{"report_id":"a46d1276-35e1-46e9-a89c-8f37171b3a4e","version":6,"status":"done","tags":[],"date":"2024-09-25T16:34:03Z","url":{"schema":"http","addr":"cfl.dropboxstatic.com","fqdn":"cfl.dropboxstatic.com","domain":"dropboxstatic.com","tld":"com"},"ip":{"addr":"104.16.99.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"cfl.dropboxstatic.com/","fqdn":"cfl.dropboxstatic.com","domain":"dropboxstatic.com","tld":"com"},"title":"Attention Required! | Cloudflare"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-07T07:44:11Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cfl.dropboxstatic.com","ip":{"addr":"104.16.99.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-09-10","domain_rank":13598,"first_seen":"2017-01-30 05:53:29","last_seen":"2024-09-24 23:43:30","alert_count":0,"request_count":5,"received_data":13944,"sent_data":1930,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r11.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-07 07:43:57","last_seen":"2024-09-25 01:59:50","alert_count":0,"request_count":2,"received_data":1774,"sent_data":654,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-09-25 09:32:11","alert_count":0,"request_count":4,"received_data":3551,"sent_data":1308,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"cfl.dropboxstatic.com/","fqdn":"cfl.dropboxstatic.com","domain":"dropboxstatic.com","tld":"com"},"ip":{"addr":"104.16.99.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cfl.dropboxstatic.com/","fqdn":"cfl.dropboxstatic.com","domain":"dropboxstatic.com","tld":"com"},"ip":{"addr":"104.16.99.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"34ad0a116707d3b794129a6720af92d7","sha1":"424de9dbb8bc774e2a2d4ade100d90f5ac0ecbf4","sha256":"d011a9449a990f2086894be870adc6fbb53595dc593b410a83e45e40bfbc7262","sha512":"4d7cca00f0d83452fe3513c0c07c97ca5318dfcda0937df40626e49c9e15ef9a4287e6aa98da4c873d46248a20418b0ef793704c6619efad43c8b338a515cb37","ssdeep":"","tlshash":"43e0226b3b45293456f7aab3337fe37c3a22e0969cc015201968cd5ccd2bac042352c4","size":393,"data":"","first_seen":"2023-04-05T04:39:40Z","last_seen":"2025-03-02T06:13:46.994369Z","times_seen":143291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cfl.dropboxstatic.com/","fqdn":"cfl.dropboxstatic.com","domain":"dropboxstatic.com","tld":"com"},"ip":{"addr":"104.16.99.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:03.373685Z","times_seen":13297281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-25T16:33:37.88974172Z","timestamp":1727282017889,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"856F85441E043130F88668BE6CF68110187856F17999BDDC4332437D383C79B6\"\r\nLast-Modified: Mon, 23 Sep 2024 09:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=20618\r\nExpires: Wed, 25 Sep 2024 22:17:15 GMT\r\nDate: Wed, 25 Sep 2024 16:33:37 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"72e206e9b89445fb2fb4031a6abe6169","sha1":"a18bebfb86a71685bd817c15e348cfb5ea438c72","sha256":"856f85441e043130f88668be6cf68110187856f17999bddc4332437d383c79b6","sha512":"daa9bdbd4724ed07e1bcf8d82a936f0b6f6a998ffe2c704353017fb3c87611bf8795afbccc233b0e09dcbd4908be8dfaf8556c9e88a0dac161a7a3d8a9bb639e","ssdeep":"","tlshash":"cdf07e912225b648e3e602022a50c428ed2838fc381058c0b2e8d7f09f28bb461e6018","first_seen":"2024-09-23T14:36:45Z","last_seen":"2024-09-28T08:17:26.962886Z","times_seen":30040,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-25T16:33:37.900442895Z","timestamp":1727282017900,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"EED92BA0D6FCDA7B8365052A0ABBB873BE47ACC3C38537EFC9E089FC9ACBFE82\"\r\nLast-Modified: Wed, 25 Sep 2024 11:06:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13761\r\nExpires: Wed, 25 Sep 2024 20:22:58 GMT\r\nDate: Wed, 25 Sep 2024 16:33:37 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"28e78d8178ae1eb54a5649b6d53b28c1","sha1":"db0751a25e0edeb1d0fc2e12857887f921415115","sha256":"eed92ba0d6fcda7b8365052a0abbb873be47acc3c38537efc9e089fc9acbfe82","sha512":"61cc0e44475b72d3fd3e1ff47becd72960a1fc9fa15f558e12008065ebf93a4716a54b3952b8b4750fbf4087966c9b2270e8594fa1a41c857a8c1e947016120d","ssdeep":"","tlshash":"8ff00e35d1e4b8056af0480225d8e75b19306aef74400ee65d840fe39b107bd4a8d448","first_seen":"2024-09-25T16:25:12Z","last_seen":"2024-09-28T07:45:42.609536Z","times_seen":2667,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-25T16:33:38.225542023Z","timestamp":1727282018225,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"55FA8283FBD284A294B1853B35EB0BBBDFD3DD6DE3CB3EBF441F0A7F6296D41D\"\r\nLast-Modified: Wed, 25 Sep 2024 10:33:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4227\r\nExpires: Wed, 25 Sep 2024 17:44:05 GMT\r\nDate: Wed, 25 Sep 2024 16:33:38 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"b864476fa0457236e163a06e1cad5279","sha1":"e9acc26214498b6861058be05885f07275075406","sha256":"55fa8283fbd284a294b1853b35eb0bbbdfd3dd6de3cb3ebf441f0a7f6296d41d","sha512":"955f4c29f456464b1205ea9732654d42d98891c424a1fbac4d6c396ec63bd7fa26f054417c29d76ef2d6a5c59f6c42607b7d694a4d7e9030bf32a1f7e94c8290","ssdeep":"","tlshash":"3ff0051502e67c015fb918357abaf7146c20adda298021d639c802f1ba06f6c0745008","first_seen":"2024-09-25T14:29:23Z","last_seen":"2024-09-28T07:47:18.383604Z","times_seen":4856,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-25T16:33:38.555125822Z","timestamp":1727282018555,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"E7663AF7161FB47BA9214420AC390365B05F832603CD07B2D71A5E58C21FF854\"\r\nLast-Modified: Wed, 25 Sep 2024 01:06:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=20392\r\nExpires: Wed, 25 Sep 2024 22:13:30 GMT\r\nDate: Wed, 25 Sep 2024 16:33:38 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"0db22d1bf08e17d0aa79837780ccb58e","sha1":"8a1325f2825794922c84ae24bfa90fbef5c26c86","sha256":"e7663af7161fb47ba9214420ac390365b05f832603cd07b2d71a5e58c21ff854","sha512":"a2dc94509cd11300d6af8681d618630a5717509251a9a1373f2434b368d69b9ba93197a3ab6ce738189f0a62e35c8d51a855ce9b4584fc18c25e2b1aeb4307fa","ssdeep":"","tlshash":"49f005260f4b7c40f7e4c4261f7dc761b621697f7e1028f361dc47e1641179e1645008","first_seen":"2024-09-25T05:48:29Z","last_seen":"2024-09-28T07:53:02.340701Z","times_seen":7680,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cfl.dropboxstatic.com/","fqdn":"cfl.dropboxstatic.com","domain":"dropboxstatic.com","tld":"com"},"ip":{"addr":"104.16.99.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-09-25T16:33:38.800Z","timestamp":1727282018800,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: cfl.dropboxstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Wed, 25 Sep 2024 16:33:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: max-age=15\r\nExpires: Wed, 25 Sep 2024 16:33:53 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8c8c6ac99fffb4fa-OSL\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":1738,"size_decoded":4519,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (394)","md5":"993e24a39bd835c80c9486cd81740a3d","sha1":"4b83eec81a457ea0fc6370ec70595261c4db0a17","sha256":"4924c2d853deee1a2d22917b25cf4719f5c8c0879a9acab38c88507237e1744f","sha512":"5c5ba3dd3bb3bd29701873d828e2f889d942453f68464aeac131de6fe557b9a369f173bfac407e047f48936b3fd4cab726dde69e8af999d582973e32ba0a175a","ssdeep":"96:1j9jwIjYj5jDK/D5DMF+C8ZZqXKHvpIkdN+rR79PaQxJbGD:1j9jhjYj9K/Vo+nKaHvFdN+rl9ieJGD","tlshash":"0b917326bafd217e10a3816225fd63497eb0c453c6ab05a076acc1391f9ef55fe17184","first_seen":"2024-09-28T07:44:14.672832Z","last_seen":"2024-09-28T07:44:14.672832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":19,"dns":2,"connect":19,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cfl.dropboxstatic.com/cdn-cgi/styles/cf.errors.css","fqdn":"cfl.dropboxstatic.com","domain":"dropboxstatic.com","tld":"com"},"ip":{"addr":"104.16.99.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://cfl.dropboxstatic.com/","date":"2024-09-25T16:33:39.019Z","timestamp":1727282019019,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/styles/cf.errors.css HTTP/1.1\r\nHost: cfl.dropboxstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cfl.dropboxstatic.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Sep 2024 16:33:39 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Sep 2024 20:15:47 GMT\r\nETag: W/\"66f31df3-5df3\"\r\nServer: cloudflare\r\nCF-RAY: 8c8c6acaca72b4fa-OSL\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nExpires: Wed, 25 Sep 2024 18:33:39 GMT\r\nCache-Control: max-age=7200, public\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4515,"size_decoded":24051,"mime_type":"text/css","magic":"ASCII text, with very long lines (24050)","md5":"5e8c69a459a691b5d1b9be442332c87d","sha1":"f24dd1ad7c9080575d92a9a9a2c42620725ef836","sha256":"84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091","sha512":"6db74b262d717916de0b0b600eead2cc6a10e52a9e26d701fae761fcbc931f35f251553669a92be3b524f380f32e62ac6ad572bea23c78965228ce9efb92ed42","ssdeep":"192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk","tlshash":"86b21323e5f5381a2516a13ca08a92dc69356073f7f30e9eb985d06cd78dd791f226c3","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:31:24.676091Z","times_seen":414739,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cfl.dropboxstatic.com/cdn-cgi/images/browser-bar.png?1376755637","fqdn":"cfl.dropboxstatic.com","domain":"dropboxstatic.com","tld":"com"},"ip":{"addr":"104.16.99.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cfl.dropboxstatic.com/","date":"2024-09-25T16:33:39.132Z","timestamp":1727282019132,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/browser-bar.png?1376755637 HTTP/1.1\r\nHost: cfl.dropboxstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://cfl.dropboxstatic.com/cdn-cgi/styles/cf.errors.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Sep 2024 16:33:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 715\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Sep 2024 20:15:47 GMT\r\nETag: \"66f31df3-2cb\"\r\nServer: cloudflare\r\nCF-RAY: 8c8c6acb7bfcb4fa-OSL\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nExpires: Wed, 25 Sep 2024 18:33:39 GMT\r\nCache-Control: max-age=7200, public\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":715,"size_decoded":715,"mime_type":"image/png","magic":"PNG image data, 960 x 53, 8-bit colormap, non-interlaced","md5":"226dcb8f6144bdaafdfbd8f2f354be64","sha1":"3785cc5b3bf52f8e398177b0ff1020b24aa86b8c","sha256":"8c873472f4925d5d47521db4d52532d2983e9cb1bde8b43143a6cc6db56c35db","sha512":"ed898b12c4895f7aceaab443c1071e6376db71b4dfdbd769f5f3be71d562438a18b5e5dc36dd7cc610926e380603a894b2e81df4302680c736a412bfd3360d3a","ssdeep":"","tlshash":"a5014ec4a009bcb009f21b37859cb601c07175098e23f023045eb9b22b7accf83a8f92","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:26:54.965611Z","times_seen":156764,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cfl.dropboxstatic.com/cdn-cgi/images/cf-no-screenshot-error.png","fqdn":"cfl.dropboxstatic.com","domain":"dropboxstatic.com","tld":"com"},"ip":{"addr":"104.16.100.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cfl.dropboxstatic.com/","date":"2024-09-25T16:33:39.136Z","timestamp":1727282019136,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/images/cf-no-screenshot-error.png HTTP/1.1\r\nHost: cfl.dropboxstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://cfl.dropboxstatic.com/cdn-cgi/styles/cf.errors.css\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Sep 2024 16:33:39 GMT\r\nContent-Type: image/png\r\nContent-Length: 3213\r\nConnection: keep-alive\r\nLast-Modified: Tue, 24 Sep 2024 20:15:47 GMT\r\nETag: \"66f31df3-c8d\"\r\nServer: cloudflare\r\nCF-RAY: 8c8c6acb89700b06-OSL\r\nX-Frame-Options: DENY\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nExpires: Wed, 25 Sep 2024 18:33:39 GMT\r\nCache-Control: max-age=7200, public\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3213,"size_decoded":3213,"mime_type":"image/png","magic":"PNG image data, 178 x 175, 8-bit colormap, non-interlaced","md5":"0d768cbc261841d3affc933b9ac3130e","sha1":"aff136a4c761e1df1ada7e5d9a6ed0ebea74a4b7","sha256":"1c53772285052e52bb7c12ad46a85a55747ed7bf66963fe1993fcef91ff5b0d0","sha512":"ce5b1bbb8cf6b0c3d1fa146d1700db2300abd6f2bdbe43ecaac6aebc911be6e1bcd2f8c6704a2cfa67bbb45598793ddec017e05c2c37ce387293aae08e7c342f","ssdeep":"","tlshash":"7561f7f185012a2a2fb7dc8552ecc3a810166b7b353744e73ba46d344cde7781325f59","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T17:26:54.967077Z","times_seen":156769,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"cfl.dropboxstatic.com/favicon.ico","fqdn":"cfl.dropboxstatic.com","domain":"dropboxstatic.com","tld":"com"},"ip":{"addr":"104.16.100.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://cfl.dropboxstatic.com/","date":"2024-09-25T16:33:39.157Z","timestamp":1727282019157,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cfl.dropboxstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://cfl.dropboxstatic.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Wed, 25 Sep 2024 16:33:39 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: max-age=15\r\nExpires: Wed, 25 Sep 2024 16:33:54 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8c8c6acba9b80b06-OSL\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":1739,"size_decoded":4519,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (394)","md5":"c41be062917a080f8e2e2bf765ee9896","sha1":"b220619fa58ed79175bd044524440bc76c95b3ce","sha256":"11cf3a8a523d6e302964522b475f212ffabe9fdc124ec44cedf34654fc7c689c","sha512":"f551208337b0eb0a42963decb905e8ea3a2fae6678fcde60cc054d20722aba860d06ad7b0754fdc34c98fb3d98d60bd8ff9110cbb1bfe24db345266349378dce","ssdeep":"96:1j9jwIjYj5jDK/D5DMF+C8ZZqXKHvpIkdNRrR79PaQxJbGD:1j9jhjYj9K/Vo+nKaHvFdNRrl9ieJGD","tlshash":"f3917326bafd217e10a3816225fd63487aa0c453c6ab05a076acc1391f9ef59fe1b184","first_seen":"2024-09-28T07:44:14.676059Z","last_seen":"2024-09-28T07:44:14.676059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-25T16:33:40.996826632Z","timestamp":1727282020996,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"86B8145813126E00F5FC0C5FA7F241C6687020C67A796E6A5D3B0688C2E74473\"\r\nLast-Modified: Wed, 25 Sep 2024 12:18:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=8923\r\nExpires: Wed, 25 Sep 2024 19:02:23 GMT\r\nDate: Wed, 25 Sep 2024 16:33:40 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"c1ff601f62931f3c9b84ea31d1ea35c6","sha1":"01098cc4d1660ce674992cd4d666e0c794d9f8a6","sha256":"86b8145813126e00f5fc0c5fa7f241c6687020c67a796e6a5d3b0688c2e74473","sha512":"7398a1ba5f9933e643f457bc309a63a166bebe1b7938099d3fa984b670cea4fd9659091fd08377e0f59bdafdff2fc101e1d85afb42e0d9fcee5eadae466e298b","ssdeep":"","tlshash":"01f020a066b4bc019b6cfc395cc5d22614744ece6498b1ad886182db24297ee00c0014","first_seen":"2024-09-25T18:25:57Z","last_seen":"2024-09-28T07:44:28.306833Z","times_seen":3519,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r11.o.lencr.org/","fqdn":"r11.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-09-25T16:33:41.001306927Z","timestamp":1727282021001,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r11.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"86B8145813126E00F5FC0C5FA7F241C6687020C67A796E6A5D3B0688C2E74473\"\r\nLast-Modified: Wed, 25 Sep 2024 12:18:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=8923\r\nExpires: Wed, 25 Sep 2024 19:02:23 GMT\r\nDate: Wed, 25 Sep 2024 16:33:40 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"c1ff601f62931f3c9b84ea31d1ea35c6","sha1":"01098cc4d1660ce674992cd4d666e0c794d9f8a6","sha256":"86b8145813126e00f5fc0c5fa7f241c6687020c67a796e6a5d3b0688c2e74473","sha512":"7398a1ba5f9933e643f457bc309a63a166bebe1b7938099d3fa984b670cea4fd9659091fd08377e0f59bdafdff2fc101e1d85afb42e0d9fcee5eadae466e298b","ssdeep":"","tlshash":"01f020a066b4bc019b6cfc395cc5d22614744ece6498b1ad886182db24297ee00c0014","first_seen":"2024-09-25T18:25:57Z","last_seen":"2024-09-28T07:44:28.306833Z","times_seen":3519,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}