{"report_id":"c4814404-2135-4a5d-a260-96faee34c4a2","version":6,"status":"done","tags":["phishing","microsoft","outlook"],"date":"2023-11-16T15:37:54Z","url":{"schema":"http","addr":"rides.sng.link/Aw5zn/ernw?_dl=uber://family?id=0\u0026_fallback_redirect=https://guilhn.com.br/new/auth/sqLBq/Y2xlcmsucnVzc2VsbEBteW9yYW5nZWNsZXJrLmNvbQ==","fqdn":"rides.sng.link","domain":"sng.link","tld":"link"},"ip":{"addr":"95.101.11.43","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"final":{"url":{"schema":"https","addr":"bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","fqdn":"bergson-law-1322273052.cos.ap-tokyo.myqcloud.com","domain":"myqcloud.com","tld":"com"},"title":"Sign in to your account"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T13:21:20Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ajax.googleapis.com","ip":{"addr":"216.58.207.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":12905,"first_seen":"2013-08-16 11:51:31","last_seen":"2023-11-15 23:51:48","alert_count":0,"request_count":2,"received_data":62004,"sent_data":944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"use.fontawesome.com","ip":{"addr":"172.64.140.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2012-10-18","domain_rank":942,"first_seen":"2017-01-30 05:43:25","last_seen":"2023-11-15 18:22:41","alert_count":0,"request_count":1,"received_data":55866,"sent_data":535,"comment":"","tags":null,"fingerprints":null},{"fqdn":"c.s-microsoft.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2012-02-07","domain_rank":10166,"first_seen":"2013-11-06 16:56:27","last_seen":"2023-11-15 18:13:04","alert_count":0,"request_count":1,"received_data":820,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rides.sng.link","ip":{"addr":"95.101.11.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2019-02-11","domain_rank":0,"first_seen":"2023-08-14 12:52:30","last_seen":"2023-11-15 12:06:54","alert_count":0,"request_count":1,"received_data":630,"sent_data":605,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bergson-law-1322273052.cos.ap-tokyo.myqcloud.com","ip":{"addr":"43.128.240.52","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":8249,"sent_data":555,"comment":"","tags":null,"fingerprints":null},{"fqdn":"greylight380-1322272810.cos.na-toronto.myqcloud.com","ip":{"addr":"49.51.54.104","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":620270,"sent_data":476,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aadcdn.msftauth.net","ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":1455,"first_seen":"2018-11-19 11:50:32","last_seen":"2023-11-15 18:14:52","alert_count":0,"request_count":1,"received_data":1453,"sent_data":526,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2023-11-15 18:14:50","alert_count":0,"request_count":1,"received_data":7172,"sent_data":537,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-11-15 22:27:13","alert_count":0,"request_count":1,"received_data":1636,"sent_data":482,"comment":"","tags":null,"fingerprints":null},{"fqdn":"greylight380.my.id","ip":{"addr":"162.241.71.126","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"2023-10-27","domain_rank":0,"first_seen":"2023-11-07 22:30:16","last_seen":"2023-11-09 22:29:18","alert_count":0,"request_count":2,"received_data":787,"sent_data":1194,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aadcdn.msauth.net","ip":{"addr":"13.107.213.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":1421,"first_seen":"2018-11-19 11:50:03","last_seen":"2023-11-15 18:13:50","alert_count":0,"request_count":2,"received_data":19639,"sent_data":1034,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":724,"first_seen":"2014-06-18 02:37:31","last_seen":"2023-11-15 21:11:17","alert_count":0,"request_count":1,"received_data":49880,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"guilhn.com.br","ip":{"addr":"143.208.8.5","port":0,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"domain_registered":"2023-06-21","domain_rank":0,"first_seen":"2023-06-22 02:09:59","last_seen":"2023-11-16 14:05:01","alert_count":1,"request_count":1,"received_data":553,"sent_data":595,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2023-11-15 20:39:42","alert_count":0,"request_count":3,"received_data":135953,"sent_data":1459,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.1.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-03T18:24:38.431028Z","times_seen":138338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","size":69597,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-04-03T18:27:40.342902Z","times_seen":76497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T18:27:40.348074Z","times_seen":261047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greylight380-1322272810.cos.na-toronto.myqcloud.com/bootstrap.min.js","fqdn":"greylight380-1322272810.cos.na-toronto.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"49.51.54.104","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"da0cbe38634f68b52c295f57077c2e97","sha1":"728657a59681f7e2116a3626df8e5377131545f6","sha256":"32c1f1c538bc3ca25bcfa042819484c69cb23587d8e25d760ceade4bed355d81","sha512":"c592d4c9696a004eccfd3fd7b473c5f2e5d07b995d1a0fb1e3b2c63427d96d9b745ebcb7e3f3f79d17a770527f68c6fcf78e0ae90f8d1d7ecd8e794c0c3a3ca6","ssdeep":"6144:MTNzYLBUEejgHr1SuvnhMJj5jroyhK1mt48uyG8iP:GlbeMuvnhMJj533hK1mt4yG3","tlshash":"f5d460f87b40b54b31060336761894ffd371383cae45885bef552ca9a1b6231eae5b39","size":619909,"data":"","first_seen":"2023-11-07T22:30:36Z","last_seen":"2024-08-20T20:29:50.545104Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","fqdn":"bergson-law-1322273052.cos.ap-tokyo.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"43.128.240.52","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a07da9fae934baf3f749e876bbfdd96","sha1":"46a436eba01c79acdb225757ed80bf54bad6416b","sha256":"d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad","sha512":"e525248b09a6fb4022244682892e67bbf64a3e875eb889db43b0a24ab4a75077b5d5d26943ca382750d4febc3883193f3be581a4660065b6fc7b5ec20c4a044b","ssdeep":"6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3","tlshash":"f844a4d8fb8d112e423231aa9c2f12cdb77dd171560458aebd4d597c24a083d82faf7a","size":271751,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-03T18:24:38.427942Z","times_seen":51034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffcfa8101b1851b542a0120d11337dba","sha1":"ec39293dbd304f65316bcd4e2bfc02c57a44b6fc","sha256":"08337fbf88109aa9bb8256f8d994fefa02e63dfc1a5595607f86a835f5a277ef","sha512":"aada56b271ad3cc98cf89340023c83b7c4e5b4ff55f82ed225b7d8edd0212d3403131c9dfdecfb33b28582cddc334a1809e43ecfb81590714ff7c455a4efc6f1","ssdeep":"","tlshash":"7cf0ab2d6433c2fc1090ddc92b9d71d5812f3e103aa44cc63d8c54cf870ae06dc08d94","size":423,"data":"","first_seen":"2023-06-21T16:06:33Z","last_seen":"2025-08-05T11:10:23.96333Z","times_seen":6885,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","size":19188,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-03T18:27:40.343906Z","times_seen":103913,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","size":48944,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-03T18:27:40.347315Z","times_seen":103133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"8ca797087ab4a560a2bcc2744bc9f579","sha1":"c66313dcab88ed239940224bca8aa78ac0260cae","sha256":"c9a8da397573d520f22d039a41bdfe56c8f7ec5037e9707d17acc308129e14fb","sha512":"b4278d96b2fecb9d05263b18329b2687f7f01ae3a314596c6d6df3e1d1563164b8839ffbae7fb337731006ffa1f29732de36f80ba46a2d857736df627e320d1a","ssdeep":"","tlshash":"91d0955ce1074144937921214d4f028798fd9f14251c5d00f37df04c5150d6545fff21","size":258,"data":"","first_seen":"2023-11-16T14:24:02Z","last_seen":"2024-08-20T19:17:34.688213Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4d365483ee1437fb449e57ec17f4c5e2","sha1":"774f0bb785b35b917a50e6fc9a8d1a9dce970623","sha256":"135e5ccbfcaa3ed936b212510334ae3945d0e03dd4f23d52fc6ed972d78d3e5a","sha512":"9369a96b9b2d6b235a895ad85271c3644a0a660e36e6742117416e19b7c998e8daa30abb15546fb30de939b6462130b7d3ad4b01142562b18ae7603cedf378a9","ssdeep":"96:SFAErogqjVNgTNkZjVklXhRACwo7Ph3OAmBK5ddDykY4mNj+yN562OT2qReJ:SffqVpVkbRABo7Z+veddyFFb62uTReJ","tlshash":"8de1c169b042d09f766f86effea89e64e1482d5fd8cc56c800e8c85e28fc47b71185d6","size":6833,"data":"","first_seen":"2023-11-16T14:24:02Z","last_seen":"2024-08-20T19:17:34.688956Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"d731ff5f75b10b2f98ca023a18209ea7","sha1":"8b90722b393f0fd0720be483f69f23091d49573d","sha256":"fb618d5f14793e490966e9e8767371bb864d5121f5cc00300572429710609a49","sha512":"0e477044330c9f68f2ae16df470b6ac8575cee4acc86bdccc0513d717e71aa412a9af77f59d07c3cdd39f77712b219147ac8cbc976ab5c40747476e1c1a34e7b","ssdeep":"","tlshash":"5c41cf2f3c55c4490131cacaf4a1e0aee416722b2690ccde75ed856b6f70bdf4c2b988","size":2259,"data":"","first_seen":"2023-11-16T14:24:02Z","last_seen":"2024-08-20T19:17:34.689957Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"http","addr":"rides.sng.link/Aw5zn/ernw?_dl=uber://family?id=0\u0026_fallback_redirect=https://guilhn.com.br/new/auth/sqLBq/Y2xlcmsucnVzc2VsbEBteW9yYW5nZWNsZXJrLmNvbQ==","fqdn":"rides.sng.link","domain":"sng.link","tld":"link"},"ip":{"addr":"95.101.11.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-16T15:37:34.291270225Z","timestamp":1700149054291,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /Aw5zn/ernw?_dl=uber://family?id=0\u0026_fallback_redirect=https://guilhn.com.br/new/auth/sqLBq/Y2xlcmsucnVzc2VsbEBteW9yYW5nZWNsZXJrLmNvbQ== HTTP/1.1\r\nHost: rides.sng.link\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 184\r\ncontent-encoding: gzip\r\nlocation: https://guilhn.com.br/new/auth/sqLBq/Y2xlcmsucnVzc2VsbEBteW9yYW5nZWNsZXJrLmNvbQ==?referrer=singular_click_id%3D2f228d2a-2bca-40c1-b008-cb568a805780\r\nvary: Accept-Encoding\r\nexpires: Thu, 16 Nov 2023 15:37:33 GMT\r\ncache-control: max-age=0, no-cache, no-store\r\npragma: no-cache\r\ndate: Thu, 16 Nov 2023 15:37:33 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":184,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"9a81595ee27f51be1acb19cdf2a15ce3","sha1":"0b433513f0e1aa47f792bad80667d324bc1f59dd","sha256":"919b591a4f47d4d6c41e5685efb7245437f23246fe32daa3217d6afb9bc1cafa","sha512":"6a6aa5a7aae6627ae11ef62009d7f6592000374569a0fd03d4ff23fe63b9fe2394b516db98a0ec1cb7158b41f3c27cc003b9b914d4138a6dbb95913a4fb1b3b8","ssdeep":"","tlshash":"e1c080b389d2357c477023371002255a15cf55676d55c59a85715f54ac60bdc32c61f6","first_seen":"2023-11-16T16:38:01Z","last_seen":"2023-11-16T16:38:01Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"guilhn.com.br/new/auth/sqLBq/Y2xlcmsucnVzc2VsbEBteW9yYW5nZWNsZXJrLmNvbQ==?referrer=singular_click_id%3D2f228d2a-2bca-40c1-b008-cb568a805780","fqdn":"guilhn.com.br","domain":"guilhn.com.br","tld":"com.br"},"ip":{"addr":"143.208.8.5","port":0,"asn":0,"as":"","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-11-16T15:37:35.025293268Z","timestamp":1700149055025,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /new/auth/sqLBq/Y2xlcmsucnVzc2VsbEBteW9yYW5nZWNsZXJrLmNvbQ==?referrer=singular_click_id%3D2f228d2a-2bca-40c1-b008-cb568a805780 HTTP/1.1\r\nHost: guilhn.com.br\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.11\r\nrefresh: 0;url=https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: public, max-age=90\r\nexpires: Thu, 16 Nov 2023 15:39:04 GMT\r\ncontent-length: 0\r\ndate: Thu, 16 Nov 2023 15:37:34 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","fqdn":"bergson-law-1322273052.cos.ap-tokyo.myqcloud.com","domain":"myorangeclerk.com","tld":"com"},"ip":{"addr":"43.128.240.52","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-11-16T15:37:35.304Z","timestamp":1700149055304,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cos.ap-tokyo.myqcloud.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"GlobalSign Organization Validation CA - SHA256 - G3","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 27 Feb 2023 11:51:03 GMT","end":"Sat, 30 Mar 2024 11:51:02 GMT"},"fingerprint":{"sha1":"AB:D9:27:2F:07:66:C3:B9:91:C1:CE:4A:AC:1A:7D:14:B4:99:20:5C","sha256":"56:14:36:E6:B7:7E:67:5C:6F:30:38:8F:7B:4E:BD:CE:8E:4F:45:0D:7B:C2:DC:FF:51:CF:C4:BE:CF:73:A3:C2"}}},"request":{"raw":"GET /bergson-law.html?e=clerk.russell@myorangeclerk.com HTTP/1.1\r\nHost: bergson-law-1322273052.cos.ap-tokyo.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nContent-Length: 7890\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nDate: Thu, 16 Nov 2023 15:37:36 GMT\r\nETag: \"060b962b06368319f65c9e47d412a7a5\"\r\nLast-Modified: Mon, 13 Nov 2023 07:33:34 GMT\r\nServer: tencent-cos\r\nx-cos-hash-crc64ecma: 4038326750879670037\r\nx-cos-request-id: NjU1NjM3NDBfNzdjZTIwMDlfNjlkZV8xMDVjYzRm\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7890,"size_decoded":0,"mime_type":"text/html","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (6928), with CRLF line terminators","md5":"060b962b06368319f65c9e47d412a7a5","sha1":"0c7f8e66384c7a86d7a398d0dd3d6d629d889092","sha256":"e2e0568acdb3acd77a49241fae64e4e86bc387b003377f9f614f185e2eaea653","sha512":"75e8e1c36363f3d82c20bc258400167c0654e7956ea5aaaaa15a3d360e3f618f96cd677190acaab5000cdd92b0a2d9b6b2abd3a2948a2887e603e2d9b0bf9b65","ssdeep":"192:KdjffqVpVkbRABo7Z+veddyFFb62uTReTH7BR:yKhQEvNF/+Ij","tlshash":"7bf1e179b042d09fa56f8afffea89e64d1481d1bd8cc5ac800e8c85e29fc57b70185d6","first_seen":"2023-11-16T14:24:02Z","last_seen":"2023-11-17T15:04:45Z","times_seen":53,"resource_available":false,"data":null}},"time_used":3750,"timings":{"blocked":1729,"dns":900,"connect":273,"send":0,"wait":289,"receive":3,"ssl":554},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft Outlook","verdict":"phishing","severity":"medium","comment":"","tags":["phishing","microsoft","outlook"],"meta":null}]}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:37.600Z","timestamp":1700149057600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 16 Oct 2023 08:10:01 GMT","end":"Mon, 08 Jan 2024 08:10:00 GMT"},"fingerprint":{"sha1":"FA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9","sha256":"49:8C:6B:B2:97:76:80:4E:24:97:74:5B:32:58:34:BD:68:38:53:29:53:2A:A7:1E:4D:63:92:60:0F:60:FB:D4"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Nov 2023 10:16:52 GMT\r\nexpires: Mon, 11 Nov 2024 10:16:52 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 364845\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30028,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T18:27:40.348074Z","times_seen":261047,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":22,"dns":1,"connect":8,"send":0,"wait":11,"receive":10,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.1.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:37.610Z","timestamp":1700149057610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.1.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-152b5\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 16 Nov 2023 15:37:37 GMT\r\nage: 5348455\r\nx-served-by: cache-lga21947-LGA, cache-bma1663-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 119, 44298\r\nx-timer: S1700149057.030181,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30070\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30070,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-03T18:24:38.431028Z","times_seen":138338,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":24,"dns":0,"connect":8,"send":0,"wait":10,"receive":4,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.3.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:37.616Z","timestamp":1700149057616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.3.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-42587\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 16 Nov 2023 15:37:37 GMT\r\nage: 5348407\r\nx-served-by: cache-lga21980-LGA, cache-bma1676-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 73, 27086\r\nx-timer: S1700149057.049794,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 80268\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80268,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"6a07da9fae934baf3f749e876bbfdd96","sha1":"46a436eba01c79acdb225757ed80bf54bad6416b","sha256":"d8aa24ecc6cecb1a60515bc093f1c9da38a0392612d9ab8ae0f7f36e6eee1fad","sha512":"e525248b09a6fb4022244682892e67bbf64a3e875eb889db43b0a24ab4a75077b5d5d26943ca382750d4febc3883193f3be581a4660065b6fc7b5ec20c4a044b","ssdeep":"6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3","tlshash":"f844a4d8fb8d112e423231aa9c2f12cdb77dd171560458aebd4d597c24a083d82faf7a","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-03T18:24:38.427942Z","times_seen":51034,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":38,"dns":1,"connect":14,"send":0,"wait":9,"receive":21,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:37.650Z","timestamp":1700149057650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Nov 2023 15:37:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6157\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fa9-4af4\"\r\nlast-modified: Mon, 04 May 2020 16:15:37 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1933051\r\nexpires: Tue, 05 Nov 2024 15:37:37 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=UilZDIGeoFmJt6SmpZUT40kF7agRBvAVuggb0CBIXDkXngPNOuWN07a0XjDZWT1w9R75KVw16%2BDDyZJsm4ACGxFKOT%2BbQZrU9WfKMXrvxNms4V8aWYMjZMTwpiWEmt%2FHAZgQEDRB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8270d0f6ac4f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6157,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (19015)","md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-03T18:27:40.343906Z","times_seen":103913,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":24,"dns":12,"connect":5,"send":0,"wait":11,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:37.647Z","timestamp":1700149057647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.2.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-10fdd\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 16 Nov 2023 15:37:37 GMT\r\nage: 5245258\r\nx-served-by: cache-lga21963-LGA, cache-bma1676-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 22, 42007\r\nx-timer: S1700149057.112226,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 23856\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23856,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32012)","md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-04-03T18:27:40.342902Z","times_seen":76497,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":69,"dns":12,"connect":9,"send":0,"wait":9,"receive":1,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:37.600Z","timestamp":1700149057600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 16 Oct 2023 08:10:01 GMT","end":"Mon, 08 Jan 2024 08:10:00 GMT"},"fingerprint":{"sha1":"FA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9","sha256":"49:8C:6B:B2:97:76:80:4E:24:97:74:5B:32:58:34:BD:68:38:53:29:53:2A:A7:1E:4D:63:92:60:0F:60:FB:D4"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Nov 2023 10:16:52 GMT\r\nexpires: Mon, 11 Nov 2024 10:16:52 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 364845\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30028,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-03T18:27:40.348074Z","times_seen":261047,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":22,"dns":1,"connect":8,"send":0,"wait":11,"receive":10,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Archivo+Narrow\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:37.638Z","timestamp":1700149057638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 16 Oct 2023 08:10:01 GMT","end":"Mon, 08 Jan 2024 08:10:00 GMT"},"fingerprint":{"sha1":"FA:D7:68:E4:12:7D:FE:22:87:DE:95:F1:1E:49:5A:49:FA:12:1E:B9","sha256":"49:8C:6B:B2:97:76:80:4E:24:97:74:5B:32:58:34:BD:68:38:53:29:53:2A:A7:1E:4D:63:92:60:0F:60:FB:D4"}}},"request":{"raw":"GET /css?family=Archivo+Narrow\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Nov 2023 15:37:37 GMT\r\ndate: Thu, 16 Nov 2023 15:37:37 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1006,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"data","md5":"de1d35645ba562004383701e01d78904","sha1":"b71845fa7ed68f94c811eb88fde5e4e03046ab9c","sha256":"e347468bba4dd20958b0086b132a98068f7f9f1c686583a308f37b2bd3d1bcb1","sha512":"3c3493d2c03c8101dfbb36f8f433a4e36361b07bb443f0b7a602529222b700b0898df52758ab418bf3367fb4ece9998ff9f1e17be1e63a85d39cb1ed212cd357","ssdeep":"48:coOEa4gvGOEa4goRVc+oUOEa4gHN0oDfgyyyyyyyyyyyyynzQQQQQO:coOEateOEatEVc+oUOEatHNRQQQQQO","tlshash":"1282ab5b2f5f0d81ec4b0db80b121e80c9e55c963854cffbdbb6b56888b4364a7845eb","first_seen":"2023-11-01T00:43:59Z","last_seen":"2024-08-20T21:34:53.907751Z","times_seen":371,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":35,"dns":3,"connect":15,"send":0,"wait":22,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greylight380-1322272810.cos.na-toronto.myqcloud.com/bootstrap.min.js","fqdn":"greylight380-1322272810.cos.na-toronto.myqcloud.com","domain":"myqcloud.com","tld":"com"},"ip":{"addr":"49.51.54.104","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:37.709Z","timestamp":1700149057709,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cos.na-toronto.myqcloud.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"GlobalSign Organization Validation CA - SHA256 - G3","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 27 Feb 2023 02:45:55 GMT","end":"Sat, 30 Mar 2024 02:45:54 GMT"},"fingerprint":{"sha1":"35:FE:CD:A6:0E:ED:28:0B:E5:8E:50:19:E7:C1:9C:13:37:4D:53:F0","sha256":"CC:35:08:A0:5B:E3:CD:AE:83:3D:26:3B:DD:DC:4A:AE:0C:36:6C:53:98:FE:04:D5:0C:7E:A0:48:ED:B8:F7:F1"}}},"request":{"raw":"GET /bootstrap.min.js HTTP/1.1\r\nHost: greylight380-1322272810.cos.na-toronto.myqcloud.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: text/javascript\r\nContent-Length: 619903\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nDate: Thu, 16 Nov 2023 15:37:39 GMT\r\nETag: \"a6afcb8ba4dbb12405630fd1e386a00f\"\r\nLast-Modified: Mon, 13 Nov 2023 07:25:05 GMT\r\nServer: tencent-cos\r\nx-cos-hash-crc64ecma: 2698414685414516075\r\nx-cos-request-id: NjU1NjM3NDNfOTk1NjA2MDlfMTQ3ODVfZTAyYWZi\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":619903,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (65472), with CRLF line terminators","md5":"a6afcb8ba4dbb12405630fd1e386a00f","sha1":"b249ddc77710f21d0a3e6278ffa02d38781fc271","sha256":"5dcd60c40360ff4529072e8007cda66ed790aa044ff406f68302c291d018038d","sha512":"2feee0cab526840d5c0052c9cf8b88f46001d0ee87858a99d972d953c772c673c0cd5c2bcbaed5adcb2258b9b305f88b1e9bb2461957dfeeb2dad440637df0d1","ssdeep":"6144:MTNzYLBxEejgHr1SuvnhMJj5jroyhK1mt48uyG8iP:Gl4eMuvnhMJj533hK1mt4yG3","tlshash":"11d460f87b40b54b31060336761894ffd371383cae45885bef552ca9a1b6231eae5b39","first_seen":"2023-11-07T22:30:37Z","last_seen":"2023-12-02T22:37:38Z","times_seen":208,"resource_available":false,"data":null}},"time_used":5424,"timings":{"blocked":2314,"dns":2030,"connect":115,"send":0,"wait":132,"receive":592,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greylight380.my.id/next.php","fqdn":"greylight380.my.id","domain":"greylight380.my.id","tld":"my.id"},"ip":{"addr":"162.241.71.126","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:47.848Z","timestamp":1700149067848,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greylight380.my.id","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Oct 2023 18:15:16 GMT","end":"Thu, 25 Jan 2024 18:15:15 GMT"},"fingerprint":{"sha1":"9A:07:AA:84:F8:31:8E:2C:7C:39:57:10:31:45:0B:42:F2:02:48:F4","sha256":"8E:49:23:81:06:81:DC:B8:51:E9:72:36:C1:EB:9A:1F:07:47:86:8E:58:81:3B:DF:96:5D:06:A7:0B:82:43:FD"}}},"request":{"raw":"POST /next.php HTTP/1.1\r\nHost: greylight380.my.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 16 Nov 2023 15:37:44 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 86400\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"1f57cbd1f1a1ced8f62d34242408414c","sha1":"52279c54b16f0a88d43d57b4cbb9813ea3cc39ab","sha256":"c462d460eab61de19f36cc384c99666e5bf65eaeba0c12b8f594c5410c01f220","sha512":"74a8b00878acbff90771ab31062d088ccee50794f975db0b2b0c26ee37eeb7792b99f456b1105d07c94deab79f376cec630e4761111cd6bda4120eb226d666d5","ssdeep":"","tlshash":"9360000000000c0c0cc00f00030003303f300f00300f30c0c00c003030c30c0c00c000","first_seen":"2023-04-05T18:33:18Z","last_seen":"2026-04-03T15:00:29.762315Z","times_seen":22740,"resource_available":true,"data":null}},"time_used":569,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.213.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:47.588Z","timestamp":1700149067588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Sun, 29 Oct 2023 00:00:00 GMT","end":"Tue, 29 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C","sha256":"09:32:99:C8:74:C7:C3:CF:73:1C:DD:DA:92:7C:22:1B:DD:53:9C:51:21:D5:10:61:C4:4D:CC:52:56:13:C6:DC"}}},"request":{"raw":"GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\ncontent-length: 17174\r\ncontent-type: image/x-icon\r\ncontent-md5: EuPayFgGHQiAI7K9SOL6lg==\r\nlast-modified: Fri, 02 Nov 2018 20:25:25 GMT\r\netag: 0x8D6410152A9D7E1\r\nx-cache: TCP_HIT\r\nx-ms-request-id: 3ecc1022-b01e-0000-350f-183773000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref-originshield: 0fFVVZQAAAACG6i/lXg2rQ48mfhy7XsKAQU1TMDRFREdFMTgxMwAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=\r\nx-azure-ref: 0SzdWZQAAAAB2I06efDw8T4Ap8Qoq4JdCU1ZHMjBFREdFMDUwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=\r\ndate: Thu, 16 Nov 2023 15:37:46 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17174,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\\012- data","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-04-03T18:30:52.528575Z","times_seen":163398,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":41,"dns":2,"connect":8,"send":0,"wait":15,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg","fqdn":"aadcdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.213.53","port":443,"asn":8068,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:47.590Z","timestamp":1700149067590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"aadcdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Sun, 29 Oct 2023 00:00:00 GMT","end":"Tue, 29 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"88:95:0C:FA:9D:33:AA:BF:A4:FD:9D:84:A6:E8:02:06:58:50:AD:8C","sha256":"09:32:99:C8:74:C7:C3:CF:73:1C:DD:DA:92:7C:22:1B:DD:53:9C:51:21:D5:10:61:C4:4D:CC:52:56:13:C6:DC"}}},"request":{"raw":"GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1\r\nHost: aadcdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\ncontent-length: 621\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-md5: R2FAVxfpONfnQAuxVxXbHg==\r\nlast-modified: Tue, 10 Nov 2020 03:41:24 GMT\r\netag: 0x8D8852A7FA6B761\r\nx-cache: TCP_HIT\r\nx-ms-request-id: c045178d-e01e-0099-0aeb-10a317000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref-originshield: 0SpZJZQAAAAAZbTeMBcnNR57nf8HoEr6SQU1TMDRFREdFMTkwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=\r\nx-azure-ref: 0SzdWZQAAAAAej3tY5tb2SLh0ksuor2VZU1ZHMjBFREdFMDUwOAAzOWExMmY3ZS04OTlmLTQ2Y2YtYTZkMC0yNGJiYmEyN2Q5NTY=\r\ndate: Thu, 16 Nov 2023 15:37:46 GMT\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- HTML document, ASCII text, with very long lines (1592), with no line terminators","md5":"4e48046ce74f4b89d45037c90576bfac","sha1":"4a41b3b51ed787f7b33294202da72220c7cd2c32","sha256":"8e6db1634f1812d42516778fc890010aa57f3e39914fb4803df2c38abbf56d93","sha512":"b2bba2a68edaa1a08cfa31ed058afb5e6a3150aabb9a78db9f5ccc2364186d44a015986a57707b57e2cc855fa7da57861ad19fc4e7006c2c239c98063fe903cf","ssdeep":"","tlshash":"b931787f43b45ae7239017741760626c13f4ee917169d0b4dba30c9a8d4bd33327843a","first_seen":"2023-04-14T20:16:11Z","last_seen":"2026-04-03T18:05:44.03326Z","times_seen":71669,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":56,"dns":2,"connect":11,"send":0,"wait":13,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:47.604Z","timestamp":1700149067604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msftauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Tue, 31 Jan 2023 00:00:00 GMT","end":"Wed, 31 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"99:06:D8:1E:EC:BF:DB:78:DF:F4:89:A3:ED:23:07:3D:79:F1:16:D6","sha256":"F7:B6:66:B3:86:91:AD:10:60:9A:D7:48:01:B8:27:C3:F4:47:7A:7C:B7:FF:C5:3F:77:26:B0:B3:08:24:D9:EE"}}},"request":{"raw":"GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\nage: 13373026\r\ncache-control: public, max-age=31536000\r\ncontent-md5: DhdidjYrlCeaRJJRG/y9mA==\r\ncontent-type: image/svg+xml\r\ndate: Thu, 16 Nov 2023 15:37:47 GMT\r\netag: 0x8D7B007297AE131\r\nlast-modified: Wed, 12 Feb 2020 22:01:50 GMT\r\nserver: ECAcc (ska/F732)\r\nvary: Accept-Encoding\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 68d21ab8-f01e-0076-6702-9f059f000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 673\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":673,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (1864), with no line terminators","md5":"bc3d32a696895f78c19df6c717586a5d","sha1":"9191cb156a30a3ed79c44c0a16c95159e8ff689d","sha256":"0e88b6fcbb8591edfd28184fa70a04b6dd3af8a14367c628edd7caba32e58c68","sha512":"8d4f38907f3423a86d90575772b292680f7970527d2090fc005f9b096cc81d3f279d59ad76eafca30c3d4bbaf2276bbaa753e2a46a149424cf6f1c319ded5a64","ssdeep":"","tlshash":"4e310059c51d3566ec04c3aceae1d468315e71efa8a581c961849b3f95b0dce0eccb70","first_seen":"2023-04-12T23:20:27Z","last_seen":"2026-04-03T18:26:00.540337Z","times_seen":102146,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":70,"dns":38,"connect":8,"send":0,"wait":247,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"greylight380.my.id/next.php","fqdn":"greylight380.my.id","domain":"greylight380.my.id","tld":"my.id"},"ip":{"addr":"162.241.71.126","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:47.848Z","timestamp":1700149067848,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"greylight380.my.id","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Oct 2023 18:15:16 GMT","end":"Thu, 25 Jan 2024 18:15:15 GMT"},"fingerprint":{"sha1":"9A:07:AA:84:F8:31:8E:2C:7C:39:57:10:31:45:0B:42:F2:02:48:F4","sha256":"8E:49:23:81:06:81:DC:B8:51:E9:72:36:C1:EB:9A:1F:07:47:86:8E:58:81:3B:DF:96:5D:06:A7:0B:82:43:FD"}}},"request":{"raw":"POST /next.php HTTP/1.1\r\nHost: greylight380.my.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 46\r\nOrigin: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Thu, 16 Nov 2023 15:37:46 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 86400\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":68,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON data\\012- , ASCII text, with very long lines (32030), ASCII text, with no line terminators","md5":"5e98c76a16ff1480a11a30b1a8a3f519","sha1":"09b4dd30e6c0ceb953abd9d83289934cb891147a","sha256":"1e868b594a866b56700259ade1fbbe8eb4fca272f5d3769e70b55e71dd06c43d","sha512":"c03f3688ddbc82bb88fd86708f0bca6c83164870fe9d75143826bbf45442a359a245f839eb0a84f9b852ff0852640ff58224f5d92ef8814152256bde7ec93197","ssdeep":"","tlshash":"7da002120d445c59a881385511d07f6565ed35c3d2ab4ff4d02d5b748df9064b0a7205","first_seen":"2023-10-30T11:13:43Z","last_seen":"2024-09-19T22:21:50.502367Z","times_seen":6720,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.8.1/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.140.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:37.642Z","timestamp":1700149057642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Thu, 12 Oct 2023 00:00:00 GMT","end":"Thu, 10 Oct 2024 23:59:59 GMT"},"fingerprint":{"sha1":"CB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78","sha256":"29:64:7D:BB:E2:78:A4:FC:4C:B9:DA:F0:4C:9D:D9:B3:4A:8A:7F:05:C0:AB:83:05:32:CC:89:BF:07:9A:98:E6"}}},"request":{"raw":"GET /releases/v5.8.1/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Nov 2023 15:37:37 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\netag: W/\"e4c542a7f6bf6f74fdd8cdf6e8096396\"\r\nlast-modified: Fri, 22 Sep 2023 01:45:55 GMT\r\nvary: Origin, Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 11800\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=VAWbLX14tMOtD4nAXlRqwDEH6CQ5bF5gCQghBXlubCzwFhQcffd0A1SGV7xHUriiPI%2FzXnucenMhq4Nittn7%2FIYpDTAM%2FyB1pM0GeVzddq7pUcQwd6r6%2F%2FJ%2BSpWGWmn2%2FGsvqtKT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8270d0f6fddd7318-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55111,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54926)","md5":"e4c542a7f6bf6f74fdd8cdf6e8096396","sha1":"3a0571a695a35f238026b9398386dc99d9a0c56d","sha256":"eeb17a45a48aca1d7adbcf04de155dcd0b47cb36ad036310446bb471fea9aaa3","sha512":"80c8d07836842c9d2bc8223e16d22dbac53d3240227c265c1aaefcf45af3922338f43f256c38686946885f8012535f3bc287cc3658012787246eb5ccf6c13a3e","ssdeep":"768:guC31UP18Pq4/vnU63HJXkQCZ/WMQyjJKX719sGsQz5:gu5PWC4/vzH5BCkgc7zsiF","tlshash":"76330ab8e54c41d9a731c44fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9fb9","first_seen":"2023-04-05T14:33:33Z","last_seen":"2026-04-03T18:16:08.607354Z","times_seen":21197,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":71,"dns":2,"connect":32,"send":0,"wait":43,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:37.706Z","timestamp":1700149057706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Fri, 30 Dec 2022 00:00:00 GMT","end":"Sat, 30 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A","sha256":"A9:0D:CB:FA:8B:27:40:D5:69:3F:93:AD:77:1E:A7:F8:FA:9A:FE:2E:75:63:04:E9:12:F7:63:DD:B0:C2:87:F5"}}},"request":{"raw":"GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Nov 2023 15:37:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: W/\"14d449eb8876fa55e1ef3c2cc52b0c17\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-cachedat: 10/31/2023 18:55:57\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 865\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requestid: d5837ccf1f2e3fda39e6155c759b5bbf\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 8037\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 8270d0f6dba8b529-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48944,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (48664)","md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-03T18:27:40.347315Z","times_seen":103133,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":26,"connect":2,"send":0,"wait":10,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.s-microsoft.com/favicon.ico?v2","fqdn":"c.s-microsoft.com","domain":"s-microsoft.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/bergson-law.html?e=clerk.russell@myorangeclerk.com","date":"2023-11-16T15:37:39.251Z","timestamp":1700149059251,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 07","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 14 Sep 2023 17:24:20 GMT","end":"Sun, 08 Sep 2024 17:24:20 GMT"},"fingerprint":{"sha1":"E1:57:9B:A5:51:25:CE:C3:A7:8E:39:F5:5C:F8:1D:A8:BF:A9:4F:88","sha256":"F3:48:25:E7:1C:E7:FE:A1:D3:88:2C:85:5F:64:D2:BC:5B:FC:44:90:96:81:C9:BE:9D:33:57:BE:B2:A1:AE:6B"}}},"request":{"raw":"GET /favicon.ico?v2 HTTP/1.1\r\nHost: c.s-microsoft.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bergson-law-1322273052.cos.ap-tokyo.myqcloud.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\nlast-modified: Wed, 04 Oct 2023 17:55:12 GMT\r\naccept-ranges: bytes\r\netag: \"1D9F6EBEBEC0000\"\r\np3p: CP=\"ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI\"\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\naccess-control-allow-credentials: true\r\nx-frame-options: SAMEORIGIN\r\nx-sitemuse-origin: Azure\r\nx-azure-ref: 0jD1BZQAAAACTlhAeQnvRT7/lj1Cg0oPxQU1TMDRFREdFMTkxMwAxYjJiMjJjMS1jYjBjLTQ5NTAtODg3OS1kMjEyZjJhYzVhNGI=\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 540\r\ncache-control: public, max-age=318859\r\nexpires: Mon, 20 Nov 2023 08:11:57 GMT\r\ndate: Thu, 16 Nov 2023 15:37:38 GMT\r\naccess-control-allow-methods: GET,POST\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":91,"connect":1,"send":0,"wait":9,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}