f85f0fcbb191791","sha1":"c623596337af585eed4b2fbbc47c3ec6cc86b77a","sha256":"c6b0f8be37422a3106029c0b10f63822ab2ec96bf0d4efa58cf513c9a33ac8a3","sha512":"b63d338eed31947be75e8d990f4f3e29cb24fda847f67a461afa1361332e909b23a160c2e2372aad50562df4f7f61dd90c608e572ca66305caa4674209630c31","ssdeep":"3:N/BKL1XPT:eL17","tlshash":"455504c05d4130700410dc01d15c3c157d07040310170403705f15fc17700001015553","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.258047Z","last_seen":"2025-02-27T18:01:24.258047Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3bb75628e1d004f08fbcbd74b81555cb","sha1":"bdf8dc37752e0228580cd870763c2c8c571ada1a","sha256":"9ea68ebcc418d0b67cc42c3194fd71836ff98973526381ee5af4a3ae1dd1d537","sha512":"c10caa2b2e595f616bf172ec563db6f12272b83e23d64470ae8cb2e0b1a475de57937f37012da0e5b1689f06607ea6a00dd6395f87a72b12e76dd5b7c250effb","ssdeep":"","tlshash":"15c09bd6e31846076d581c0f7d9c50271850567ac998d9fb933e755309cd5d001b5659","size":142,"data":"","first_seen":"2025-02-20T12:03:37.104395Z","last_seen":"2025-03-02T06:12:55.384568Z","times_seen":1205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b2aa51082c82e23e178b559abbb7172e","sha1":"2cad6e3d90713bf9be3f595b3fe82679fa21e1e6","sha256":"437b34feeae32c44e21988da9d55aed7b7303daf5cfba7ae2c940af5c4ad40d1","sha512":"78555214c202c99ae249d6413c163d7df3de578fd50b528cbb680f17d9e2caac94c63f4706d6adea0e5c040dc24d1b90b84d7c65ff8fc62133190862f9b70242","ssdeep":"3:N/BKL1Xln:eL11","tlshash":"465504c0574070710410dc00d17c1c15dc05043110170407705f1cf41f7c4001414751","size":1337359,"data":"","first_seen":"2025-02-27T18:01:24.259128Z","last_seen":"2025-02-27T18:01:24.259128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-05-04T15:05:16.396105Z","times_seen":865228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d60502ad57727cdbd0aa5615865c0104","sha1":"4fd0b6cc33f90f88c85b928aee879319a082393f","sha256":"d829cbb4bedf34c108b5b5129c67657fff9e66d776324b1a8181547ca715eaf5","sha512":"d8dbf73f2b42c8a695209eed2e4d5f198de3f466e6afd862d704c72d850486f9750fb743c3cc04079167f4ea658bfcdb3736de942902d6e495ef9360fff8f3ea","ssdeep":"","tlshash":"633165997e69c04f0251998ff2e3e59f6865693b68a1c4ed729f86205f527cfac22080","size":1779,"data":"","first_seen":"2025-02-27T18:01:24.260143Z","last_seen":"2025-02-27T18:01:24.260143Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"http","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T18:00:53.536901573Z","timestamp":1740679253536,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 27 Feb 2025 18:00:53 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/b0e4a89976ce/api.js\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918a13b65ebb0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-04T15:05:18.645181Z","times_seen":14641373,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/pranaynamnaik/files@latest/micro-123787483.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:06.665Z","timestamp":1740679266665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2024 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 30 Jul 2024 15:36:05 GMT","end":"Sun, 31 Aug 2025 15:36:04 GMT"},"fingerprint":{"sha1":"6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C","sha256":"A9:B8:7C:31:7F:16:E8:65:1C:A9:F0:0B:31:65:FF:03:C3:14:1C:09:22:A9:BF:2D:D0:7A:B1:DB:4B:C5:2F:46"}}},"request":{"raw":"GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"6d2-AYrTQKiV+wIbV7PAik2IZG8pgfE\"\r\naccept-ranges: bytes\r\nage: 13791\r\ndate: Thu, 27 Feb 2025 18:00:53 GMT\r\nx-served-by: cache-fra-etou8220171-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1746\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1746,"size_decoded":1746,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff9bbac9e01b1ddd59c87d1e8dd194d1","sha1":"018ad340a895fb021b57b3c08a4d88646f2981f1","sha256":"c28bd21cf6420d2282292b8fd5df776b62b68c9681aedc0d2e73d6444c0bf3a1","sha512":"cc7aef1c346579ff31a504b82d719d73a15a895d08494af0ba6905cd5ddf4b147fea627e96af4aab8f177a84283f51f10fef08c71c75851023a0ecf9a26a681e","ssdeep":"","tlshash":"0931c7008d97a5ea55e7caa0a2f9460ca04629abf81f6b1bc6de673d8c55cc9231d00e","first_seen":"2025-01-28T12:55:12.249268Z","last_seen":"2025-03-12T18:17:11.087149Z","times_seen":272,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T18:00:53.849933007Z","timestamp":1740679253849,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fmq2d/0x4AAAAAAA9lDQUAArOqbjlg/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 18:00:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 61\r\ncache-control: max-age=2629800, public\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 918a13b86e9f712f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61,"size_decoded":61,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced","md5":"9246cca8fc3c00f50035f28e9f6b7f7d","sha1":"3aa538440f70873b574f40cd793060f53ec17a5d","sha256":"c07d7d29e3c20fa6ca4c5d20663688d52bad13e129ad82ce06b80eb187d9dc84","sha512":"a2098304d541df4c71cde98e4c4a8fb1746d7eb9677ceba4b19ff522efdd981e484224479fd882809196b854dbc5b129962dba76198d34aaecf7318bd3736c6b","ssdeep":"","tlshash":"a5a002e763957d7bd94b133756651151f8324514171305458805d475161736c81c4a82","first_seen":"2023-08-25T15:09:14Z","last_seen":"2025-05-14T12:12:43.698394Z","times_seen":189286,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candodock.shared.it.com/favicon.ico","fqdn":"candodock.shared.it.com","domain":"it.com","tld":"com"},"ip":{"addr":"172.67.209.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:05.027Z","timestamp":1740679265027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.it.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Feb 2025 22:16:44 GMT","end":"Tue, 20 May 2025 23:15:26 GMT"},"fingerprint":{"sha1":"9C:8C:3B:7D:83:E8:41:B4:B1:F5:6E:88:6D:30:D8:2C:D8:F5:9A:E3","sha256":"5E:1F:8B:66:74:8C:FB:72:5E:FA:40:DC:7D:52:A2:40:65:41:54:7B:1B:CE:F9:DD:32:3E:91:C0:91:85:20:C2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: candodock.shared.it.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/CYazP/\r\nCookie: PHPSESSID=r82922rrapgnr9pa38603umt87\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 27 Feb 2025 18:00:53 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QxDUEPOEL4VpjYVUrpfQZ4W3qQfMWnf%2F6qWD392IsPzV1gt3GAL2JVVcNy1%2BojFiKkWhLRPkFLT3kJtBytF3O3RR%2BSnHE2hDqnQh55YgFWY78vDPjTwBPTylqH4Of8csbvthPBCCZ7924w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918a13b7ed47b511-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3355\u0026min_rtt=1279\u0026rtt_var=1962\u0026sent=12\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=4071\u0026recv_bytes=1142\u0026delivery_rate=460510\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=09588d39e6adb289\u0026ts=714\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":661,"size_decoded":196,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-05-04T14:40:38.081225Z","times_seen":98239,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/turnstile/v0/b/b0e4a89976ce/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T18:00:54.919125875Z","timestamp":1740679254919,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candodock.shared.it.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 18:00:53 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Wed, 19 Feb 2025 14:53:05 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 918a13b6cafb712f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23814,"size_decoded":48239,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48238)","md5":"781e3d70ad7285932b560af603ae0cf5","sha1":"05dcf1fbcd9be56dc5fc3c2816ef3c0283c59c1b","sha256":"f3c3760a932b9639cc554025300c8917e00f4f62e261086f5606c9e3a30d4836","sha512":"05411e974dcefb50c9d20e932c91efb50093fe815362893c511dcac94a87b75436fa68301d8682cebe49f6792be61e7f39d5d1f0725a43a5d92f9ac17bd9f82c","ssdeep":"768:+CbPzHMb42Q74a0rhgaqC2DdXNTjwzsKSA0ZsC3Y2SIijkKY1LBep7iFFQ7Srv3h:gb42o4a0rhgaqDEzs42S3kH","tlshash":"d4231b587166787227e980e0617ba74373257939e94ccc50e423c97536acecad233fba","first_seen":"2025-02-20T12:38:46.051635Z","last_seen":"2025-09-23T04:06:05.261787Z","times_seen":1657,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/918a13b7ed87712f/1740679254195/qacscGdIhTU2uB6","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T18:00:57.973131758Z","timestamp":1740679257973,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/918a13b7ed87712f/1740679254195/qacscGdIhTU2uB6 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fmq2d/0x4AAAAAAA9lDQUAArOqbjlg/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 18:00:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 61\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 918a13d23b39712f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61,"size_decoded":61,"mime_type":"image/png","magic":"PNG image data, 23 x 2, 8-bit/color RGB, non-interlaced","md5":"4ae11fa90380ce377fc85415aba5a70e","sha1":"d2af7aa7717fa6a18b940e5a2f127c39ff9d26b0","sha256":"a4c6f2dbb8868c947415ec845c544a8e665933f14f0e3386a3b89f1f98dad7f5","sha512":"cd9b24a7cf5f40c9def675f6a77bbf1418deb2632b807d4ab807c7dd86ebe74d1272cd8ba38a2d1e724e5ee2fbecde9a1d3fc7ea5d2e4c40269fb730837c1527","ssdeep":"","tlshash":"7ea002f76390ad79c94a0337e6250451ec321514221115158905c565271626c80c4a82","first_seen":"2023-05-10T00:19:22Z","last_seen":"2025-05-14T01:49:51.43985Z","times_seen":79,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/918a13b7ed87712f/1740679254197/831a64c74182034ad87329575c91e1be4d0918fb461f740ea686074c6bde34cc/hIcgrerYNvsrGo0","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T18:00:58.902441029Z","timestamp":1740679258902,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/918a13b7ed87712f/1740679254197/831a64c74182034ad87329575c91e1be4d0918fb461f740ea686074c6bde34cc/hIcgrerYNvsrGo0 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fmq2d/0x4AAAAAAA9lDQUAArOqbjlg/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Thu, 27 Feb 2025 18:00:58 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20ggxpkx0GCA0rYcylXXJHhvk0JGPtGH3QOpoYHTGveNMwAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAscjm_UO_k901rNdCKgLw5bvI4i6M_jDNCIXpfs2LRbtxwLOrUyplqVvML_hVlB5tIDMuj0ihhaOFHose-Y0_UjQnNUGE_vol46VvGgscTMtTjU4xINriap8AMTIygvljEBt6my-nBwkUGhY3U9v5iKC-eWR5bTfvrqFsuIVxafkSfhHqDXB4KLGNjvOOV71GGJ9x4yxA-C2OcULZ1uDDKuvAaMhuiWdF6OzSTXruP9yPg1vmuteavOW1re0YDbCbtK16PhHdSzWym7v_FrvId-2zf26j50FlTd_vl_DcKNDVCgWDoU0uX3cU6V3rSQoVXREEqPr-2ywSGru8ZuXRoQIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIIMaZMdBggNK2HMpV1yR4b5NCRj7Rh90DqaGB0xr3jTMABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsLS4HBnLGydwK-bLQGRCaoyMsrXBRrDgQVmxS06j3UF0nYSd6GdTGCKIu1WV60eg-tJtTttfEVq7wHVQf4vzjYBidmCh88ebzxKv2GB6PESSodf5MsEup9xd5dxpkYScgL1CCJq89kRrOQ_CS61bvkL_oGyZf4ffqG5THgaOsopqj8dFLH6_SMy9yf8EgMYqpyjxfKsD-1_qb1m1DRjJEKPWKIGwmHXIKQJUqsxZFm4_Inwkxx7QMpVP4GyqlTxFVz7stWwJRSkMLHjEM_IWLUYfPhuwIUVqmRjGsY1n8flA1bRfxaWHNDxoi25-M2BKTP9NkNNJBbTKErhrZ9LGywIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIIMaZMdBggNK2HMpV1yR4b5NCRj7Rh90DqaGB0xr3jTMABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAhyjrDP7zQ5ZzlMLlYQtQX3vhc-vT9nQ7vrqtgRKParT8Oth2rSDPTnsgZg0iIcHgtncvEYs0_AFSmWkTKaRR8Iz7b_fzAUi-ich_EvH2TqI1NNthkX9p1zMPjtsHF8NVHXodhKq5aA9XbyvYPzVrAAUN9o0pMmtujcCqS8YOBRudNJO0XwRK_wNP1hwo6DhxBLbEyRHXijqqhJ9tbnLXbevGkAZfTjcQMUyxlWFkqXxUtXoQl0eZGisKDTzujFuVC78iaFPaBtRicxYv7qyQYt2OPyy3ktlVVzlRWHIpb8TBpBGh2nwqDW0pwcsemsrEuZZ6gFpGH7Sg8fFX28x3bwIDAQAB\", max-age=20\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 918a13d6ecf5712f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":null,"data":{"size":1,"size_decoded":1,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-04T15:05:07.51835Z","times_seen":421931,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1237217600:1740676685:akl_xkIDi5FTyagmRsTcN6ss1y4AIU_EMCyQJ9MIiF0/918a13b7ed87712f/Km4InxeslDwoWIoYjdBuXcX6e0_.nSGv0oK8cImnY1E-1740679253-1.1.1.1-GCttS3wOwegX4cAgGwTS7xq5V9JUNy3s5K1YrzIanmiraaKyYu8wsKRkIa2_TOq7","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T18:01:01.888601748Z","timestamp":1740679261888,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1237217600:1740676685:akl_xkIDi5FTyagmRsTcN6ss1y4AIU_EMCyQJ9MIiF0/918a13b7ed87712f/Km4InxeslDwoWIoYjdBuXcX6e0_.nSGv0oK8cImnY1E-1740679253-1.1.1.1-GCttS3wOwegX4cAgGwTS7xq5V9JUNy3s5K1YrzIanmiraaKyYu8wsKRkIa2_TOq7 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fmq2d/0x4AAAAAAA9lDQUAArOqbjlg/auto/fbE/new/normal/auto/\r\ncf-chl: Km4InxeslDwoWIoYjdBuXcX6e0_.nSGv0oK8cImnY1E-1740679253-1.1.1.1-GCttS3wOwegX4cAgGwTS7xq5V9JUNy3s5K1YrzIanmiraaKyYu8wsKRkIa2_TOq7\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3182\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 18:00:54 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$DQEXIBYGU021OD1vb16WNw==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 918a13ba8ad8712f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190651,"size_decoded":239852,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"dc68618da91162df676fd6c9cdfca578","sha1":"8cbc062a1e9fea55d2c171c0d881b3f21820e513","sha256":"5d23863fefe40022a9bc94bd62a06fcbdbfd13ba4e643005530d77bdaec09c0a","sha512":"adb897dcd3bb39f55aaa3567d23a2eff59d3bf23bbe9617f993a8cdbc89861bfc8e52ba9d67432268e308922774452c0d6ff7c3a76b607dc66172c57a87fb761","ssdeep":"6144:u8V2C8g8ep15EPOXKEK7fNH1frmeFkCNa11EmoV/kK4W:u8V8epg1EwfNJrXEuV/F","tlshash":"be3413a526ee1f2d49ea497fe1748d2f2c94eac60033d4862bec834f990d59f5d3841e","first_seen":"2025-02-27T18:01:24.230067Z","last_seen":"2025-02-27T18:01:24.230067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1237217600:1740676685:akl_xkIDi5FTyagmRsTcN6ss1y4AIU_EMCyQJ9MIiF0/918a13b7ed87712f/Km4InxeslDwoWIoYjdBuXcX6e0_.nSGv0oK8cImnY1E-1740679253-1.1.1.1-GCttS3wOwegX4cAgGwTS7xq5V9JUNy3s5K1YrzIanmiraaKyYu8wsKRkIa2_TOq7","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T18:01:03.62416575Z","timestamp":1740679263624,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1237217600:1740676685:akl_xkIDi5FTyagmRsTcN6ss1y4AIU_EMCyQJ9MIiF0/918a13b7ed87712f/Km4InxeslDwoWIoYjdBuXcX6e0_.nSGv0oK8cImnY1E-1740679253-1.1.1.1-GCttS3wOwegX4cAgGwTS7xq5V9JUNy3s5K1YrzIanmiraaKyYu8wsKRkIa2_TOq7 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fmq2d/0x4AAAAAAA9lDQUAArOqbjlg/auto/fbE/new/normal/auto/\r\ncf-chl: Km4InxeslDwoWIoYjdBuXcX6e0_.nSGv0oK8cImnY1E-1740679253-1.1.1.1-GCttS3wOwegX4cAgGwTS7xq5V9JUNy3s5K1YrzIanmiraaKyYu8wsKRkIa2_TOq7\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 33845\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 18:00:59 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: AjlP6PvMQFFXOvBfu8APEtS29bdz1dKtIPh+5X4kTsABSvHGpCpvbdQPzqgQZ+s7$2lNMD6PDefQwpUWA6WWZug==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 918a13d908c2712f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27155,"size_decoded":27968,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (27968), with no line terminators","md5":"a079a8b1a2a08828e118b197615cb8f4","sha1":"611d51c4bf6570bf5dceb3ae1cad7e582b913cc6","sha256":"0f9d29495cfed219ed211b3c2d23772c3eabd3cc3bda4237524f4c9508aa666f","sha512":"58597a1f03cf5c9d0c83acf7490b3fc82ff81cb01f19da66e7431eadfa3d441c3c6110d0ce917e4f954a03d770f4d53217a5c2ee1940e13ba8c7247e0e14b806","ssdeep":"768:poyR/RDJfPmOfrME58C8BEAcqFYDUo0Ytp7ooDuxJFYidHNEeRyi/iWl:poU/lJnmOn8rBoMYDEspooOJFY0tdyiv","tlshash":"fcc2e1667cf1bf41198e4b6ff893833adc1580816184e857d5bdfd1a88a55c4026eff2","first_seen":"2025-02-27T18:01:24.230936Z","last_seen":"2025-02-27T18:01:24.230936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:03.559Z","timestamp":1740679263559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Jun 2024 00:00:00 GMT","end":"Wed, 25 Jun 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5","sha256":"AB:77:AE:8B:01:C3:97:E7:80:17:A2:C0:A0:8D:8A:BE:C9:8A:77:1C:06:8C:B9:64:E1:7B:E5:9F:3B:E7:EC:FA"}}},"request":{"raw":"GET /jquery-3.2.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://candodock.shared.it.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-10fdd\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 27 Feb 2025 18:01:03 GMT\r\nage: 1339127\r\nx-served-by: cache-lga21963-LGA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 10782\r\nx-timer: S1740679264.734373,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 23856\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23856,"size_decoded":69597,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-05-04T14:52:13.808451Z","times_seen":77834,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":169,"dns":1,"connect":15,"send":0,"wait":14,"receive":4,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:03.570Z","timestamp":1740679263570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 00:27:53 GMT","end":"Wed, 16 Apr 2025 01:27:34 GMT"},"fingerprint":{"sha1":"53:78:04:46:B4:48:0A:28:30:67:23:9B:D5:25:73:FE:FA:81:58:19","sha256":"61:5C:61:62:DB:83:BD:A3:E9:E6:EE:AF:83:D4:A7:09:2F:F7:4B:80:3F:7E:59:5A:7B:DC:00:69:05:76:EB:05"}}},"request":{"raw":"GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://candodock.shared.it.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Feb 2025 18:01:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: W/\"14d449eb8876fa55e1ef3c2cc52b0c17\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-cachedat: 03/18/2024 12:46:36\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1048\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: d51094b6e451251b9caffb9a325ba1b4\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 72690\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 918a13f57a93b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14897,"size_decoded":48944,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48664)","md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-04T14:52:13.824683Z","times_seen":105662,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":30,"dns":1,"connect":1,"send":0,"wait":16,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1237217600:1740676685:akl_xkIDi5FTyagmRsTcN6ss1y4AIU_EMCyQJ9MIiF0/918a13b7ed87712f/Km4InxeslDwoWIoYjdBuXcX6e0_.nSGv0oK8cImnY1E-1740679253-1.1.1.1-GCttS3wOwegX4cAgGwTS7xq5V9JUNy3s5K1YrzIanmiraaKyYu8wsKRkIa2_TOq7","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T18:01:03.824686766Z","timestamp":1740679263824,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1237217600:1740676685:akl_xkIDi5FTyagmRsTcN6ss1y4AIU_EMCyQJ9MIiF0/918a13b7ed87712f/Km4InxeslDwoWIoYjdBuXcX6e0_.nSGv0oK8cImnY1E-1740679253-1.1.1.1-GCttS3wOwegX4cAgGwTS7xq5V9JUNy3s5K1YrzIanmiraaKyYu8wsKRkIa2_TOq7 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fmq2d/0x4AAAAAAA9lDQUAArOqbjlg/auto/fbE/new/normal/auto/\r\ncf-chl: Km4InxeslDwoWIoYjdBuXcX6e0_.nSGv0oK8cImnY1E-1740679253-1.1.1.1-GCttS3wOwegX4cAgGwTS7xq5V9JUNy3s5K1YrzIanmiraaKyYu8wsKRkIa2_TOq7\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 42302\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 18:01:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-chl-out: feKkhiw7Y9MJKnaHLAQezFI6Hn/6mvnqQL81jPtM7o6dr03ShElZ1MOPCrl2he+ULxWu+/4a5ZW0k5tz+wq8wNLCDrjnn0jIFP+olD/qlKU=$10qLRg5e8THJHxVCer7BYQ==\r\ncf-chl-out-s: 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$ASK7wfGKeBdUoNvHQBXDyw==\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 918a13ee0be9712f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33642,"size_decoded":4776,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (4776), with no line terminators","md5":"83c202fc4ad4fc4079dc9ab7bb4094b3","sha1":"da20e5ee30a8894d068bd33dcf5bc3d2b06bde5d","sha256":"231bceef5ed96684e9112298612159d74fdbff7adf435b46f6a6bd390709728a","sha512":"1fe172f98b50d1ff0cc484e49cb7d12278c83a0540928a8903c85ab5bec8f8e516f40f17aa6baaae1616201273958ca94eb1ddbd3550e35e3ffd64e2a714ced5","ssdeep":"96:WLen2hlsEDJQIfGpCVUQY5sJMfYwK7sOTgngWahuzJiP43Jep8XCCJG:x2NdbfGgV2uKw5sO0nrahulO6XCx","tlshash":"84a19ee46a68cd5b634b89f14fb407bf415064f009a47cf2a960e2cca2f0e2325fb5e0","first_seen":"2025-02-27T18:01:24.232904Z","last_seen":"2025-02-27T18:01:24.232904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1505662699-1317754460.cos.ap-bangkok.myqcloud.com/bootstrap.min.js","fqdn":"1505662699-1317754460.cos.ap-bangkok.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"43.128.193.190","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Thailand","country_code":"TH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:03.575Z","timestamp":1740679263575,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cos.ap-bangkok.myqcloud.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Feb 2025 01:46:06 GMT","end":"Sun, 22 Mar 2026 01:46:05 GMT"},"fingerprint":{"sha1":"DD:ED:FC:04:28:DF:0D:49:80:D1:3A:6A:36:D0:44:F4:80:4E:F2:F2","sha256":"6E:20:B5:05:BD:48:BB:36:97:F9:6C:49:06:D7:31:70:6F:3C:C6:4F:EB:04:C1:FB:48:72:03:9B:A1:86:4F:69"}}},"request":{"raw":"GET /bootstrap.min.js HTTP/1.1\r\nHost: 1505662699-1317754460.cos.ap-bangkok.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 553001\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nContent-Disposition: attachment\r\nDate: Thu, 27 Feb 2025 18:01:05 GMT\r\nETag: \"10558f5bbfc3ae218503a280d02a0cdc\"\r\nLast-Modified: Thu, 20 Feb 2025 10:20:19 GMT\r\nServer: tencent-cos\r\nx-cos-force-download: true\r\nx-cos-hash-crc64ecma: 18224568879925595472\r\nx-cos-request-id: NjdjMGE4NjFfNTI5MDExMDlfMTRmZV85OWVkNDMx\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":553001,"size_decoded":553001,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65471), with CRLF line terminators","md5":"10558f5bbfc3ae218503a280d02a0cdc","sha1":"b407fdd054a571c34731bf3159a28e15e5aa690f","sha256":"7810396deff6331d4f26a6e86da15aa08c0fe3c6a4ee7fc25b92bbbba9f38ea7","sha512":"cec4cd8a9fd23064631d3ca97c2886cb8b6a87a5708a89018cfa75a429e8460a1eaf31a6360db8b573db81625befe68ceee25e64dea07347dddeb23f6b2dd4ee","ssdeep":"3072:RHnbk+KukFN5mEL+Ly+ZEI56LT8D7vHTlMmh2WLLVMtQT:RHbk+KukFN5mIqJ6LT4HlMmhJLLVMKT","tlshash":"91c42ebc7800914f5116573b6618bcb9d373380ba645cbfae94329bda297331eb7443a","first_seen":"2025-02-27T18:01:24.233685Z","last_seen":"2025-02-27T18:01:24.233685Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4653,"timings":{"blocked":1617,"dns":804,"connect":265,"send":0,"wait":542,"receive":871,"ssl":551},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=918a13b7ed87712f\u0026lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.95.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T18:01:06.729943885Z","timestamp":1740679266729,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=918a13b7ed87712f\u0026lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/fmq2d/0x4AAAAAAA9lDQUAArOqbjlg/auto/fbE/new/normal/auto/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 18:00:53 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 918a13b88ef9712f-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48188,"size_decoded":116623,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"45d86c1573a8d1fd89fdd942ecac3d37","sha1":"a77e9ef0018e81ba3798587fe66af4f34aa21c5f","sha256":"7267bf405ec474e59ce06f1b9421fa3f540acc61e0730bf012e9001dcbb781e4","sha512":"14fd3449c1a45f42dd0bb07a104e1f03c538ef680b42bc05d5d36635afabc326175fe4796efe30f8aca59a7bbe335dcb820ca3e6eb6219a08d786783ab11d542","ssdeep":"1536:YpRoKKvbWFFzjOvhWZg/YmRtLnmanhp9z4ODxeHxMvHl2E+LO0OoXGWaqlsKSo72:YpA6F96hxzbPh0ODexp4WbhDQgi","tlshash":"eab3c6c83ac6b9a5533365b8306b3446716facc4701c595ceb10e8e47cf5389626feba","first_seen":"2025-02-27T18:01:24.234577Z","last_seen":"2025-02-27T18:01:24.234577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1505662699.sbs/google.php","fqdn":"1505662699.sbs","domain":"1505662699.sbs","tld":"sbs"},"ip":{"addr":"69.49.246.64","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:06.670Z","timestamp":1740679266670,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1505662699.sbs","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Feb 2025 18:34:59 GMT","end":"Tue, 20 May 2025 18:34:58 GMT"},"fingerprint":{"sha1":"46:10:6D:C7:F0:FD:B1:FB:DA:0D:3F:61:65:B2:80:1C:D7:22:D4:C6","sha256":"68:D0:26:2F:C8:7B:41:7F:1A:43:41:45:F7:BD:CD:27:ED:F0:3C:8E:6C:F0:44:94:4D:A6:78:D2:0D:5E:DB:27"}}},"request":{"raw":"POST /google.php HTTP/1.1\r\nHost: 1505662699.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candodock.shared.it.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://candodock.shared.it.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 27 Feb 2025 18:01:07 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: https://candodock.shared.it.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 86400\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16,"size_decoded":16,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"1f57cbd1f1a1ced8f62d34242408414c","sha1":"52279c54b16f0a88d43d57b4cbb9813ea3cc39ab","sha256":"c462d460eab61de19f36cc384c99666e5bf65eaeba0c12b8f594c5410c01f220","sha512":"74a8b00878acbff90771ab31062d088ccee50794f975db0b2b0c26ee37eeb7792b99f456b1105d07c94deab79f376cec630e4761111cd6bda4120eb226d666d5","ssdeep":"","tlshash":"9360000000000c0c0cc00f00030003303f300f00300f30c0c00c003030c30c0c00c000","first_seen":"2023-04-05T18:33:18Z","last_seen":"2026-05-04T15:39:50.576828Z","times_seen":23054,"resource_available":false,"data":null}},"time_used":3429,"timings":{"blocked":522,"dns":283,"connect":116,"send":0,"wait":2379,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"23.36.77.176","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:12.701Z","timestamp":1740679272701,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"idnaakamaicdn.msftauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Fri, 27 Dec 2024 18:21:36 GMT","end":"Mon, 22 Dec 2025 18:21:36 GMT"},"fingerprint":{"sha1":"DC:51:C1:FA:8A:C3:85:DA:8E:3C:1C:06:37:00:90:7A:B4:62:A9:DC","sha256":"52:44:E6:FF:3E:4C:4B:46:24:B7:8C:24:4A:11:26:52:BD:DC:4E:23:DC:29:32:13:C6:5C:1B:7F:24:2D:72:70"}}},"request":{"raw":"GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 673\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: DhdidjYrlCeaRJJRG/y9mA==\r\nlast-modified: Wed, 15 Jan 2025 17:54:26 GMT\r\naccept-ranges: bytes\r\netag: \"0x8DD358DA72AAF33\"\r\nx-ms-request-id: 6471a91d-601e-0074-7d76-67603e000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30325836\r\ndate: Thu, 27 Feb 2025 18:01:12 GMT\r\nvary: Accept-Encoding\r\nakamai-grn: 0.ac4d2417.1740679272.c28515a\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":673,"size_decoded":1864,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc3d32a696895f78c19df6c717586a5d","sha1":"9191cb156a30a3ed79c44c0a16c95159e8ff689d","sha256":"0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68","sha512":"8d4f38907f3423a86d90575772b292680f7970527d2090fc005f9b096cc81d3f279d59ad76eafca30c3d4bbaf2276bbaa753e2a46a149424cf6f1c319ded5a64","ssdeep":"","tlshash":"4e310059c51d3566ec04c3aceae1d468315e71efa8a581c961849b3f95b0dce0eccb70","first_seen":"2023-04-12T23:20:27Z","last_seen":"2026-05-04T14:42:49.513419Z","times_seen":102727,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":131,"dns":93,"connect":1,"send":0,"wait":14,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:12.692Z","timestamp":1740679272692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Wed, 29 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00","sha256":"9D:84:E9:6F:C0:27:5D:F4:2F:56:13:C0:A2:D3:90:9A:C5:EF:56:3D:50:FA:16:6B:57:44:3F:4F:B4:FA:B5:2E"}}},"request":{"raw":"GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Feb 2025 18:01:12 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 621\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 10 Nov 2020 03:41:24 GMT\r\netag: 0x8D8852A7FA6B761\r\nx-ms-request-id: 8f10d1a5-601e-0020-2224-84b8f1000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20250227T180112Z-159c56f5d779l5mfhC1SVGzycw0000000q1g000000008gan\r\nx-fd-int-roxy-purgeid: 4554691\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":621,"size_decoded":1592,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e48046ce74f4b89d45037c90576bfac","sha1":"4a41b3b51ed787f7b33294202da72220c7cd2c32","sha256":"8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93","sha512":"b2bba2a68edaa1a08cfa31ed058afb5e6a3150aabb9a78db9f5ccc2364186d44a015986a57707b57e2cc855fa7da57861ad19fc4e7006c2c239c98063fe903cf","ssdeep":"","tlshash":"b931787f43b45ae7239017741760626c13f4ee917169d0b4dba30c9a8d4bd33327843a","first_seen":"2023-04-14T20:16:11Z","last_seen":"2026-05-04T15:09:42.48199Z","times_seen":77489,"resource_available":false,"data":null}},"time_used":497,"timings":{"blocked":236,"dns":174,"connect":21,"send":0,"wait":22,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:12.690Z","timestamp":1740679272690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 29 Oct 2024 00:00:00 GMT","end":"Wed, 29 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"38:05:DB:30:B5:83:1A:A0:A9:AD:24:B2:62:0F:E7:F6:60:9B:7C:00","sha256":"9D:84:E9:6F:C0:27:5D:F4:2F:56:13:C0:A2:D3:90:9A:C5:EF:56:3D:50:FA:16:6B:57:44:3F:4F:B4:FA:B5:2E"}}},"request":{"raw":"GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Feb 2025 18:01:13 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 17174\r\ncache-control: public, max-age=604800\r\nlast-modified: Fri, 02 Nov 2018 20:25:25 GMT\r\netag: 0x8D6410152A9D7E1\r\nx-ms-request-id: 2be1e490-a01e-0013-0638-89d8f7000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20250227T180112Z-159c56f5d779l5mfhC1SVGzycw0000000q1g000000008gam\r\nx-fd-int-roxy-purgeid: 4554691\r\nx-cache: TCP_REMOTE_HIT\r\nx-cache-info: L2_T1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17174,"size_decoded":17174,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-05-04T14:00:08.691501Z","times_seen":164474,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":237,"dns":176,"connect":21,"send":0,"wait":192,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candodock.shared.it.com/CYazP/","fqdn":"candodock.shared.it.com","domain":"it.com","tld":"com"},"ip":{"addr":"172.67.209.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-27T18:01:02.535Z","timestamp":1740679262535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shared.it.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Feb 2025 22:16:44 GMT","end":"Tue, 20 May 2025 23:15:26 GMT"},"fingerprint":{"sha1":"9C:8C:3B:7D:83:E8:41:B4:B1:F5:6E:88:6D:30:D8:2C:D8:F5:9A:E3","sha256":"5E:1F:8B:66:74:8C:FB:72:5E:FA:40:DC:7D:52:A2:40:65:41:54:7B:1B:CE:F9:DD:32:3E:91:C0:91:85:20:C2"}}},"request":{"raw":"POST /CYazP/ HTTP/1.1\r\nHost: candodock.shared.it.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 944\r\nOrigin: https://candodock.shared.it.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/CYazP/\r\nCookie: PHPSESSID=r82922rrapgnr9pa38603umt87\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 18:01:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.0.30\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tGw%2BcdGIYRYyNXYHR6FYxFoC4rRW%2FS2y5WzBaX3mu34Kqp4EuywJM2rvhYU4b9zZNKnXyqHANotHGhmUBAq4y%2B0gU%2Fk24XkIqEj%2FNc%2FMs0p3ODWJC%2BD0cYPdHsUZxDPBVAvIiHew%2BiDI2g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 918a13eeda41b511-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3169\u0026min_rtt=1279\u0026rtt_var=1844\u0026sent=14\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=4982\u0026recv_bytes=2592\u0026delivery_rate=1232\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=09588d39e6adb289\u0026ts=10102\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38787,"size_decoded":38787,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (38652)","md5":"51899f525c899259fc55f17d228bb3cb","sha1":"19b6b69a0860e29fa729b6bed60330678cc682f1","sha256":"e53dc17a13672f94edc740a9c9350cfe5c6cca97348fe38b00e15a8e3a7f703c","sha512":"61bc014a2d7fe805f50c5882c737b82b81acf33f6a4d227499a3a28f545e3f38c3c857a7a0aa28240d4848c906aa2ae8bc29081469a29db9da58efe77a4422b8","ssdeep":"768:FMPNI2d5qGow1kmkuzqjA6Z82G5gBG0Elu02HgyuxW1H3oGquzUoEo6z8J:FMVdUGorjwwpuxW1PUJzq","tlshash":"9403834a2d9baa044fcb133a732d4683946ccf9233c9d8d1e750fa13ed59512f9b0b66","first_seen":"2025-02-27T18:01:24.237627Z","last_seen":"2025-02-27T18:01:24.237627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":987,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":814,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:03.572Z","timestamp":1740679263572,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Feb 2025 08:37:09 GMT","end":"Mon, 28 Apr 2025 08:37:08 GMT"},"fingerprint":{"sha1":"D9:DA:31:61:C2:D7:49:CF:50:B6:1B:FE:BA:EC:9D:12:91:8D:10:AC","sha256":"EE:56:52:78:A6:75:55:7C:10:D0:E0:28:07:D3:EA:3E:28:1D:2D:B9:A5:2F:8A:4E:CB:C1:E1:2D:DC:E9:D2:36"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Feb 2025 10:31:12 GMT\r\nexpires: Fri, 27 Feb 2026 10:31:12 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 26991\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85578,"size_decoded":85578,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-04T15:00:54.920691Z","times_seen":276105,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":198,"dns":7,"connect":21,"send":0,"wait":22,"receive":22,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:03.563Z","timestamp":1740679263563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jan 2025 09:16:22 GMT","end":"Thu, 24 Apr 2025 10:16:21 GMT"},"fingerprint":{"sha1":"00:0E:39:59:53:CF:68:07:90:75:EB:68:26:B9:04:22:44:7D:9A:32","sha256":"E1:9E:09:57:22:18:8B:D8:DD:89:2B:13:1E:DE:9E:B5:D9:7F:4E:46:18:C4:8D:2B:07:E4:55:3D:8A:1F:5C:E6"}}},"request":{"raw":"GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://candodock.shared.it.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Feb 2025 18:01:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6157\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fa9-4af4\"\r\nlast-modified: Mon, 04 May 2020 16:15:37 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1001229\r\nexpires: Tue, 17 Feb 2026 18:01:03 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5sCAhquwCll3uohMzrPADsoD4XrWVBU3VZIsbxa2sg%2BA9xD9HM6ua3JKviH3Y1K3TxQpbnIBLR6uN%2BrYdgWcWrbQdbRlxtWlS1KzOicacOsbX2EUsR3KTRzKCfSdDn6rAwnbXovJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 918a13f57a26b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19188,"size_decoded":19188,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19015)","md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-04T14:52:13.820137Z","times_seen":106390,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":17,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candodock.shared.it.com/CYazP/","date":"2025-02-27T18:01:03.574Z","timestamp":1740679263574,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jan 2025 00:27:53 GMT","end":"Wed, 16 Apr 2025 01:27:34 GMT"},"fingerprint":{"sha1":"53:78:04:46:B4:48:0A:28:30:67:23:9B:D5:25:73:FE:FA:81:58:19","sha256":"61:5C:61:62:DB:83:BD:A3:E9:E6:EE:AF:83:D4:A7:09:2F:F7:4B:80:3F:7E:59:5A:7B:DC:00:69:05:76:EB:05"}}},"request":{"raw":"GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candodock.shared.it.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Feb 2025 18:01:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: US\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"67176c242e1bdc20603c878dee836df3\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:06 GMT\r\ncdn-proxyver: 1.04\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/04/2024 02:53:43\r\ncdn-edgestorageid: 1029\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 1\r\ncdn-requestid: c6c8a086d090f1d2baac8a7b0c894894\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 997077\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 918a13f5aa9256bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51039,"size_decoded":51039,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50758)","md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-04T14:51:32.087147Z","times_seen":122520,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":52,"dns":23,"connect":1,"send":0,"wait":18,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
