{"report_id":"b45098aa-7aff-4695-8f7d-97fcb8cb46a6","version":6,"status":"done","tags":["suspicious"],"date":"2026-03-04T17:13:54Z","url":{"schema":"https","addr":"northhighland-work.com","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"northhighland-work.com/","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"title":"North Highland","dom":{"size":464,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (464), with no line terminators","md5":"18b42325c90e7dd7dcad343cce8eb592","sha1":"07c845e2888ea4879e74426228a12e66548f96f4","sha256":"89c3ae014b9a193a017ec96faacefa3aaad22db71cc9099cefbb03b02db23213","sha512":"278f9b25f82f0efa580ba7dcd78e785d052aaf0ab37d3385eb75fcb4d5a81066c033391816e512cc87a31ce391483213b6229b766f311145aef386c47a4acb60","ssdeep":"","tlshash":"82f0dc769052393d534306ccc981b7052583f1abee02d49c09fca6acd7d2c9b644434c","dom_hash":"domhash0bb853d50aff6e93bae96d9cf8d7a934","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"northhighland-work.com","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T17:13:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-04","alert":"Detects file containing Telegram Bot API","trigger":"northhighland-work.com/assets/index.b97a96ea.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"new-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":987273,"first_seen":"2018-07-31T06:41:30Z","last_seen":"2026-03-01T06:02:26.044834Z","alert_count":0,"request_count":3,"received_data":8047,"sent_data":1955,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"camorope-client-a.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1631624,"first_seen":"2018-09-20T04:36:38Z","last_seen":"2026-03-01T17:44:32.967326Z","alert_count":0,"request_count":2,"received_data":1012,"sent_data":1350,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"edge-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1537350,"first_seen":"2022-05-13T18:55:42Z","last_seen":"2026-03-01T04:51:58.338515Z","alert_count":0,"request_count":2,"received_data":2060,"sent_data":1145,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":81610,"sent_data":642,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.meiqia.com","ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"domain_registered":"2009-01-27","domain_rank":1675070,"first_seen":"2016-07-23T03:30:52Z","last_seen":"2026-03-01T06:02:26.019337Z","alert_count":0,"request_count":6,"received_data":1462541,"sent_data":2714,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"northhighland-work.com","ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-07","domain_rank":0,"first_seen":"2026-03-04T17:13:58.586485Z","last_seen":"2026-03-04T17:13:58.586485Z","alert_count":1,"request_count":11,"received_data":13983384,"sent_data":5704,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","size":16345,"data":"","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-07-02T23:24:00.315628Z","times_seen":2631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/index.b97a96ea.js","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"869e35cac55fec92d6a9be24a7a2af44","sha1":"e0b06cedc3dda9d188937d6a092ee04b04a4a1e9","sha256":"5ec55c6504f0bb73c78997ead03e44e05fdaf683606403ea1d4ca1c74d3cbcff","sha512":"70ba2157c73ccef6173fb1a99f9533aaeda2d14bdc3841104bf33ba64a37c3aea5d4f5b97657b1f66a4293d8c2225a0ceab48b2f07bc20c24e6de370df0b4ff6","ssdeep":"49152:R0eEmLcF1y5hU+HERB3pVqfhIqvHaWXTsFQyxUqnwN8ovyAp87p30YAyPT:CAbTAd","tlshash":"dde59c03314939a34a72699fd66f920a70acbf84908590d8f4becddd1c59e26319fb7c","size":3108420,"data":"","first_seen":"2026-03-04T17:14:05.470412Z","last_seen":"2026-03-04T17:14:05.470412Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-03-04","alert":"Detects file containing Telegram Bot API","trigger":"northhighland-work.com/assets/index.b97a96ea.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5222261495d64d245b99d68bb7013230","sha1":"e858a3351fbb6c4f76d769dd5de74a01d11231d9","sha256":"9c4bafa46c22467a0f2eabe0251b6198a42da4746917110ed5b0aceb365502a6","sha512":"6f2b54f43be08deae659048e5d4e557e5f1017d32f597ae93b08cf3cda9fe9269d329b8fe6d830a43c0ffad04fa0da63f8bb3989d33bbd68ff93406f190a6107","ssdeep":"","tlshash":"86c08cc5a0c22d106602645610af39e4a024403b704c1b068cd4ec492e220f18233e98","size":144,"data":"","first_seen":"2023-07-03T07:59:47Z","last_seen":"2026-07-23T11:39:07.14835Z","times_seen":258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9e9f080b81a15e02f3cb19ccd6a263dc","sha1":"01702b3280b536d33065a51b78ac5fbeb098e476","sha256":"9340aeb3499f5c90f53eb746355c1eeb3fcec0c76eb0242844a6a272b943431c","sha512":"479f5bf09a30e1d69a3727cce550eec944ce2bc967ba082fa4f56239e5f015ee9017fe2e147483ed996db4901ff0b88cdb1e8cad1a07c0db1431e59c8c63afae","ssdeep":"","tlshash":"ead097cce09b5948298194a7917f20d0802440a7a188da039cd0fc8839224b8527bdcc","size":232,"data":"","first_seen":"2026-03-04T17:14:05.472616Z","last_seen":"2026-03-04T17:14:05.472616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"77d455953b95d5820117c04e075700ac","sha1":"d669c43192647c8c646946315ef28352b1b2bb1e","sha256":"f06f7a9c590b7cbd7cef63cb84ab4a8bf6929a66411a624281d245dfda264435","sha512":"1c7ffe6033d0a35d0ac69f8253a945a9161f27ba21cda8bf51595024170afee95e3be3de14ecc68c0d66517bc6a8625f665b4b1f6d144819084aa185c8ef8a75","ssdeep":"","tlshash":"7dd0a7caa4923e110203550175df39d9a1388026625c2757dc58d95d7fa21f4513bacb","size":224,"data":"","first_seen":"2026-03-04T17:14:05.473572Z","last_seen":"2026-03-04T17:14:05.473572Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"63a098f214a66f23b887d8240b09aeac","sha1":"e3386d2806b2c3272d015ea10040265c06d748b1","sha256":"4d515ae16f74cea2d17e01a98edb0555e2c8dd78269439f821ef6125a1f0604e","sha512":"fedbc4386e83bdb75720156ae8948c8ffe39f4d335779b53b02702822954590e88baeccdf77df584000cd0c581aac46b9977a61109bf26680116987d03ccce03","ssdeep":"","tlshash":"d0c08cc4a0c23d005a07e61110af38e490248026744c1b528c95dc482e220b48237eec","size":148,"data":"","first_seen":"2026-03-04T17:14:05.474672Z","last_seen":"2026-03-04T17:14:05.474672Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/app-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e64225a20489a5be3c5e88100dd38e","sha1":"0a3284b39f08e6010240e0919bd969b481be66e8","sha256":"8156e064a7d0999960d1dd3f8a6c5c0dc97d0ea589a93642d8d679346eabecdb","sha512":"a228b02bfc2c2434fd215e4f63c6969ff9dc5db2c78bfc6c44efab63651798790b82154f55db7274c0652ac85ad1f1654cbd36ecbb1099b31d04407b621c8ed3","ssdeep":"12288:7Zw4XSrkavBcfHGFIteWlAltGkiK4Vs/lOZy:1/XSAFHGFIteL7riLVs/d","tlshash":"3f4528cd71c2b0a207e361b1403f100bb33a6d69680d9464f665d8e9bdb998e9237f7d","size":1209102,"data":"","first_seen":"2025-11-28T12:22:00.201964Z","last_seen":"2026-03-06T01:26:04.938245Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"e56ddbb05a974a6bc5ea44661e509a21","sha1":"448d4cb69f9441e10731b1ff4aa9dc81502589bd","sha256":"1759e8c6c2ce9c987245281cd33bb9260ce82e31b604131a5da486db89369913","sha512":"a3b2b0accbc0f18d13fc0eb6d742a5bf00a9614399e05b97b96ed0963e7d29b5868f73ef541c5f5bf8d125e7f7040d03f39cc853a52ffa2f1e2ebb7a20165242","ssdeep":"","tlshash":"7b700008080000800a002c00e000020080c2000802202008c020a8a0082c088808f800","size":21,"data":"","first_seen":"2023-04-10T22:51:51Z","last_seen":"2026-07-26T08:27:55.660169Z","times_seen":48786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/entrypoint-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1745aac366a0fd580fdaa1f5de861ae","sha1":"b9fa4bcdc30e775656a0485cbeea7ff6bd4eeabe","sha256":"20b7430e9ed5da2ea82f9fb50aafce7476e531219989ccbddbdf66749a4328b0","sha512":"3150e2a3e9bad6218010c55f184401815ae85f470fe88c821e14b3f9c4b8327f048dc1c4e28e2d52fbb4cc8481927ecb724e0282fee96fb29c8a9cf66e43d5d4","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbM3Zh:+llOuU1C+Pjv+1o+9YW","tlshash":"c91408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","size":194416,"data":"","first_seen":"2025-11-28T12:22:00.181302Z","last_seen":"2026-03-06T01:26:04.909446Z","times_seen":540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/splash.6120ffb8.js","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97737734acafd1b01f21cb381371c384","sha1":"d65a732474eb92eb8e5b20419680f9d60a46902d","sha256":"fd15cce16fafbefa9a6b62c2ae1bde956cfe614d75728aabcc29ab1464902d42","sha512":"642850f8de8ef94859d8b0f6da19781871bc771287bf728bb07d1079229b41f42f48148dd076d6463ef4534d7634a402e63b688e9bd89709252bdde9cc5fef9b","ssdeep":"","tlshash":"477142a0d00a9b3d85a30426f964c801e08deba5d1878d4bf0fc95153bd7eb58bca778","size":3729,"data":"","first_seen":"2026-03-04T17:14:05.455348Z","last_seen":"2026-03-04T17:14:05.455348Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/893.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"72c711adf080251c80c79fac21d48971","sha1":"8460ed7d7836055f48d16714f7d132e9ce25a4e3","sha256":"8309b46f75e4d7f6e77a82cce81e76e59d0c5bb863f85729a9f48b7ae09d579b","sha512":"c7e001fbaa8a55c0a728781e1a67fbdbf32ff1089951c96656c5f67749286742a3073c33bb0eccd1088ded0065a1d91581af03df3885eb5b035470bebe96b701","ssdeep":"192:aCde4ambIiV1F/+RARv0973EVnRupG4tCjUldLuh0j/yyKbA3wN4d:ddxbIiV1tZRb8GWdJ3uQwNe","tlshash":"686284a5b4d0b40f2b9710a2503f2505b227bc2cf18e75a4d7e0d5f766fa1ce5026b2b","size":15936,"data":"","first_seen":"2024-11-12T14:18:43.637446Z","last_seen":"2026-06-06T22:09:39.355662Z","times_seen":1649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85f46faf4147aea70bf2eef963bce0a1","sha1":"f44e54ee800093e82096a697ea126f548f04ac65","sha256":"3ecca1f64c99825005b934519bd1c9ece59d94facbea8c710099690241731717","sha512":"31690ff22289305ca0cbdb14bef241cce726db0e961fbc2d3c322a103e32efcc1875439033084b39d8d8af549ceb302fb7623671c2d6fd8ed47943cc2a672a45","ssdeep":"","tlshash":"60d022cf0400c30517e29023dc03bd0061f312fb0440e4028eb10aa2ab2cbcfa207bc8","size":206,"data":"","first_seen":"2025-06-13T12:21:54.381621Z","last_seen":"2026-07-18T07:57:33.262656Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"35574200d3605c96374c3bb4ff7b2f8e","sha1":"e19ee68e79b7de1cadafba8a738218517235d6f0","sha256":"26654459b5f0f7469a8701d71576140d687533e235d8e008621d9e82eea4c9f5","sha512":"c9437cb9cde92e52ce7ab321961769e7a7f4a98cca9f4e8dcceb60919732d5055fe607f502b4a74db9cab8496c54de61e93385cf6a2fec455cb561da6091f5f3","ssdeep":"","tlshash":"a6f05c1668e315291673b0ea4bff8c1570a2311be288de267f4d4145af5a5584e50f18","size":508,"data":"","first_seen":"2025-08-12T09:41:07.753614Z","last_seen":"2026-03-04T17:14:05.477961Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/carousel.es.5f4f7ade.js","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d7565ecde51808af7156241b4a9e6316","sha1":"7814c0bc1a900ecdbcdaa9ad06d0a119b2ff0d37","sha256":"920a095627fcd533822e6a82fb307087337eb497bd27df091e39bd59d8e9eb02","sha512":"c998a32e877f6f379234ce69bd50e512ad5dec2dfd1a9779fd1dd01ecfc58f3c70362319b57b3a980cb3e6d8d9ccd83829a60b174927c86ffbb8af75fce4a3ef","ssdeep":"192:udzwxHO+VrxoV61ctiOFppep0/ql0plc8r/QIfSraWehvNbU2BMd1MCm5Pdq6PvP:udzwxHHx8Vh/qTo/HSpeB1uFmzXPn","tlshash":"d51209203644a0b587734be4f0938029bab80b14f145f4c6a0fa9b551ee7c5aa77dfdd","size":9851,"data":"","first_seen":"2026-03-04T17:14:05.460252Z","last_seen":"2026-03-04T17:14:05.460252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/app-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:35.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/app-v1.5.5.prod.20251128_164.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:28 GMT\r\ncontent-encoding: gzip\r\netag: \"C4E64225A20489A5BE3C5E88100DD38E\"\r\ndate: Thu, 25 Dec 2025 09:02:31 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 694CFDA7460E90393418A09F\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16588518196627940506\r\nx-oss-storage-class: Standard\r\ncontent-md5: xOZCJaIEiaW+PF6IEA3Tjg==\r\nx-oss-server-time: 22\r\ncontent-length: 356967\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11211807106710919086\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1209102,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fa1553d00d7d395fc8941c8175cfae45","sha1":"18602d8edacd3597ca66776fd04554065fd476de","sha256":"500791a0013dc9e037d19876a79ced62ee3a781aa04ce739937b316b2a562473","sha512":"2f5ff614edba745a9c45905ed04d6c2ed743205ce526836045b200fbf8b1a4d29c310224d352c7312173c4b0061263deb7b25afb3961272ca5f6a3f3ca088e65","ssdeep":"6144:3LPRS/lbPjWS96XStzJkazaeBXMbbHnGFIteZclTUYoFyFbe9Gk1Y2FAUSniW/Nq:7Zw4XSrkavBcfHGFIteWlAltGkiK","tlshash":"f92539cd70c2b0a207e361b5403f100bb33a6d69680d5454f665d8dabdba98ea237f7d","first_seen":"2025-11-28T12:22:00.19741Z","last_seen":"2026-03-06T01:26:04.889466Z","times_seen":536,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":483,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/logo.17b539a4.png","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:35.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET /assets/logo.17b539a4.png HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nCookie: server_name_session=281b364078198357fa0de65000083016\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 17:13:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jan 2026 07:25:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69707f81-4fbf\"\r\nexpires: Fri, 03 Apr 2026 14:10:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 10977\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAzYoJeCLxj0IkP6tgXkNkQqR%2BwTuMhvwI4xDjrOakdmmw5yW1jzMDqdlxsiwu8OpoZVQ63N8TZn3yWgiAn4a8MFkQTlAfHcpsA4UrpfJZU8IGkrU7E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d72832d1f80d42a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2895 x 265, 8-bit colormap, non-interlaced","md5":"c48943ad80c9c3ff6445b093dc4aafbf","sha1":"b5dc3589a59a835348d9d0a6540f60c6a889097c","sha256":"17b539a4f7f3b1e45784ca8da0e8b7581d4c8f5cbfdf8aeac67e297405fa4e7f","sha512":"9193de860dd681f3126d064c9682fb2078eab2d1bd2af76414181992651c4ea20d00db05cb715d6c2968279c814896ffaf14215868f94da5a74a0f891d0e47cc","ssdeep":"384:qb7gbMxjTbDkyS3X3auSwO/aN/2ghv1+/Lfyz3weN4xGioiETOKHs4edszZ:qbEyn1+N/92jf0ws+v4eoZ","tlshash":"c992b08d1122c25765b81bcd4b3f690273f05dcdc69638bdf0067e5f89317998253ba8","first_seen":"2026-03-04T17:14:05.439437Z","last_seen":"2026-03-04T17:14:05.439437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=4b81e0059456e0672e22b800bd7b192f\u0026track_id=\u0026title=North+Highland\u0026referrer_url=\u0026url=https:%2F%2Fnorthhighland-work.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:37.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/start?ent_id=4b81e0059456e0672e22b800bd7b192f\u0026track_id=\u0026title=North+Highland\u0026referrer_url=\u0026url=https:%2F%2Fnorthhighland-work.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Is-Standalone: false\r\nX-Is-Meiqia-Domain: undefined\r\nOrigin: https://northhighland-work.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://northhighland-work.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 34\r\nreq-arrive-time: 1772644417384\r\nresp-start-time: 1772644417418\r\nx-envoy-upstream-service-time: 34\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Wed, 04 Mar 2026 17:13:37 GMT\r\nEO-LOG-UUID: 14607852132278374597\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5536,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9948e40b413b77ed8ed2ab0fb95b0f4d","sha1":"d3cb14332dfcd961330ecd1ce5c60203bb4e6452","sha256":"5df88eeab7f776b2bd948da72f49d514d61a5e4386e9efaf71f5559554e51ff1","sha512":"eabd547b20a652fb68a173586621ab75562db806f9b3d9be34a902062c589758c36bf0f9db70e01f5b536c25dc23544239ec2d4fb109b9a5f00fe2ac79fc3683","ssdeep":"96:1Lap2GcaOQBoCCdVd2BUzOCTwD/LqdeybgbBbqyOh4rsjoF7Ph1CbM:1LapRcaO4aP2GOCEDjqdLbgbBbqyOh4d","tlshash":"4db1722ab029cfb90be48291a596311269fc5492f4cc2fa5c28c9f1c17ea6ce730d61d","first_seen":"2026-03-04T17:14:05.442638Z","last_seen":"2026-03-04T17:14:05.442638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/lang/en.json","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:37.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/lang/en.json HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northhighland-work.com/\r\nOrigin: https://northhighland-work.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:28 GMT\r\ncontent-encoding: gzip\r\netag: \"3F096584787FF62650DE44E2650F871E\"\r\ndate: Thu, 25 Dec 2025 12:32:25 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-oss-request-id: 694D2ED99B3ABD363826650A\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, HEAD\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 60\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4451875482026880066\r\nx-oss-storage-class: Standard\r\ncontent-md5: PwllhHh/9iZQ3kTiZQ+HHg==\r\nx-oss-server-time: 21\r\ncontent-length: 5048\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 3994464063352556265\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12137,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3f096584787ff62650de44e2650f871e","sha1":"ea91ca7d94244165cd0021d6eaaab79ff5c755ca","sha256":"7c32a52c7d73dcd8624a7af844564280f6e9ad1c77cab79062ccf819ef34839f","sha512":"dc298505b16c37d5ad1df6b7df187af7183709fe5ad635cf14d679c6077dde591184ba5c3e8a9fd6b02ffa0712a21373feaeda04cbea718a3a64e61132c9c697","ssdeep":"192:5lX/WSWyNsLZMYK92gjpSzUHmbujCJBSBnwI2f4Y7Enm0tEQAbPxDD:5F3tGvg2gJHmzSqIe0tExl","tlshash":"4442d51dc7151da71043031bb84fa026a660915b9fa4767ef3a0416d1fae68f62bb3ce","first_seen":"2025-11-30T13:22:40.844646Z","last_seen":"2026-06-06T03:06:59.650197Z","times_seen":199,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"camorope-client-a.meiqia.com/push/555/bwxc0qnl/websocket?browser_id=9c2b2cdcb478568891881e8f30b12ef6\u0026ent_id=451524\u0026track_id=3AUPwsYWCVd1OqAgI4f7ThCBu14\u0026visit_id=3AUPwsYpcfD5T6w2aJHXWuUhjFI","fqdn":"camorope-client-a.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:38.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /push/555/bwxc0qnl/websocket?browser_id=9c2b2cdcb478568891881e8f30b12ef6\u0026ent_id=451524\u0026track_id=3AUPwsYWCVd1OqAgI4f7ThCBu14\u0026visit_id=3AUPwsYpcfD5T6w2aJHXWuUhjFI HTTP/1.1\r\nHost: camorope-client-a.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://northhighland-work.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: a7onT/KcE1O9kZB0wv4OKQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nconnection: Upgrade\r\nsec-websocket-accept: AGAfC4VzTNJqSSY5zPy11nWZqwY=\r\nserver: istio-envoy\r\nupgrade: websocket\r\naccess-control-allow-origin: https://northhighland-work.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: *\r\nDate: Wed, 04 Mar 2026 17:13:38 GMT\r\nEO-LOG-UUID: 14847320164704278132\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T09:24:06.977701Z","times_seen":17543020,"resource_available":true,"data":null}},"time_used":551,"timings":{"blocked":0,"dns":3,"connect":19,"send":0,"wait":497,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/entrypoint-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:34.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/entrypoint-v1.5.5.prod.20251128_164.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:28 GMT\r\ncontent-encoding: gzip\r\netag: \"B1745AAC366A0FD580FDAA1F5DE861AE\"\r\ndate: Thu, 25 Dec 2025 09:02:29 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 694CFDA5460E903934968A9F\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15216682669980824568\r\nx-oss-storage-class: Standard\r\ncontent-md5: sXRarDZqD9WA/aofXehhrg==\r\nx-oss-server-time: 13\r\ncontent-length: 64763\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 15052921524935086168\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":194416,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65407), with no line terminators","md5":"b1745aac366a0fd580fdaa1f5de861ae","sha1":"b9fa4bcdc30e775656a0485cbeea7ff6bd4eeabe","sha256":"20b7430e9ed5da2ea82f9fb50aafce7476e531219989ccbddbdf66749a4328b0","sha512":"3150e2a3e9bad6218010c55f184401815ae85f470fe88c821e14b3f9c4b8327f048dc1c4e28e2d52fbb4cc8481927ecb724e0282fee96fb29c8a9cf66e43d5d4","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbM3Zh:+llOuU1C+Pjv+1o+9YW","tlshash":"c91408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","first_seen":"2025-11-28T12:22:00.181302Z","last_seen":"2026-03-06T01:26:04.909446Z","times_seen":540,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T17:13:30.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 17:13:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Jan 2026 07:25:53 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=281b364078198357fa0de65000083016; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q3VpRPiR9Ljps1vlUTMeL7ZLUTmy8yN%2FuiPZcx7myjwfy00MkDLjPoNLJdUGQTJRbsFOp8Ipv2CEopmtUQZ9jtjqoyI%2FoyJIyjr534Ap8lBWRsHT4fQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d72830f1db68a33-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1693,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (311), with CRLF, LF line terminators","md5":"05b9eb2cc34ad59d1e6f883d6e98af23","sha1":"42b116f2b5cc005195aebdeed838c352129a649f","sha256":"ca51b61d55a73c086ea7881887be19e5f263b7ce5b68154620a1b1a1cfc5dc21","sha512":"25ae087f311fc46c28a8ae537c1c546c3ae44c21b2de90241bf5f2fc9cdb51bf58a75925ec285a76beaf21a281dc552271108cee7a5f2e89979d6d2f1a73a345","ssdeep":"","tlshash":"8b314146348084481270a1a3ddb2fc28f9a321775345dd1275bd945bdff87cd4c8be58","first_seen":"2026-03-04T17:14:05.448765Z","last_seen":"2026-03-04T17:14:05.448765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":942,"timings":{"blocked":79,"dns":52,"connect":8,"send":0,"wait":776,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/index.55a147ac.css","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:31.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET /assets/index.55a147ac.css HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nCookie: server_name_session=281b364078198357fa0de65000083016\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 17:13:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 Jan 2026 07:25:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69707f81-144e20\"\r\nexpires: Thu, 05 Mar 2026 02:10:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 10977\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IISXf5i5nFLQrjG1w%2BOqmQNy%2B2CUB9WC0uuw%2FUtE3mdwi8H6vly1r6BdDj5hdxT9HI0y2FLP%2FEkd0mpxV35l4o3vIKN0neO3nZJpeJD3whrRfnW5cAA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d728315fa3cd42a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1330720,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"81c93aaeb2b02d583744eb0af4e75d87","sha1":"c2e3843020e8d7836d07037b27f75d8fd0c00e76","sha256":"cc2368f47a968652a57eb82139a645eabac5b69806084e6a218f29b97a3e6a75","sha512":"c3c363dd81fd563a216646524c737c9ad56a33cba5b6e0dc66a93d7332741710aec2e31a216bee90793abc93db270a570edc449f05b40c695c1e9551f69bab88","ssdeep":"24576:OqzDEsolh0/ZnwQ1OAPkWDL32ye5trKeG0mT/8:OqzDEB","tlshash":"ab2564a4e21a20fe7763d61f5b40ba6d9532f72ac8414f5af1c6440d4dc3aa43187fab","first_seen":"2025-08-03T10:31:28.140476Z","last_seen":"2026-07-18T07:57:33.249522Z","times_seen":56,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/index.b97a96ea.js","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:31.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET /assets/index.b97a96ea.js HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nCookie: server_name_session=281b364078198357fa0de65000083016\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 17:13:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Jan 2026 07:25:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69707f81-2f6e44\"\r\nexpires: Thu, 05 Mar 2026 05:13:32 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8bO%2FUGrHpckeXy7a219i%2FAl%2BKL7PsoM3jlY73GleTEO183Mmf7DHPLyyHnRfI8c8rtqI6kY25QXNUkZB0bUaHKXo6lWPNpGSaV5I5aesiyiTJH3LWc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d728315fa3bd42a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3108420,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3edbbad365b62accdb196a67d754d10a","sha1":"2062472d2f55240aaea39a904b1641df367384c9","sha256":"76fe7ba506c17a6e6c4c2bd9a2b25b4400a6ab598428057e79ea29066e58bea8","sha512":"97111e9d9626108337fc05adffe7a1adaf58a3514ace48a127497cbd6471aae3ab3ff12287b77065e9721951558d6e16c3a28aa8c843dea5e09ae8f264f613d7","ssdeep":"24576:R0eEmLcF1yn5hU+HERB3pVqfhIUHUoDqWaYBmiQ:R0eEmLcF1y5hU+HERB3pVqfhIqvHaWQ","tlshash":"63255b943199b06283fb58d5507b0405b22a2b4df40894e0f1fddea939bac6462fbf7d","first_seen":"2026-03-04T17:14:05.452459Z","last_seen":"2026-03-04T17:14:05.452459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1058,"receive":1294,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"static.meiqia.com/widget/loader.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:32.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /widget/loader.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 10 May 2024 09:15:03 GMT\r\ncontent-encoding: gzip\r\ndate: Tue, 16 Sep 2025 08:07:15 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-oss-request-id: 68C91AB326974235330BACE4\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14476346677076018366\r\nx-oss-storage-class: Standard\r\ncontent-md5: ABhPCpPR94Z833gvPfGrUw==\r\nx-oss-server-time: 90\r\ncontent-length: 5741\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 9172980728293027992\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":16345,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16344), with no line terminators","md5":"00184f0a93d1f7867cdf782f3df1ab53","sha1":"2116343f5208357e24bbd944b416e92af38cfb3d","sha256":"07b10d9c31fb3e5df8c7dbb2522da941d49be31f596add069f068a3d83823231","sha512":"de2c11603ea9bf00fad76f283ed1d32ef21e247d2127fba060537383e3e61b145cb77eefbe2c055426b4e0c6d19a967b9919d508ddd6e9954c7dbd4f83df1c8b","ssdeep":"192:K04adoyHIogekJElGZQz6cFDZsWBnCK5HWlT6NKSn2QcWByxGmsHZQzq7vE4o7YI:9H1k+BbF9CF4Nua2Nqw4KYZb9ly20W16","tlshash":"ee7240cdb5c2b0814ba36160422fa81bf2775aa4749f99c0a365d1f8bc7994f8077f2d","first_seen":"2024-05-21T00:26:26Z","last_seen":"2026-07-02T23:24:00.315628Z","times_seen":2631,"resource_available":true,"data":null}},"time_used":2562,"timings":{"blocked":1200,"dns":880,"connect":155,"send":0,"wait":159,"receive":1,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:33.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-ent-id\r\nReferer: https://northhighland-work.com/\r\nOrigin: https://northhighland-work.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://northhighland-work.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,x-ent-id\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Wed, 04 Mar 2026 17:13:33 GMT\r\nEO-LOG-UUID: 4082666288390174548\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T09:24:06.977701Z","times_seen":17543020,"resource_available":true,"data":null}},"time_used":747,"timings":{"blocked":241,"dns":198,"connect":20,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/splash.6120ffb8.js","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:34.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET /assets/splash.6120ffb8.js HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northhighland-work.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=281b364078198357fa0de65000083016\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 17:13:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Jan 2026 07:25:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69707f81-e91\"\r\nexpires: Thu, 05 Mar 2026 05:13:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZWxyuvypuQlJwZQBs0Rwb%2FCnkTNBOwmTxSePCVgSfGfL3zL9%2BNSOG%2BsnYK3azjMGgXv4nytx1owRu4TaWCih2%2BGf7eMYY%2BzGFO0t8CiphS44PdQ2%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7283278e4cd42a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3728)","md5":"97737734acafd1b01f21cb381371c384","sha1":"d65a732474eb92eb8e5b20419680f9d60a46902d","sha256":"fd15cce16fafbefa9a6b62c2ae1bde956cfe614d75728aabcc29ab1464902d42","sha512":"642850f8de8ef94859d8b0f6da19781871bc771287bf728bb07d1079229b41f42f48148dd076d6463ef4534d7634a402e63b688e9bd89709252bdde9cc5fef9b","ssdeep":"","tlshash":"477142a0d00a9b3d85a30426f964c801e08deba5d1878d4bf0fc95153bd7eb58bca778","first_seen":"2026-03-04T17:14:05.455348Z","last_seen":"2026-03-04T17:14:05.455348Z","times_seen":1,"resource_available":true,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":770,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/favicon.ico","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:35.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nCookie: server_name_session=281b364078198357fa0de65000083016\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 17:13:36 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 19 Jan 2026 21:50:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"696ea73e-3aee\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6qGbazEj3ks6DvZbhq8NgzByeo7KIrQn1IupjgRv9%2BokaI%2BicDP4zAoRQvNw8Q8k29sx2AODk5usDxgJ%2FSHUk0VwlKRn%2Fai82K5G1mv3qnWDwe0%2F7cY%3D\"}]}\r\ncf-ray: 9d72832ccf71d42a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"29b39bed790cc15ff53875bfc30e005d","sha1":"fc28d607a69ddbe249deb4f40a7a4de6bed08ed5","sha256":"aed640e6ffd3fb50f868dd5cf82f5c84c17bf03581bc40acf61cf202d4684846","sha512":"22d040e6bcd0d2ce52c20c8b191411bcbfd3d0388d23e7d0a60c6f0b9e5b5c02d4250810203401a783c3faf20d0253b9d2bff0c44221829ee576c2b9ca7a64d2","ssdeep":"384:LcO7HNSUggOvoUmZwqmZnmZUmZoGV4hPmZ+mZGmZbB68ge:AOwvtmZwqmZnmZUmZoGV4hPmZ+mZGmZt","tlshash":"1962a5a3b12901f2f8e02b7094d5c76512298fee9fe66caa0d707fdf16f32210c12466","first_seen":"2026-03-04T17:14:05.457369Z","last_seen":"2026-04-24T09:12:07.023832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1070,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Mada:wght@300;400;500;600;700\u0026family=Fira%20Code:wght@400;600\u0026family=Montserrat:wght@500;600;700;800;900\u0026family=Roboto:wght@300;400;500;600;700\u0026family=Open%20Sans:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:31.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Mada:wght@300;400;500;600;700\u0026family=Fira%20Code:wght@400;600\u0026family=Montserrat:wght@500;600;700;800;900\u0026family=Roboto:wght@300;400;500;600;700\u0026family=Open%20Sans:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Mar 2026 17:13:31 GMT\r\ndate: Wed, 04 Mar 2026 17:13:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80924,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"846a0bb3181144baef23b0597660f097","sha1":"5c320a9cc31dcc752406660d40a1d2835fb71408","sha256":"f83deff68ee4a66f61fa854abbb9b84078e105dfa30ed88f51a489a2641fd04e","sha512":"f6e781ee1c6483be01e82b1f33a0357d8397fb54b0060984e0328631ff75ce7eac4d74815f2b8922a99342870ae68248ba7061f711899f6c98a8ce55ab6cd468","ssdeep":"768:uB+SpsLs+6hnwYzFCODS99YURRuWDyjooYhREHPM5svvYaR7AIdI9SSYXRuR5WPP:IVRNRLyl833","tlshash":"be831da1041b5440ab431cd223cebf36ee0fa2617044c079abfd5b9aaddbc66637835d","first_seen":"2026-03-02T13:09:10.239144Z","last_seen":"2026-07-18T07:57:33.237855Z","times_seen":42,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":86,"dns":1,"connect":7,"send":0,"wait":23,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/splash.6120ffb8.js","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:34.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET /assets/splash.6120ffb8.js HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/assets/index.b97a96ea.js\r\nCookie: server_name_session=281b364078198357fa0de65000083016\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 17:13:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Jan 2026 07:25:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69707f81-e91\"\r\nexpires: Thu, 05 Mar 2026 05:13:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6L3agEkc%2BegBTJEgu0k1Dv9e5McXn2SOm7%2FPhdYdWWktdtMdpvRtZZW0zAYMKeClQujPgtrkj3GNegZWRmZ0AU6xwgsZtkMb7%2FyKkCBqS947huows38%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d728327ce5bd42a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3729,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3728)","md5":"97737734acafd1b01f21cb381371c384","sha1":"d65a732474eb92eb8e5b20419680f9d60a46902d","sha256":"fd15cce16fafbefa9a6b62c2ae1bde956cfe614d75728aabcc29ab1464902d42","sha512":"642850f8de8ef94859d8b0f6da19781871bc771287bf728bb07d1079229b41f42f48148dd076d6463ef4534d7634a402e63b688e9bd89709252bdde9cc5fef9b","ssdeep":"","tlshash":"477142a0d00a9b3d85a30426f964c801e08deba5d1878d4bf0fc95153bd7eb58bca778","first_seen":"2026-03-04T17:14:05.455348Z","last_seen":"2026-03-04T17:14:05.455348Z","times_seen":1,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/carousel.es.5f4f7ade.js","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:35.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET /assets/carousel.es.5f4f7ade.js HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/assets/splash.6120ffb8.js\r\nCookie: server_name_session=281b364078198357fa0de65000083016\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 17:13:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Jan 2026 07:25:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69707f81-267b\"\r\nexpires: Thu, 05 Mar 2026 05:13:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3de3gH26GrIptJwmN94m0LZ2DoLLzP2Obrtbv5QXyhdfYYQ8f%2B6ikInFDJd90dIZb%2BusZKSIGX%2FtfMCyvOhYokYWwcCe9%2BdG5O0XfuV0oF3bzTTD0%2F4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d72832c7f59d42a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9851,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9665)","md5":"d7565ecde51808af7156241b4a9e6316","sha1":"7814c0bc1a900ecdbcdaa9ad06d0a119b2ff0d37","sha256":"920a095627fcd533822e6a82fb307087337eb497bd27df091e39bd59d8e9eb02","sha512":"c998a32e877f6f379234ce69bd50e512ad5dec2dfd1a9779fd1dd01ecfc58f3c70362319b57b3a980cb3e6d8d9ccd83829a60b174927c86ffbb8af75fce4a3ef","ssdeep":"192:udzwxHO+VrxoV61ctiOFppep0/ql0plc8r/QIfSraWehvNbU2BMd1MCm5Pdq6PvP:udzwxHHx8Vh/qTo/HSpeB1uFmzXPn","tlshash":"d51209203644a0b587734be4f0938029bab80b14f145f4c6a0fa9b551ee7c5aa77dfdd","first_seen":"2026-03-04T17:14:05.460252Z","last_seen":"2026-03-04T17:14:05.460252Z","times_seen":1,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/background.e75f545a.png","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:35.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET /assets/background.e75f545a.png HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/assets/index.55a147ac.css\r\nCookie: server_name_session=281b364078198357fa0de65000083016\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 17:13:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jan 2026 07:25:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69707f81-907bdc\"\r\nexpires: Fri, 03 Apr 2026 17:13:36 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFzl8eAM%2BPNsTtilxYk3QNQ4fYPlYltlA2ajfLh1gtxtIJiIA7SvSlN6LwEgPf6tprlqQy7ivaVXI%2BkJ1NAASbKIG2ESsci5LSRA5nbO5nW6ZPO7Hh4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d72832d2f83d42a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9468892,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5490 x 4000, 8-bit/color RGBA, non-interlaced","md5":"198ce0f9761a2b2c1128b168090a8b33","sha1":"de1d440a04e52e52714bb9b66fa1c6ceea15d9e8","sha256":"05069efeda2c23d18dbe98fce1c0df80dc4ceed45e1dac43af352a7c446069f6","sha512":"770898f412daaf8f1e67d96052cae2b5b4298b95a2f33ab104b854e94bf0c84d2375ded9d895334522b188b4c4e2681e87c5cd251dff7a0c1fa4e32576c23292","ssdeep":"24576:CPIXxKFPihLZvk2Oj5D0GmCPhAtYP6TElWilAq:EIhKFPc/Yxz5Ay6f8","tlshash":"7a25238cdf6ade53e17372048b8b87c0ae60fae8641478714951ba5ada1388d4ddf70f","first_seen":"2026-03-04T17:14:05.462138Z","last_seen":"2026-03-04T17:14:05.462138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1053,"receive":4225,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/get_base_config?ent_id=4b81e0059456e0672e22b800bd7b192f","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:36.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/get_base_config?ent_id=4b81e0059456e0672e22b800bd7b192f HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://northhighland-work.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://northhighland-work.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 5\r\nreq-arrive-time: 1772644416831\r\nresp-start-time: 1772644416836\r\nx-envoy-upstream-service-time: 4\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 1037\r\nConnection: keep-alive\r\nDate: Wed, 04 Mar 2026 17:13:36 GMT\r\nEO-LOG-UUID: 14558149972431616762\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1037,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2bd9d0e415e083b654085f5d0f48ac73","sha1":"2c9dc0ba731f7dd93b11924660a3d5db254eb4f8","sha256":"8ac9c22d887ad729e99329f3d139bae41d2d80d6b7cc5cd715e78d7872a39de3","sha512":"c8f304f3683243e4ce4aeb5af5827b53f12a2aa230c587faebd03040756b0e901ee16ccca0ab27c1580775c30552936325030d84612a0f06a207d77833e908b0","ssdeep":"","tlshash":"c511298470854e3987857a967dc7b856cd282493ecc42e11d794af1c76ef1dc3217a58","first_seen":"2025-10-30T04:22:04.998224Z","last_seen":"2026-03-04T17:14:05.463685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1080,"timings":{"blocked":356,"dns":293,"connect":25,"send":0,"wait":368,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/893.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:37.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/893.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:28 GMT\r\ncontent-encoding: gzip\r\netag: \"72C711ADF080251C80C79FAC21D48971\"\r\ndate: Thu, 25 Dec 2025 09:02:48 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 694CFDB834C8073739338C5D\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4275741097519211760\r\nx-oss-storage-class: Standard\r\ncontent-md5: cscRrfCAJRyAx5+sIdSJcQ==\r\nx-oss-server-time: 4\r\ncontent-length: 4736\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10848174694019192851\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":15936,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15936), with no line terminators","md5":"72c711adf080251c80c79fac21d48971","sha1":"8460ed7d7836055f48d16714f7d132e9ce25a4e3","sha256":"8309b46f75e4d7f6e77a82cce81e76e59d0c5bb863f85729a9f48b7ae09d579b","sha512":"c7e001fbaa8a55c0a728781e1a67fbdbf32ff1089951c96656c5f67749286742a3073c33bb0eccd1088ded0065a1d91581af03df3885eb5b035470bebe96b701","ssdeep":"192:aCde4ambIiV1F/+RARv0973EVnRupG4tCjUldLuh0j/yyKbA3wN4d:ddxbIiV1tZRb8GWdJ3uQwNe","tlshash":"686284a5b4d0b40f2b9710a2503f2505b227bc2cf18e75a4d7e0d5f766fa1ce5026b2b","first_seen":"2024-11-12T14:18:43.637446Z","last_seen":"2026-06-06T22:09:39.355662Z","times_seen":1649,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"camorope-client-a.meiqia.com/push/info?browser_id=9c2b2cdcb478568891881e8f30b12ef6\u0026ent_id=451524\u0026track_id=3AUPwsYWCVd1OqAgI4f7ThCBu14\u0026visit_id=3AUPwsYpcfD5T6w2aJHXWuUhjFI\u0026t=1772644417733","fqdn":"camorope-client-a.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:37.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /push/info?browser_id=9c2b2cdcb478568891881e8f30b12ef6\u0026ent_id=451524\u0026track_id=3AUPwsYWCVd1OqAgI4f7ThCBu14\u0026visit_id=3AUPwsYpcfD5T6w2aJHXWuUhjFI\u0026t=1772644417733 HTTP/1.1\r\nHost: camorope-client-a.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://northhighland-work.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://northhighland-work.com\r\ncontent-type: application/json; charset=UTF-8\r\nserver: istio-envoy\r\nreq-cost-time: 1\r\nreq-arrive-time: 1772644418311\r\nresp-start-time: 1772644418312\r\nx-envoy-upstream-service-time: 1\r\naccess-control-expose-headers: *\r\nCache-Control: must-revalidate, no-transform, no-cache, no-store, max-age=0\r\nContent-Length: 78\r\nConnection: keep-alive\r\nDate: Wed, 04 Mar 2026 17:13:38 GMT\r\nEO-LOG-UUID: 15355385104131730821\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":78,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3c54031d24dc50188e0ec1bb5198e264","sha1":"4321675393ddb79a002591285e46d726c61e27c2","sha256":"f581a059014ba45b410493581e09967f2822813a30adb230c161bc84e3132293","sha512":"ef4d3a831e162dc6233b30d568ea06c8423ef4e3f4b208f19bb022033c97b2230ec6ed4c95ed04d2d6028ca2b20721c7cad376ec26e70abafe562f2c0abf311f","ssdeep":"","tlshash":"c9a01209882e20985c041b1002002d02481c04bb010574ac5318675405d14230420147","first_seen":"2026-03-04T17:14:05.466626Z","last_seen":"2026-03-04T17:14:05.466626Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1118,"timings":{"blocked":424,"dns":357,"connect":19,"send":0,"wait":267,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/static/icon-mq-round@2x.png","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.239","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:37.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/static/icon-mq-round@2x.png HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:29 GMT\r\netag: \"7852530B8CCD6C254E2C727B286BD370\"\r\ndate: Wed, 21 Jan 2026 08:08:15 GMT\r\ncontent-type: image/png\r\nx-oss-request-id: 6970896FCD0DE5323940F3F0\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18155014595444198583\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000102\r\nx-oss-force-download: true\r\ncontent-md5: eFJTC4zNbCVOLHJ7KGvTcA==\r\nx-oss-server-time: 37\r\ncontent-length: 10613\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 11126579911926025020\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 1216, 8-bit colormap, non-interlaced","md5":"7852530b8ccd6c254e2c727b286bd370","sha1":"ae3cd963a27096af016b06697e4e7c08caca6cda","sha256":"df6e80ba7392005025919531597d0f64f8046eec8ee14bcdf3e05760264fe874","sha512":"48fb7a2c9d8c1240997272e706b521a688bbb5c57b7912412389a67c7b5a837c8e16a7c93d7605222d867f20ab99a221f8ac91cf30bb295eb1902e3fe1028515","ssdeep":"192:HtnVTX337t3accoDwSQY/Wm6j3bOHluea7uCTLQvpWj+A6JCzIj+xLM:HVpnp1coDwQ/WmM3aHoxnLQvYjjUj+LM","tlshash":"4022a091aa5af0ef811151f84b3973f761a07da2c9484ce9121d71d9a33fd14f40fb2a","first_seen":"2023-04-10T11:55:01Z","last_seen":"2026-07-10T19:44:37.299382Z","times_seen":2048,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/carousel.es.5f4f7ade.js","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:34.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET /assets/carousel.es.5f4f7ade.js HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://northhighland-work.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=281b364078198357fa0de65000083016\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 17:13:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 21 Jan 2026 07:25:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69707f81-267b\"\r\nexpires: Thu, 05 Mar 2026 05:13:35 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7qOYxhH3fd0AV0yn%2BN8mei2fdDSHgEJ5wSGgY2W0WrcJvWWk2qdDGuJLRNSaHdeO0khv64UWWvCCUDJWiNOH5ZIV8J2euOtdiyM80eI7ovydgP3zJc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7283278e4dd42a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9851,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9665)","md5":"d7565ecde51808af7156241b4a9e6316","sha1":"7814c0bc1a900ecdbcdaa9ad06d0a119b2ff0d37","sha256":"920a095627fcd533822e6a82fb307087337eb497bd27df091e39bd59d8e9eb02","sha512":"c998a32e877f6f379234ce69bd50e512ad5dec2dfd1a9779fd1dd01ecfc58f3c70362319b57b3a980cb3e6d8d9ccd83829a60b174927c86ffbb8af75fce4a3ef","ssdeep":"192:udzwxHO+VrxoV61ctiOFppep0/ql0plc8r/QIfSraWehvNbU2BMd1MCm5Pdq6PvP:udzwxHHx8Vh/qTo/HSpeB1uFmzXPn","tlshash":"d51209203644a0b587734be4f0938029bab80b14f145f4c6a0fa9b551ee7c5aa77dfdd","first_seen":"2026-03-04T17:14:05.460252Z","last_seen":"2026-03-04T17:14:05.460252Z","times_seen":1,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:34.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"POST /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nx-ent-id: 4b81e0059456e0672e22b800bd7b192f\r\nContent-Length: 47\r\nOrigin: https://northhighland-work.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"entToken\":\"4b81e0059456e0672e22b800bd7b192f\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: https://northhighland-work.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\nreq-cost-time: 2\r\nreq-arrive-time: 1772644414377\r\nresp-start-time: 1772644414380\r\nx-envoy-upstream-service-time: 1\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Wed, 04 Mar 2026 17:13:34 GMT\r\nEO-LOG-UUID: 9523864972469802170\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"743c5f2f5976d6eb7d000427a6988300","sha1":"1aeb9f9beac5ef1fc6b081ad03398b3deb74b988","sha256":"17959358e2f1db2b56ff8d55f85f3b9eb006bafd216f616465ead5aecc12bf39","sha512":"9458e7c0eaf09252b280c5d391f1b4cd1632e366ab1a754e235858c418962c5dec4363fb84294930156b370e2d8534a685b880a286a54ea831eb94daf0084c81","ssdeep":"","tlshash":"7b117f934aa409a75f1807ca4949510ec59fb01f1cc4dfbfd922be44953f39a03e474d","first_seen":"2026-03-04T17:14:05.468318Z","last_seen":"2026-03-04T17:14:05.468318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"northhighland-work.com/assets/carousel.es.bbf67ae6.css","fqdn":"northhighland-work.com","domain":"northhighland-work.com","tld":"com"},"ip":{"addr":"104.21.95.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:34.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"northhighland-work.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Feb 2026 17:38:34 GMT","end":"Fri, 08 May 2026 18:37:09 GMT"},"fingerprint":{"sha1":"B9:81:DC:52:44:27:51:A0:41:26:E9:34:64:F8:EE:68:67:F8:0C:AF","sha256":"71:12:4B:C7:C1:72:E0:21:CC:B1:D1:E1:2D:10:F5:7B:62:92:98:FA:A8:05:60:99:40:1C:16:81:73:53:79:43"}}},"request":{"raw":"GET /assets/carousel.es.bbf67ae6.css HTTP/1.1\r\nHost: northhighland-work.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://northhighland-work.com/\r\nCookie: server_name_session=281b364078198357fa0de65000083016\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 17:13:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 Jan 2026 07:25:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69707f81-9da\"\r\nexpires: Thu, 05 Mar 2026 02:10:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 10977\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbQR7FUGm8wcC0kxcWSUhaNWBmXoZnK3tZSKNweQfV5NJuBR2rdi%2F6zNY1zbXfckhZcXL6hqh%2Fj8wb8tneVY5IXp4TUydmREN1%2BqZWvUTvWKSGHcX3A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7283278e4bd42a-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2522,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2521)","md5":"c96297bf670657fd073ab4068c626d92","sha1":"68f25b6fdd5738583ca52edcf675303046885e3c","sha256":"fdd153eedfa8265fbb24ad684dcef327e9e1eea9d1da8c54276d52e7b4c89e85","sha512":"f1485b813f4a0aa52be931676971414d07834291b0b80da17a03b28f6f02ca73db944fcf6c2045bb595895f3e9179b5495392181786a7e0f1d137a66ea8ff89c","ssdeep":"","tlshash":"3551e251f241a0289e0b7334dfa5075fa01dba519f01eba971e3732442c67da0f39d8c","first_seen":"2024-12-17T05:56:08.778945Z","last_seen":"2026-07-25T18:13:25.342861Z","times_seen":164,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=4b81e0059456e0672e22b800bd7b192f\u0026track_id=\u0026title=North+Highland\u0026referrer_url=\u0026url=https:%2F%2Fnorthhighland-work.com%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://northhighland-work.com/","date":"2026-03-04T17:13:36.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /hikari/visit/visit/start?ent_id=4b81e0059456e0672e22b800bd7b192f\u0026track_id=\u0026title=North+Highland\u0026referrer_url=\u0026url=https:%2F%2Fnorthhighland-work.com%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-is-meiqia-domain,x-is-standalone\r\nReferer: https://northhighland-work.com/\r\nOrigin: https://northhighland-work.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://northhighland-work.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: x-is-meiqia-domain,x-is-standalone\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Wed, 04 Mar 2026 17:13:37 GMT\r\nEO-LOG-UUID: 17842650739302216594\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T09:24:06.977701Z","times_seen":17543020,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}