{"report_id":"c70e57cc-447c-4ea1-a9ae-a011147db0c4","version":0,"status":"done","tags":[],"date":"2026-07-12T19:53:27Z","url":{"schema":"http","addr":"login.sf.tumee.com","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"login.sf.tumee.com/","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"title":"Login | Salesforce","dom":{"size":13662,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7035)","md5":"debc0ca3f29548e9f0a50e10c05db983","sha1":"553bc6a62fa81a719041afe6b78b5081caacede9","sha256":"6afc319ca0234adf12998c892bdce6489169587fdd94361db25a39b0308ec70a","sha512":"ece985b6444321cfde62fce75510ba045e191b1151b226be63df7594b060b6697a49f19d26be1eec4e2df124a77937561bbcd0aad2d6535b85b82b1770b85b76","ssdeep":"192:b3zAgJaPTYhY7YShaRMiFmqvrC9r4wrN2weQMfKJmTrw2pfUsj:j3JabWYED3mhrNYQMfKJyrwas+","tlshash":"895271b71e255c266603c9feb8d2fb8c606bc22e47459d5cb7bc2a137787e59087042e","dom_hash":"domhashd200e6cfd88c584facfc5d60dc6fd8f6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"login.sf.tumee.com","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T19:53:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"login.sf.tumee.com","ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-09-09","domain_rank":0,"first_seen":"2026-07-10T12:23:51.044725Z","last_seen":"2026-07-10T12:23:51.044725Z","alert_count":64,"request_count":16,"received_data":190055,"sent_data":9582,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]}]},{"fqdn":"wp.sfdcdigital.com","ip":{"addr":"95.101.10.184","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2021-02-01","domain_rank":73820,"first_seen":"2021-11-16T08:21:02Z","last_seen":"2026-07-05T06:25:51.187037Z","alert_count":0,"request_count":3,"received_data":157012,"sent_data":1835,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cookies-data.onetrust.io","ip":{"addr":"104.18.32.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-05-27","domain_rank":72480,"first_seen":"2021-07-20T11:01:34Z","last_seen":"2026-07-08T11:04:12.798365Z","alert_count":0,"request_count":1,"received_data":388,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"c.sf.tumee.com","ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-09-09","domain_rank":0,"first_seen":"2026-07-10T12:35:54.685538Z","last_seen":"2026-07-10T12:35:54.685538Z","alert_count":108,"request_count":27,"received_data":3154670,"sent_data":18281,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]}]},{"fqdn":"a--sfdcstatic.sf.tumee.com","ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-09-09","domain_rank":0,"first_seen":"2026-07-10T12:35:54.692181Z","last_seen":"2026-07-10T12:35:54.692181Z","alert_count":44,"request_count":11,"received_data":849474,"sent_data":6103,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-05T22:30:27.189477Z","alert_count":0,"request_count":1,"received_data":851512,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"privacyportal.onetrust.com","ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":16579,"first_seen":"2018-05-24T20:25:49Z","last_seen":"2026-07-09T18:08:33.626448Z","alert_count":0,"request_count":2,"received_data":3421,"sent_data":1134,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"geolocation.onetrust.com","ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":4022,"first_seen":"2018-02-07T11:23:41Z","last_seen":"2026-07-06T08:49:52.694879Z","alert_count":0,"request_count":1,"received_data":436,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ad961668d56379e9081b9d5ce8c571ea","sha1":"5d2bd4a1003bdfe17f711334daf1c7c7c5d9cc8f","sha256":"440f03b8d45a1a7cbb853eae6eb430952cdfa398dfdd68033df4aeca7bcabdaf","sha512":"7de29be52650fccaa2d69b3c45e3d9b2ffddae07b13eb49de426a378bc80732caeb1ef7d48b2eac770d31a3f0169312e4732c740e23c9855dc462300408fb374","ssdeep":"","tlshash":"dde0122bf19f003f08cb615b78c54911801b8af79c479b25b3321efd6017a5a8288efa","size":353,"data":"","first_seen":"2026-01-19T14:11:45.661729Z","last_seen":"2026-07-16T21:57:18.491085Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"345eab6c6a71d83456e76d19de6a07af","sha1":"309ae9df8ab0d3bc655f1127a68f089fceb97bf0","sha256":"906f1631ec78aad79652c4064935ce0f12f4f72fbab7904f3902a0cb5ef44386","sha512":"1cf372e00a4c1f7a7ea71a0bb610d574689ebfbe53604f332e016399dd29f3a0e8c44500d6f7e917e8b053d506c2ca3c2b3198c681ce72a5664f3c342e1e9002","ssdeep":"","tlshash":"45c08cddb2ce6812e0b6000c58a6c248b3385d209b0dc292e584828aac90ea1047ae58","size":156,"data":"","first_seen":"2023-03-08T01:34:20Z","last_seen":"2026-07-16T21:57:18.18161Z","times_seen":1815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9f3a91b53abd55789ccbc278daa6430b","sha1":"5a81c3ae2c466fea2d56e3e169d0ac8cfc6a115b","sha256":"a5e2384f3f9b321caf9763e05d6742f0a2b82c773b9212cc04583ecf76f11b18","sha512":"1ec7c8cd0f57b6278ed63c3d3336cb43a87aa28086db8fd6dd6d48e2fe5cc84ac51b956a6d7869d3b6eb870268e248e5f485f2ed584e016f29279d6c981e23f1","ssdeep":"","tlshash":"92d02b9ff7ba221742da6418d49b06171029b78a0b048ba3403709ead4254c10223e39","size":272,"data":"","first_seen":"2026-05-27T00:11:11.66158Z","last_seen":"2026-07-16T06:51:04.60213Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0245ed39bcd010d8c86149805b06cd33","sha1":"1063c81fc3a8bb19cbe70a92fec5cc0cc0d2b10f","sha256":"9d9021acbd033bdefc937c58726432c9f09933e7458f58cc66b0ff8d0359085e","sha512":"7743fbd175e9a3ff9cc4af2139a484ff84473c2cb265fe38455aad8f70bd718b4aa849f59bd4e5db773907d57b03206c1bf4725088073b1fc0a04327ee97a585","ssdeep":"","tlshash":"b8b0126df5a632bdd35e2026342949212057299549809134a12586e8d115b144030ea5","size":90,"data":"","first_seen":"2024-05-28T14:30:20Z","last_seen":"2026-07-16T06:51:04.480505Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0eb0478b5a84ce7ed196470eb0266ffa","sha1":"87616b052092656e37ac29856546a26e2677ea75","sha256":"465dabe7bf1c22ca32f9b9bff929c14489be1a2eb3401f8a2df2acae19c89113","sha512":"0e6d103aad799d1dd8d6d4fef5eadc3a42e80c3dd7acf2a26ce01f9c5df8ef9018dba20a06c9faf6ae88a5e08f5ecd6828bdb68d24ea1606904f7b1d513e5178","ssdeep":"","tlshash":"43b0125db19633a9d75f301634694211300716961980b124613586ec9505b144030ea5","size":90,"data":"","first_seen":"2024-07-31T16:58:53Z","last_seen":"2026-07-16T21:57:18.571478Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"34662a18cc2b093dbcc12e1c837ccd5d","sha1":"34890f3f33e85c116189c270ba3e2207ccacccf0","sha256":"8c7b4f2e2971285f93e090910d7495077c9c98ba0f0e1cc86e5f6ade3e4318e6","sha512":"2fc8ab3a40f1db25c359f4ada02282b44884e5518a2a3a637309da539760b2084d869343c72450a38da68594743ba725fa274b5b166e7c9bc25c756854938466","ssdeep":"","tlshash":"6bb0126db6a623a9e34e301634694111200716950a80a128612986e89105b145030ea5","size":90,"data":"","first_seen":"2024-12-10T19:46:17.932421Z","last_seen":"2026-07-16T21:57:18.445799Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d7bc924ae6c4e6c32231d4a05ee8b84a","sha1":"534234c2614d4c704a6031ef69e7125b0b1a5498","sha256":"6057cde11255f102a4bb4cc414cfb015b90ea7b30949f5c237ff29aa3bcdcc09","sha512":"bb09f92aec7923eb13b62d8c7c7116d8221dde6c10dfb83818527d8e2df1c76ac382075e6c68856604bdc30c3ad273330f9030bb683d0d28003529b9ff20511b","ssdeep":"","tlshash":"3ac08c3db23b202f06496449a81bcb11905bf6c00e864f2000aa3ed8c100a2c51d89a8","size":151,"data":"","first_seen":"2026-05-27T00:11:11.736583Z","last_seen":"2026-07-16T06:51:04.50607Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c39c9fe2572dda84e7544b39a7e91db7","sha1":"bdda4eaed97130b8170e7c1fa2a9bffed120b93e","sha256":"8b5f39f4c298bf7acf585e3dbe098f22deef26732f61ef889095b5255c6d70a0","sha512":"d72d14ae06956398f67bba3c83928e75624818d3f15ecd231ef380903aafb42b531c9d7a099277ce7ad290b1c7573d82106dd46b5ed2cdbb8953b709a421f670","ssdeep":"","tlshash":"a3b0125df59633add34e20163429451120072995498091246125c6e89106b148130ea5","size":90,"data":"","first_seen":"2024-03-28T12:54:31Z","last_seen":"2026-07-16T06:51:04.449016Z","times_seen":181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c1bd45150303bdab922a635d474047c","sha1":"a4b1474ed3d6908120c6821798cc27582d229c8d","sha256":"c4a10f1e38858f49870e94df23aed6a8f243393e9bd85bf1543308f8558617e2","sha512":"784ee852415c76960353720d4de7f0d1c3e664b31ce4eb12726b04dd4be540480a04e52d8d22b73faaccf94b1135ed3440691eea81f7d50a54d728eb4e1c82dc","ssdeep":"","tlshash":"64e0122bb59f003f48cb715b79494b11801746f69c479b25b3321ffd9016a4a858cefa","size":358,"data":"","first_seen":"2026-03-06T00:02:05.852564Z","last_seen":"2026-07-16T21:57:18.471397Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e4e583d0395f45fbc3b408113331c2e9","sha1":"b968d757fd0b8a7171999a5e16659d92b631c7d8","sha256":"de3bb9cba4ee8a3c0e299aebfba7b63c206457f0089973254315c6c0b1769a37","sha512":"6384ae2a539426eb37d7c8230aa42cdd895eaeabc5aca187536962c09d8acb06bdaba7c27d508616f73f533d393b552e0df68df0146170aad39747521666882a","ssdeep":"","tlshash":"64b0125db29a22a9e34f20263439411120871a9509c49124612586e89105b144031ea5","size":89,"data":"","first_seen":"2026-05-27T00:11:11.74805Z","last_seen":"2026-07-16T21:57:18.424841Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"129ffca10c76e7a6482d9fa7dc7c2bca","sha1":"bc7aefeba6ac9002a43ecb2bc747d9781183b3a8","sha256":"069340cda89e35d5088a02983ca5b2234cd5557a50edeeef2e235bb7077c7a46","sha512":"bf4fe874782106d0846e040c418117e133bf230bf6e199ba7a28821642683149c2183276d849579d2ed71a2c8a5b00c716c16cca4197bb28a9f429aa67dbb319","ssdeep":"","tlshash":"36b0125db19622add35e20163429411121471595098091246125c6e8d106b184130ee5","size":90,"data":"","first_seen":"2024-03-15T19:21:57Z","last_seen":"2026-07-16T21:57:18.194242Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"553fa7478ce24208ce59aa9af21197f1","sha1":"5e4619af92d7ea61a6ddae6b077e59f5e061d28f","sha256":"840899f9f085fc6e29c0dd412ecb802b1551dc1a3e76b7d3b6a789ebc713f589","sha512":"1146038dd9b85a43233a4e2e089799354dafbc49aa44f29c40a2301cba879530f7ac9e8b007d38ff07a852a7d51d678be84c78541f3bfce0805353b67cf52231","ssdeep":"","tlshash":"16c08cdeb2cb2420e0b6040c54a6c158b3399d209f0dd2a2e180c28a9cd0eb14475e58","size":154,"data":"","first_seen":"2023-03-08T01:34:20Z","last_seen":"2026-07-16T21:57:18.193522Z","times_seen":1815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94bb06f8908b22dee3539ada2dee934a","sha1":"d3077c768baedd1f4a65f573e7fe770f8838a567","sha256":"e068ff73648ad3be459ef9ceb4485e6b7a1ca25fa6eb38715e485b2ca30e75e5","sha512":"510bcfef62570df0e8e2ac240b6589550b35d0bc170e4f93fb773c242efb2db82e17a19f7f64e41e3c11b88d48f1f2af78127a3bb751690062e1df0709d06feb","ssdeep":"","tlshash":"78e0122bb199083f08cb615b78b54911801b46f7ac87db2576b21dfd6117a4ac08cefb","size":358,"data":"","first_seen":"2025-11-12T06:39:41.499503Z","last_seen":"2026-07-16T06:51:04.503784Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"efef9dcba000dadf701f87488bac0d65","sha1":"6a6dd4dc89d846ca412b3eb350020162f2092049","sha256":"541dde45c38a969ae8d63b58d20022e28e808d71965fa738b6e48e922723dce6","sha512":"4e8f2796b450cd39410f10fdf6baf885d38d9e022d3948e76b8281c15760304e37db290b56f547083923088bb2809fa51fbe573783582dfbafcddc09fdb6ad5a","ssdeep":"","tlshash":"43b0125db19722aed34e2016343941112047159509859124a1259be89105b144130eaa","size":90,"data":"","first_seen":"2024-04-24T13:59:12Z","last_seen":"2026-07-16T21:57:18.246769Z","times_seen":616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2761eb5951d595149b5d7012ea5b341a","sha1":"46bbc5f0c3a8e7287fdb8124047b15313a367149","sha256":"56568e372e90177688dfcfdccc7d3733033f0bce55a8f2bf81262803eb799377","sha512":"b3b3baf27f0ff57bc5ef4761c9670589a543c02af7f03fc2776906cb0e82853deefa25c9a5a28b5904b5d58bc77f0719cc4ebbf9a14ae5d41dd665e067d1ef31","ssdeep":"","tlshash":"36b0125df69663add34e20163c6d4515200b3995498091246125c6e8910ab144030ea5","size":90,"data":"","first_seen":"2024-05-23T17:50:04Z","last_seen":"2026-07-16T06:51:04.557977Z","times_seen":407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"745ff429fd0c3396797d88bd4e7ec7dd","sha1":"4b9652104df483e790e1312a8e92610e377de04d","sha256":"cc32e65c94cd51a9750ebb0fca1ca04b1aa35e4cf28c2cef6b5da3efc69df043","sha512":"55be86c48176fd47394ef43d6713156f5d9330be6e4c043178bee1ec7f0592662334e43c849141cb97fbe828eba247e62fb1fe1376120210bd5992236ad00bdd","ssdeep":"","tlshash":"1cc08c3db23a202f054d90492c5bcb11905bf6c00e824f3000aa3ed8c104a1c51e89a9","size":151,"data":"","first_seen":"2026-03-11T20:39:18.695851Z","last_seen":"2026-07-16T06:51:04.508259Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"74df8e7ab3cb0f214db147868024b51d","sha1":"1c24d75df53e789e4c96138df2726157ed440f08","sha256":"e78bed13a1fc7cd7483040630a20f53f364b45fe381e5495c626c2f00b7f88e7","sha512":"82b75ccd2c2bdd6a6fb6b139d8f7f394b847750d27a8be5745a9327ae809680b5f9258b02c00c5e72adba238bc1e1b883945b59fc0cae921cab451ac649ee995","ssdeep":"","tlshash":"efd02b9ffbba221742da6418949b06571029b78a0b048b9300370aead4255c10223e39","size":272,"data":"","first_seen":"2026-06-08T09:34:55.431956Z","last_seen":"2026-07-16T21:57:18.515851Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a429d89c6600bac7a3a284131f151ad5","sha1":"796fbd17b3e6844482ba28e785db78c6b0d64390","sha256":"965ac9a65c82f84418dfe8d68cab435076099b7932b3ae2049fbffafe99f7ba4","sha512":"d462a5e5eccde6f2ceac4942ba3b1178dbf86d72ebe03b0c55941f608116b2c12dc2a846ad721d6f7e59b1c04c882f517bd4d91e74f577ffd4a23ac141047857","ssdeep":"","tlshash":"c4b0125db19623add34e2016343a4111200719950a809124612986e8d105b144130ea5","size":89,"data":"","first_seen":"2025-10-11T09:00:05.37671Z","last_seen":"2026-07-16T21:57:18.237424Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94c877c483701f038a55f934bde7f4a4","sha1":"595c532019e5a10f8ef116eb753b7047bd2c02f9","sha256":"9319714746216710ff38bb432fd920bbfabef9695765c0127b7fb39f1eb0d19e","sha512":"106bcb73b727167c34d6d1476e3108769c80df6751cfd00aae9d55cff5cce669cf47995721dc4fe77394ca357dbdf04569fa5f635aa95b45f0a96a405b54ed43","ssdeep":"","tlshash":"d4b0125db29a26a9d34e201a34394111200719950a809124612a87e89109b144034eb6","size":90,"data":"","first_seen":"2023-11-28T22:30:32Z","last_seen":"2026-07-16T06:51:04.499862Z","times_seen":220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"21aec9415ab0e4b4b50d59df06d115b1","sha1":"049d0641547d2b743a80a0316c996a7510632164","sha256":"f32edea7b7e2e63b2449b83a9c6ffed378276b374b35eefb13c7754617c7a523","sha512":"692c003b5196232adac69730ffe2c0ceaf6cf1c0f83cb5ab742ad24474c06e78569459002a2832e30cb267b2449ab1c0d6f14abccac46263b08178f41fcbf5a1","ssdeep":"","tlshash":"a4b0125db19623add34e201a343a4115300715950a809128612986e8a105b144130ea5","size":90,"data":"","first_seen":"2024-04-03T00:03:21Z","last_seen":"2026-07-16T06:51:04.273778Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"550bcf79b0aa326f2b2dc9c4389e3bdc","sha1":"a3228643e7e63a0bd0dac74f62c281ed36a950a9","sha256":"5e2dbe7324c37d1bb0af82ddc62fdb8dfb2b28a096d4011e8f9412d6e61dec68","sha512":"bf0f30950bfe39005b70645fdbe560c071126e2d3b1a53422424fcafaaba96a32dfa4fdfd1450a22e465eea54427a45e0d5bf9151a4e328758dff8539eefb9ca","ssdeep":"","tlshash":"a701c6c8ba03ec3cd58680a01a3e4fc8b4721d203100c860667eacb4a620f8b0f23b8d","size":678,"data":"","first_seen":"2024-06-19T00:56:25Z","last_seen":"2026-07-16T21:57:18.20107Z","times_seen":1135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ad21008fbc0cd716ccef374a8d444aa","sha1":"bdeed03738dec7d8a98f9299483ceba3f914cdbb","sha256":"15e5e07849b06bb26989bc682e704979fb9247d5bfe021dc3f5245c122b3bb7a","sha512":"fa7d41abc26b8b02adb5d362eafadb34871f3ffd1cc2b14be6a0640f8de16467be85b65ea323e5837f1f84c2dcb6c72f6f574d09ff64244c8ae4dad47c152aa0","ssdeep":"","tlshash":"5001fe160f486fba8641e0ccb1aced82974e883241413d2e80b2570c2abf315261ab2b","size":703,"data":"","first_seen":"2026-07-10T12:36:00.142544Z","last_seen":"2026-07-12T21:21:00.185873Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"776805858ebc75913b1c849e8edbb64b","sha1":"9b8817b62ac96424ba4677f63260b84d35e5205b","sha256":"8533a8b03d702ddeacde4a97c31bf12d4f2457aa561aeeaa703448663f938ee2","sha512":"5f9520e150189ead88495e84b6d31066760a95f19353cd3d1a96942192c820faf7211d30d8015ff55f7a2a397e22efdc911a69d534aaa7558e89166fe632b3f3","ssdeep":"","tlshash":"43b02b270a1000309390f3c5e0101f0d9d348234448ea935639d354403393390420165","size":124,"data":"","first_seen":"2026-07-10T12:36:00.144934Z","last_seen":"2026-07-12T21:21:00.186325Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8461b832289f7985b8fb4c9fd222a0b4","sha1":"8a40613660c2efabf22de8f27b161580e2deca8e","sha256":"46a831ed53c4fb9bc0f3aa3188512170a369bb99de3c2c0a8cea3eda39bd1cb5","sha512":"b42b5457875d1aadc55d8e1df0adb4642cb76a5516820e6c1bb16b9deae27d69f73bc37bbf49303e101168080b567a5ac6eebb210a7507fd0edb6d40236080e2","ssdeep":"","tlshash":"59a022e208c882b2b0302300c00020033b3000f0c00a28fc23afec8c2f2f03c02fa802","size":71,"data":"","first_seen":"2025-11-06T18:13:25.092899Z","last_seen":"2026-07-16T21:57:18.148704Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5e9fa73263ad822ed822dabb24f8780","sha1":"3453108d4f541d370065441a03e4e5e9e1fdb82d","sha256":"3dabc1d3315e1506df30d902fc8e9f3a3a137190b01e29185c8e9f89d48ccbd2","sha512":"3ce5a0c26d7a4fbc97ea0c28b93853acb66945141d97256860bb4d6c2924dacb27f93f4f922385bd5950a483c4291bdb61c144af147eda13d2cdc96fc8609794","ssdeep":"","tlshash":"16a001d101653a1681f164d5977672957a2e213281d27fa27aacc2183f3b14f85426e3","size":84,"data":"","first_seen":"2026-06-08T09:34:55.067837Z","last_seen":"2026-07-16T21:57:18.150293Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"12965d283dac6682d4ff52ba2270c9d5","sha1":"adc49f93c811f280ca0208d490509161015ff8dc","sha256":"e7fe8e2f06ac6f9f7f3086fff41d116e02d03b4be91c601dd10b01eba8006849","sha512":"4da00fe937d7e455b422810ed71de653858aa1e6857808c251f6ad398424a686f96705bca75cd7d70359dd02ac3c8b801a48daf60d122ca494bc0981c9984d42","ssdeep":"96:CAn4RCy3vIcRe+b/oEEMI4ABVECl8YlCWZ9IdGSYbA99pT8HDNabItR:Nzy3k46L4pT8jo0T","tlshash":"3fc1627b43a98636071419434bdab705d8cee027ca4c5edcf7ec8c9cd7e82ad61a12d4","size":6110,"data":"","first_seen":"2026-07-10T12:36:00.152072Z","last_seen":"2026-07-12T21:21:00.187752Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"84273574cf5bd0ba3000b1c5000bee19","sha1":"0d3fbc8a88eb303ab8e69c7efc8b63014cda53a3","sha256":"85d8dbe7b37d52094725a1c1616af716e72bb4caf0452bbcdd52a5d010536d23","sha512":"84142f14763d9b05f29ff7c500d22afe74a4cb6afcc5544a692f5a141b1d2ecc872f290fc9508c26f34331cd40ccd8a72e3f8e807475c05dd4eb3558cc80dfcf","ssdeep":"","tlshash":"ade0c25a69967558cb23f838cb9f6304283650532008ce08ba1caa546f73296a2796d9","size":325,"data":"","first_seen":"2026-06-08T09:34:55.086621Z","last_seen":"2026-07-16T21:57:18.155013Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d839eb83176a4fcde4d1f59cd2dbc202","sha1":"275c770836f30b0b7ea6eff30c9d3b0ad99df39d","sha256":"d41d5a847883c54c35dc30428a5f0b0e8059dcf25b83e40e22e766ee792b903d","sha512":"bf163862133f049e0f11b5829a442d2c690fa525e3c40cfcdc93ee494bbe55384b7f61441448567847e02ca1b5de167703f7e78a63a7f8fbaa8ceb9e0606a702","ssdeep":"","tlshash":"e8f020f880b541b08d3ba45e6b0e5402362521578e507c753bec4e4e1f4c81d1afc998","size":482,"data":"","first_seen":"2026-06-08T09:34:55.091231Z","last_seen":"2026-07-16T21:57:18.157272Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"27a4d77c3570f2bd332ff6aa33e23211","sha1":"1d3e46f270d20d6b14c5046b2dcba32255b6b87b","sha256":"c14b262a2f8b718c5304b17a8f44558d00d1ed2a94f21cbd4c68b88efd55e258","sha512":"0effa46a4badf828e6fc7d852400277e2f91be639749420eb737f8342369b87b7804de522bd97bb3038fda8530f8464061771ee60e806246c03a997e3fa580a0","ssdeep":"","tlshash":"5fe0122bb59d103f48cb715b78654e1180174bf79c479b2576332dfd5016b4a808cafb","size":353,"data":"","first_seen":"2026-05-27T00:11:11.687201Z","last_seen":"2026-07-16T21:57:18.618334Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"53108043e3683010a1d9616a6f9bd4cd","sha1":"2e0282e743f15ec6fe579c78d98fbeb5e11affae","sha256":"49435c4eac83617ec97a538d6f9671a5662e6f5bdc342aa09d101d86b3f535a2","sha512":"3ab0ef4ff547e3fc29769746ae84a0af6cf92bd278a89a0017551472f579db37d3ad812f03657d63872af41ca494a0be0f7d0d18b57c130a8c20ed04c7ce260b","ssdeep":"","tlshash":"1ac0c21af388103e05cfb12b28954726561307eb5e82a219233209fd511b6468004efa","size":190,"data":"","first_seen":"2026-05-29T14:30:57.202321Z","last_seen":"2026-07-16T21:57:18.380313Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"209bf0d5340e85f700318a1b90adbac3","sha1":"3002ca977b0c66862134b7207639c42fa0f8c0ed","sha256":"2eaf3da6d8411a9a6bd3b13f76c0856e1d7a2d7b6d45873d7a1b811d114c5b45","sha512":"63e724245ce31a5a61db080521acf1d8e910e3133747f535291aab83fc4251e1fe44a6fd6cf2f0a5da37e5e78241ad62f67ef09de0e7b24b161a860799fe1dcf","ssdeep":"","tlshash":"b9a01219f3853526028b641b50264115200301610801821092a644d840092458014d65","size":81,"data":"","first_seen":"2026-05-27T00:11:11.746048Z","last_seen":"2026-07-16T06:51:04.40656Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"510001842fa9dd3ba602e17e3c23de28","sha1":"ad73ac52ba1d31d20c492f9a59d678ffd158c8d6","sha256":"1e8b6fde14d7b023d72d29c1a7ec4f505e91eabf26a51a187c9ef3e93b2d2e39","sha512":"45a7603cd86ac7c089916d51f470ee368125b1cbc8b0e4c2ff6b625a46096e987e99b3924d2bf5c47754edd708b396c1df0dcbf84aaa6ed6a8027d62c530600d","ssdeep":"","tlshash":"7bd02b9ff7ba221b42caa418949b0617106abbca0b048b93003709ea94254c10123e39","size":272,"data":"","first_seen":"2026-05-27T00:11:11.69268Z","last_seen":"2026-07-16T06:51:04.60985Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ec3bfe437e0dd5ad8113c340839ad415","sha1":"651af6fdb57af7b309411f0c8f8b6fed1b5b53d9","sha256":"cb60cd8838776224ef0fa6f5721c285109d1884e85f322b1f91730e13cfc99f7","sha512":"8529fbf6ca9a22c483ed73fc481428ecd6ca10c3393a84379249c8679c5a3ad3f5ba7ddab5f9f2c2d80f1db01c659f80e6b5358ffb7f7bbbfd3c1292e5b20835","ssdeep":"","tlshash":"9ea01259f38a312a0a47601a10264115200311650806824052264ad840092454014d66","size":81,"data":"","first_seen":"2026-06-08T09:34:55.538718Z","last_seen":"2026-07-16T06:51:04.407877Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7900066ff6fc334c01f0243c2f42fee3","sha1":"42172f2af37984ac4134f2dcee17ae4f8592329c","sha256":"fbc96e1d703e62637e0458519ad05f7cbf24ceadf6065ebb4d349f2b74335131","sha512":"a128c1213cb0346bb3459768da8271b9bfe316c0a59c552a197e7a06d17ee2aeffe0c3c994f690ba3efbed4b7e75f22f4b567da7eb1f3b6a89aa05ddeb6db76a","ssdeep":"","tlshash":"17c08c3db23a202f094a5059281bcb10d09bfec00e824f2000aa7ee88140a1c54d89a8","size":150,"data":"","first_seen":"2026-05-27T18:49:34.916569Z","last_seen":"2026-07-16T21:57:18.469961Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_ga_tracking.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"896b537ab40c719676b181b6f375ee1c","sha1":"394d45b85af419d70f2df9a0bd05a0c09d22d02e","sha256":"90fcea0618e9842c88c2955fee356f94d4a236f4ace217ff1d3bc91e6a49cb7d","sha512":"0f917e771bd7d7c6f94799e5ddd12fa68aa9f3b49cf1d516a9120c8cb7e5b5133fc67d28f1f4c45cb5254a13d089f56bfe45da34274a47df598c71e501385c6d","ssdeep":"","tlshash":"978114692bf7203305a3a039579fe149777a601b291bf9643ece02845f9806e4775fd8","size":3929,"data":"","first_seen":"2026-05-21T21:31:36.391154Z","last_seen":"2026-07-16T21:57:18.141841Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/202604.1.0/otBannerSdk.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"923e2982a99225d07a2aadaece8c7a4e","sha1":"6890a7d31129ba4611fc6cc5ce979a9a5768f45c","sha256":"8792de1e018ac8499769a13bc7b80dcf1c0126e6009f7712807f4994734d1203","sha512":"ae7b243cb6f4bee3956b9d00d6c3cd47222d7ff3da1be36cddb296a973746aae9429ee0a968e6c574387528855f28b3668a5cae3cb58f51f96e2cdcf5c9b8c68","ssdeep":"6144:eDLxvLEQyS3m1me9rgeNC5g5j5AZ3vtxDZ6aaeUi31xp567ExExdXrN8Dq6Zhj:eDNIQyS3m1mF3RbUiN5fExdXrNB6Zp","tlshash":"d0c43a8d7590753547e762b9c02b514ab63534acac85806cb41cc4f90bf9f862ea3fbb","size":552369,"data":"","first_seen":"2026-04-15T01:04:59.905492Z","last_seen":"2026-07-16T21:57:18.056746Z","times_seen":2019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"45e8e4bfd156c28c9037688167c10155","sha1":"14d29cf9231e532d180257f8914710b6b777c45d","sha256":"e7dadcdf96e86de1e5aeb013a6384f1e412284c2211cad94481bab90739f5871","sha512":"8e130a92f3359e35feb0704960f4310da27c3aa05e6e10e452ae98f39cf4001cf28f0c99b69f30c7e65d66370905eaa2c514c23760f50ebd04c33ff696ae1e00","ssdeep":"","tlshash":"dbb09269f3afb1256a8761aa226a8522b016a5658981d252622e45d8602d3886022e66","size":111,"data":"","first_seen":"2026-05-27T20:46:36.804824Z","last_seen":"2026-07-16T21:57:18.495145Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b64ffe011e726898bd4e7d80ca8727e5","sha1":"0815307a7939c8f413de11808a0ea0205d36a533","sha256":"d945ac1e314e1132d37bc170a043d2e27ec229eb6b5d1607d9f133a336f65e46","sha512":"874df7929d56d60aaf6d3a3245182efb2fde27ab6353dda907c7b51fedb6f34da12f5943b87048751027cefaceb1b936ee41ec5c1143540149ace1a903ee31c9","ssdeep":"","tlshash":"11c0c21af78c243e05cbb02b2875491a41030fd7cd81a2191b3209ec511b6428008afa","size":190,"data":"","first_seen":"2026-06-08T16:37:15.994569Z","last_seen":"2026-07-12T19:53:38.842174Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5acbdc2a6ad17cf5d445dc73c092e368","sha1":"16ed5878d999228179446216913f5c594c952fbd","sha256":"86a490f9a624d3a9e81c4d189f9e9f8478b61c39e8b06585add06e1df1f43979","sha512":"7772ab5481528e32c12cd09049a02d9205a48cff018e1fe1957c3d6304652dadb6b8f3efd8257d168533564ad0355c81014ec5b7b06cd8249bb158ae641d3423","ssdeep":"","tlshash":"e6b0125db19627add34e201734394111604715a50980a124613586e89106f148034eb6","size":90,"data":"","first_seen":"2024-05-29T17:40:56Z","last_seen":"2026-07-16T06:51:04.191438Z","times_seen":323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"beab81313f959b75786749bc8b57229e","sha1":"9a6d86af9078867069df2e973422f7327b2c3e29","sha256":"bcc001e26b32cd370415efde5d1da61018ff0f01990c14bd875ec31bc2cd6ffd","sha512":"64c559997c76267917bd91f0e4a5ba9a8f4795ae8a24891ffa4b9e4bde5f5a0c78161f6fbaa965226f117ce64eacc4146dd5daceb51061761e949932ef48bc44","ssdeep":"","tlshash":"9ab0129db69b22a9d34e201634294152200725950980d125612587e89905b144170ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.51684Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43b73cbfac0a6ea618295d65a23591c","sha1":"255aa6fb02e3ce0190985255aa464e6180e27d1e","sha256":"98df6e935ef2d14dce377f16c1707fad159d5ed377cacd92feb6a18b1eda72ac","sha512":"088b0ddbce09d3364d9b3605ffc663f3441314b336a0046af2dc058f9e922c2afdb3c4eeadb9160ccb29f1294c24113e3ad803e572cbc6f3229466c339c4d63f","ssdeep":"384:aoA97P5RskmQLz6KpcXacSo9nYugy86OJvSRX5di:a9aSz6azo9nYuz75di","tlshash":"2e7207d1a65aca7403f869ddd42e9245f21a1d79438db450ff8efc90201ad4a30e6ffa","size":17292,"data":"","first_seen":"2026-07-10T12:35:59.988075Z","last_seen":"2026-07-12T21:21:00.180839Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"072fcbb6e3a83930223609bdb325c713","sha1":"342fedcc5062276da3c2745f7d9d53c806f80ca1","sha256":"e52bad3334c2ac85719c95875da951ba1c2ddfa83ec75c46ccc4b8d01266f600","sha512":"d5183487c9cdaf7f017869148e22fa911495105f7b028e6755b93fd3a3fe3a587aff800c0665428c3bf63ef45a358e630f51d3793d0d94b89956eb7ca3882ddc","ssdeep":"","tlshash":"dbd02b9ff7ba621742caa418949b06171069bbca0b088b93003709ea94254c10123e39","size":271,"data":"","first_seen":"2026-05-27T18:49:35.18688Z","last_seen":"2026-07-16T21:57:18.544066Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cea2f1b0cc53be3196ae301092ecf112","sha1":"b79cd0758aaca7380d0d212a1b879cae77cdd963","sha256":"32b97758d730f85b108f194cd3beea34cff11913481c4959f7c4add99be1fb75","sha512":"3889c13727a57efbbf5b15b14581dbf712785d6d730eaa9ba2e6337d4db3699ed202699019b003db5037aa4f47643ee7b942584499df02082cc9f9ddedb17f9d","ssdeep":"","tlshash":"91e0126ff399003f08cba15b7c898a11801756f79c4b9b25b3721dfd9416a4a9088afa","size":358,"data":"","first_seen":"2026-03-25T19:58:20.948951Z","last_seen":"2026-07-16T21:57:18.519606Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b08b6a73cb3df3c5202021883d974e94","sha1":"d1e7040ae7740d34ed9b003de5edfcc5646e5ff4","sha256":"7b103afbb10dbcb689118b8d57ed4c0378288324cead435caec9e9f92b1d2a25","sha512":"a1e00d86a5b433db9994999d954ffa5da2be5c2992a45203d8f869d216bc5a811126010d44dfaea0a8f64507b644ca73f38157c36b842f24246e3742fc99ccef","ssdeep":"","tlshash":"6fc08c3db23a202f05496049281bcb20a05bfac00f824f2000aa3ed89100a1c60d89a8","size":151,"data":"","first_seen":"2026-05-28T10:31:18.721343Z","last_seen":"2026-07-16T21:57:18.210122Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"03557e7e8bec02b41a6d072354871822","sha1":"4775c0c7fa642e1df7c94fa3b0742f64303caefe","sha256":"9fa6533c3d870533195e0b350c87e558360b62b2debf24a1c58fa7c9280c5adf","sha512":"a216415a89fc24b7c322bfb7aa8b1f3f1535cdf24d51f189fc22d871dd0eef752b0721a09e44750819c00c71a3aa947afd00fb4dc9ce930b1a6c3321399c70c3","ssdeep":"","tlshash":"43115c6a765c0cfb44ce3d1678d0057114bbc3b359c1ef9dbf3a55f98c61a014068ea5","size":921,"data":"","first_seen":"2024-06-04T22:58:58Z","last_seen":"2026-07-12T19:53:38.84694Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8c1e53af9ab262383c857efa50bc2604","sha1":"eaee6a32487c58b387b30f27a8bc24c5c3d05e9a","sha256":"a5fc8685d005f469cff62835d37dd7195d504727d960f30f8107c87a342c682b","sha512":"55913c828325ffd9d653f12cbe706b76d5141708f1b80afacc990818b6d77011fd1f72500cce106edf5d63b9912734be8b7dcc69991dfeb8b0ff7faae558ea3c","ssdeep":"","tlshash":"7ac0c25af388103a09cfb02fa895861a51430be75e82e219133219ed501ba529004af9","size":190,"data":"","first_seen":"2026-06-08T16:37:15.993647Z","last_seen":"2026-07-12T19:53:38.84755Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca6e971072b48e7a764fe2fa181874e6","sha1":"00d11cee704d757d41f93a6348178eb7faf9b39e","sha256":"3fefa01888e83507cce33dff9a4a23678010c0cf6508fbfa57a514dc1555e126","sha512":"a6e2609fca3ea6731b4d22c0d38ef1e123d0444832264ae761009ca8987b3a12e09fc232f4cbac48f3647134bffb4f379d84cebfc395be3fd12421a56e21dd2c","ssdeep":"","tlshash":"06c0e95bf38c607f45cfb12f38954526511307d74d81f31913320dfc991b6828014af9","size":190,"data":"","first_seen":"2026-06-08T09:34:55.72435Z","last_seen":"2026-07-16T21:57:18.417129Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a57190c596710dc3d21632f821006968","sha1":"c08825e8e1ba8faa7ffbce934f2e8df77fc66dcc","sha256":"77852d3854b775b2e4d5518cf6c18eb5acd705a56e6aeb0df81a73a37a4484ac","sha512":"bba2ebe004c9105dcb02f65c636edfc721966377c4e299902dd7ccf539b17678caea3087f4479e84336745ef543a3f1283637b625331f9f4320df4321ca952d4","ssdeep":"","tlshash":"39112c6aba9d0cfb44ce3d1b78c0097114bbc3b359c0eb99bb7955b98c66a014064ee4","size":921,"data":"","first_seen":"2026-05-29T14:30:57.149739Z","last_seen":"2026-07-16T21:57:18.381138Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d2114b33d9752150e47b202e539444e5","sha1":"fa01e1e2cdbe7686b852d96ad0990cc14bcd53f1","sha256":"217d58a917b2458c99ba41b5b92033721f7fc4ccac7f23718716c8d2d609769c","sha512":"856eda34cf0e0850e5e9eba0c2cb9cbbabec9a1394f54c3b980ad3d4d75821895db69952cbd169d302cb990dae87749bdad8aadb21dd2f34803fb492753f1e34","ssdeep":"","tlshash":"8fb0125db29626a9d34e302734694515204716950a809528a12986e89105b544030ea6","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.513572Z","times_seen":579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e987e7ad26814ac5d4ca12d6210056d0","sha1":"da3e09381c904aa62e5ba157a4fd54c42e3b466f","sha256":"acaa56f11124a76d45c1648667400d6161a012683077310946d0202144c4b70e","sha512":"2a96d973e636b55e4649e89e84b5c8c708c863af84e85ab93349ce76589ac2208dc3751fc0ff37dec4d03faad1faca87164bf8a3022e2e25e8f78d1a15a3c86f","ssdeep":"","tlshash":"4ab0125db19632a9d74f301634294211201716950980e125622586ec9905b144030ea5","size":90,"data":"","first_seen":"2024-05-29T17:41:04Z","last_seen":"2026-07-16T21:57:18.352094Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b414d9f7bddfc2a120a84486861f2fa9","sha1":"504dda33405a32c108464a0d79fc65f0b3a33cdf","sha256":"2b46ae737ae53e35083241a595e92acbe2d9481fe060a00c0c34757886a055e4","sha512":"8f451face1b8ce7e897e2fc84e177de38ebdaea17e209f2643bea4529df957211f95368c4c843989d048381e100f4812574bb0a9f3a60d3b3af7a9dda6518a53","ssdeep":"","tlshash":"e1c02bb0504152381c17030f30b443cee2b230feff110001401c00073eb0cb5035297c","size":133,"data":"","first_seen":"2025-03-17T01:42:02.535551Z","last_seen":"2026-07-16T21:57:18.270063Z","times_seen":512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/geo-data.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5df6c43ea2c3c6ffa4ca6674ea90c1e8","sha1":"18554be278362ee9f9627eb0e83c0e408ff84b63","sha256":"88c4c34efbfa446ce1bb7fcd32147fca46d563478d75d60bed07130ded65ba77","sha512":"b4be03a222dd67baec158d6c6d34d2286bddc63ed45362908988e1272527374436edb0b3f4a8f27ebb3d01dbbfc004f69f000cb8d85bc30df77eed9ab9640394","ssdeep":"192:KUPzwLz2BoEzwU6yNaKWiLby1ldfM7lthVang+d//Ts2VIk:Kb2Be6aKH6130lTAnNJQ2VIk","tlshash":"f932d7e26996da7403e5adcdc8196295f50a9d3843cd78a4fb4efdc0b506c0530e2bf5","size":11567,"data":"","first_seen":"2026-07-10T12:35:59.937849Z","last_seen":"2026-07-12T21:21:00.106315Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cabfb8add95c6a7ebd2df916d13f5c80","sha1":"2c4ff48d9c279f2faa12385e03f780fcfedbb9da","sha256":"1d0c0f5e4bdde154cfaed31009e9f461e3ad9f216977e1226d611c824506331a","sha512":"41a4e982a87163d01260490eb185ee631a75d7ad3368a9e8fdfd013f88720bca1404d727c27d86feaf424cc15ebbf1985d52aa1ac0018e2453dfd6e02c03f646","ssdeep":"","tlshash":"c2c0e92bf38c503f49cfb02f7895462642070fd75e82e31913310dfd501b6828004af9","size":186,"data":"","first_seen":"2026-05-27T00:11:11.645638Z","last_seen":"2026-07-16T21:57:18.404431Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3439040cacddacb098b6b1db077a411e","sha1":"bc8140ef7584ef0ac00d15985426bda18c8f96aa","sha256":"7826d84d6bf32a8be4e144af3894ef9446ab4b47170377afe214f9c2c020d4a6","sha512":"d80e809e809bea7dffddd0b6d884cc76a8f156c3510810fafcfc85f487cc4b9635a812a6740ddd737ce559cf104127138a09145a7f96e3505d496e2d4267cf8c","ssdeep":"","tlshash":"dab0125db59a22add35e201634394111200719950980d124713586e89525b184030ea5","size":89,"data":"","first_seen":"2025-12-22T06:43:29.909167Z","last_seen":"2026-07-16T21:57:18.591618Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ea45d057d58a6a75edfa1b701632519b","sha1":"d906bffc704bdedbcfae2d49d22ed26771a2f895","sha256":"393847758ec17a8c53341dc8db0f07b9dd650b97a044c7627f3fb5930bc15427","sha512":"b477f1317832015807687572d33bcc35759808dd7a59861b8169faeb2ee822a45c84c7caeaf281909c1512cff3097e4711551bebc867892ac22e6bd0703a4c27","ssdeep":"","tlshash":"0bb0125db39722abd34e20163c694515204716950980a224716586e89109b144030ea5","size":90,"data":"","first_seen":"2024-04-22T10:43:24Z","last_seen":"2026-07-16T06:51:04.47395Z","times_seen":422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"32fa474fa979ffb6690bdbba98345f61","sha1":"07c5204c66b49059334a4fdc9c140a36961a8416","sha256":"a5ad18f4c6c149d5aaaa00f41d6ab95aff24d7711362a9bd5666180efa2d6490","sha512":"e3693ff1701b2787aca9d4f6e18aa11d6cb8569bfe25cd32e17fb5fe576042d8a902747d18e72f67e02a7c075c6c7962e7e9d9ede668f302be69b0b2289254d7","ssdeep":"","tlshash":"cfe09b2bb95f003f08cb715b78454952801742f65c479711b2321efc54066498288dfa","size":358,"data":"","first_seen":"2026-05-27T00:11:11.740208Z","last_seen":"2026-07-16T21:57:18.25791Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"798d4a1b454c46a85cb3c37ef035e975","sha1":"bf43d1004d0869ebf32e28b87cac06ff07f1eecb","sha256":"ccb0baf41253d786f87eab4cf8d5e2ddcf49ae57fa184c4863cbfa7652ebc397","sha512":"581c7ef25dc59209215de6141f03a0d54dc87a71d14e8ccfe0890ecd6c9cd87cef3906f2230eedd09e4f6042c3fa2f023604f3ca78cd251a383fc54ae9a0d44c","ssdeep":"","tlshash":"7ad02b9ff7ba221742ca6519949b06171069f78e0b048bd3003709ea94264c10123e79","size":272,"data":"","first_seen":"2026-06-08T16:37:15.978164Z","last_seen":"2026-07-16T21:57:18.324691Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f83006c27df8680cfc8bd658597cfa58","sha1":"ea07be31b2b5f53d322f4ee9a7540cc4514ce196","sha256":"f17e1fa88315223ff14259e533061a8bb0b6ac7f3d8806195f7578f399ebc3fd","sha512":"4b92a2480e84ada011b198ff31e4436c1f0b6aa570901af45b26d693aec44eb8628b40a58ae6b8167e0912fb4a3590bbfd0854c269e38b0125d0c99f6e462468","ssdeep":"","tlshash":"3ee0c08cf0d7553801d7305734fd8511303f6c324068d264b2bfc6b84ca194d817b96c","size":358,"data":"","first_seen":"2024-05-10T15:54:50Z","last_seen":"2026-07-12T19:53:38.85499Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9680e35ad11fb9b0adf633049f655b46","sha1":"e9498dab27713aaf82d92fb677ff75236d080b6e","sha256":"b2672c511bff306829c0fcfe72c7dd01bfb490249d9ae153f07d2053d6632e53","sha512":"e8c0c8d37e73cdeab14a96e55c9c7181a5418d83ce4e42e7a7545355c5fcc9366de6633112e7fdddbc6c739ceeccd6ec662cba75c52af8de904fdcfada1bf137","ssdeep":"","tlshash":"0bb0125db19a23add34f2016342941112007259509819124712586e89206b144130ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T06:51:04.294737Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6522e992fcb26e2b5dc32a0cb7849cfc","sha1":"fa8e04791d57e90516e08e81324fe4ebd2fa7e8e","sha256":"61f9559416bc7b521d3c8fee17ed1741e7372365823284118fe8a416dffa932c","sha512":"36ad8ec55d61d8f2fd9a532fa33c905be9304a91f02e250aa6b370683b4447891ba1cd73c058d527576e3add9395a49bace94c1bc0c94f75ff25f5e814ee3d74","ssdeep":"","tlshash":"ae115c6aba9c0cfb44ce3d1678c01a7514bbc3f359c1eb9dbb3955fe8c61a014164ea4","size":921,"data":"","first_seen":"2026-05-27T00:11:11.719464Z","last_seen":"2026-07-16T06:51:04.574992Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83c60ed375782a673a3297e6f6b5d7db","sha1":"9b4be1a16967a51372ff49cb63929c041e090a68","sha256":"3cb300d6f7cf87ad995232ab45e71617670212f6f6b41966f635f310dcfea8ba","sha512":"219671b2a3704d198d29f6a1d0abd93c71017e06e2937fc85f3d98b46c862a322e310fcceabda88b4a1112bd5810550cc8d27197c6bfcba4a943e9bf35d50870","ssdeep":"","tlshash":"b4b0125db19b23b9d34f301634a942112007159509809124a12587e89119b144174ea5","size":90,"data":"","first_seen":"2024-04-24T13:59:08Z","last_seen":"2026-07-16T21:57:18.397907Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"697d92f4884ba0e8b281e25884cb898a","sha1":"9154204787837be8c9aca2d55cc890f4c1286b6b","sha256":"de3f1fb8bb057f81b745da337c4f1e92ad2c9b97a8740945f75a43461f004c88","sha512":"9ccdd648dd8f3fbe93a7cf06ca93e84155e5b88214bb543ff9e9ac9a59fc79bca2458e45aa95168b9924365965f9b5c4f2c90bee19cbcc399edc2c8fbc34c015","ssdeep":"","tlshash":"d2b0125db59726b9d34e201634794911204719964980a524a12587e89105b148230ea5","size":89,"data":"","first_seen":"2025-10-11T09:00:05.3184Z","last_seen":"2026-07-16T21:57:18.332577Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fa09ce78b1fe27a077e4c0c1295e68b","sha1":"59900068fca4c131345fc8d7bb7710305b49700d","sha256":"7d179ca717c31b3969eaeb389ff93bccbd9763bed89a53be529f546caba39b94","sha512":"bbeec76df308bb51510f4530e09fe86f9bad195fb6fb05e5c285fe6690326fd64a88da4c522ee4d7ffb4342987c6a5faa76e6e7a95497bf1931711e2595a5c90","ssdeep":"","tlshash":"78900296b698043e05ceb427649086a1550303a748c19615133e19ed44175825404de6","size":55,"data":"","first_seen":"2026-06-05T02:31:51.604039Z","last_seen":"2026-07-16T21:57:18.609555Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"70f23013d7b66e54699ce0483d91b2d3","sha1":"380792e5ebfa7591c97fa2b66b2409ac913f185d","sha256":"a5d1d8a975334f195ec23f54e91ddb274951f303b81a8b4334f30367f4b74b27","sha512":"bf8625e635884456d0a14a4cd5612832578b125447ee658ddf5532b0b4059112a31568b215220d40882140254a54481312434abe27cbb47b545e256b7c82b875","ssdeep":"","tlshash":"72b0125db69622a9d34e602a342945112057199509819124623586e89545b154030ea5","size":90,"data":"","first_seen":"2024-12-10T19:46:17.816712Z","last_seen":"2026-07-16T06:51:04.57557Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/LoginHint208.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3da3701e2fd3986eb5c25e74aa745a3a","sha1":"325a30f7add1a32d7efb730e14681e953d07cb00","sha256":"c707383ddb643c1b3f7f59100f89b02aa93a1e2bd39bd26cdffc6ba9a0d36cbc","sha512":"abf4daa1b3a59fdf470cb57564fdd57990e869c7a8f487a3b6ceff9912b4c1e5bcc9afac4aafd8825b108a1fa0dfc952e3d532638f5f72ecc353471ce426e3e8","ssdeep":"384:pgyMp3LSjcy1R7NiGoyn1K7a1suIb7IxsL5JPZZTuFWyGQgzTMoBUBKxwEvFWpIn:9Q3+gy1Ln0cxk6nGQgzTjBUBKqmFaIn","tlshash":"4992b8b732421a3579ef14eba87a97cdb8b085217c01d8a2841ccd15b538fd264fbe69","size":21183,"data":"","first_seen":"2026-02-13T01:58:22.102298Z","last_seen":"2026-07-16T21:57:18.062799Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b439fd40339842f031c9f54e3aba7574","sha1":"ac9d6b66256117320dcbda64c500613fb1a9a9cb","sha256":"575e02abf95b2eac6488e56b661bd126140df98f96381e4156eacd97c76354a2","sha512":"b3126beb2b24005289eace75873a5666008b3e729d5883e1b43c37ea42f870b056a4d1c53f7944bd6b4083c6173edfba54ce5cbb9327fa529d6e53c10ecd1899","ssdeep":"","tlshash":"9ad05eb46212a23002a7a62678b7db5c793a2463b0073640d83e018491b0f5e9a53ded","size":249,"data":"","first_seen":"2023-03-07T14:55:54Z","last_seen":"2026-07-16T21:57:18.296212Z","times_seen":942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c87d1aa51babdb36cd13a64a12c7e1b2","sha1":"8aeac68b8f1945c44f91b77e57de830a2a15c2a1","sha256":"e296577e8f127ca8624c30a40a8f3ec0dc1ebf5a4373b0071e926dbf95b30e0b","sha512":"03d967400bbee0739cff90366210a98186acd774bfe046d10072da410c96f8a8ae4bd832c38420cfc468e674f7c82305de100b899ae96d3ed6dfe4ca50159fcc","ssdeep":"","tlshash":"1bf08b392e020c3b51d105d4607208e83bfdf4a55121efe99fed3e2667d9a9a44a1003","size":567,"data":"","first_seen":"2026-07-10T12:36:00.18246Z","last_seen":"2026-07-12T21:21:00.218454Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8103d3e8387e32cf361c0e8b2b344c51","sha1":"9e5587feb21500aa44b24cf8443e30a496d3a088","sha256":"73f9e62599202c81dea54a9448af6f96f07177807f358ca43cf3533581e88b6f","sha512":"21398d717a1010e961dd5d2496275f643a7d32a1dd16406899e070b7cb8b20ba50d4f09fcb389d262258becded0bd8c0779392a84d972b9f91ce2e72f57992ec","ssdeep":"","tlshash":"0280000222c00c883800802808a308c222888c332882cc3c0c008280e88080f30222fa","size":26,"data":"","first_seen":"2023-03-07T14:55:54Z","last_seen":"2026-07-16T21:57:18.298791Z","times_seen":1578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0c5cce62dc464e89fae808d1640c900","sha1":"4afe4cb9dfef577682db08964d47ab44d712ec7b","sha256":"e9bcfe3afd2e8f3d30686f9b65b059b564e681174496d3d431c4b31089135290","sha512":"3938165af1011a3d1619f5b1983e0061a1c4e2ead41e44328e2d94ddd4fcb573304475dba9107ef5d886d6196352ca79ea20f20f03ed474d07a865bbb0c42a15","ssdeep":"","tlshash":"4080041145c0533c55014444d540c5c711054453074454345530d401f0113331040101","size":36,"data":"","first_seen":"2023-03-07T14:55:54Z","last_seen":"2026-07-16T21:57:18.299729Z","times_seen":1585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bdadb8c4753d3f5e76897bb4a1df484a","sha1":"a9051951b61cd4c207890307425839caac2f89a2","sha256":"e96e5c58f957438d8fdb89cfb825fff56554bd591f125ca58d110c58e6de3685","sha512":"41e4d5b3f7d6090ccaf83bc23a52978a0b42c9a2fffb5df262fe1e8ab4dce344721f253be5ff584ad9069bc1f464c804513cc77c68d25280d096fb23425e93ab","ssdeep":"","tlshash":"1bf0ecb77459083505999cbb3079978c7d3891143e02f949ce3c15346e74e495867e74","size":449,"data":"","first_seen":"2026-07-10T12:36:00.191813Z","last_seen":"2026-07-12T21:21:00.220201Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d41a4fb24966b39248a793641718c116","sha1":"ac949c67fc37482dc6952438d93ee8dee3e7dca8","sha256":"abfb628c64afcde7600dd45736e5240869678319a9d78d882b63952995844331","sha512":"56aa3172b9fd1bcaad3572ae33c4bfd29af686c394452c222479c5b5028319ec8e43f5586b47f2d33ba62666fdfea8e965ca14f1ffb361a7ded2c90ecc8ffaec","ssdeep":"","tlshash":"e9e0923bb69d003f48cb601b78894901812743f6bc47ab2173321dbd9003a4a8098afa","size":358,"data":"","first_seen":"2026-05-28T10:31:18.746278Z","last_seen":"2026-07-16T21:57:18.344885Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"48f16f265f88614fb7799d05b12b4bb5","sha1":"9517fec8d00e6ca9483eebdfeb137cf62a747c9e","sha256":"3b6cf8e924ac497e41f19df6b86b9f8e73a7fcf4467b7fee5364e197473cc336","sha512":"095dc6ae0fdd1d723d59fe959fc507b09ae838ed2ae9dcbf83c9c77f77c4a122b4ddf9b83f2a18d3e6608221874378be7750801ddf6d624b93317f5cdafc8bc3","ssdeep":"","tlshash":"93d02b9ff7ba221742ca6419949b06171069f78a0b048bd3003709ea94254c10127e39","size":272,"data":"","first_seen":"2026-04-27T01:10:38.992186Z","last_seen":"2026-07-16T06:51:04.47102Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7531ddae4e6562ad1c8c8bb3120d7686","sha1":"f9f45102522b58be36d09d39b231f989e5261439","sha256":"7c6cac36cf0ddaf9dd952dc747e60b60e9b2cc372211e072d8f4b6afe956d5d3","sha512":"509ff1e04c9263366ee3e9c46c5bcc35f4956e1db94da2dc8021f8bb6832fa36e77b9d9804c80a1835fa795e445048ad4938b7991f19694c179b0726883af1b9","ssdeep":"","tlshash":"06e0126bb299003f08cf615b7cc54911801746f79c879b2572722dfd601ba4a8088efa","size":358,"data":"","first_seen":"2026-05-27T00:11:11.674472Z","last_seen":"2026-07-16T06:51:04.567544Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"de7a9fdbb525cd3ff316267d0af09780","sha1":"526a05a953ea717548f9fe5e95153f991c9aceda","sha256":"0a2e6734cb83570f7e81783f0ea1558839f3cd4f3e58f67013184a2f0605278d","sha512":"8a6cc18c0454d46895436771e64ef7409384ca88429613c2ca556c34506e2ba16f38f76942cae5175da2b771b7ef8be1df58228845178cdb91ef06e3baab14b3","ssdeep":"","tlshash":"b4c0c21af38d503a048bb43b7851571e521347fb4ec1a315533209ec511ba828104aea","size":190,"data":"","first_seen":"2026-05-27T00:11:11.684052Z","last_seen":"2026-07-16T06:51:04.186059Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/ot-ext.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec2ebd9471d050e3de19a04896b7d664","sha1":"cfae4a849ba4638c23b31a2a15e97384cbb0d15f","sha256":"14510c2d32e480903eff33dc4b7bf2ad5b1bcd315f50980858bf227d9bdd5e9c","sha512":"b4303f3ae985be40e5165bd2de0611103e361aeba11f60db9733e3f3c08b577daf8826099af23e9ba8c078a983ce79c46d98df5d044dc7ef0498b79cc318516e","ssdeep":"","tlshash":"2531d7f436a80f3417fc66b9f29991c2b03e61b2791f4836f58f9da170248c20c5eb65","size":1836,"data":"","first_seen":"2026-07-10T12:36:00.018123Z","last_seen":"2026-07-12T21:21:00.129818Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WRXS6TH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0f4dedf3158e7793d5b8fb98e2e07c2","sha1":"296631dab513ccfb431fc840eaa2c0e85b896660","sha256":"3ac65ec617b7e179aa6534f678fd38def0e1a740a4d0111dbef7b215a2542272","sha512":"8e23debe2c789fa06c0aec777806eebedb529bf2fb21e11a5a2144e7b41bdcef954e0f24f7dab613a163e24f1a74281f383254cc2e00648ec0bdb52ca7d49c41","ssdeep":"6144:XGUPBCfuwQMi8VPPTvRse4WBXuYF5KTZe7Xo0Jf7wozbF3V512qp6q0Zci0SJGW+:bQftmZe7bZFp2IUtnSkAC7++XK","tlshash":"0b05fb8df2c56836c3a69564a83f014a663d34f2b28c58a1f0d9ccd42eb85756193fef","size":850833,"data":"","first_seen":"2026-07-12T19:53:38.816432Z","last_seen":"2026-07-12T19:53:38.816432Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aa74ad40659ce2631f28e9ad51b3ca2e","sha1":"1d5eb5af135e25056ca6a9248b046cc503b6e7f7","sha256":"e37bdf04ba4f94d806cb8a706d92930a7db461ac3dd06c5ba9f0f83392303096","sha512":"8f50f5c441e419d45e3043f6a2789f1f1ae6b11ec84def67eb1cdf59ca2e248d8c514a6bc1fd7ff28877f9b3e432ccb34da39d09cc46794fac32f1a8df1234f1","ssdeep":"","tlshash":"86115c6a7b9c0cfb44cf3d1a78c0057114bbc3f359c0ebd9bb3955b98c62a015064ea4","size":916,"data":"","first_seen":"2026-05-27T00:11:11.741302Z","last_seen":"2026-07-16T21:57:18.204532Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b61226d85ce3aa00207ceb1c7ff277d3","sha1":"2741e3f6060e9972bef3384d4d3be3d463a828c4","sha256":"4b3463a071fe0ccb82937e52501c8a810124c6e9d20850f2f9d6e1165d83560c","sha512":"12e55e2043d4924baa288194d7fe0965babe54573815bb02eed1ab351af1a69faed78c6afff4e52b180bab9c0151e24e85300eb31439391374ec09e4b06b40fe","ssdeep":"","tlshash":"4fe0122bf19d103f48cb616b78454b11805b4af79c479b2573321dbd6096a4a8098efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.795492Z","last_seen":"2026-07-16T06:51:04.278765Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"327fa139557ac289ff8ccb35317a45a0","sha1":"344f990c517d53a049d68633000ee70cf3661927","sha256":"2b329517d2069f35f1b07947949a518f7d332c5a890ef22e5ea352d1dc26828d","sha512":"3c94089df4503919d470a5fd2b490893c0824d13226f501e7cf6bec1ad98131b75747598f31b1ca0208f5cf6724c7dcebdb0c464ba1f2e656939067cd2c99d53","ssdeep":"","tlshash":"79c08c3db23a202f05496049282bcf21906bfac00e825f2000aa3ed8c100a1c50d89a8","size":151,"data":"","first_seen":"2026-06-08T09:34:55.323657Z","last_seen":"2026-07-16T21:57:18.323027Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"99749fcc7f908886d415c8a4e7314caf","sha1":"10cccce2e99dfad315a0e2c3a41005b183821441","sha256":"386983393db0afd1fbc4cac29a53f1a377bd2ba6862adf260daa878c1e46c88f","sha512":"a86844667ef5344ed4c9a640a9a7b058b669fe4d674469541e33018b72be3163dc1b75762a4fe740d0e2b5924c0660005bc903c715be05d62e579066403d9730","ssdeep":"","tlshash":"97c0c22af78a103a05cff42b38554a2651130bd78d81a21953710afc901b6428104ee9","size":190,"data":"","first_seen":"2026-06-08T09:34:55.729229Z","last_seen":"2026-07-16T06:51:04.569346Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c5c991b163ead2e80281af65c86a261a","sha1":"93deb42116cf377e4ae66075f0510139d7d13b07","sha256":"c0bb3853bb74e9fba54dd803db422721f84459e2ac7ec7dcd62a7237a1d4ae4b","sha512":"cc0ce1a0809acfeda68e62d3fe075834f719df49baab3bb70360a29c1d2a8f07f690ce411695c803790a6c0a3ec48f9edb25f9c206c2cf79c32fbda290aae709","ssdeep":"","tlshash":"96b0125df59626a9f34f2017342945112047299549809524a22586e89106b144030ee9","size":90,"data":"","first_seen":"2024-03-28T12:54:33Z","last_seen":"2026-07-16T21:57:18.346418Z","times_seen":825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/xsf-nav/v1-stable/navs-ssg.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"185319741a3fb824d2c36e4d44d6f5e8","sha1":"861830c9171ed0c9ef7c562d0686d3ac43153f7d","sha256":"e3b92adc41ee954f2c622731200d3a5b0017ef3f13e06cdde9abf459fc97fa77","sha512":"44109299a8d4de86a559d92da478b0498092747bdec4720278d51be80c0931cfecb97c2b7a70e9f309ac957b7e42c8459f7b64aafa5e69c1557867fa7c2ffb32","ssdeep":"12288:p13dpryCVJQ72azkhE6X0do49QCe3YIa2/8adXFth7D+anFBeLSMN6Gqv9:p13dpryCVJQ72azkhE6X0do49QCe3YIn","tlshash":"9bb44a59b352503a62f707f9e0675c03f35c3851a40ad4d8b2aa5afa5fce59b2022f3d","size":534753,"data":"","first_seen":"2026-07-10T12:35:59.986097Z","last_seen":"2026-07-12T21:21:00.162783Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4d7660dc1b925228c7874deafed18d9c","sha1":"1c3ee700b88fbfae1bee818b8d8e1db257841677","sha256":"2239d75757fb65bac91a29794038ab379a1ad2091a585c799327fe5620fa2dc2","sha512":"ac5b48d72bcdbf144fb731b9176afd727184c37e4f243f2d635b2cb4ba275a9edc10a374a30d8e3c4fb03c904fe6d103de721174eda325da84e49025d06fbe2b","ssdeep":"","tlshash":"25b0125db19633a9d38e2027346945116087259909809124622586f89105b144030ea5","size":90,"data":"","first_seen":"2024-04-24T13:59:08Z","last_seen":"2026-07-16T06:51:04.389108Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"57c4dc2b1de562ac30c151980327d287","sha1":"28f5f9b5ed37ea46d71fde938d34aecb03f4951d","sha256":"4e3dea92cf00dd0992bc60793869f4d5853d224d8e2f6526539d0fbf0c7c8702","sha512":"7a9142660ce2d0c30d996e196abc6897a145f1b63a540f5d639957c9201c22e3a8e44a2eb7898cedf5e19a590fca138b700911cceb38404a12f6f0c26e11c542","ssdeep":"","tlshash":"c9b0125db19623add34e202634298511204719a5098091246125c6e89116b184034ea9","size":90,"data":"","first_seen":"2023-10-25T20:02:32Z","last_seen":"2026-07-16T06:51:04.527331Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"96a333c721754cb03355c84c2c4efc49","sha1":"54faa13343cb45039f7e90856cb2e9163f18f967","sha256":"fd3673775e9394591c179782bd58a3350577a22a94f04fa465d73351d71862c7","sha512":"34b77f67be3681b95dcaf2fd2003bd8f44a50dbfd7ee325cef3a39eb2d03ee579c80c8f7afe681c2163d4b7c07a1ed0dc55ca510539b2832168330bff21c0127","ssdeep":"","tlshash":"6bb0222cf3af30202a8220aa202a8022b002a02a0880c202222e0ac8202c2c82022a22","size":111,"data":"","first_seen":"2024-05-10T15:54:49Z","last_seen":"2026-07-12T19:53:38.890411Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ffbdf2b4658f713f6ab6cceaa595c7bf","sha1":"1982c846fc85b532f2ee4ec12971df23135778db","sha256":"98ff1268dddfa802d670ef23876ecfda9404b26781d757cf6e573175a290adc0","sha512":"a76ce266ad1f376dfc9eb55c8606b318a1f3b8286aef87c3daae6fb065725700da559040d05c578c39b3560d0908ff26ecfa23ffbb0f14a170633e28f15cfbef","ssdeep":"","tlshash":"41b0125db19626a9d34e2017346a4511204715950a809524a12986e89105b544130ea5","size":90,"data":"","first_seen":"2024-03-28T12:54:30Z","last_seen":"2026-07-16T06:51:04.229457Z","times_seen":398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff7b4e03675817b530ad096df1e23e58","sha1":"15da0d919e34315a97b13af05b6605a35280c2e3","sha256":"efa174ccc76fcc74d99cfc31124b0709c1e4250aae45bc0a63c5b0777a290bb6","sha512":"76485c53e0d880e68ce332474c5c4945515a7cb4927077e8d63e4a4f0afe207d9cecba559f430dc6816becb69d516899acf63eed2078ca54fcc7e5cc7a9bccf6","ssdeep":"","tlshash":"e8e0922bf299203f08cb711b79894910801782f79c47eb2573722dfca413a4a8088afa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.879354Z","last_seen":"2026-07-16T21:57:18.273094Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6bd4f15703c5c137d1aec16195d04cf3","sha1":"36e13d44f2775d5fba149bea360d6a1b35bde9b4","sha256":"085d833f05067178d68007e351195622866437114292aff5b77b3485f9f33a31","sha512":"eb156186d6d984cd2b03f53603d87ad46963beaa2e8dfb94ae204f356fabd42a1ae40ae96eab578d7da2c031e3dbda8e3db49286961611f7a0ef7ce6bfc452b0","ssdeep":"","tlshash":"28d02b9ff7ba221742ca6419949b061b1069b78a0b048b9300370aea94254c10223e39","size":272,"data":"","first_seen":"2026-01-12T15:19:10.673697Z","last_seen":"2026-07-16T21:57:18.361449Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9ded22977d8c3092685c3a5077f82b5c","sha1":"2de4b8ab71ce53c9aad3f8ab62c29e1125cd3292","sha256":"d9eae3699efeda506f9d8b7afbcb830220e9cb7fa560216b0b63108e1ae0c89b","sha512":"7e97f683badb4a59d64374745dbbd6f9ed52ec73412cde5e05bf4dcdec1ee86eaf36a9e793fea684ce0107b724b895226488efc8687a19d60c01e3ef1a879c63","ssdeep":"","tlshash":"4bd02b9ff7ba621742ca6419949f0617102ab78a0b048f93003b0aea94254c10123e39","size":272,"data":"","first_seen":"2026-05-28T10:31:18.759838Z","last_seen":"2026-07-16T21:57:18.374709Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"89c754dba5f9db9366426144d0525351","sha1":"162628c26e91e45d86f93595cc8789596498755e","sha256":"b03cc7ef38915e3fd9b71f9b0e8b00bf6c3fc5173e9ce3474e2fc7ddd91117f9","sha512":"ea4ee63a78f95dd2ad6003b5fe91c784e4af7cf641949e92d6fd6399d967241bb19634e5b1236269ad2a3d8e0e7fbdaf2f502f40b00c0811acdd1a72bf1edcbe","ssdeep":"","tlshash":"c4e0922bb99d003f08cb745fb8499a11811746f79c479b21b2331dfd6402a4a8188afa","size":358,"data":"","first_seen":"2026-05-27T00:11:11.728843Z","last_seen":"2026-07-16T06:51:04.237875Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"75102954a1e07f5574f9928195c3d04e","sha1":"0d159a3332c873d054fa0bcd016bf93e0b123eb1","sha256":"755629c67e47a4ba6fbb5ab74b14ddf611484d0be6f2d4fdaa3e69320f6ecd20","sha512":"5cc8b984025edc20685c91965536b16b784b85a9bbec8a0bf895f3fb221d48579a098e6f0de0fe9ffb538e0c40beff520e2704be1abac0a4c621d380864d59e6","ssdeep":"","tlshash":"7ed02b9ff7be221742da6418d49b06171029b78a0b048b93003709ead4254c10223e39","size":272,"data":"","first_seen":"2026-05-21T21:16:45.751873Z","last_seen":"2026-07-16T06:51:04.196383Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"197459ec1acd863630cf618b41f38b3b","sha1":"4ed8a426e7e3ba23d06a7bc22e7718ea8e89466e","sha256":"86691902b75778c7b04838e478dd75d8ab9910fb330cb40e232a6c11fd4c8fa5","sha512":"758f106d056897fab5a6b5d00c70a23a6745be9d0b6ffe1b5a9adc54fa5bcfb90c4eae00d5c12067b7a2b5068d626c69f03817503276c0c84b3b1bd11d59dc1a","ssdeep":"","tlshash":"51b0125db19627add34e201734394111704715a509809124612586e8a105b148034eb6","size":90,"data":"","first_seen":"2024-03-18T10:51:44Z","last_seen":"2026-07-16T06:51:04.363995Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6cc3c48a09f7c4b3f3bbe0ac7887eb7a","sha1":"250c346ff22e5aa68d7d749c9636659d6d59fccb","sha256":"96eeb0d47d552a8047bef08b3a4875289c78ee8294020ca14994a9d22e369b4a","sha512":"772a2bfed2629ee707666f6accfb13522f8ab1bdbae6109dc339a7c42f22c6babe5119b86ecc1dbdad87bc07ac90dadd492892a1a924031417f2baba6c8fa7f7","ssdeep":"","tlshash":"6311206a7a5c0cfb44ce3d2674c0097114fbc7b759c0ebe9bb7955f98ca5a014064da4","size":921,"data":"","first_seen":"2025-05-15T13:38:03.651855Z","last_seen":"2026-07-16T06:51:04.457222Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"800c5e17c4fd739559dcc01711ac9cad","sha1":"77d9fa658d410b086297478ab521894e2c963fd1","sha256":"0be2832ba2cc7424b78d4f0c03480455ef42c832a5c87f2b6b9ec4f25d519eff","sha512":"f0c204650c0e7e8bcc76c738fea4f2abb1e67047bff4d62e6914ad158bcca63fc4688c68b7820bbcb2bf073c0682e7b9ba334fcee28a9508ea96763869d1bd58","ssdeep":"","tlshash":"b0b0125db19623add34e2017342941117047159919819128612586e8a507b144030ee6","size":90,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T21:57:18.573272Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c23c06415561f10b30197008af04d9b7","sha1":"4c8cdf49478755366beb1ba02be5299f40b4cb23","sha256":"77748c397f9b0690dfd45a9a1a2b2162d55cbd64dcfd935cbcf40f1eccdb339a","sha512":"4809f430ee1dd5bf41e718c98a052b83211053fefbc4e2c6da978db92e35d0ead154e0f3fa551cfcb7160a48f130786158d7ef0944951b36fe4f95874de19973","ssdeep":"","tlshash":"d5b0125db69622a9e34e601a342941112007299509859124612686e89905f144130ea5","size":90,"data":"","first_seen":"2024-03-28T12:54:30Z","last_seen":"2026-07-16T06:51:04.526765Z","times_seen":352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e887612958b976fd55e12efbc424d56b","sha1":"0905b49dad639b5ebf03d61b640e7922217367dd","sha256":"2abae8e4f184c7c974486e21940e13988ce08a03c29d10d1f02efa1fa0a7d581","sha512":"c72cd4c5f41b7b808a3da92108cb3edaa4917e5cbefa69ef82b11fe2ea7f183c6a9e69e614a2993cbc21076819a3058bce58e3e1656d5a926852443002a6868b","ssdeep":"","tlshash":"38c08c3db23a202f05496449781bcb10905bf6c01f824f3040ea3ed88100a1c51d8aa8","size":151,"data":"","first_seen":"2026-05-27T00:11:11.663734Z","last_seen":"2026-07-16T06:51:04.352587Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d2db3e5b97f7c2b2ea0b33738744189a","sha1":"4b6cc08db3da22616d914a90862bf684cb53d6cd","sha256":"5d92e7cc0a62ca7ea3388318d209d69cc314b163abe51291acb06c13b00bb5a6","sha512":"8a3a3b409dbd70e4ab033482e5cba2a588a3b99a226fc727faf305fa16b972b1241e630dc3be3b5a0d6044f28bc17bbcd286895994ec5312b84327e6bdbdf0cf","ssdeep":"","tlshash":"4fd02b9ff7ba221742ca6418949b06172039b78a0b048b97003709ea94254c10137e39","size":272,"data":"","first_seen":"2026-05-28T10:31:18.685163Z","last_seen":"2026-07-16T21:57:18.561168Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"16771ca1342c0e3394dbe97ee0eb9e9a","sha1":"7361e3ee27032cb3d4f7297ddfcd4f2d34e697d3","sha256":"ad7e779b42d7084a2c6e791d36c17d1ad9024fc0a60920737b42226129a8e03b","sha512":"79812e0159666a57ec1145c5edd86e7f97525b21b591e114eb3f9ea19c1a27b4bdd239b979db4e99cbb51d888910a328296e8b6d990c17c9d8cb8344273b50c6","ssdeep":"","tlshash":"eb113a5a7b5c0cfb44ce391a7cc0157114bbc3b359c0eb99bb3965b98c66a014064ea4","size":921,"data":"","first_seen":"2025-01-23T19:32:03.774352Z","last_seen":"2026-07-16T06:51:04.330156Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"059dc7110a21a7face0ef86815f816bf","sha1":"be95561074cd0aac018aa5adae0d205fc7206bb0","sha256":"38d6c06e4af24cc4ee485b23cba4e87cca2a652eeaecdf258c535c62e748f959","sha512":"652d93a1ef12e44c0acc95c6d3c8ab7cb1e7a12157386eb147b51aba39b081f6b2fce0847644bc1d62954f1dd9e4397980220c9a7eb1c535961212ff9a1d6811","ssdeep":"","tlshash":"8bb0125df19633add34e701634698111204719a50980a1246125c6e89516b184034ea5","size":90,"data":"","first_seen":"2024-03-15T19:22:01Z","last_seen":"2026-07-16T21:57:18.470709Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"300385b335c2d7092fc60ea3f9f9dc62","sha1":"1c83c8b1cdddf42ce0b335680e236d48a2cb6a12","sha256":"759f76233c7754e5f89086507fd983c1997b194af60495e464fe548d2130bc24","sha512":"b20cfb862125a7f093964196a0d51fdd6dda388db30364d33a462e6ba94653e12cd573fcb5a59d8144aa940a5fb71b2456602727f6aa0cab5fe73ac4a6546f87","ssdeep":"","tlshash":"1fe0122bf69d013f08cf655b7c89491180175af69c479b25b3721dfd9016a4a8098afa","size":353,"data":"","first_seen":"2026-05-27T18:49:34.943625Z","last_seen":"2026-07-16T21:57:18.557344Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f209e62b2106ff6ea1a98ae6fdf2f875","sha1":"836453e67e5b058ff0f0a1057706a61050a5502c","sha256":"31c72458fabba994bdb38f0c527749d91c29034fc64e2b88263e98ddddc79be0","sha512":"de46053c1ae05d07b5155709cf9d70da32c3d14ed4383ce008b5d62cbfba7d21c6297ee1c8993fe4a925a0f5046fbb40605de55ce3ea3c4003be9dc8168f680e","ssdeep":"","tlshash":"1de0122bb999003f08cb715b78898911811747f6ac479b2573322dfd6417a4ac0c8efb","size":358,"data":"","first_seen":"2025-12-29T18:56:15.978147Z","last_seen":"2026-07-16T21:57:18.369476Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cad449ea4d62264a1fd1a9de7b2bb767","sha1":"e1037ba40890c27850dee8fd5be6f6d8df930cf5","sha256":"af5fb55376a133d93d04847e9f85f0ef60483151e56d02f312b26abbceae4319","sha512":"f2a4fdfbe574f465bd8f2616b82fb33ebe8f91ef3dd03d1d34ba70ab8a39ec7fc09f2f06ef45ddffa1826665585085dc24b4c96ba3f8971cff7a0fd6db38eba2","ssdeep":"","tlshash":"4fc08c3db23a242f0649504a282bcb11909bf6c01e828f2000aa3ed8c100a1d90d89b9","size":151,"data":"","first_seen":"2026-02-11T17:55:17.49052Z","last_seen":"2026-07-16T06:51:04.227886Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"45de552fd98cb4d72aeaf8aaa724adb6","sha1":"98d3e06f85c5ea974d527681a4241cc2934752de","sha256":"6816d6bc23e59ed3aad9df6454256607ff5cba467aab9050a4fb8a841008f5ad","sha512":"514b0ebff3595f2206d285f353b5175682eb4e36cfbe043db0360e6e36641840ebaadf808753edd14ddd7c64e00e83ef9cf7a466deafa06367f139abe51f7a7d","ssdeep":"","tlshash":"2cb0125db19a26add35e20163439411520071596098091246125c6f8d105b184038eb6","size":90,"data":"","first_seen":"2024-05-29T17:41:01Z","last_seen":"2026-07-16T06:51:04.288038Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3b05542622b160460a038b0dcbd8e6f5","sha1":"a2995e29e8cd518426d46f5d566835865390453e","sha256":"cf5377e39cd0e2539abe3aae60999a31537a10b078f393e3f42554120be66416","sha512":"f541dfc8625131f43ba9a02a04e3ec59fab748ecc092a898114fd26317dd7da4600ec0ceb032e1b3e25145b86d6e9eb0cd9cc1e856594179f7daea12a1e3f5b4","ssdeep":"","tlshash":"95115c1a7a9c0cfb44ce3d1a78c0157114bbc3f359c0eb9dbb3995b98ca1b024164ea4","size":921,"data":"","first_seen":"2025-10-22T20:37:51.323828Z","last_seen":"2026-07-16T06:51:04.449611Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c37b2aff02c5b6949ed12c23b44147eb","sha1":"f3b282101a742d0ef7cf3aaa2d2fefb9f777ba3d","sha256":"d19f20788e0731f21991295eccafa129b89f11c9739e47ad15363dd47fa5fb16","sha512":"e0e9cc24284b0b8f2db0fa64115096a8a79d8cbfd10ad0c299f3808d86657b2648f21108913d73d66742941f93a9e829da3fb06a721ef4ea0c6b971bb7aca2a4","ssdeep":"","tlshash":"17113a5aba9c1cfb44ce391678d0097114bbc3b359c0ef99bf3956fa8c61b014068ea5","size":921,"data":"","first_seen":"2023-11-28T22:30:32Z","last_seen":"2026-07-12T19:53:38.908182Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a709f8e0ce975bb024a130e279d3dafb","sha1":"8909f60553312d9fe9ab8c510322a7a8b40f7740","sha256":"372e52d8c4c84d2339ececf2a1c8471612129b3caeb0f992fa8b0a09832ab6e1","sha512":"624177cab8163e7dba1c7d7d866dcac5805f70ef311c2b78c3b9e4b2004c1ee1318c7fc0e3815ed55248fcc9253384f97b66cd1437f7f30ea38b667b09197c05","ssdeep":"","tlshash":"bae0122bb199003f08cb716b78494911809747faac479b2573321dfea056a4a8488efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.47999Z","last_seen":"2026-07-16T21:57:18.164929Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d3759d913c57238cd34ac277e3981be0","sha1":"34d37a291ad26aada43b117b1e1624faaa1b0417","sha256":"1871184c371e010fb2117cca8eb2288affff16728364e719d4a6f1ef71ade28a","sha512":"0fe2c16f71d6169dcab2f2d7a7535518f7c780f91eceeae6664e52ae32b45f8b846a576b1b97b33fb72438ce806b8a46c98feb8753f73e0c20be06f68cc21b06","ssdeep":"","tlshash":"d1c08c3db23a202f05496049281bcf11a05bf6c00f825f2400aa3ee89101a1c50d89a9","size":151,"data":"","first_seen":"2026-06-08T09:34:55.489629Z","last_seen":"2026-07-16T21:57:18.507655Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"80ed0b05e73ec4a0a714b238da48bcac","sha1":"efddbb0d4aaeb5c9548408c6eabfeb054b38ed08","sha256":"ac57e03f96145a9b80620d82d07490d72608ec8d3027aeaabb57ef991f5bdca8","sha512":"0b996bba900d241876208ee8ecf4a271813a00210486e4a4cf9225ee4c8209c06f76227437e0eaf23996432f4c347d07199b74c75998c5a373f8e01583e9462f","ssdeep":"","tlshash":"beb0125db59622a9d34e2016342941112007159509809124b12686f89506b148070ee9","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.45085Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1b55808bfc90527f15fcb91d0072c62d","sha1":"713e005ad73e9d678bb3ce8e38b31101685c67ae","sha256":"ba408a769d4bbd98396d5ea1f86441a4b10be728776749c0f0b81128118450e9","sha512":"448f6073169afe4f1feb9bb14ac65ad0bc83a6ac8a4de772fec762fe7bf658cfe89e78e7805d3931bf1d4d810acc92b30928563f9407647c95e970ca9e5f4312","ssdeep":"","tlshash":"7cb022a8f2af30222ac222aa202a8002b002a0200a80c202232e00c8202e2880022aa2","size":111,"data":"","first_seen":"2026-05-28T10:31:18.754349Z","last_seen":"2026-07-16T21:57:18.564697Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3ed048dbfb0a357a0fcbb3a82374d750","sha1":"6d65d1b706d675cd00110ca38894b58f9d70c962","sha256":"dc605c991b527ccfa68c50da5dc0f519fc8224392fe89b112011fb3e9e3cc009","sha512":"b7defcbaab6785817f6903e1d743cd53dad154a031acbd5ad402b82058964e2ad0e0a9a63307e994561120be6ee8a5a66770f2fd96f03f6f9e5455a813bd787b","ssdeep":"","tlshash":"dca01219f3897125064f601a286681196003016108419200522644d8444d3464014d65","size":81,"data":"","first_seen":"2026-02-11T17:55:17.523208Z","last_seen":"2026-07-16T06:51:04.291419Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6ff57cc1c7425e9b0b15b9c6f916de04","sha1":"d57a01eb74a999c9cd8a431c525ad94f821123c6","sha256":"620457ba06837ed7637856132add50b9d3fb28530df877c730b9ddc5161f0a59","sha512":"469e1daadef26cf205c0179ea5918bdb3254ba58f11c6276a3fcaa4f06fd80d5be35f8dc5807698812898e1c99aaeac5defc2f013000707efa6ac34bd934789f","ssdeep":"","tlshash":"93b0125db19b22a9d34e201734294115608725a50980d125612587e89505b154130ea5","size":90,"data":"","first_seen":"2024-03-15T19:22:00Z","last_seen":"2026-07-16T21:57:18.389844Z","times_seen":409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2faf78c70faac8363a8ba9eaf57595f9","sha1":"dbf29f49fd4b4012bce885385bf5f1eccec74d7f","sha256":"e4b19a3abb9d902e0c150587b4f4d265c9843e00f860acb808f08323ad640daa","sha512":"8af956c7244c680bbcc67ae01cf642d4684537e23467ec886a37b443823e90d1ae91410381c707e71367b6de9d863564c7deae6b2e6708912e5ae667cedd9cd8","ssdeep":"","tlshash":"be119c1aba9d0cfb04cf3d1638c0057110bbc3f309c0ebd9bb3856b98ca2a010164ea0","size":916,"data":"","first_seen":"2026-05-27T18:49:34.936157Z","last_seen":"2026-07-16T21:57:18.475926Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c689c846214dd460b4a71d3b853ba584","sha1":"1ec56d494eb973e188d7d225d23a2db25cfe4b0a","sha256":"68b6df00a346a5441db03846add8556f697ebf5f22ddf818292767e5aee97269","sha512":"80b256ab6eb85cc1fce0359fbd7b7830eba1f25ec6a06a114c2541288fb92a4f8b032ea3aa748d6a252248aa445024a0d986435379fffdb7abcff616b21f99a9","ssdeep":"","tlshash":"57e0122fb399003f08cb755b78558921801757f79c879b25b3322ebd9016a4ed088efa","size":358,"data":"","first_seen":"2025-12-30T18:35:33.283235Z","last_seen":"2026-07-16T21:57:18.289182Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aed26d87373946013c45ac9c3a754f45","sha1":"0ad92b6ebe6e6dd723bedb40eeffc0604fe46522","sha256":"2287df5fe9c2126fa326ee07b0dc64783636929e048a7fc062e00fe34ab73500","sha512":"49cc560af453db7b4c0c13c2690b477765e1a19de8bcb53858726bd7331a6a3b860013d0406434a7d625226c4ed300bb0509f0f92c93dd9b40ab79b28cfef48a","ssdeep":"","tlshash":"9ab022acf2af30322a8a30aa202a8002b202a0200888c282222e00c8202c2880022e22","size":111,"data":"","first_seen":"2026-02-13T14:07:28.108174Z","last_seen":"2026-07-16T06:51:04.549399Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4e5504ec4711856ccfdaa08e9b93b46b","sha1":"ad42e3c4c69fa4dd2687302aca4a8dc875582b06","sha256":"a67a336ffa2cce0bf69ef36f53cb2774bd6a520046b307e5d7fa0bee34552872","sha512":"7dc1df9f4f7b16ea0930eb3f5e59b3d8459c02986f0522ca4c90608fa0d7d08d576290ffce1fa7bb19a6c75dc090e97785ae43ad8ba997e65d6aced91c91c309","ssdeep":"","tlshash":"73a01229f38531750347703a302649153003056148018610522644d850493854014da5","size":81,"data":"","first_seen":"2026-05-27T00:11:11.652042Z","last_seen":"2026-07-16T06:51:04.510523Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83f8c7d964aa0d2537668dd16d7aee3d","sha1":"e7c68971349881c9a55e88ab2cae283d19cf4553","sha256":"f5f3f43f7a67bb5601f060706f42429e7b030ddeefc9c51178961b7252a38071","sha512":"c405cc7bdd0191a9152193117a3bb3b38500577cad71ffc64eefd50ed6aadbc41caebe82c71a55352bef2a5d4e21c19ac94be53fc0b1fc4fb5fd7735f69976a4","ssdeep":"","tlshash":"21b0125db19633ede38e701634394121204715950980a124712587e89507f144034ea5","size":90,"data":"","first_seen":"2024-08-28T15:18:11Z","last_seen":"2026-07-16T21:57:18.562085Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d6aa9b42c6833290f4c115a6288f7838","sha1":"267879cca28f4b06367bba1424e909fdc7294d49","sha256":"e705c8cd1976ffcebcdc61bb3e28d7aec6358f351d5cce607d812e1094e30c29","sha512":"4f3c94d1b735ff485748bffc012a62efbf3e280849fd29a798ca3a4eaa60edead6cc003ae8c8b5a7134398cfa8f4a68b888c641521091dd0a9403a570fb68235","ssdeep":"","tlshash":"79b0125db19722a9d38e201634294111204715950a809124a1298be89105b244130eaa","size":90,"data":"","first_seen":"2024-04-24T13:59:09Z","last_seen":"2026-07-16T21:57:18.283563Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be5cf4b7ffa77f5576101a1711c52396","sha1":"2819bb7a14773b68496663b268195c74ab0c7179","sha256":"571e73a03daecd8c84e3a9a9e568c21dca3dbc49df477624946b3445ae917590","sha512":"f695addead6b698786bbca80aeaebeda5b912e6e36fabca79d61aa7e01bcfbe49742802d715e2ab74d727c9d03c9161f812b09b88e9d9378a483dfdc2d890bb0","ssdeep":"","tlshash":"e7c08c7db23a242f064a504d682bcb10905bf6c00e824f3000aa3ed88100b5c50d89a9","size":151,"data":"","first_seen":"2026-06-08T16:37:15.764223Z","last_seen":"2026-07-12T19:53:38.920729Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c5e1c11dd77ce30fa33bfc44d2e1732a","sha1":"2a06e672c491fab0d4c3a5a3f34052953281addb","sha256":"306f3c4e19b8688e6cdbfc2631dda54a0929c185a41f1c98b85d9840b3943eba","sha512":"d1865c22142b902b1bae7b6863474ea789646fde6d55b290ef11fdcc5acb2a6a23fb4bc73537e4f51abbef3120f4651b1844c92288f5ee1b75c70bb6ee4fae80","ssdeep":"","tlshash":"32b0129fb29622aad34e20163c694115200715950984d124e1268ae89109b144030ea9","size":90,"data":"","first_seen":"2023-10-25T20:02:32Z","last_seen":"2026-07-16T06:51:04.301587Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7e4be5bc518937f453a3c8f9b53903f8","sha1":"a582202d8f6405b0662270319e6382ac899a0360","sha256":"5ba7885dc3b0adfb9a5bf4d8343f21b6202406cf064d05f919e4240e770686f8","sha512":"e17ae53838532835c598bf3e0a468b6cb3470472b6fd97dcbb147759428a8d3fe3d9b2124bf2c5fdb0baf094fe7746386bd223aff281fb79cfd3f452b53b9e7c","ssdeep":"","tlshash":"b2113a1a769c0cfb44cf3d5a78c0157124bbc3b359c4eb9afb7955f98c61a014164ea4","size":921,"data":"","first_seen":"2026-05-27T00:11:11.644698Z","last_seen":"2026-07-16T06:51:04.606902Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"aa09a5e28ad136242f75791dfe4d49eb","sha1":"31969dee6571f6fbee4c96967952a2850ef2c4f8","sha256":"2b6e0cc375bd75d3504ae4a94fcc4bbebc7051b6e75b9b382dff501ebf7a7e3e","sha512":"6dfb7967e383dbae98f12413083accf31e8ba9aa70367b129243cc8fd2ad47a98f8f0572b87f985befc54bd93a3afc3b485298f5d0c5ae40ddc51afe6c70d632","ssdeep":"","tlshash":"10b0126db1a622aed35e2026342945112047159509809124a16586e8d105b144030ea5","size":90,"data":"","first_seen":"2023-11-30T16:50:01Z","last_seen":"2026-07-16T06:51:04.29615Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"56ef14abb24e610529b84d9df161b198","sha1":"09e311760dbd0aa48b1168aeaf6d2d79d075ef58","sha256":"5718bbd41f5890b21d9a72e0aa14b46c76c82e7dcabb4f7657827ec9feb24cb3","sha512":"71d14d71ad23a858a8253e42e680bc5b185ddfb7b8bbef9afaceffe8d7353c438b115098f228b3339820439ecc6df16dd76e70a615e992f33088c9eb2b326d8a","ssdeep":"","tlshash":"3ce0922bf1a9003f08cb602b78894910805782f69c47db25b3721dfca057a4a8088afe","size":358,"data":"","first_seen":"2025-11-02T22:24:46.02303Z","last_seen":"2026-07-16T06:51:04.584216Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dc4b3eb169d00d8dd7984de34f92d844","sha1":"02d799c2650004ba3da9c97317df3bea2cbea6ee","sha256":"7355b22ca94659ec4f260a0aa6871a53a608eeeb6392d2b6440e8021e9fb3409","sha512":"a117454bddc855194d754fc50593faa432cdfa12dc5b3407408b3677706a56f4aa1b9877646d65afde1ace3cc2e1f6e8a3d0d0a44c39171ce07df68de284201f","ssdeep":"","tlshash":"19b0125db19627bdd34e301634394111200719d50a849124612986e8d106b144130ea5","size":89,"data":"","first_seen":"2023-07-12T03:58:20Z","last_seen":"2026-07-16T21:57:18.595111Z","times_seen":863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/SfdcSessionBase208.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e2870fbac46a1cb8236be77c9994949","sha1":"8ff7c8444655613a742d035a29e78ace56bb9f24","sha256":"3472427f067f8339f37000e07b9f7e9ff0bbd4adad5be419e65b2640970f06ec","sha512":"5b76917441dec93fff73c53e95cf4ca8ff2a80074b6e5a8e6b1a247737c890ff872ee8973e9a335604f59e6d27ee5f98f6446695400cbe70ec22c0b5db3522b5","ssdeep":"192:wUPZL9Q5pKURHiMtKKJBEOcjSNOIchZG6F1fqLpISpW7ZUCK4sp5l+NZxIucVwvD:wQL9QHBOjSNOIWgZH8sp5kNZxx2w37","tlshash":"8872d6c2b6c2746289b6b0eb503f1046e57ccd5ab86c4dd1d0e9c6c47fb48aa417bf28","size":16274,"data":"","first_seen":"2026-02-13T01:58:22.085082Z","last_seen":"2026-07-16T21:57:18.102199Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9ae71dcb5a79391e6b84c3794a5d538b","sha1":"6669616a84aa08c09c79aceee3b8ffff7aafd5fc","sha256":"37bb7c5dca4770e6f2ab59112817a9179665659cea1117740b9e32b30e023133","sha512":"e3f2ec878628acf421e82719ecffdad956a78ee6d08da21fcfc6efe29541aedaca5f33b147b48b1757a22bafacc94972d17fd8eda684620f3cbbcb0ff3640772","ssdeep":"","tlshash":"ffb0125db39622a9d34e60163c6d4515204715950a80b134612986e89109b144030ea5","size":90,"data":"","first_seen":"2024-04-22T10:43:26Z","last_seen":"2026-07-16T06:51:04.199422Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3a6c77983bb4f901cda6daee7ae12cd4","sha1":"0597bf224953edc76396736b0b04cefee35b6a94","sha256":"566ffee79279137978db0d0c698ea3b7c97531bcdc33454485b418f3111473ec","sha512":"882f643abf49aba50bf9121f9a17c9f6fdeaf8a094982a90a0c6722c8581de0abad72b2a98476f1d383f906d1b5b1737adfbdd7b97c26cbb3e723cdefa2a1ff1","ssdeep":"","tlshash":"f3115c5a7b5c0cfb44cf7d1a78c0057124bbc3b359c0ebd9bb7955f98c61a015064ea4","size":921,"data":"","first_seen":"2025-02-25T11:21:33.986314Z","last_seen":"2026-07-16T21:57:18.258676Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"69fcf192808828c6db43a60adb4ce07b","sha1":"f256374368dbd0ed894d313ecddc5d3828bcc83a","sha256":"d360fac374aec42588eafb6a75c12d48f055939d7860784ff88e3d263971208d","sha512":"6b127929f0db34d941fbb8873757821397e1aa8a33050983114aef1d0d1d74766b9036817699e6a40786bfeb4ec39ccca70e70b887b35a6217a3bf70cb9d16ec","ssdeep":"","tlshash":"05b0125db29622aad34e201634294111200715960d80d12561a586e89505b144030ea5","size":90,"data":"","first_seen":"2024-03-30T19:51:47Z","last_seen":"2026-07-12T19:53:38.927375Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4f2ca073c19d2428907359bb6a1d1ed0","sha1":"a84fe82b3fa800f70cf25f094aa50458895be5a3","sha256":"7153bccb473183b7795cbf5f905dd4aa2051b582948ce2cb5f5a206e9bfce7c5","sha512":"9ebdc7a19fae585043e77ad9197b85af21a6e93d29bdd05dc26a35b8a5f0bb77ff1ef93ef63cb5532e1bf294f74eaf8bd7e339947db609f292d21ed688b16809","ssdeep":"","tlshash":"d7c0c25bf388103a058fb02b2c91461e515307d75e86e325933219ed901f6828404aea","size":190,"data":"","first_seen":"2026-05-27T00:11:11.676908Z","last_seen":"2026-07-16T06:51:04.453918Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3001921afb4b099d7145f374598a3dac","sha1":"2e62a84a1736de9be56f483f488ffc1b3ff3fb65","sha256":"59214c89af1febdd14b5cb8da45199900b5d8852f37dec5a34ab7d3fd36a95f9","sha512":"2049b1e1f5a0975fc59e5ccb6b9a9a56ae5b0160c60786268398c426aad6a05e753d172996698c9dfad2227e3d03da4001fc74fbb03dbab1ec2ee1ce814eb6d2","ssdeep":"","tlshash":"f5e0122bb599203f48cb715b78554b11801747f79c87ab2572321dfda416a4a8088efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.528354Z","last_seen":"2026-07-16T21:57:18.372954Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"404f5ed863b6798c19182268771b6922","sha1":"3c59cec94d108f2f83bd020bc398b3541a4462f2","sha256":"e519a69d9738b950ca007475cd79467dd8242224fcea02aab6989d8a1f1d71a7","sha512":"aff50916e69718d2673b9b8ff5015a540b32951bebac99baa50f843145940110cbddf4e00e79894eacd987181628fc5241932d17232fe6a3faa3ad236a647b8d","ssdeep":"","tlshash":"ecb0125db1a632bad34e3016352d4111200719950980a124a17686ecd505b144070ea9","size":90,"data":"","first_seen":"2024-03-15T19:21:56Z","last_seen":"2026-07-16T21:57:18.389139Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7e98efed31bb6ef3bcf0cdd502e18cf7","sha1":"e505b7765f3aa6aba31f630faf10f5ada6102630","sha256":"d744face904b08b9b0842435bf5fcd404df99fc12790eeb15732ce9690e310b1","sha512":"1796067487cfed715f4ad6649c72464ccd5aaef6976e0a195262f0242110f4993a75b425c2cacff12ba862874161abddce19fa2e4eecd2fb5f017260f86b2bd6","ssdeep":"","tlshash":"71c0c21af38c503a588fb02b28514a1a42070bdb9e86a215133109fc501b6828014ae9","size":186,"data":"","first_seen":"2026-03-25T19:58:20.768123Z","last_seen":"2026-07-16T21:57:18.617645Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c0bd9fb29be0a169d284fad96604df1d","sha1":"bbd43b9bc49ea5aaafdf42a7fc028f2b226c1fed","sha256":"6d2a0be16366b335c402df171cc16163a9f8963e67ed66a4b934e98463866ad7","sha512":"0ec7e9c2e586e0c0f01a7d9a07eab7d9cac4d0dfc14f58aa240fd20594d9311bac65c4d2fa56b332a4251b8e7216e77327518986705878aca8fc0dd731e15bfd","ssdeep":"","tlshash":"78c08c3db23a202f09495449681bcf11905bfac10e825f2000aa3ed8c100a1c91d89a9","size":150,"data":"","first_seen":"2026-05-27T00:11:11.733924Z","last_seen":"2026-07-16T21:57:18.523Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fdfceb3b31225f9931d9d8a9e858725b","sha1":"a2f054f5b65ad3552f11db79ba64958d8d3dc0fc","sha256":"c3cdd86d849545b50217d719739ba37798f9010aa6391367c7b4e3e1dcea0bb4","sha512":"a08e497da02e9bee7d2df26e8faaf78524bc08f5a07b31707e2019174c1cb0429443330c5bbebfa892c6bc63630055cffd55015a8be38828fc6e19d6e086d726","ssdeep":"","tlshash":"cf113a6a765c0cfb44ce391a78c0057114bbc3b359c4eb99bb3956b98c62a014064ee4","size":921,"data":"","first_seen":"2025-07-03T18:28:56.136326Z","last_seen":"2026-07-16T21:57:18.345643Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"034838f32f4f6271fa10aded8b302d5c","sha1":"204a4ac8e2b97c5fd42252234ddc8fd9d446baa6","sha256":"3414c5099a6ae1e19fa28a6fbe8fb2fd00da7cc843ace0988047b9a953c9441c","sha512":"2dc54b043e4fc2081ebfe2424096d58c929db4ed9225e5021b538b0be8a3375a855d44ac1cbe45cfbd9542230d75b9febc817fde40815e420887eb8cd1ec1516","ssdeep":"","tlshash":"85b0125db19633aed34e301634294511301715950984a124612586e8a505b144031ea5","size":90,"data":"","first_seen":"2024-07-31T16:58:55Z","last_seen":"2026-07-16T21:57:18.555916Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/scripts.3e6c58394308c0d5ebc4.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73364fb111159b3b427f8251098f4afb","sha1":"50e3acb384bb907a1230ccfeb69e712519a1deb5","sha256":"5a37bee2798d78c27cc67cfccdbbf9682197f3e8c553dcd7dce8fd3220da4fa0","sha512":"28386e02a732faa56670e964a70485dd3b69fb05ba3e6e2af66cfba64e79371190d4a37905f3dff1110ec9879ec4aa33b4852f8fd4935ce50d1e27794de4998f","ssdeep":"3072:ebkdxHwTslFlx652lXWcIfxkA5HDBL3hq2b:ebkrQO5g1xkA5Hh3kc","tlshash":"7b34e88cb2d5f03102e7a176906f120bf336385aa04ac098f539ddd56db898e6277f79","size":236467,"data":"","first_seen":"2026-07-10T12:35:59.998992Z","last_seen":"2026-07-12T21:21:00.133019Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c94ea8e237031577bc6e1027489092c4","sha1":"c00424b898542332de909a9aab18e9625bdf24c3","sha256":"4c02ac58f279d1bc630621949cad5f86bfa301320602701bdc509f3f05a58999","sha512":"913a7f9e98f0fe9a287f9af88a48a960a5e23b0fc9449fbdb9b50b287058706115b14ddd448fb20a4a26318f5f6f1f0cd236ad4a3f1a453b49851f940f2351e7","ssdeep":"","tlshash":"4e115c2a776c0cfb44ce3d1678c0057124bbc3b359c0ebd9bb7955f98c61a025064ea4","size":921,"data":"","first_seen":"2024-11-13T15:14:44.292546Z","last_seen":"2026-07-12T19:53:38.932245Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d1d5b881fd4696c6c270e916e98cea08","sha1":"da48c7fd42933c6995975aaf3d97bd47cb725eb5","sha256":"4151475576482b367677d4aa6894e269751e7105474a1e63bec03a5394579b2f","sha512":"e6b3b528d097fcde59b53735164506ee550f7ed29f1facec6a60ca206ae48187a0551915fb33774a245a0badfda1be2301508dd70c9f36919573b49e7125d537","ssdeep":"","tlshash":"34b0126db29a23add34f2026342d45153047259509849124612596e8a105b544031ea5","size":90,"data":"","first_seen":"2024-07-03T04:00:56Z","last_seen":"2026-07-16T06:51:04.479918Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/baselogin4.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5c862f98f1364f73bf0233d6e16fe5c","sha1":"ca45e4c6f41cba54314b739495d59a7d26a25381","sha256":"189f242883a88d98ed5da5366f6518a62c537a9883395ab484753c3f0b49652e","sha512":"07ff1ee304a50bf97376e0082b792aca9d1659a2790b9b72abed98afe5c8b14181460408f334949291842f3378219151b2f513a81a5b9d73248a8f12e1c1a065","ssdeep":"","tlshash":"3671f9877134b4316833249121af4a8fb1bd8f689488b4c4dbd8dce165b1d871775f5a","size":3694,"data":"","first_seen":"2024-10-11T09:18:50.381887Z","last_seen":"2026-07-16T21:57:18.136334Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/js/public/nunjucks-slim.min.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78fc369d6fdd305de0b0a3eaea038d1f","sha1":"05d6127f3bf2918323989a8c043f7378b386c887","sha256":"2a99120b93dc55bc88954cc7f5c193533bc18510a105232cf3d6bfdaf07f660f","sha512":"04b7b475b6b1c281b24c9688fd976df884915a0ee0c9e1eeccec7013f97ffbfc2a05716d5bfad99d3220d445c4194f2a4b56921e43358463fc41373f09e63104","ssdeep":"384:usERpZZk9UOuxriJ0okPky/N4RpAdHRksFTdz/5vVocg5IQMywtpdr3mOB7NdOlP:ck9UOdBOJNcKHdJqc2WeiE5","tlshash":"3fe263dcf2d2f06543a3a5b5822f500bf33e6999344e9068a259d4e6bcb954e8037f7c","size":33478,"data":"","first_seen":"2023-06-30T17:49:22Z","last_seen":"2026-07-16T21:57:18.127205Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dd1c5679e42fa374efba5c6d68b9d3f6","sha1":"baf6bf2dfad913fc67ffe50b8dbcf04092f02e12","sha256":"84991d01939e011209d7cc3362e8615dbdfdf64ca4dbb23e9553144a45d5be62","sha512":"dab3f45f00a54d3ff615933c12ac7881bd15f9e5332fd98c047f3ad7d9e012cd7cd551c09f420ad4df87d51d5db066cb3a668a84aed358aac9edca6b90e52645","ssdeep":"","tlshash":"36b0125db19623a9d74f201634394122200719950a809124a13586e89105b144034eba","size":89,"data":"","first_seen":"2026-03-25T19:58:20.879566Z","last_seen":"2026-07-16T21:57:18.586722Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4775ab8652bf87539f73534101b73d4b","sha1":"44f718cfdc958787ef89b898f05aa2fde4f1c9a8","sha256":"a1601fe8233bd92dcec5ebd42ff1c9450530bae8b98e238e6ae54c7dd0b27508","sha512":"7973006bda8aab05099dfb4c80946212a05fdf32a97ae79b416f768bd7a16c08ba4320dbdc4d99d83d2a0224b96e62c658c1c0fe82d1dff2afe10ff671960605","ssdeep":"","tlshash":"09b0125db5d722ade35f2026342941212007259509809124a12587e8d105b148130ea9","size":90,"data":"","first_seen":"2024-03-15T19:22:03Z","last_seen":"2026-07-16T21:57:18.396937Z","times_seen":333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dcb20c35d1264ea73125a4f579ade3e2","sha1":"3f57452649d27097a8f62d3b3b7a90591af222ee","sha256":"a1e6b602443ca589e27738e70d0d7059cafb01d3783da8daecc4d49d11abddb9","sha512":"80e3741eb545aae200de0591a99abcffb77713ce21ce1ec1b109093e0d2ab5b9720b1aca5e204691a10c3f1e5640d83f8103f470b684615061ffc5313843af33","ssdeep":"","tlshash":"1ec08c3db27a202f05496049681bcb10909bf6c00e828f2000aa3ed88200a1c60d89a9","size":151,"data":"","first_seen":"2026-05-28T10:31:18.692109Z","last_seen":"2026-07-16T21:57:18.577679Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cacdce4a4c424db7fc0a878366d2b5cf","sha1":"94beab3638a422381d638f09509e01f7a7432809","sha256":"f0960dbc2635bb074030700d2a07cf5f2801ccb516594e7139751dd1b58418d1","sha512":"7681c69195129e943ff8dab29b0bb907a1373dc17a438f83d5c077f7c695f0a97c3ccccd92fcf626fa301fa0817998b293033c0acdd7d8c847d80f833a492030","ssdeep":"","tlshash":"85d02b9ff7ba261742ca641894ab06171029b78a0f04cb93003709ea94254c10137e39","size":272,"data":"","first_seen":"2026-06-08T09:34:55.259419Z","last_seen":"2026-07-16T06:51:04.358658Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"db70a9a4e67b91c234f909a6c0fb74f3","sha1":"1961cd3bc32cd16a148bdbcfc51f55eec522cb7f","sha256":"b87ccc08a74467da86bcecec301eb4d4065a5b428a9e2431ebca38e99e21d1f0","sha512":"18c6b08f9c136dea8f5bd91082bf2ade22e5cee2a82418a340700060d7f92209c769a0d09013671ac0e2d15bb515c9cd7691592580aaccd7475666ad3eecd25c","ssdeep":"","tlshash":"69c0c26af78c503a05cfb02b3c955526810307e74d85a229133109ec991fa428004aea","size":190,"data":"","first_seen":"2026-05-27T18:49:34.887248Z","last_seen":"2026-07-16T06:51:04.593955Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/nunjucksFilters.426f86e3c82cc4d676f4.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb201a927e0155d6119423560ad87f20","sha1":"b0e3f22dd0ade295bd73af0ca94c0875fbcf7190","sha256":"d6ad9a0d69b3b684189ffe8292369e43cc789f73feaeb64172bf70b236084bf1","sha512":"d8edf46dbb0fc27d478607f7d82f700e9c53e574ecf84367d4d742e9dce39fd78cc7c4ad5fef05b35cdda3e72204ac655de68518497417e02d5b46e79e578b8f","ssdeep":"768:pC6CgCT/Hick0CrhJec+UcHt7Vn+zECGDgZ/CpDFOf:wHickBhJejtZu/CDY","tlshash":"c7f2eac8b2c1f263db6732b5509f710bf23d641a988c9484d216dc9578f994a8273ffa","size":37455,"data":"","first_seen":"2026-07-10T12:35:59.997569Z","last_seen":"2026-07-12T21:21:00.176279Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bf84997bae31a0c7abd3266e85ae85ca","sha1":"6f78bc411b8028f0988b5c85bf252f15f7bbff18","sha256":"2ba85a878f4738db415f3511038d974acea8a93b8eb4567e3505aa2e6d0c32c0","sha512":"2ce3a321a199c3d0e7faf0e25182beabd8698f4b630734f79d443c9aed61112921fbc4e78e383cd99627ee5e2f47f9a99e8628e02eea71a8b83a40580f0cbcda","ssdeep":"","tlshash":"b8c08c3db67a202f05496059386bcf11905bfac00f824f3000aa3ed88100b1c60d89a8","size":151,"data":"","first_seen":"2026-01-15T16:01:47.179024Z","last_seen":"2026-07-16T21:57:18.347263Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"15b3b7cca9f275e2aa7184d0cd886073","sha1":"b5c87add34cb8bf045c213515072379b7ef50326","sha256":"a4ef5251c4b3533d1ce8b3ef5833e1611db0b02df325706591ba11ccbda2a759","sha512":"68f2e99e33bb6bccbb23c44ba62c66b36e5480b576d86cacd4747b9820e2ab41b0a7dae86216a717bffb69fc65e9f40acc7910efbd8fd9ed71604ac80758a584","ssdeep":"","tlshash":"7bb0125db19622a9d34f20173429411160871d9529809224a12586e89106b144130ea5","size":90,"data":"","first_seen":"2024-04-03T00:03:25Z","last_seen":"2026-07-16T06:51:04.474865Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9d0626adf6e11778970b6fff06a162d4","sha1":"0d70c521c9a4d696259a6ceabd31a337f0f21f4a","sha256":"cd950e3f2d1a481b0c75846749e5f9be12618578ae17aab197b83d1d5fc68d7e","sha512":"5d97b189691c57cfa633065095f9c57df3a9b1adbcc7c8215037e93cb7c6e6828cbe0e57b38d3db364c719cd6faa539d79de3c3e7cad0586cf3608b92f8d5322","ssdeep":"","tlshash":"8cd02b9ffbba221742cae418949b06171069b78a0b048b93003709ea98255c10127e39","size":272,"data":"","first_seen":"2026-01-15T16:01:47.114201Z","last_seen":"2026-07-16T06:51:04.520191Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a3d3d5112c27a8c989438b60364b2115","sha1":"a6f4aa79a46ce6edb5b291e68390f2283382ca5b","sha256":"1fa51c913598ca70bcdf64deae988b262679a9c58c0fa70621e973676baa56aa","sha512":"4d335f29fc28ed21b0d80536b8e260ffa25bb79f5ef4dcf2fa087d289e864e824b1c18ff76ea403aa80e892d39757347285da66bab46ffd7538c5b5725cc3d56","ssdeep":"","tlshash":"67b0125db19623a9d74f2017347941112047199519809124612586e89105b248034eb6","size":89,"data":"","first_seen":"2026-05-27T18:49:34.443994Z","last_seen":"2026-07-16T21:57:18.454143Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1c6253e578ac22e09f2a99ae0063d192","sha1":"17710ff7219ef30c81bd45e80f1f37a243560a73","sha256":"b9f50879f005c0756b0b5a986c0e06e3ca594a4118c775fcfb967d6d10985825","sha512":"5277e9430e88cdc889116ef05198d994755f61df7b636ddfd226b022ac78fb0277bcfd2cf014474a77f3f07567ed00152a87cac6126139e351a7598c052a1aac","ssdeep":"","tlshash":"30b0125db19632ade35f201634694121214b259509809124612586e8d106b148130ee5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.491739Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7a97477e881e05d73a6a05a5a86c4b46","sha1":"04acbbbabc62965e4a44ff5b9da9a79075ba81f6","sha256":"953511a6c9f735cff06649cf4ca4044e6d8800087cbf32cf2b9a70f699aa497c","sha512":"5d5103adf5fcb31ce7e75862ef25601876e94a6e55c06315a8624ff5f8531b06009203c196f94a419bfd21225fee4eb185c1ba27452ba9c7805f6ceddf2c7dcf","ssdeep":"","tlshash":"6dd02b9ffbba221742caa418949b06171029b78a0b048b93003709ea94258c10127f39","size":272,"data":"","first_seen":"2026-01-22T14:33:55.727568Z","last_seen":"2026-07-12T19:53:38.94817Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4f455dcfa0b51df87f832fea0a161bd8","sha1":"3c4ec9f57f1b57e8f2ba2122caea336fa2e64bb5","sha256":"6a0a0a44cfafe758b5e91b1cf2955f94d83663c2c4b7cf82c662254c45f70c00","sha512":"21bd27294dd6ce6f2a0ff071e2e590230df8b1cb8ae794c9101eb28c0f60629023ec492fa3b70c1a21ef2e03d16ab809e519f66677903baf523d4cc39cb57659","ssdeep":"","tlshash":"e0c08c3db23a202f054a5449681bcb10d05bf6c00e824f2000aa3ed98101a1c51d89a9","size":151,"data":"","first_seen":"2026-03-02T18:01:59.490056Z","last_seen":"2026-07-16T06:51:04.556457Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1624d0f6d96a763030229e426be2bca7","sha1":"b4032dc2c3513a7cb9d7d964cc414131faf22d5c","sha256":"3077d1e23e3757610467d1cd37d8ab63f43cf18b1e8a67602300bad063a43da9","sha512":"c8d7998106672f07b69e8e39ac8d44ea92ae0d2aa664c66844ca0cbfb817a9e1815f265c18929bca40cfbe23f7737f8b6f5c19eeec11d522ae95411c8b3e30f6","ssdeep":"","tlshash":"f9e0122bb199003f08cb716b78894911805747f69c879b2572721dfd6057a4a8088efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.760841Z","last_seen":"2026-07-16T06:51:04.353774Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4c65d20e80c94eac2198c2dc3b152b6c","sha1":"fb723eb401b47ac328cc6f012059bd7ac3d79a36","sha256":"56dfd384863c8f9170983ecd21494dfb9325c40a7fbb891a8bc6a9f6eaf4db09","sha512":"a28b5a2e7ee8f681266a3200a3c26db1be8cb60832b5d7277682d90046fab9cc6fb7807742e14b689cf163b299c4b10b2857a3f3b0d3511b088702d96b5d3be4","ssdeep":"","tlshash":"a1b0125df59723a9d34e2016346949112007399549809124612587f89109b144170eb5","size":90,"data":"","first_seen":"2024-03-15T19:22:00Z","last_seen":"2026-07-16T21:57:18.590754Z","times_seen":471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"75960f9f59db93b93d07f2a15a37e293","sha1":"f7e3bb12e5fc19b8cf38d7a7c309e0b40ee00015","sha256":"6906219713b58bac47b91ba3f284224368030ca79737c563060a1c464f85ba32","sha512":"641513987314b3613340e7a231c243d183b11e74f43cc2330a3b35700343014309b6948894747677acf6e853211d281cbf0ccf41941794955b85745cba012a57","ssdeep":"","tlshash":"49e0122bb199003f08cb715b78494911811747f6ac479b25b3322efd6017b4a8088efb","size":358,"data":"","first_seen":"2025-11-12T01:43:51.813471Z","last_seen":"2026-07-16T21:57:18.255614Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b34f97b09e795791cd38ec944a76d4d1","sha1":"beb5ff641b4a763d0442ba50c72a2085c7892219","sha256":"357182dcea7eced94d69e75274eb15523d80569ca2f43e263d8ae415e2c79af1","sha512":"3f9f16e4968ba062021a00e03fe02a33dae9bbfad2eed921fab68b7bbd8d7d45ee6d38d05a47286ac64c332999f1210c903d7a394ea15a520e7edb446283422c","ssdeep":"","tlshash":"2c115c1aba9c0cfb44ce3d2a78c0057114fbc7b759c0ebd9bb7955f98ca2a014064ea4","size":916,"data":"","first_seen":"2026-05-27T18:49:34.747409Z","last_seen":"2026-07-16T21:57:18.368615Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-ogs/v1-latest/sdk/interactions-core.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"09caaebb93ae4155b32b3233238f288d","sha1":"4e98fea1b45f3363a571ecc208dfd32710888213","sha256":"3fbb451f6e842bbb73581fa1be9cd7c5daba01bcf981076cf8c3d566bb37a524","sha512":"ff3d2dee7afc45e6c5fdca66826c06da57285def5036afddc3d58368037aae9596adf3eaace475249caeec164df9b28c36a0ca7dc499e936ec3e740989898479","ssdeep":"768:yMMnVOgQBo/H8myCaVqJPCC1Wg1QzuLdX05LcD1Jk2Op9z+HUQf3ZFbt83:yRcgQBOH8mZPl17+yq5Ljp6UW3ZRu3","tlshash":"3113f8971e5a413e93baf06ca01d3149f81caed40549e898e76dad6a33c4d0970bdfbc","size":45188,"data":"","first_seen":"2026-07-10T12:35:59.921645Z","last_seen":"2026-07-12T21:21:00.166918Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c6d0550d61278efa461f23a08bcd43bd","sha1":"21913de7c076cbcbed26e89fc8084c6408b10721","sha256":"177f5af6d4284256f71c1c9f7756e8e59169d1836af5afad71eb699d2b62bb35","sha512":"129518018f419c83efe8c7d879467e4abde209ee5a5d7dfa3d6d1688137fbbf59ee4c25f89b1e45ae4e8822f88c9da16f89cc91d973e197d250fdf9339976720","ssdeep":"","tlshash":"94113a1a765c1cfb44ce3d1a79c0057114bbc3b35ac0fb99bb7956f98c65a024064ea4","size":921,"data":"","first_seen":"2024-08-28T03:37:43Z","last_seen":"2026-07-16T21:57:18.158228Z","times_seen":190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ae3c573f714274fae3e89f532ee97b58","sha1":"c5e55b2a23717ab410009eab8aeccf6361d950c8","sha256":"fc37260960cf023f268c77ffa1438ccc79ebb1d31c3adf22a3a3d2b5984c84ba","sha512":"563fd5b5b88ff0fd8e7c5a5ff0746733347d307192e619abc9f427989a44c8ddb925b07e6dd113558b4972a2039bfda1e0fcac243c785321a08e67fdd51ae4a6","ssdeep":"","tlshash":"20d02b9ffbba621742ca6418949b06171029b78a0b048b9340370aead4255c10223e39","size":272,"data":"","first_seen":"2026-01-12T15:19:10.744244Z","last_seen":"2026-07-16T21:57:18.453324Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e8516b2874738577acc303da62405b83","sha1":"c4d5d1fa78858c9b94ea65b10f9e1083b58c18a0","sha256":"077b6c171f75c575a76af72541855a09502b36f38c7fd5458c1b6602019abd4e","sha512":"0fe4ddaa1c68bfe273cf00220fc533d81be422a2d8bd36ff881df242b715c08353fd18efd903ebbd1225813e0ca01e3738dfd19e468c46cabfc258ead28e5c68","ssdeep":"","tlshash":"3ab0129db39632a9d74f201a34294215200729a509809124612586ec9105b144030ea5","size":90,"data":"","first_seen":"2024-04-24T13:17:49Z","last_seen":"2026-07-16T21:57:18.268635Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a4abbe934f6c23ff4f19502934815c52","sha1":"d0afc4f4e5bae0246e7ac7f19533f2c0dc46cdf4","sha256":"286a45815502d4946f368ce3c4c1c9557f5a0507764fb4c94c61b8ba7a628e2b","sha512":"e7555f1646155f2a9e9252fad8669b5bfc41e1e54552c453ce2c377d84f747b894701a712199f371472031edeeee9e4b3c7d2633b0a67c814585670c54d4e29d","ssdeep":"","tlshash":"a3d02b9ff7ba221742ca6418d49b06171029b78a0b088b93003709ea94268c10233e39","size":272,"data":"","first_seen":"2026-04-10T18:43:40.215539Z","last_seen":"2026-07-16T06:51:04.483001Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a289727aaaee80aa449844e51cb3e6f2","sha1":"b1863c9a99a5b08d0cd8faee6e1961da53bb585a","sha256":"0a2ff39260f4ac8c37b198e76eea2b9fdea2650172bb140be5f67908cfe93c2c","sha512":"5010daf5245ba97923863531fbf60314474ef27b50a091f2ebdf5025b2f412dda9980e9ad25ee214ab15ec3f153c3df108ccb3aef8ff9956b0fa9669252b089e","ssdeep":"","tlshash":"12c0c22af38e103f05cbb43bb8555a1a421317e74ec5a219133109ed901b6828104ae9","size":190,"data":"","first_seen":"2026-05-27T00:11:11.665926Z","last_seen":"2026-07-16T06:51:04.462146Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"14011a931d1ad252aef6e8b71ad354d5","sha1":"df45ea9ad0ce75fd357ede530d8ec33060e422c8","sha256":"9be01b6033598557860d3f4645ca1a9d3e0f7bad6699fe4b981b4054a8af73ea","sha512":"fd39f909fbc81a8b31245c90827c10c56aabb04fb1b05a056f72c74b9e89405df11686bd4d72ef96669b9b62f3f57c394d6d0c94a7ba6fb1777c9d26179e5d42","ssdeep":"","tlshash":"b8e0922bf19d003f08cb681fb8559920811b46f79c479b21b3321dfd6012a4a8288afa","size":358,"data":"","first_seen":"2026-05-27T00:11:11.660833Z","last_seen":"2026-07-16T06:51:04.239712Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8cd3311926663af7204f5075e4082e73","sha1":"114452f93d78642b0d133d6019f73371ce5421b8","sha256":"24939a48df071351de1b375e46be8670a815c4266d929851d6f07665a2360120","sha512":"dccf71d7888f366d8606c5f1723a0227cb4dd50ad322bb1acdb9eb4f6949a3471d303612c8c448c4f9c7338c0b5fab4bdba985421445316a93e2fce5308640f9","ssdeep":"","tlshash":"44b02228f2af30202b8230ba202a8002b002a02008c0e202222e00c8282e3888022aa2","size":111,"data":"","first_seen":"2026-06-08T09:34:55.434148Z","last_seen":"2026-07-16T21:57:18.460029Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/templates.ecefdc8932e79bab8e8a.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4364a6ebf5a66c56b717244b97e0dfb","sha1":"c448162eb695356780463adb159ece61af89dd52","sha256":"49a011be8bed7991b1fb6197f87bedf0e1dc86eb34f5b62ea4462b3c21116b5b","sha512":"16589a0092992dd02144508b4fbbae818b9c84e6ed8aeba926c70c784ad352cfb0ebd18370223b7fc4f2b3704c32495304fea026f3b234d2d4bb74c931cb1c5f","ssdeep":"3072:vGwYx6TR2iYYTbYi7rUa7WmSrnmecEPf7luiTUs:eY0ijTn9fSrnmecEPf7luiTUs","tlshash":"65054464ca6874b0b7f6b2ccd91751163a78bb15e410caa8fa4c85ed0bdcc5335a7b2c","size":809523,"data":"","first_seen":"2026-07-10T12:35:59.995692Z","last_seen":"2026-07-12T21:21:00.182429Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94a60820ba313f9cca7f64b9113be7fa","sha1":"60b06878aefd028374a57bcd7becbb8d95818fc6","sha256":"57dc5f8a5b78ab244b01fa49ae0471bc2b2dfca7dbd3233b6f5d920aa99dc556","sha512":"0c64a99938172f1fdeab1931ad5a83b3093edf10d1903aecc11e6dfe398a3a160f0f616c5eb2014cc99cb1a5d3c0a86dc9b675fcbd86c1323e8504789ae3274f","ssdeep":"","tlshash":"64d02b9ff7ba221742ca6518949b06171029b78a0b048b93003709ea94264c10137e79","size":272,"data":"","first_seen":"2026-03-04T18:14:24.848834Z","last_seen":"2026-07-16T21:57:18.363253Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"410df471676d4049584636455e9c440e","sha1":"7f6034ccccf67c458926629c98257159a1d11948","sha256":"28e9598f2cdf5af816339ddcedf326c8183fac443b7f66be765a2237e36e589c","sha512":"cb10bbd2b7334cd2ba5a86e74be9232fd832c9007136e7374848e3ebee56d46bd05f67565f2b49e5005e45aed7b473066c55fa60c9e0f7fa78555f9f1718ad1b","ssdeep":"","tlshash":"8bd02b9ff7ba221742ca6418949b07171029f78a0b088b93403709ea94254c10127e79","size":272,"data":"","first_seen":"2026-06-08T16:37:15.979511Z","last_seen":"2026-07-12T19:53:38.957081Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"87c371db93fe16afabb9134ad8723b42","sha1":"9702563f8edd38b9de17d0ae1c9349ca1d920e0f","sha256":"84f120e256a754deab9d4b633b3cef5bdae09c23692d35c90ce706764a065d2c","sha512":"11adf7bae4dab38d68adcdc1739eb0d52f4744fc3330baf027f617fb7dbd4cc3ec7b268779120647aa5a6eac4a7a37cdee5879e1cdd59a073c362415338011e6","ssdeep":"","tlshash":"8fc08c3eb23a242f0549504a282bcb10906bf6c01e824f2000ea3ed88200b1c50d89a9","size":151,"data":"","first_seen":"2026-06-01T11:22:02.971309Z","last_seen":"2026-07-16T06:51:04.305455Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0eb380b7037b8b84314bfc71c5503eb7","sha1":"d3334a0d98834044841b9ff9a787eece8ecbd710","sha256":"4728a5cd8bc3e1513978735366539cd66cbe5eb41f1e799ab69391cd32c71d87","sha512":"52f4498b5c59f905d4d4d3293d21d7a8f0ec2183ab961353465244bc53ebc53661c19e5ab06083ec5d7c78f0c47ea09a2e961f1e6c4acde0d054dee83f750095","ssdeep":"","tlshash":"4cb0125db1a622add35e2027342945116087259909809124a22586f8d105f148030eb5","size":90,"data":"","first_seen":"2024-06-03T13:34:31Z","last_seen":"2026-07-16T21:57:18.305894Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dce7ba84a23892661deef4cd63788bba","sha1":"d71727dddb7c49a12c0e6ab6fdf481c3bf54650f","sha256":"d90ddfdab0c3485f1e494f3ee7fe13c9495a143ddf7d9897be8735efdfe08452","sha512":"099beac5f183296bfa916dbf31d8eb34d947bca1db344b4cca659151f674c13aeea9ad129a7e07151a6209c33be5affd213b03be206011f14087fdd07af422b9","ssdeep":"","tlshash":"84e0122bfa9d013f28cb615b78454d11811b5bf7ec479b2573321dbd6017a4a8188efa","size":358,"data":"","first_seen":"2025-12-22T06:43:29.898245Z","last_seen":"2026-07-16T21:57:18.592497Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"29f6c03ecfb066b5c6d376f5a50ffd7c","sha1":"2b538657fb4a699bf8f2183ec7c92fc0811ceb1c","sha256":"edfb6e5bca88c6b64a3d06591117b76e1ddbcad3c288a548da5448e4b2f2277b","sha512":"346300a863277ca61c36a54b49dbdddaebdd8ab97306d2f40ca6df43bf6167bd8adeaafd0859d57026c93e557f8f9180438e07e148678be4b508dc92bdf556fd","ssdeep":"","tlshash":"b2e0ed2bba99013f088b616b68c94d1180178af6dc479b2562321dbd6016b4e9088aea","size":358,"data":"","first_seen":"2026-01-26T17:55:22.91696Z","last_seen":"2026-07-16T21:57:18.580589Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0a9fdd34710c03d67f474a5dd9267267","sha1":"971113cbb042e51b95eebaa7a8800c9f4bfeba2f","sha256":"465979bf7a8d190ccfe183f2d866f428259ca2fcfabf1dd981cbcf3c3073666d","sha512":"448a06a11a8ea6bdaac6f8ed00ad2dcc2d2024d78b6c3fa3b90a3f52b251cc8502b46a6e1aa98d9a0fd918d3e2871643ed94c277103aaad4069286b1f2d2c635","ssdeep":"","tlshash":"20a01219f38531250247601a102641252003016108018600522645d8505d3494024da5","size":81,"data":"","first_seen":"2024-05-10T15:54:48Z","last_seen":"2026-07-12T19:53:38.960699Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ed6f7c514c86916d5762b88e7b4f3acc","sha1":"bdd24c279918a8142bf29e497503f13af8381735","sha256":"02e1d08b1820eced5550cfc1ed92d35f9ac003563a701b8890c28e3584c24827","sha512":"f32544138f8d4182e6686bc47e62868629bbe41c74c669eccc920b4dfeda39e7c8ce1b76e64cd501ca86a29572522b142e7621976efbff90690d9084dab7fcee","ssdeep":"","tlshash":"a9c08c3db23a242f06495049282bcb10905bfac00e824f2000aa7ed88100a1c50e89a9","size":151,"data":"","first_seen":"2026-06-08T09:34:55.815194Z","last_seen":"2026-07-16T06:51:04.592956Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"506fd90c3644d20b186b6f4e87d75cd8","sha1":"4f70dcb0e359dadc5ba6e2258808175993cf95da","sha256":"9a3692bfb60d8d1ec45272ffd3308cae4970b78e4dce7a494f3c89450b4d74b0","sha512":"1bc563d720f5bc7eeb3155ace8c09697cd2818deb972f589876d7d7450330a68c7499991323607064dd316b3b38d6ce6a1e6b215158e49f7e8ccee10e2cd4e9f","ssdeep":"","tlshash":"79b0125db29632e9e74f20163c6942152047159509809124a12586ec9109b144030ea5","size":90,"data":"","first_seen":"2024-05-03T20:33:13Z","last_seen":"2026-07-16T06:51:04.28869Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c0af55562b0f57c2c80e8fa2f401aff4","sha1":"667345f676deaf37ae943b87d07b2129761aa88b","sha256":"59b857c4ab93da0213337556962e224e48c787c9e02b39dda10c6100046a92c7","sha512":"fdc019e33b8bfbe0c151f602a00aabd005bf0ef83b47ae33e728edcff14e8004ac7ea6b914c31ae8a327d4a6aff28344a67092593e728fa80575b7264598d819","ssdeep":"","tlshash":"eac08c7eb23a202f054950492c5bcb10909bf6c00f828f3000aa7ed88204a1c50e89a8","size":151,"data":"","first_seen":"2026-02-11T18:13:10.422333Z","last_seen":"2026-07-16T06:51:04.608512Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1dfa8c42664da41c8c4203cdf63ae60e","sha1":"42570d06bb18fe31f55200203ae1c339e6dea5d4","sha256":"214507dc97b915cf5ef09c6bb97c32502399c98121dc74860a7aad666886b7cd","sha512":"3ce0dbc38a5ec85d392efa9a85e655640260ca6ab4121b53fcbf3c1e7d923152943117806b742d2d2165a3423948cfb19ab59e4c06c03e7f62713163bfd153ae","ssdeep":"","tlshash":"d1b0125db29623a9d34e20163ca94115200715950a8096246125c6e89109b584030fe5","size":90,"data":"","first_seen":"2024-03-28T12:54:34Z","last_seen":"2026-07-16T06:51:04.491783Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"99b847bdfa1b06f6858379a63998357a","sha1":"8be94fee7832548b308f668d1ffb807965dcc15f","sha256":"ac2bd56d335d5bedc0d93d28b69d19fa9487f534c31956d574da1cc6494665b4","sha512":"d56e8b10faab580e693f650b4742f67dc10cec5ac585ad01c26312a8da650f225b2d5af2a09ec7a5b72bdec369ef00f003e801dfa16ba669a9507b8a3895e599","ssdeep":"","tlshash":"82e0ed2bb79d043f088f715b6c894a1180175af69c479b25623219bd501aa4a808caea","size":353,"data":"","first_seen":"2026-05-27T18:49:34.572459Z","last_seen":"2026-07-16T21:57:18.503968Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b47235393098c57f2f77d3b77b8ae836","sha1":"d718c86ab75f84e53cf0a7d208bc5a85f6bd2e35","sha256":"95d87bcd49dc39c8cee4734204dff468fed1f55fbe8c85162a0959fc71748ea2","sha512":"49a9a3e5008fc18b7b9d2832baac7061175101b4c0f193fc042e728fdc0232b27c5c0ccae8afc2742718f9b660eed88349da4993aa1fdde57980cd3a39a01816","ssdeep":"","tlshash":"98113a6a775c0cfb44cf391679c0057124bbc3b359c0eb99bb3955f98c61a015064ea4","size":921,"data":"","first_seen":"2026-05-27T20:46:36.800873Z","last_seen":"2026-07-16T21:57:18.209248Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c240b2a00170e0d3915b8defeaf3c46c","sha1":"06393a9225f460d89c6430e2f05b2ee5b3f2aae2","sha256":"548d317b44c119a230a6d3e59c8ad10593d1cbd698203538f148937b4afe289d","sha512":"6b77bd88e296e599fec95dc856b869b4ea0f074b42354ffc4a168ea793ab8617964726d9d4fb1b2cc02769942510de7afec1f463643f045e6bc64ca6d2fbbbe7","ssdeep":"","tlshash":"49d02b9ffbba221742da641894db06171039bb8a4b048b93003709ead4255c10123e39","size":272,"data":"","first_seen":"2026-03-28T14:02:24.156484Z","last_seen":"2026-07-16T21:57:18.56974Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3a9cf8fd5fa4f87898a62e532f8d9d5b","sha1":"ed5a70397d1e51318715ca3ba225c8af82c221bc","sha256":"f8b87b291b841efd3a4aa98d4facfbcff261cd8df03b073e5af8713febd6ce92","sha512":"0c173ac41802e183658ffc75629561bce6eae898fe5ddc72dcd5ac9766db36d003c0d6a05284fb1ae356701f6f375f37362c852ddbe2d72780a511e2c828347d","ssdeep":"","tlshash":"c3b0125df69623add34e20273469451120072995498091246129c6e89106b184030ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:30Z","last_seen":"2026-07-16T21:57:18.381943Z","times_seen":857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2ed41a1213943d73bf0a924beaab00a7","sha1":"f7c43aa5ae679dd9592029f7405038bfeff85919","sha256":"d5a35be5e472fe66e900f5228b8f54fdc8bcac967c4e8926538010c0e7954b52","sha512":"129efdab2a28085fd6e440f7038e54e38f259b460f258d75ef1edc8e44c69884f1ce01a9e29142d4417eea0cfc9e18e3cb5b86dadbd514da1deb74e958072777","ssdeep":"","tlshash":"b8b0125db39626a9d34e2027342941112047159509809524a125c6e89105b184030ea6","size":90,"data":"","first_seen":"2024-03-15T19:21:56Z","last_seen":"2026-07-12T19:53:38.966254Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"09a9f11f31ac42d34a20974f51b0131f","sha1":"fba91c1786090887f5da0b8411f426f81e5f716b","sha256":"5551a4bc93fc306ef0c618ce88d7cbb4544903eddbedc97b6e24f8824fa22bb7","sha512":"1dbbfe7047f92a4bad0c3336d3ea17a0cdb8af911ad9fe422fa47c9ed2d4b65be8a320b97dda128d7a3e38e03235a38fa8c0c0da45ab09676a0a2cf76f11e3f1","ssdeep":"","tlshash":"9fe0688cf0d7583401d7705734b88512302f68234068d168b2ab86a88ca194d817b968","size":358,"data":"","first_seen":"2025-06-06T07:37:14.842613Z","last_seen":"2026-07-12T19:53:38.966855Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5177308f998f1c359ac9e3676be414af","sha1":"d8d1613ef9380ca9513cf379f85f9e67ff5eec13","sha256":"3a0587ac3d2b6f668e3b131ccea20f417a9b63d34edc9ccea84a8a2d854f27d7","sha512":"d4aacecfca65424dd2e1ba1c2f49f9b8b8dea7d09089fca55d19be50fff339f855b3fb523adbe53b7eeb7b896c93b7c2d229a3ed4bfac480bae530b0678d4c80","ssdeep":"","tlshash":"cfc0c25af38c503a44cfb12f3c91492a410707d78e86b22613310ded501f682c004ae9","size":190,"data":"","first_seen":"2026-05-27T18:49:35.086701Z","last_seen":"2026-07-16T06:51:04.460382Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d4d3610bf5e94f628708bab2596dac3","sha1":"0caad1588e4c10e3eed53fad5a3a9b04f5cc1220","sha256":"52133bb7df94afcb49f2978687a3301e515965169fe3315692c69c0eac005910","sha512":"5fc03bbdbd81c2e312fa29c31c33457c0be853fe5c3df77ee3e8aba8061c02c710ae860737c5f882c2d8600e77bf07d89612bdceeb5867e2a06a5e85142e7e18","ssdeep":"","tlshash":"e1c0c21ef388103b048fb02b3855851a511307e74e89a21593310aec501b6429008afa","size":190,"data":"","first_seen":"2026-05-27T20:46:36.82557Z","last_seen":"2026-07-16T21:57:18.510033Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fd4b27e79e58e60689482de8a443eafe","sha1":"6ef5efedd6f481033157400fba13d018ceb030a1","sha256":"00c35e7015f5c9b31e4fe014c8279ad9b3bca23343528b787bd8e81a7de89230","sha512":"d06824fbeae307e2f262ed4acc2eb7ae4504c319d32f6f00e19d459db23f36daa57398aa49b467b6cc3c3b978db122b6128ae1424d851b1ceb5da6bb6535584b","ssdeep":"","tlshash":"4cc08c3db23a202f05495059282bcf10909bfac00f824f3000aa7ed88140a1c90d8da8","size":151,"data":"","first_seen":"2026-06-08T09:34:55.712621Z","last_seen":"2026-07-16T06:51:04.486617Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0db4bbad71c0c31e6d5fa23d1520c39b","sha1":"705e9f05440059eb6a038490afd5d18d3b1f360e","sha256":"099f5ad2ed3af3a9acf955c115aee30995ce2400dc63bea83dc01882afd63aac","sha512":"c79134d9b3b966b50047a3ed29298031a8d74a1624cdaa51b61139709a9981e96712466033bd5965b0f2b1059abbbfb7770cc1adb627088d4daad81600eb9e31","ssdeep":"","tlshash":"c1c08c3db27a202f05495049282bcf20d05bfac00e824f2450aa3ed88100a1c51d8da8","size":151,"data":"","first_seen":"2026-01-12T15:19:10.647404Z","last_seen":"2026-07-16T21:57:18.608742Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94fe620088fb674320b1cadb591e09d7","sha1":"543190bffbfd8fa4521ff4ca15820529d32aa044","sha256":"27a5d98c1661a146fb690071f8c2bf04cba307310e35717eff78a9e40e124b31","sha512":"777ad487452edaac158a11eec6fcce01abf342e1f0c8a90ea6b92ba157a260740e41034151bf12a3879775bda46f516cd0e01b293ff927cd196425065a7e8a57","ssdeep":"","tlshash":"8dc0c26af388103b05cfb02b3c95452a414307e75d85e329537219ec901fa428004ae9","size":190,"data":"","first_seen":"2026-05-27T00:11:11.709446Z","last_seen":"2026-07-16T06:51:04.508714Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"746f80fa61fd1788d0be4df54dc20851","sha1":"59a8f1e7a1982bcdb40f70e00d08a665e0afaaba","sha256":"2529c4f0571890c018e05036540cdf37263ea3cf76cfe3f5fca3c6e3444bd585","sha512":"b23bd87f596f7e98e85608ddcc54115fc2f4e5a288db362ac6ee9980be15a82b5198f1ba706c015721c902951f246d856eade3abb4da7279ef7a53c621eda88f","ssdeep":"","tlshash":"bba0241df3c531350347701f10374135300301734c41d300533744dc444f7454014d75","size":81,"data":"","first_seen":"2026-06-08T09:34:55.238116Z","last_seen":"2026-07-16T21:57:18.558957Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/bottom.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8db122cea9be6f9e55ee75e9db2dc4e2","sha1":"0864984f0a123e31f1bfbc52fd84b5052bf74905","sha256":"afc0886603db1ed4ad2cc6b5bdc3c4ae7e7ce680461773331f7dfc4211e6ecc8","sha512":"f292da69d9736567fbda96bb141adf6f50e7a545eff96adf58005f7b8d2b726166c56b68518ba4b37e5797ff56803bc631546c662b82d7ae2e262f6d2fbb6ad6","ssdeep":"384:DirtSUV2zQ5tM5k3ZLbQ3euj/DEksBcfgch0A:O50u4klEEdBcYM0A","tlshash":"8562f5d1aa63e97403e9a8d9d81d4145f606ac79479db860ff8dfe88700ad0930e2ff5","size":15693,"data":"","first_seen":"2026-07-10T12:36:00.043031Z","last_seen":"2026-07-12T21:21:00.128501Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-ogs/v1-stable/sdk/interactions-core.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2526a49f34b0d243909904b998c23915","sha1":"3ff5ec59125544082c9664ac20f801a0a52793b9","sha256":"ff5619c79f44d01990f71a2373c49df0b90ccc924673ed5f7fcc31693eebb164","sha512":"d61ef9bc69e1ec6afafb7df23b0851a630a9730bf0cd16580d7de02b326b9a102c85b9f40a075b5aec2849cd6b097dfbf339c25b9fb5915406b8fe44f0790cd1","ssdeep":"768:RHHkfN4VBn09Ybe9JDSwWJsqPcLiXqdLg1QzuLdX05LckI/+k2Op9z+HUB8OuZAi:Rnkl4VB4YbenSdJsqPcLiXqds+yq5Lkg","tlshash":"bc13e6971f6a413e93baf06cb01d3149b81cae885549d888e36c6d2a33c4d0971bdfbd","size":42849,"data":"","first_seen":"2026-07-10T12:36:00.000382Z","last_seen":"2026-07-12T21:21:00.138376Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e0da73840adfe1d6cfd80bbb0537deb1","sha1":"c8c1a9ea82f69a66d48c89e0f74e5119624e0fe9","sha256":"6a90d91e31e4f39fd0c6fa7d0b7636c5726fb1a6198290e979af5da6e0d5bdf4","sha512":"5efc56118f3cdac0620e015ecb3b48de0da1cc3eb4f96f1deab7c93381c6dacf04f392838b77f524cd4d689fb1f97aba6ccf0959df6a6680b6fff10c18490ad0","ssdeep":"","tlshash":"42b0125df5962aa9d74e2017343941216047159509809524a12586e89505b144034eb6","size":90,"data":"","first_seen":"2023-11-28T22:30:30Z","last_seen":"2026-07-16T06:51:04.166424Z","times_seen":381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"787c6f43aa58bda663e2300e85b77fbb","sha1":"dd2ef299a698ebec67e8fd2dfd1d7060cc60f311","sha256":"28da390a201005a543efdaa4b20d7909cfe68e6ff05c235a251ca75e5106868e","sha512":"6f831843caea5bf6ad4794b62bdbec50e5660546de7ee097576e44e1e795518e8d15ad81aa5372f0a77e2a7fe7d3e47942c9ed3a20028dcd86c627c53cc476eb","ssdeep":"","tlshash":"20b0125df69622add34e20163c6d4515200b39954980d125612586ec950ab144030ea5","size":90,"data":"","first_seen":"2024-06-04T22:58:58Z","last_seen":"2026-07-16T06:51:04.488627Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83bb4052e3e73006cbf13730f09a6415","sha1":"d1e7801e700a807c7f39f6c992da78281457ce62","sha256":"63ee192812af00daef7c016307fea392953385305afa16cc81069ee3d1e975c1","sha512":"0743164f7f2a394f1afe7ebf234e47319173ec5f8842d92d75422b7654630b177b04df497315abc59772230c2a83cabff831bd51f582d24301d896a716ad1100","ssdeep":"","tlshash":"43b0125db19626aad34e2016342a4111600715950a80d125612986e89505b144130ea5","size":90,"data":"","first_seen":"2024-03-15T19:21:59Z","last_seen":"2026-07-16T06:51:04.44632Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3082146deb5e761a71156b358e0cfa53","sha1":"dc2f2da9f4efab524061dfe7c583fe16d87df66f","sha256":"667fcb67962eb108b713c129b0cd37e20c3c4f987cb5a71be3ae121048b5b198","sha512":"122ab7602b8354f65448b18697a18fc9a7d3723f263410b500597d00e20665fd5c0089b9d8f76b66076e2091145a8f764a0a1319873cd2f30b149bae0d441c28","ssdeep":"","tlshash":"b5b0126db19623ade34e2016346a4111200715950a809124612986e89106b144030ee9","size":90,"data":"","first_seen":"2024-03-01T11:49:08Z","last_seen":"2026-07-16T21:57:18.436281Z","times_seen":162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"df09c054d27d290af4b6c6e7a803766b","sha1":"a97079d60a76f3d606c26a22b6ca5df781510598","sha256":"839be762fe58a5883d4d7711d5dc0bb20b10c9a9f4896382a8ff18d89b78cf4d","sha512":"8beed1e6dea102da0f6b73d30bc738e2c0ac5cf9e8fae1f249bca524b36324aa15a875e7fe37608ed1f1ce1ac2bba827c903d094208283acf7cba74e93dc6633","ssdeep":"","tlshash":"6cd02b9ff7ba221742caa41898db061b1029b78a0b048ba3003709ea942a4c10137e39","size":272,"data":"","first_seen":"2026-06-02T02:17:14.001676Z","last_seen":"2026-07-16T06:51:04.323639Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50c7f0e9c605224f265044f681452c22","sha1":"1fa3ec370f66864272dc4e3de48b20ebeca9090c","sha256":"3f243650099bf52f1a57ab6eba8cca053ccb73b69db69151b4a2d35daad28d2f","sha512":"f7804ad89f60ebd05bc53e77f662445118e68c27c9927cf279feccc5b80b815642fa2a77b7b4ac01a755c65e8e9208f83594431344f4536be7a603d8a6698d0a","ssdeep":"","tlshash":"afb0125db19623aed35e2026342a45113057159509849124612596e8a105b544030ea5","size":90,"data":"","first_seen":"2023-11-30T16:50:01Z","last_seen":"2026-07-16T06:51:04.29751Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"688b5c1addfa25794ad4381065015035","sha1":"0a88c0d7ff2cd15332eb2eeeeec7bd8e6d4c9c43","sha256":"66335ea573c794cac51a3256ee4782fe0d72795521a76171f8e48eb4872075f0","sha512":"59c51c67510f6fbc6d9803a3f4ca61e0b5523e2fe47d58d07b20371ca64f9f6afae4d8431cf5ef6dca984ce0786fc257b99a3b9765acba26cd5ac84f10f4b818","ssdeep":"","tlshash":"a8b02228f2af30302ac220ba202a8002b002aa228880c222222e00c8202c2880022a22","size":110,"data":"","first_seen":"2026-05-27T18:49:34.839902Z","last_seen":"2026-07-16T21:57:18.443422Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7d0da11e1c8b2a28c4c841052642c3bf","sha1":"e4f5f2cb19022d5fd56b840b5ee0b68661aa234b","sha256":"2ba388a5303373200c6d22b33ab69f924697318fcee1a217fbe926f27c6cfd4b","sha512":"b350334b89bd5816190e6e38b148c9fbddec38b9e0280ecaf38d42b1076508a2c15818116b2c00cf9e0e5ef1913f1b61ad1cc01a336c4d95ce8d3a610e7016e2","ssdeep":"","tlshash":"d3b0125eb29622aed35e20163c6941156007159909c4d524612586e8d109b144130ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T06:51:04.461046Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"06ab413ca6c0d3f739ad558a8eeca90b","sha1":"57ae7c056510a08fd7b82776b466f7401031a817","sha256":"c86d8e7003653229204a7189985cc2563fd76ac0b386da1011956f2e4ec4461b","sha512":"d5f10faf4d77ec97f8b98a1750447b02c4bc748abe5812ec45e80755251274ed6f3c19fadbeed50fc91b8aa91535b09a0c02cf118eefbe13ca1cdf99e9316b5e","ssdeep":"","tlshash":"04e0122bb399003f08cf715b7cc58911801b57f79c4bdb25b2322dfd641aa4a8488efa","size":358,"data":"","first_seen":"2025-12-22T12:12:58.028449Z","last_seen":"2026-07-16T06:51:04.330743Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"51c0cbaabb9dc67cc0ae732b6973b5ff","sha1":"972d70e2dc677e83903eb345341ef7f3ff9bee48","sha256":"6a771f7a80b495a9380bc1db94c731206a6c90fa2125a3c773b7ab15e9943932","sha512":"aba7b4a88da88206636b773c017d421465a7e896d0c5d1a90667ecbbef9921123ad5280896b16e6e5bd5975fc04452134c98e69e0e3ccd4ec6fdff066b71b7e3","ssdeep":"","tlshash":"59c08c3db23e202f054a644d781bcb20905bf6c00f824f3410aa3ed88200a5c51d89a8","size":151,"data":"","first_seen":"2026-05-21T21:16:45.768399Z","last_seen":"2026-07-16T06:51:04.497956Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a9a97359bf46066e05d438476843a46e","sha1":"1ca7ca0bee967845d53d406437a7b01e1a04169d","sha256":"65a0b49fc20bad89320523b403352a0aab36b8872274e8d12c6e1451c71fef5b","sha512":"0bc848fbe9df60518623bc34d601f756914bf1b4bdddc41e112aa0401a11137423aa5755b4f61ae6f0b102aa2cecadd02eb4fc97b3f5d46158d8c72aecc6bed4","ssdeep":"","tlshash":"4ae01b2bb299103f08cb715b78854911801747f75c4bb72573321dbd98166558044afa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.117328Z","last_seen":"2026-07-16T21:57:18.322163Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1dcc224095e5331dcadd60462e8dde13","sha1":"931e6f21ddde2cff6b7e32abd7c0cbc5870f774c","sha256":"17c10cec0bde020e2ec39e650c5c25f924c9df2a43783ac4a1103f25a3f3711f","sha512":"4dd170a2d708b9d402d78e0013a81d7cdfd5a7c9b19d4cff87339af9cce2b14689651761fb97dfa6a5c9a608bee1977d6af1354e962a493c45f93497eee4374b","ssdeep":"","tlshash":"d7a0241df3cd31350347701f11374115300301714c05c300533f44dc400d345401cd75","size":81,"data":"","first_seen":"2026-05-27T20:46:36.802705Z","last_seen":"2026-07-16T21:57:18.498204Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"516f85d03b33ebc5a3f37765d398100a","sha1":"9c85f9188cc9f6b4c239fe04c1c5c04ba04cfce3","sha256":"054b4379291f1c5a65c0111abbea051e58bae7592914ca3fb33017ceb0d9db87","sha512":"c20d4e861dd1a6bdd1bcdda3f3008922f76961e15256761da0d873e529cb1af6996a3c586f50b437fa328904a5db26a171e348d8d28f820761be5395901eb1cc","ssdeep":"","tlshash":"83a01219f38535650247601a20364526201305a248019200522644e880192454018d76","size":81,"data":"","first_seen":"2025-12-22T12:12:58.096851Z","last_seen":"2026-07-12T19:53:38.978955Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ed812c0c55760a2fff6c5b4a5bb41f46","sha1":"0b89a16c85cf2fd68d063112b288b0d09cb029ea","sha256":"43766a922ee99bcc3f4584b4a422b55bfd166aeabd58db91ddf3ef4cb50ac774","sha512":"125bce4f0da0f6eafee6c95f56e0764857a432f35794ff4615f0dba3f3a72f55cbf01acfab1cf19261f240341ecbf71ecb559d10d5a545d748a159a3e1370a03","ssdeep":"","tlshash":"5db0125db19627ade34e201634394121300715a50d809125612586e8a105b145034eb6","size":90,"data":"","first_seen":"2023-11-28T22:30:33Z","last_seen":"2026-07-16T06:51:04.436919Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b6c34f25c9b61c1f7cf8bd6c6b955e10","sha1":"7b6028e314caf759a05b059f7a4cb9969699ddc7","sha256":"86f9c9ad925ec10bcf6f7c905bbdc17d5adc086a9be89bbe11d17eab00a58953","sha512":"9a1b3e4dd6d7eb98be20ab38075832cb68dd4a47f8f46175860dadd4cf4ace1763200b02943e413e91a33264e7897c18b3fcfd31451f890253eebd648d542663","ssdeep":"","tlshash":"50113a5aba9d0cfb44cf3d1678c00d7114bbc3b359c0eb99bb3996fa8c61a014164ea4","size":921,"data":"","first_seen":"2024-07-03T04:01:18Z","last_seen":"2026-07-16T06:51:04.376222Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2cbe8fd6ffab32f01f2d7d8dcdf0671f","sha1":"bd8d65ca4263208448a895a05b7d6495c25324da","sha256":"0f8fcae5e9d0215080c5cd99b957d8f91a1d77430dbf168ebbfc05be88b9c3fb","sha512":"a72cc6e52036d14a98e8ad044e4c09b074957db85598579f3201ee09bdae2bf4833170a3d1be5bb03711a440c6a3ea7b8d8ade6507b812e4fe225c1e768e8cee","ssdeep":"","tlshash":"fab0126db19622add35e201634294111214715950e809124612986e8d106b144130ee5","size":90,"data":"","first_seen":"2024-03-28T12:54:32Z","last_seen":"2026-07-16T21:57:18.595978Z","times_seen":863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cd0f6ba0b58c3ba8581fd1a0c1f1693c","sha1":"ec3cb18cad5f3b1aebf340379a3bce50c9ff0adf","sha256":"6e34add56a935ed3ddda57f89a7efeb5c9edf71cd9b4c871e44639450a5f830e","sha512":"44e8474b2c9bf832aefef1c543123ce2aa9eb2a9a8a908a54b7295cb4d142f60bfc4e558f825846412c204b3366ddfddd365f7b120cff1121ac2629cbb4cef9a","ssdeep":"","tlshash":"73110a6a779c0cfb44cf39167cd0057124bbc3b359c0eb99bb7955b98c66a014064ea4","size":921,"data":"","first_seen":"2025-04-23T13:00:46.471772Z","last_seen":"2026-07-16T06:51:04.473045Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"67c2222f79229e8fc03c38c2353f06b4","sha1":"ea46b0ac5930dca09508bdb9cff9f8d5cf5aae10","sha256":"7aaa032ef76e8635f8c5ec9e606205b5e7bf360a8e29b57c30056cfa8f71774f","sha512":"ca37aace8fd1e58b925f5897243647c04ad2797bb7f1a2cf18686e6fa731ea758b8c899a2f98e314ba6f5372d6c68e1fd4deb5013a3e9a0004a71c70cdb5559e","ssdeep":"","tlshash":"68b0125df59622aed34e201634294511200729954980d125612586e89505b148130ea5","size":90,"data":"","first_seen":"2024-03-28T12:54:30Z","last_seen":"2026-07-16T06:51:04.550067Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c9d0fb25fa5efb6d398d9a8c6dbe43e6","sha1":"5afe41acaf8d0a21d7f5f20cb1e3f01a796e4fee","sha256":"54b747de8ec7523935f3f44b946db1b83aa7565743a08918f98e5ab2713247cf","sha512":"af45191a6645695bba10d703f7bc558b94ea3c4e76942d6399de49c368bbac32adea413a1116d067308760be147ae8a15e3b4ffd7003dfb454abf5875bf61a5e","ssdeep":"","tlshash":"3be0922bf59d003f48cb605b78498910811742f6bc4b9b2173321dfd9413a4ac0c8afa","size":358,"data":"","first_seen":"2025-12-29T18:56:15.929311Z","last_seen":"2026-07-16T21:57:18.542513Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e4a5c8674ca48c59595b277799706eb4","sha1":"baee600f5e7274563c57760723a14cd7bc31e887","sha256":"2f7ee2a420fbd41051c9e1e79e6b5c60dae736756094afc5b0708aed7f4487d9","sha512":"379213f3f93cf5f41e994febd2c25ab18f781b4030d9b2fc6b343bde86d27bcc1a1aa6c86430a0f94118b357ae8afb4990388e0bee68ab9d8a24280fd80d3fcc","ssdeep":"","tlshash":"71c08c3db23a202f458a504e281bcb12905bf6c41e824f2001aa3ed88101a5c50e89a8","size":151,"data":"","first_seen":"2026-05-28T10:31:18.741822Z","last_seen":"2026-07-16T21:57:18.444247Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"018b8b89894a48823fd471299cd87803","sha1":"e5b7b25e59730fff0202b8379939556132df951f","sha256":"9aed1a48e0363c19cadc278730aeb6897c4f6b40cbd3547a6476e8b0e66dad29","sha512":"0fa33b1a68116dd9d9e2da16eb7989c563db2c7d20f131d278f478f56930452e220033eb13039534e23f512a53be0682b7eb7cdf35a44602be34c9c5782ec8fe","ssdeep":"","tlshash":"81b0125db29622b9d74f602634294611208729d909809128612586ec9105b144030ea5","size":90,"data":"","first_seen":"2024-04-24T13:59:11Z","last_seen":"2026-07-16T06:51:04.454938Z","times_seen":420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/otSDKStub.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c61c9212d44a276e276a64be0104e5b4","sha1":"2a0300f8224b9f13020106f9fda1aabc362603fb","sha256":"4f0bbc6b255b6ff7eb55d7a5c3ec7199e7dec005b41f0577ab236f4756c69f6a","sha512":"cb5406f4074f47de426647588ecbb8aa77767629e85dccd2d3e0c15a825150891c9a9e20410994822ce79866fda3b6bdeac2b985795f58a745f49a36568d0c9e","ssdeep":"384:MLIi8k7hI3RzMABwXeU9LH6rlIgknE8eEaRgCyu8LcwLKvTJ9x4AaHKJx686W7rk:M0izIBAABwXb9wvknECPCJ8gJ9ugwW7o","tlshash":"bae22a99b140ef3447d251dc993be25ab23a746d348ac028f868dce0247dd4b6673fb6","size":31452,"data":"","first_seen":"2026-07-10T12:35:59.963347Z","last_seen":"2026-07-12T21:21:00.127957Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"64e3c94372761b572a1df8481a4dbf9b","sha1":"1b5054391e1c1d64cc823735905155e176485c8c","sha256":"0a63fa29c6a8dfc3ee2bd54966e8c977aab28202e0566f61993bd0018620b966","sha512":"f35ce97a9585e02aaf17e7b2c96b52a141511e8412bd1c79ee55470a7f40bb3a2d449b1a7f38e671f75f4544ef3c6ff7ffeaa10e4b0c208b770ea0dbdca8b186","ssdeep":"","tlshash":"30b0129db29623add74f2016342942152007159509819124612986ec9106b144030ea5","size":90,"data":"","first_seen":"2024-03-15T19:21:59Z","last_seen":"2026-07-16T21:57:18.270753Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"64bd6d8768c1f9a0356b961150017c30","sha1":"00fd2d10ef39991bc21bbe19a1e0fe585f7f705c","sha256":"61b7a85f12aef1edfb3a73a50b8d9c18dccd9b559e579f5aa873c578b7b52129","sha512":"07f96d3ccd3d9ad7f7f8926a718f6268cfd167c6183a51680997d076138337a388c0fdf85db721c96e7c9d6be7408dd20250db8b5fdf4d810f12bf2bbf812735","ssdeep":"","tlshash":"c8c08c3db23a202f09495049281bcb10905bfac00e828f2000aa3ed88110a1c50e8da8","size":150,"data":"","first_seen":"2026-05-27T18:49:34.553414Z","last_seen":"2026-07-16T21:57:18.233651Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9823c2ee29f0a3e8463a3e619b163fcc","sha1":"ba82e456adf0458a5185105e793308c33140aefd","sha256":"74d2ad6214fddff81eb848d64c8cc8d5f36332b3d3e62fc486d64d4a216412a0","sha512":"0b5768b24b9d131710262385441bf8ee232754001afa007d2406bace01ac389b3eef95877f50376d5eb7b339f8b2ea49b1070d34f52b3473e5d1e20d4464f099","ssdeep":"","tlshash":"4ec08c7db23a202f054a505d282bcb10909bf6c00e865f2000aa3ed88144a5c50d99a8","size":151,"data":"","first_seen":"2026-06-01T11:22:02.99815Z","last_seen":"2026-07-16T06:51:04.509207Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50a8acbdaf916e9bfc12eb47b438270a","sha1":"c25c8ff08d20915c257fbc7eace0c27a4dc380d5","sha256":"7b1398c63e7abebfc1d191f9be4c34131a8b6ce36a34f6d3e480013d1f620df5","sha512":"2fa0aab0c9c705d977b5eca0bf5d19720e837312d3bae4ebce27a0e52893615e4387581c451a1056234e10d994f44025b4324705124a4c4f27ad5735fe9e8824","ssdeep":"","tlshash":"6ac08c3db23a202f0549505a681bcb11909bf6c00e824f2000aa7ed88140a6c50e89a8","size":151,"data":"","first_seen":"2026-05-18T09:59:05.572838Z","last_seen":"2026-07-16T06:51:04.300279Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b43ed64e2aa2f89effbdcb76e105c1b3","sha1":"d0b4e20a220d215fe86669200b4f1c3816ae59ba","sha256":"f6fb2c24fe6ecf23eb757f1e913f5be553bad08b3f7a53e40b291ff7cb75433f","sha512":"16dad591cacce70b4519a55142e765d16a2fd314155f782798bdd40b8861003aa7f24481fcde1690657e88a31556017e64d6224de2248db598f45ece8bbb4adf","ssdeep":"","tlshash":"11b0125df59633a9d35e3016346a4511300739d64980a124612586e89505b144030ea5","size":90,"data":"","first_seen":"2023-11-30T16:50:01Z","last_seen":"2026-07-16T21:57:18.384993Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2ec9f02efa5df3642cffc61801080df9","sha1":"14922cc84b576ec8fe6eca761dc4985ac25bb824","sha256":"b48ec11b24e596b178831017256d6a7d979375f173ba3ea1f9b221d00427e147","sha512":"c99811cf634bc2541e16247ee0c13b27c05716b391e445e0d802e14d0225f5cfac35612afcafc5644a69801760771e5c9c6799338a6f8423b078a2712304b2a3","ssdeep":"","tlshash":"3cc08c3db23a202f054a604e381bcb10905bf6c00f824f2000aa3ed88200a5c51d8da8","size":151,"data":"","first_seen":"2026-06-08T09:34:55.155485Z","last_seen":"2026-07-16T21:57:18.514687Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c4a3ebc26d98c1077b2b4f81cc57c6ef","sha1":"ba9763ca58c667af6d939c892c5f58ca4f1cd28f","sha256":"2120a2ea50c7b21b180a449196fed8b0e62230cf5919c40e86ce0332e56d916f","sha512":"5bd284617e52bc0f2932913ee6217c9c6db8a3ffe746eedbcb551d8fccd374b96f256b280ea4282ef45c4e0ef3ac7a69ff01c0d44b0b26145a55132402855484","ssdeep":"","tlshash":"c1b0125db19a22ead35f201634394111200725950981d125712586e89605b144130ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T06:51:04.519239Z","times_seen":224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"137c68ed220d21e1cefd39f9eb5550ed","sha1":"4c2d748e6c85d41a61fd763890566996c4cb4032","sha256":"b1a481d7f6ce1bdebf0f7aa83b79328ea571320f4814d16be78cc97c75dbe0cd","sha512":"aaa89024363d916555af3174d170fea2e505100f39ecd17a72b83f5670b6f6e4ee9df61fc41bf83ede11d745c01280e5ad971cf8aa7633c4da600100c217ebe8","ssdeep":"","tlshash":"21b0125db19a22aad34f2026342d45112047159509849524a12686e89106b144031ea9","size":90,"data":"","first_seen":"2024-08-20T03:24:44.080592Z","last_seen":"2026-07-16T06:51:04.411842Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7f6d75f55d3ebe024ef2ac1c3ab9b47a","sha1":"7e715a0522d7c514ddb9d9f1d00392145488e87d","sha256":"07f38189356a60a781f15417db54411002e1f0292b4953f16d81329aa6bbf56c","sha512":"c170e474b78041b6cb506ad32d7460d72b9a42499c74fce39370b697013c092a8985212e5f727bea184279cd4cb2562e1e6c0ea82baf2b8185349de5aacbcdc6","ssdeep":"","tlshash":"88c08c3db23a242f05496049381bcb11905bf6c01f824f3000aa3ed88500b1c51d8da8","size":151,"data":"","first_seen":"2026-06-08T09:34:55.776418Z","last_seen":"2026-07-16T21:57:18.530882Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"838c88466ca7ce834e2b71918ca5d064","sha1":"76e208dd78a83a62856514fb5801ae2dcedda519","sha256":"03c106a60223dcfa7196e07c9839b7580e1c5c86bb7815056cb1c22e8bfb9cf1","sha512":"950b344007b15a3340b1531c7d4322e10b72e81f310c77cc5db29c879b4328842837dd76b283f97f5908c3fae0aa35bfa40d26d2b98599c01629829bd9281cd2","ssdeep":"","tlshash":"85e0122bf19d003f48cb615b78854911811b47f7ac47db2573721dfd6017a4a8088afa","size":358,"data":"","first_seen":"2026-06-02T02:17:13.960334Z","last_seen":"2026-07-16T21:57:18.319409Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e88b2daa1422c9b2afb61ede7cd6f7cd","sha1":"e274aa5fe515dd22ba0a409cfa55e80557c2d675","sha256":"ba1250440cd59c62396d07b2382de60ba070e5e5c528a3d91bae6170cd6e1e1a","sha512":"a6fc82958d41636cb5ee3f35c2c144e55cb0710c3d7065ddb1d2b04085de9223bea07f9ce82cd2114f581b7d6b9dbe490deee4b8e51b536ed8e88b023006e971","ssdeep":"","tlshash":"6bb02228f3af30202a8b20aa202a8202b002a0200880c202222e00c8202c3880032aa3","size":111,"data":"","first_seen":"2025-12-22T12:12:57.90464Z","last_seen":"2026-07-12T19:53:38.991323Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fcb046ade014d60c751f44acbeb4affd","sha1":"8d2109ea889822b657d02de8e8e22d6197a846a6","sha256":"86247a4167c3919bcbbcaed02d5349450c8ed23ff9117c01938ac2afd9566b19","sha512":"0de6145d47b1bd67cd46ee95f2ebbd61cd7b8dea0bf46f51f5ba18c2305ae0da04903f87c6092ba776cc58716888ad25d88fbb332d4c90cf955dc999bb59316b","ssdeep":"","tlshash":"41c0e9abf38c203f05cfb02b38554526515307e75d85f31913721dfc981b6438404af9","size":190,"data":"","first_seen":"2026-06-08T09:34:55.775176Z","last_seen":"2026-07-16T21:57:18.272296Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"eb0b798ae2291721dfe6d4d11aee3e5e","sha1":"7b491acf9939ac2515214fd9be276e909dba172c","sha256":"611e1f6af4657d4f1727f8b78ba67aefd73a791eac12edef34d68f72488b2910","sha512":"f075578fdea21488cf3c804e82f2d642716557cdc44b1eedcf4a8a6c213874338e3af5871b96aeeafccf93cb9caf70f0d2360c812a62ab91310308e70a5cffa5","ssdeep":"","tlshash":"00d02b9ff7ba221742ca641894db06171029b78a0b04cba3003709ea94255c10127e79","size":272,"data":"","first_seen":"2026-06-08T16:37:15.928054Z","last_seen":"2026-07-12T19:53:38.992287Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d6051db3cf0ce5a3033712715950bf49","sha1":"4323b8f799eec9d92c28e5577bd6b0056a594040","sha256":"59bec7998287a3f7a3c78d0868fe39b612d784fdfa7ec42a737e9585c299aeaa","sha512":"20bde74d501e292039162eaa4a253fd70f2c834b6ee102149ebd60583f75bee71d15ab3686f797c691a3e31636314642d8bcf199ece88c95f6af1c3b5d7ae01d","ssdeep":"","tlshash":"77d02b9ff7ba221742ca641894db061b1029f78a0f088b93003749ead4254c10137e39","size":272,"data":"","first_seen":"2026-06-08T09:34:55.618663Z","last_seen":"2026-07-16T06:51:04.228677Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"4b80dcd0c4d0cacaf9e50f8afc01d5a5","sha1":"b51772b16ae628996bf9bff731d7ba48eaee7652","sha256":"12c24a63d2c9e7daddf3e42c629b68ad0fc0ad83d292f04f2c3d41d34e294b1a","sha512":"6a0b9e2d8f05578e7cb808b6937593466ea98f36393c71adfd6b456de29af0cc371ebf1a25a2f973529091ce027b4e0e74c7c37e088545940b5bb7a817ec42ca","ssdeep":"","tlshash":"be5000c03300f000cc00003c0030000c0000f0c30c03c000c00c0000fc000003030000","size":11,"data":"","first_seen":"2023-03-08T02:17:24Z","last_seen":"2026-07-16T21:57:18.475163Z","times_seen":2112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/LoginMarketingSurveyResponse.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02bc0d2087326d4b0fbdfc0a80ec1f1d","sha1":"2878b53a2bf784c212f89d7593a660c93f3e2f90","sha256":"51c7fa0719e80398c74a788208999a9e92398a740e4850ea456e2ada18fe4879","sha512":"ed17248eb726618ac637f3d893531f0d097fe7322413b5d580c48a6916e3c7202bdc02c8706b503b266bf0aa42634ea0d0072f387f01f325e550203b09d87b6a","ssdeep":"","tlshash":"b721fec9ba907094675a38908a3f9b0cb06a8069ba00d581e514c4e0bd3565f803ee9f","size":1175,"data":"","first_seen":"2024-10-11T09:18:50.387359Z","last_seen":"2026-07-16T21:57:18.13732Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1003b7319da739531b86f127e93f7161","sha1":"8f9c2b9aaf7099a44336a5161f2d89bb4d69e303","sha256":"0272765919e64d1dc8ea3c899ab648f6a2cf036c4f549247b044961fdccc6a87","sha512":"b0ac50a151395915aae14e2c9cf020561d9b761927733f58b09832a5f87c5b389019de5db77c8678eabd1386245ecb9b5d7d6201f838e6646b51757135f93a51","ssdeep":"","tlshash":"deb0125eb29622aad34e201634294111200715a509849124e1268ae89105b144030ea9","size":90,"data":"","first_seen":"2024-03-15T19:21:55Z","last_seen":"2026-07-16T21:57:18.334637Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6258dc4537731c303d15e4afb9833ecc","sha1":"181f940a5ff928900fbd49cea0c9018245ffd5a9","sha256":"06f9afbc4adf05f61af257982b901f4bcd1e46f25ae7c5393fd721e95584d72f","sha512":"bce2a37a7e54200e17dfc1b6420fe172ff3d898fc053da320c4d73ba29c5282c4b1f1c1b77b83d01dfefa9d79c325b37bd34493684f313fc9ef6ae400a73ae04","ssdeep":"","tlshash":"25b0125df69626b9d74e2016343981112047159509809534612586e89505b154034eb6","size":90,"data":"","first_seen":"2024-03-15T19:22:05Z","last_seen":"2026-07-12T19:53:38.994328Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e84652514bf5a1fb3d05e913916218e5","sha1":"6446b822aad963c0136b083daa95a2646375baa9","sha256":"89b936b7dfbe04a1d0b9ec0355491eff02239d1da94aba9e5c21fa008b812eab","sha512":"4a84c64e284b2f9265240d3d137e01ee9df9aa21f30007bddce62959788ffb6a0665b17639430775036d36dbd0909f173da196c63e04dbf4ba52becd2d81e391","ssdeep":"","tlshash":"9ae06d2bb199083f088b601b78694901805b43f6ac479b21763219bc9002a4ac08cafb","size":358,"data":"","first_seen":"2025-11-12T06:39:41.50911Z","last_seen":"2026-07-16T06:51:04.223666Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b744b24ee5bdcbf57b3710ecb91c0b7d","sha1":"6387ccdb58ce87b8cc03482980a9d3eaa70c0b97","sha256":"d99220766a07b23f62e5154e0d8cc262ee5539c3569898fb7dc2a81001833351","sha512":"feb1272f0a612f3d86a9be123ac99334a7dc7a067d746b0b9ffd60d6cdb499eba3cdf36e3b7b1555c8ddd45c09b8887247e769f921c54bd291664bac044ac867","ssdeep":"","tlshash":"b8d02b9ffbba221742ca641998df061b102dbb8a4b048b93003709ea94298c10133e39","size":272,"data":"","first_seen":"2026-03-11T20:39:18.707874Z","last_seen":"2026-07-16T06:51:04.445628Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/analytics.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b0743b6fa3b85b1add5bce3e76f93b36","sha1":"79c0bf44f6e2d5194b7b3eda380b530d9edbcffa","sha256":"41088dceef55b132a870669325a59e8fa1256737ce16526460f7b2dbf9731749","sha512":"8cdc9de5c292d5e4dac359fb6c0e32e01fc1401d140e92cb95ac09c1ce675861b7ae19a6f2424d63f83c5dd37438e380841728b21c93fa3f12c4bc72832ce791","ssdeep":"384:DYHZSxbB7QdjZMSjnxuoeHFhTU5Ktpstc26:c5BfxkfU5KHan6","tlshash":"e862e6d19a63d97403e9add9981d5154f60aac7947cdb850ff4eee88700ac0a30e1ff9","size":15360,"data":"","first_seen":"2026-07-10T12:35:59.93379Z","last_seen":"2026-07-12T21:21:00.171814Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"804116170d62b0c4463cb8c62f5780ba","sha1":"d8958dd6a5aade9c4a15cf8648f83529ba2c780a","sha256":"ecde577a2f9fdfd999da86165387263b95c7ccd8027c827fdabf9981fbfdaf15","sha512":"7e660e1bb37390da1ba8678ae528c1424988bb431188037c8347a84b47b17692a80d779a3303f1ec882a4124271b816709844145a74b09db1e2ed32f0780f6b2","ssdeep":"","tlshash":"77c08c3db23e202f054a6449681bcb10a06bf6c00f864f2040aa3fd89100a1c51e8da8","size":151,"data":"","first_seen":"2026-05-27T00:11:11.665141Z","last_seen":"2026-07-16T21:57:18.407824Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/page-utils.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"396161a46dbbfc784e6b7a758fccf4a2","sha1":"56fc5254139c79ec38631194cb6df6cd34a6c5e3","sha256":"1f8d43153b0a4d8fabc1651c26a0363bec785505208e3cee748a7f7c6d79d6e5","sha512":"9087630a4ed09304fd213e14f37f5bdf0e4298834569185ff7116422cdf24c8fe5eb4e14fc2af68cea0f447b42eb58a8922b51dfbbb332994b8e71694229fae6","ssdeep":"192:2zgVUM1jzhWYSSBZH6mrLghegVek3eclt+bS8:Bn1DBZ9rLYzXeq+b/","tlshash":"ba32d5c19943ceb503e96dca8c295295f649ac384389b894ff5efcc17606c8a30e1bf5","size":11083,"data":"","first_seen":"2026-07-10T12:36:00.015839Z","last_seen":"2026-07-12T21:21:00.130399Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d0d6f140a24a0decf454f2df3eba7a3f","sha1":"dd8ce2d95ad2dab3962b8d013fdbd202f0afe65d","sha256":"162df3cf4c768858c6c1a2498d657f1db8f1eaed963e2dda8d128a0d20d44a41","sha512":"e989d9b883323b9b0b4745072d8c3ed1f9a5453d7387818509d79c2b0b8e599ac3c37449db43788eb3865651840d54c5b7fca65778b26381e8fa4d2fe332dab3","ssdeep":"","tlshash":"7fb0125df59626add75e201634394111200715960a809124612586f8d505b144034eb6","size":90,"data":"","first_seen":"2024-03-20T22:00:41Z","last_seen":"2026-07-16T21:57:18.486172Z","times_seen":204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93bf627795de0a3507582aa496378d2f","sha1":"f2b219003cffa36c983ef31bf0141cdf6b87dc94","sha256":"3b2c0a7aa9bb878f1063ac11bd0d4e249d1c5bc37b4c94e19eea1f8e7fd0ff8d","sha512":"2b4b19124a7c899494bcd4d2dfb281cb6f185dc41bc4531703edb2ace06dc2fce90d66e124cede21c26df2d5ebc0c576ca545670818924b546f6a1a225f6a114","ssdeep":"","tlshash":"8b115c1ab75c0cfb44ce3d167cc0057114bbc3b359c0ef99bb3955f98c65a014064ea4","size":921,"data":"","first_seen":"2024-07-03T06:05:22Z","last_seen":"2026-07-16T06:51:04.489109Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f3d28e3b1254ba448bf4521f42d83a27","sha1":"6f3dad99315a799f83dc2643bee581550dc3b55e","sha256":"d3888ae98a708e548bffc9100819922625f759ad36c82252b5b0d87eed844317","sha512":"ce2034f6bad0d519ef1b4a911590f7b8b5a4da61ebd5d54997a4672a39bd52dd2e0bc6b219b19126d1458fc5d857489d24a22e84d21aaa72b33824c6763ffac4","ssdeep":"","tlshash":"48e0922bb59d003f08cb641fb88599018127a3f79c479b2172321dfd6103a4a8288afa","size":358,"data":"","first_seen":"2025-10-22T20:37:51.499193Z","last_seen":"2026-07-16T06:51:04.232327Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c2afa7027da1499cf38aea260515cae7","sha1":"703c092aaf6cb4ef6de643ab678d77a9210f8b22","sha256":"ae2c71892335ccf142174295adc75bfa25931dc3ef08d67e43e735f0938f5e94","sha512":"2fa2591b00e2546f4698ebb58ba3afe756b5331d0444a3352e73dad7195c18d8f94f550d95175ccc032b1daf5a74a132b0436ad5e9de2f1fc981a10753728394","ssdeep":"","tlshash":"aeb0125db19a23add34f2016342941112047159509809124613586e89107b144030ee5","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T21:57:18.205455Z","times_seen":232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"787d9cba43584398bddc5b323d298896","sha1":"307ad752c82236b6b94330425b99934b028ee1dd","sha256":"3f9f560dc71b691bf2fd5e4ebd2123afafafb585e10339d7a3c618b8906646cf","sha512":"713153cc032047f1b9ce26c77862abd53cc2226cdc468cd1f4a62cdaa4b9eea29af52b41bbade431d3fe0c76d2c3b282a1352e01edd7a64473fc704b8a625d04","ssdeep":"","tlshash":"6bb0125df79622add34e202634694511200729964980d125616586e89505b184030ea5","size":90,"data":"","first_seen":"2023-12-19T15:22:51Z","last_seen":"2026-07-16T21:57:18.348109Z","times_seen":830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c3a688246d0eb9b28d194cb2e7d32d18","sha1":"a0179c2527063dd2234d30c80e4ce96427d15f0f","sha256":"31bfb287721174500acd23d4fa661a0285b7075e4f77ca59158e640b78a40af5","sha512":"a9d1e93cfe81cc09f4399ab189939d154adcdbd0c441c9a6e56fe1c8bbf00fadd3be0a69269839945b45b30eac21361793fdab505b36c15428a19a58a0cc0dca","ssdeep":"","tlshash":"5bb0222cf2af30302ac320ba202a8802b002a8208a80c222222e00c8202c3c80022a2a","size":111,"data":"","first_seen":"2026-05-27T00:11:11.72422Z","last_seen":"2026-07-16T06:51:04.226302Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7fcce8d9be5db849a4b35b1c4ae830fd","sha1":"b29a0211462f14b77b949b3a0826f3161733ac5e","sha256":"f6295fc0b3f15c6d6a34da929397ae18e4e709808cd2437efb658448af68ca64","sha512":"850a1160e430eb878cc560a608074fc5667f76468181066b7c6107a321f1b0c161ad431a0fffd8d02204e10e10418ada70d14af03de48bff2853ced04c3faa9c","ssdeep":"","tlshash":"7eb0125db59622addb5f2016343941112007199609809124612586e89505b144034eb6","size":89,"data":"","first_seen":"2025-10-11T09:00:05.48951Z","last_seen":"2026-07-16T21:57:18.323844Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e324432423d1002ea42b2ff3cd8d473d","sha1":"d84022613a0a25ab61cde2daeaaf4b0b032990df","sha256":"fe29fe5b13fa728895d67a883df75d31e5473630842a289f70a0dcf520a18f36","sha512":"c35c22b6a1433a7faffa0bf50abae5c36fa12c6fdcc713a806dd7e5f2817b0d85af00ef96ba708f2a7726d0fd9c251d1627ad9ede7effd53ccaff924a6ec7870","ssdeep":"","tlshash":"d0d02b9ff7ba231742caa518949b06171069b78a0f048b93003709ea94264c10133e79","size":272,"data":"","first_seen":"2026-06-08T16:37:15.927247Z","last_seen":"2026-07-16T21:57:18.23056Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f333bb4e57de8282d566b56fe5a12160","sha1":"52963cbbb80b14a061918e01f709690614385dc1","sha256":"4f90d4e33236b86d29031b32bddbd1028c755d4a921fca0ba327ddada114aee4","sha512":"84f5ca78ecc63d983f2ce288c8ff04c7b34d4695f5ed11c8d38f988bc3799b5530166e98c45d6b38a1734554cfe4727af5a6b232cd13063fd8918fa2a5559be4","ssdeep":"","tlshash":"cfb02228f3af30202a8a20aa28aa8002f002a0a808c0e202222e00c8a02c3880022a22","size":111,"data":"","first_seen":"2026-02-11T17:55:17.429531Z","last_seen":"2026-07-16T06:51:04.517886Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d22f9ccede0507239a5395fa243fd461","sha1":"21fa13e8b2ac278743124d45ef21f6aff76249fd","sha256":"4606dc3ee7e54e50b4ef54efd1fec100b8bed73388346fb8ffad04569f7377f3","sha512":"6223c4aae4fe8e651fa9eca5497ef0106311da67e9939eb9cfddfebc32ecd043c188a99723aac944c2b369d654d58a0df3ad23ef8cf2f2f46b81f75737cde40e","ssdeep":"","tlshash":"a4a0241df3c531350347743f50374115300311710c01c300533744dc400d3454014df5","size":79,"data":"","first_seen":"2025-12-22T06:43:29.945026Z","last_seen":"2026-07-16T21:57:18.594242Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/ext/v1-stable/gdpr.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ed10bc90a74a91dfb9ebbebf2d70ba2f","sha1":"3b82b2eebd740f1e1a71265bb7b5d1ed32247057","sha256":"d2bb902ab169e35913be24976a7dd7a51613acdcdcd87d35e4593758bd9675ad","sha512":"4c33b85bac5af7a56c57390b160e5f57a6e4f5162f5a5194bba3adfb19945a200d7e4923aea21b9522a5526572cf22df965bd69717b5ba84a0adfc0d8d398f65","ssdeep":"","tlshash":"9971a5ba73b8f33a53d534edd4688180bd0c197b974d4419f06e69a21016b4227fbfb2","size":3642,"data":"","first_seen":"2026-07-10T12:36:00.022552Z","last_seen":"2026-07-12T21:21:00.121181Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ffc3694c37c402d45a096a958480e1ea","sha1":"d2002c8c205a48d58bbbef3ca9d07e64ac56f82a","sha256":"21f5d204d3e6052da29bf29322cc93737b2d2e4a14a2ad39ed2384b353765442","sha512":"3231321f71dc32f822b878e351a6d440795d35b696cf0dda568b58557945c682967bd811956ec1033bbe3ae539e0e26d7707018aaab1ba774e8f176d36048a93","ssdeep":"","tlshash":"0ed02b9ff7ba221742ca6518949b06171029f78a0b048bd3003709ea94264c10233f79","size":272,"data":"","first_seen":"2026-05-27T18:49:35.000622Z","last_seen":"2026-07-16T21:57:18.339192Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2d90f6042298c44053e364ce5108daa4","sha1":"167145dd26b1abd075d737f58dad378b16cda1c9","sha256":"5a8be330d8dd95d510b91e572103f9dac6ba680e369b53fd6b24b85394410ec8","sha512":"84e4c8bd96c118e938a515f94c18bd012737a62f397053085628032a966fff45729766838f66adc83a1725590378ed9b523b150b1b146f214aca74fa1d5a8317","ssdeep":"","tlshash":"29c08c3db23a202f054a504d281bcb10d05bf6c01e864f2000aa3ed88101a1c50d89a8","size":151,"data":"","first_seen":"2026-05-28T10:31:18.665974Z","last_seen":"2026-07-16T21:57:18.333792Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ab429bbd02c8ffaf2f59c1b09697c4c9","sha1":"9e0c87bba52cd02fdb676a2d4647bb198c780eb7","sha256":"c7576bee8b36958d8d35e1260104950044bde73c5ce3d776b4b5674a5be28ee4","sha512":"c98c150da3705d473795bed091814aea1ca49c14e50b78118a445b49bf2f57503307600e56292cb321af85615afa6b222b6632abc5402e1cd9640eeac58b4b5d","ssdeep":"","tlshash":"4ee0122bf39d003f08cb615b78458911801b86f79c47db2573325dbd6016a4a9098afe","size":358,"data":"","first_seen":"2026-03-28T14:02:24.1214Z","last_seen":"2026-07-12T19:53:39.02757Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1767303e06fdb6a814e7c44b5d33ff44","sha1":"74cbe1edba5c3f44abd995361fd00c35ccba62c2","sha256":"d96189f5503ff6b5c920b734e3209c444f2457dde72d5888ff93402af0db10e2","sha512":"68b71bf683fde3f7e2537f6374a65aa4e3e2a0c3a464ab178d9fa0c784a59c1ae4876621cfd134c5536d8116f8fc7ca98c51d14a93a3549f135c799f8059a7fd","ssdeep":"","tlshash":"8bd02b9ff7ba621742caa418949b06171069f78a0b088bd3003749ea94254c10137e39","size":272,"data":"","first_seen":"2026-05-18T09:59:05.908273Z","last_seen":"2026-07-16T06:51:04.221257Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e6d775bb30f183883fc3405ececb9b82","sha1":"d7f84404a5c2eea761789b298efb4618e7fbf001","sha256":"6cc2a2de95c4fea284fc9f04d1bf7e2ff57e95bc6fd8b48b46afdcb8f488c5b3","sha512":"c816c0ef4dbbb9d53ef4759dfea57760acb12a479f59971a16a2f95fec55b6e5d6fc9f6a85ddecb4171014d47b334dbd75d6e4f225d6d08759f8216abfea4d5a","ssdeep":"","tlshash":"a2b0125db19b23add34e2017342941157087159509809124612587e8a105b144130ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:33Z","last_seen":"2026-07-16T21:57:18.274045Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2a75b3fab0ffcaf1c067e8e692537340","sha1":"d4e5ec3c42a2201abc8405c90916c19a44a27360","sha256":"4c27c3db35e84b1930008d295342be18e11009df9e15b7ac49e63689adbf1885","sha512":"e59fc2355d7148a0f881d67306afafdae0c0c08eae5ed483b4e756c48753254b0a9f61b5be5c7df02920350d303925e9d5e0e03d6d02178e56d32169c20251c5","ssdeep":"","tlshash":"37e01b2fb199103f08cb795b78554921811f47f6ac47971573321dfd50176468048dfb","size":358,"data":"","first_seen":"2025-11-28T11:46:19.35683Z","last_seen":"2026-07-16T21:57:18.544775Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5f7e9d9399488b793a74e4d3cf5cffb2","sha1":"354b550598722123f7f0f2782bc34f9826fc038a","sha256":"942332dd50cc3f23c4396077a99f25dc7801858c3bc434ebc2ce70055e32c3f6","sha512":"c14b391a6ae2e626969fb768f73d0d3a37ea5b5bba1cd806cff40384a86fe7898109d89983b9243fc94958993e17564d8889dce3dddc909b0b7a6c9ab66efc0b","ssdeep":"","tlshash":"abe0122fb299003f08cb616b78898a51805746f79c4b9b25b3321dbd9456a4a8088afa","size":358,"data":"","first_seen":"2026-06-02T10:00:41.574579Z","last_seen":"2026-07-16T06:51:04.356556Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"da4c84270c02143b2801401672f92c84","sha1":"f41d797e25b53babb8b63484e7878c5f2f819551","sha256":"5377a6b6bd1d7ac4b7f71e89f59eb6ae92512c616787ef0a4fe5c3387cd5de1a","sha512":"8f14973d476cec386f6632a5480bc749234edf756b487657ad948c63a05a2ee18bea97f20061a5a539c458cd8409de8dcdc5e993eda25ac787394772e6e48f96","ssdeep":"","tlshash":"0bb0125df19632b9d34e301634694111201715950980e1256225c6e89915b184030ea5","size":90,"data":"","first_seen":"2024-03-15T19:21:57Z","last_seen":"2026-07-16T21:57:18.503271Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"607947744601004d1a1dd06e6f7d9371","sha1":"839b0a63b9d68bf3e5510663db8f48e3a9b59e88","sha256":"762e7a7a2327c0c7b94af28371bde7125dc595242ff9829b36b679630b17d2bf","sha512":"576b81172f4ad54ee5e388014f8f3a3ce887ad4d9968a83660b368be1a9b03300a993f71258525cb821aa5cfd89d539912a1ff9089732b2646112d5537dec6c2","ssdeep":"","tlshash":"23c08c7db23a202f054a514a281bcb10d09bf6c01e828f2000aa3ed88104a1c51d8da8","size":151,"data":"","first_seen":"2026-01-12T15:19:10.778572Z","last_seen":"2026-07-16T21:57:18.37207Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3039f30dd5064abcd0d289e7d855fa1d","sha1":"5246ded12f9a47cf5caf6c24441fe2900d7df740","sha256":"9494b41ee27e1e89e6cdad535b85ea552555651f187de62b7f6764720147ab74","sha512":"493cac875ff49b9fb37bd22a0ca466189e1ef31e14583fb3968374a05ad8ec274988410e816577ce335a72b4c278aff380ca5705db2cfb3271825f19c478d76e","ssdeep":"","tlshash":"2cc0c21af38c203a088fb02b28514a2a41070bdb8e86f215133119fc581b6428004ae9","size":186,"data":"","first_seen":"2026-05-27T18:49:34.475773Z","last_seen":"2026-07-16T21:57:18.613947Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f3a8445511ce6b84dee9684e2e66d2f7","sha1":"ec1eab60d3aa71c48b1ab136c739e9cf501dbc8c","sha256":"06888330e751787409e8d984129235e71df07ecdc21ed7371a2186a76ae42487","sha512":"dd21e792e27bc349aa532d969204ce70e6b5e8f85aaceef1b443bbc685af423fe24ec39e16204fbb3996fcb94d8241e8de843d26470a08eae84b205ba0c6c998","ssdeep":"","tlshash":"03b0125db19623add34e201734294111608715a91981a124612586e89107b144030ee5","size":90,"data":"","first_seen":"2024-12-10T19:46:18.281138Z","last_seen":"2026-07-16T21:57:18.600286Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ffaaa3ec5b953cee4647ff13ec440e3d","sha1":"ce3fd4e578d671eda48510a541dcb30569265c83","sha256":"49b31d4821353b983f18f0449040c88786222636e5acc7ec0833c4491e03298d","sha512":"4f965bebcdbb3274d5a62be6b5cd68dd14d077a5ea54b977e6b2217b632b3b4a7746b0364888594f9561a612db0456263e4bc5a9f4fb5c2dab1c6145fe7ac31d","ssdeep":"","tlshash":"94e0c08df0db643501d3305734fd8411303f6d32406cd269b2bec6b44ca554d817b96c","size":358,"data":"","first_seen":"2026-06-08T16:37:15.914863Z","last_seen":"2026-07-12T19:53:39.032498Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff70efbd6ab29daec6ddabb28928b5b6","sha1":"4b2fa2b5b47129559d81271dcd211cd0327d0f27","sha256":"6b1c7b84d8e269dee605a8dca7efb9f456c0fc21c60c10f0c17f7348ef91ee6c","sha512":"1d2f730819a5de2487d21768fd9e04b09c5b44b6e7b5f6a95f5cd5243e78a3d6fc1b8206f8f8898f8902bbb730c1749712a8a43a91aaa9a4a1c5ebf48f9bad3c","ssdeep":"","tlshash":"1dc0e95bf38c203f09cfb02b7895462641030fe74e82f31913311dfd581ba528004af9","size":186,"data":"","first_seen":"2026-05-27T18:49:34.556003Z","last_seen":"2026-07-16T21:57:18.465107Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e7f045abc8c5896f3126bd2e1dd1191","sha1":"0cb659cee593c9f9f6b99416d30c42b33fcbe87d","sha256":"99882f2b7e1a544a11acb7c519e065b160ad4725e9f3d25925d758503d5410b5","sha512":"202278b77d9e8ea2d660cc1c398d552d467ad11e0be90cebb20f6521eeb425ff85104d2e70494a0dbc37bc4fda099f2743481987335a502f31d234a789688868","ssdeep":"","tlshash":"57b0125db19a22a9d34e201634394122200719950a80d224a13586e89125b184030ea9","size":89,"data":"","first_seen":"2023-09-19T08:28:18Z","last_seen":"2026-07-16T21:57:18.57234Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b00a211aba5b6dcca1dc99d4006bdcda","sha1":"708b1d6783dc18e90cbca671825f014ca42936af","sha256":"fec8200a382937ee3a2123d5e231612cd9bdd6401dd8a92f583d33798792bc8e","sha512":"664d37602415fb1b8a76b3a19d6e3e77c29e2c4db53c90bf6a1a6b8cd85f117fcff77b4ebc9ce9cf7d7579ea0241930dbe15e4ff1bc2b96f902bbbfb1609a9bb","ssdeep":"","tlshash":"59b0126db29a23add34f2016342941113007259509809128613586e8a507b144030ee6","size":90,"data":"","first_seen":"2024-03-01T11:49:05Z","last_seen":"2026-07-16T21:57:18.168114Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8895cbdfe457e35de2224bc7922edf80","sha1":"e28dab1007ad659124c2f6d5a16af346f5be99d8","sha256":"915305877b86da6bc36a31287df1d88be445064718203e9aa0cf2d9876a1bf06","sha512":"7ace8d4db47af5065167bf682485957d0af533b108e54ee9e0e9efc91a4a20c590ee9ffa8cc8398163fcddf62691da61929680dd7e561cbb7f164194534839ec","ssdeep":"","tlshash":"d1e0126bb699103f48cb715b78994b11801746f69c47ab2572321dfd6016a4a9088afb","size":358,"data":"","first_seen":"2026-03-25T19:58:20.882522Z","last_seen":"2026-07-16T21:57:18.410427Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e1651371a5baeac6dcb8db9e56308056","sha1":"893b42c1c8060ba238513164b848d8aafa4a1797","sha256":"0d7f9da44a11b534502a3f90b8cef7eb8a971587b068b746c767d8aada39a7f0","sha512":"45d0fe6c4c1fa6bcaf9369c8807a5291e0e7d1110a38d02eee104383458607cc3f6530629e8cb599c702f805f60e6c46452f34d3d2f819efdad039af8cd2ab80","ssdeep":"","tlshash":"22b0125eb29626b9d34e2017343942216087159509809534612586e89105b148034eb6","size":90,"data":"","first_seen":"2023-11-28T22:30:32Z","last_seen":"2026-07-16T06:51:04.621186Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fda94fa484ed923e833ffb96d32ef155","sha1":"c9e5add6212792edaa48cd723c73d0d39af052b4","sha256":"c8d287a8a33e156702e1ffddc6b92981843ccdae014810ef8194f11ec7ad97db","sha512":"252c0b9c8c5b35e61b2511175ebb5b091f76a10c641583ca3dddba2c1bbcc1dbe28476f3adac508b3c018bfd09cb2f7aa34e56a94abe58af37ebf0b740af45a2","ssdeep":"","tlshash":"b9e01b2bb159003f08cb655bf8555a11811757f75c47971572322dbd9017a458144dfa","size":358,"data":"","first_seen":"2026-03-13T19:09:57.47369Z","last_seen":"2026-07-16T06:51:04.463428Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a8cf6bf0d302cc731adda48a3a585600","sha1":"48d0e4c574fabf61107d409225a8c7c06e95da73","sha256":"24b004b03eff177d392a818d69130fd1735c93b3f567be302b0a54b3e0331400","sha512":"c28e16e5a11dd031f8fbea69b6090a97686be83f1b8a8b4d0b204415c02216c814f1dde4e79c805840a736ab4a64d09b7ff4ae035293f859a0d74a8362b6fc2e","ssdeep":"","tlshash":"14b0125db19632a9d34e301634294112204715a50a80a124a12987f8a505b154030ea5","size":90,"data":"","first_seen":"2023-11-30T16:50:00Z","last_seen":"2026-07-16T21:57:18.599399Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b2df0126a0dd2a9a0b26f781b169d4fd","sha1":"35858c70099c10a8b73d2da3f4a793f7c77e11bd","sha256":"f001a498a52864ca0ad732bf53343991b768849f1f0cb4d9904dca7233ab35ef","sha512":"0bb02e8bfea286c0654077de88e344433797e0ae273eb73cb95a8ede9addec257428ea083774acd5769415813da762ca8c2fa63ce7f99c8d00ede13d314c562e","ssdeep":"","tlshash":"d2c08c3db23a202f054d60492c5bcb10a06bf6c00f824f3000aa3edc9104a1c90d89a8","size":151,"data":"","first_seen":"2026-06-02T02:17:14.028644Z","last_seen":"2026-07-16T06:51:04.167626Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7e0e2278f784f86cd74bca8c309ad0c9","sha1":"4951b04f149f6231a29b120cf340549909a8f995","sha256":"63f30860e61aedf643815d13780134f11a910d994afc4c2084609ad0fe5e80a4","sha512":"9443f7e0350f90dda9d2d941d3cf0dc6060840ecb1a09224fe34809c16f3c01422b5f6c24933371b66522bc74a907e10e9c89b33b20d20a1e67f410d2d7a235a","ssdeep":"","tlshash":"7ab0125db19622a9d34e201634294111204716954a80d124b12a86f89106b144030ee9","size":90,"data":"","first_seen":"2023-09-18T22:16:52Z","last_seen":"2026-07-16T21:57:18.46655Z","times_seen":914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e4b4ef0505a598030b7b14142307a0e0","sha1":"f02ec4ddb8e48814bb6f11528786130d2068cab3","sha256":"4d1eba2a21f0e42ccedfb72a33e87d275349ac070c7647a187227339460be3ac","sha512":"899c7ead5a2620017272afe89266b89e22b7bbf8c095f593957221f0819b0a77cf8e671802e8b37c69d7b4f6bd3b277f8e90477bcafca86311080a1a976f87ab","ssdeep":"","tlshash":"adb0129eb29623e9d74f20163c694215200715a509809124a13686ec9209b144030ea9","size":90,"data":"","first_seen":"2024-05-23T20:42:22Z","last_seen":"2026-07-16T06:51:04.366606Z","times_seen":448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6265beee3e05159b7f42af867173207f","sha1":"67644c431d5181dc4a73355f0e4d464686361151","sha256":"21d2dffae268fed384553b29ac8b89386af9a28a00d7a66a658cc9e1eb0fa13e","sha512":"9a7bcc2f338236293864c5ac11de75297f1e3bc4d41f7b27e04862dea08203581875a82e2b87d2b4f65a9f53ce4543e7505a70d96fff98fed5e51bf7223a9bc0","ssdeep":"","tlshash":"09e01b6bb299003f08cfa15b7cc54a11801746f79c47973572322dfd501a6468444dfa","size":358,"data":"","first_seen":"2025-12-22T12:12:58.090697Z","last_seen":"2026-07-16T06:51:04.369551Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d08308fab56935620a8a856b08fda19b","sha1":"1fd0ebdae9de83034048708176b661d13c72c0ea","sha256":"7cb5cedcf7f2b99c64272dcf6431b6c8e440c1d8e7747f9ff5cb882527fdf314","sha512":"488a2807f0121681cbc32b33c227b94f12f0ab635e7311d6cd8d0a7377d430b47c4d580f39c14d33889ff96fc924d4f6b9749331083268164e0013cedf5cebca","ssdeep":"","tlshash":"1cd02b9ff7ba231742ce641898db061b2039f78a4b088b93003749ea94294c10133e79","size":272,"data":"","first_seen":"2026-02-11T18:13:10.435071Z","last_seen":"2026-07-16T06:51:04.489559Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"369ab49be86546d0d265dd8d45382bf1","sha1":"f1784dbe8975befa7b49fb3efe1d3b711ebfd1b5","sha256":"7106d673f93d94ce4b12663539e89f94ce3ed7183013dbf346fe5ccbbfaa224e","sha512":"38ba25b02dd897203abb4beeef2d8e86f407fcb305e99e75973f6d0df1f0df6636bdd53d14838e515b70c8efc7d0211e90516331d9f5ba00ed6ac8c85ace60bf","ssdeep":"","tlshash":"03b0125df6d632a9d34e3016342a4511204729d54980e124612586e8a505b184030ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T21:57:18.293939Z","times_seen":294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61f8426342b79d954ade4df1606f617a","sha1":"18dae98c550264186ddaf7405bfcd0ffd4c8197d","sha256":"dc8d0898c9e688bce8415c44a521a606801737049e0fa92769f83e88f2282047","sha512":"b0b7107bf9bac3a0c9748dc2e756f6fa955c0e54a28e01d0ac322b5746897c1a5dc5dd030b567484dfd234c80739c6e601a702b121ed7f79a3bdf45cbc18e6df","ssdeep":"","tlshash":"82b0125db69626a9d35e2016347d4511204719964a809524a12586e89105b184130ea5","size":89,"data":"","first_seen":"2025-07-03T18:28:56.134232Z","last_seen":"2026-07-16T21:57:18.174017Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c948b0838a0c73a872001a83dbd67224","sha1":"4f0bdcf6e80ac6448204b1a6280d3d905f7e7aea","sha256":"b9cd54ba86143db89036e685a675c0826dc1b58ce0d0b53c95bde156b4c0af42","sha512":"350dd8ad001e2c35b30cebef9f47f52c83361e45458278b774a39cb200a4ea3adf17ee0653e4708ed6ca7951f1872bc530e2456537099eff51213820fac2ce37","ssdeep":"","tlshash":"5fb0125db19632a9e34e241634694121200f159509809124b12686f89106b144030ee9","size":90,"data":"","first_seen":"2024-04-24T13:17:48Z","last_seen":"2026-07-16T21:57:18.40131Z","times_seen":476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"00ea749fcb076f731a32b5187bc4954e","sha1":"7f3374e081bf78084023843ba529ef7206836049","sha256":"515189d394c662c3b17425642af7b091972240eb80c2d3f7dbb0d5da75be989d","sha512":"c13190b221ac2910c60d76655ae1e35ed7c6638bd4dd2a3f6869b5de4fae65da1f2e917fd1cfe4cb480fcd0d4e9095ebc4a2842baf5020ba18698ed8d647d6cf","ssdeep":"","tlshash":"7fe0922bb99d003f08cb706b78494a11805742f69c479b2173321dfd6446b4b8088afa","size":358,"data":"","first_seen":"2025-11-24T15:55:20.307284Z","last_seen":"2026-07-16T06:51:04.609159Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b7192ce01060848b1637a5b75fffbe72","sha1":"7174e5bfe1d2a998031a468784c5caece8e4c775","sha256":"876b73828fecd9ab4c406653352c6953ec2c179454306edfe958340d992b1563","sha512":"889233e155c2824066cb6b11f9b8302a4bb5d8ee58de6338538ca14fc45a00c43776dea2f2c7d05f69e59b6f50a60f5824e240d95964cdcf40090856a2075acb","ssdeep":"","tlshash":"fcb0126db29623a9e34e60163ca94515200715950a809135612986e89109b144030ea5","size":90,"data":"","first_seen":"2024-04-22T10:43:26Z","last_seen":"2026-07-16T06:51:04.224559Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6cee0ddfa793c349043cce34fe85d68a","sha1":"c7e5120ee11823fe467b4c230df2931cb851fe34","sha256":"f55890c2f3e2e68db7d5cb3deaab7ae9586061a9b7ff00466f8f72093a6d8a5f","sha512":"48addee7d4891ad395a5a807aa0005ec0cde48c3f98766715f0ac3b3854314f0acf774b005b30172dbeda468f82741d244dc52c8a0d1b16fbfdcb974229d4e69","ssdeep":"","tlshash":"e9b0125db59622a9e34e2016342941112047159509819124a52686e89506b144130ea5","size":90,"data":"","first_seen":"2024-03-28T12:54:35Z","last_seen":"2026-07-16T06:51:04.143708Z","times_seen":351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6eb226459baee83b9868223c38bb7656","sha1":"81f2d65dd5af60f5be37b2f08b0b30440ac9e404","sha256":"dca25b8d72bbbcf717fb2a73dec86be6c4b367cf237855c86430373973b48bbc","sha512":"f6d145383d3612002bc7c9cc8f735d13a634f3f76bbe21a1581ab3d38fa2de3e7df24926ae8298f6ee6977b576ef09d44157aa2fbd4bd8855311a42c95b1010e","ssdeep":"","tlshash":"48b0125db19622aad34e2027342945116087159909809124a22686f89206b144030ea9","size":90,"data":"","first_seen":"2024-06-04T22:59:00Z","last_seen":"2026-07-16T21:57:18.388283Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www-emu/page-builder-client-server-components/v1-stable/static/js/login-promo.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"805c248cb96457017547f9b3307d3e98","sha1":"fefa7c78f6b158ce85015f350b0e89efd0e11df5","sha256":"57024ac988f409dd69c3ae79a536b06cc961929873f4d5496273f61b5fb675aa","sha512":"b4a5c412c8420c8acb86a439d4aec6f785c73b56861ed00845a939cff1aa62b67cc7517570b63951c286aaf9774d1aff7f3d8623699bf44b0b5414f4b194efb1","ssdeep":"","tlshash":"9811633573465131d2f34bd7b199f3c366700b897c402185f06c0d4739a9867baa5ad3","size":908,"data":"","first_seen":"2026-04-16T20:03:25.364286Z","last_seen":"2026-07-16T21:57:18.081219Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1d63a1086f0734370017a031c509adb6","sha1":"ccc41810f6d53c9e07244dc0aa814e5488ce5d63","sha256":"2423f76c50df2f9ca9876ccc99e32eb723cd1d1e9a94d915bc7de158c2c1bc36","sha512":"992a2d4b9d740099107ee771678b0dac7e184b9cbe392e9ace81f6524a3b08307c7f43a9cbd8227efec0b95e0ae70b08d85f65b5e4eff50d4c55dac5ac214537","ssdeep":"","tlshash":"99b0125df69622add35e20163c7941116007299509809124612586e89519b184034ea5","size":89,"data":"","first_seen":"2023-07-12T03:58:20Z","last_seen":"2026-07-16T21:57:18.301488Z","times_seen":966,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cfba69b2e260501b325e11bea593499e","sha1":"677a0ae18d02d002e222483c8a3e910091849fa0","sha256":"6ad46526a0deaa58b2087347739462bac9d939602cee240237327dc38b5d129c","sha512":"c456eb1cc52664ae52fab1c08b44e6a693f5dae0963df12e4d5561607392d6b6400d43db7eb4e07f7ae19807290df5fcd3e45c9fb46c9bdfc16211a6da566ca8","ssdeep":"","tlshash":"69b02b59f3af3020168620a514594011b01650104440c102121e00c4101c2840022a12","size":111,"data":"","first_seen":"2024-08-28T03:37:46Z","last_seen":"2026-07-16T06:51:04.479356Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4d43d2354bc7158d82003bebbf67e1a4","sha1":"a65a90d495b253595b745db3ab5e3c16ff83a3c7","sha256":"360545f0ec1a67de51ccf27646780fc34009c5f3ccf35f6114505927b9d6d013","sha512":"46b1320e3872bc566ceea799736d1ae10b236e7b8bdcb393bd3d49213646acbcd83fa6250fa300ef54e6a767e13fb18eabf0cf1d26adb4bf7b3988715c23e5d3","ssdeep":"","tlshash":"3ce0ed2bb299003f488f615b7cc58911801796f69d879b25627219bda01ba4a8198aea","size":358,"data":"","first_seen":"2026-05-27T00:11:11.717355Z","last_seen":"2026-07-16T06:51:04.355875Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0950b994730325818ede100b3aab3437","sha1":"6df56496e17345185714f8f6dcd525534259a940","sha256":"fb7fed62efee4bad5347afe9885dd1a4e26d63aaf0e6d7a104664d75d92386f0","sha512":"f481561a9ea3360395d7077907676f6adcba6b26bb3118e6ece19a3eadbbd773acec42e221259cb92dd1354df738723a10b122b548ea2c13107d193c7280e11c","ssdeep":"","tlshash":"71e0122bb99d103f08cb715b78464d1180175af7dc87ab2572321dfda816b4a8088efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.408218Z","last_seen":"2026-07-16T21:57:18.560257Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_identify.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c06adac341baba15f12d0fc47eeb45f9","sha1":"b7246f95ef892327c4de02326bdb4418901620b3","sha256":"5976b13da122502ea6c6be930f0b2e5d5c2c4e65b52754dde03a85a094bbe8b4","sha512":"d995c3321103fe7356c78e58b9fce2c70610396f50d344d9ab269d3a9ff2eef4fd8d9b7b1878f5e4076d0846f51ca3fcf8af55ee8fb251989894b05f02cf119a","ssdeep":"96:XFlKGIsGOGyHpZlpdZTBDoc46/iE3XCIG2It8GWyiH3aGeScJ15GeShMMP9S/1EK:XFNpd/DocnD3tA8FyTU9SNCO","tlshash":"2bc1a5892be7307605a330796f9fe005b63190172d49ed907c8e9244bf6061faa73fd5","size":6125,"data":"","first_seen":"2026-07-10T12:35:59.981204Z","last_seen":"2026-07-12T21:21:00.104776Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dd90e5dd02f6cb2de14c822ea5d7588d","sha1":"e05357706f71bfe4f3d2457dfa60525bf2d99833","sha256":"7e5e58e891977e942261ac67db9971a4fea330a2bd43e13ef4869b785b1fc249","sha512":"fcbf8fb7cd6b83e08b960c455d9a40011bea1a03b0076ac1db1f693ee22fc47664f7813719983a9bc5f99355e3d85429871276c29a50b7042bde359d902a8222","ssdeep":"","tlshash":"cdc0c22bf38c103b05cbb07b28998616518307d78e91e21a133209ed505b6828048afa","size":190,"data":"","first_seen":"2026-06-08T09:34:55.545982Z","last_seen":"2026-07-16T06:51:04.187864Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/identity.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fca56bdfe3e31efaa975c1714ebf3468","sha1":"077ae0ee618bffbe45ea62885f16bb6def5111a4","sha256":"1afa9703700f948aa56e1ea8cb30c0b3d9e8af0a9cd8c2df38bc62eaaa80f504","sha512":"da51719e05780c11df513b41a2c63b79f9633fbf56892e2034cd566442b6e4f09b269503d49caac0c66aafc21ba0aa5c91a1815df394247ea30d2feb489838f3","ssdeep":"96:iyKV//kWYy4wHMT8n1YzZQy4/bzKykL9SGm/wLbYN4moE6dKDWA5yjjs9nix:YmpzwHM+gQz3fkL9bCwwN4qiye","tlshash":"930282c29857daa802d5adcacc1a22a8f7459c3853cab894ff4efdc5b506d4930d0bf5","size":8375,"data":"","first_seen":"2026-07-10T12:36:00.010685Z","last_seen":"2026-07-12T21:21:00.173595Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b27ad2c43c91f137bc881c7f0d1e8d57","sha1":"93c70e0fd0446f9381cf24669d177ccd39fae2f2","sha256":"18300e5a2f2c84a225909b2ce80364bd111e175cab91a24c8d172c669f1baaf6","sha512":"ace224113928bec6fb1079c5c3f1b71d2551264d21660af51c827d9a057287240e2b50d32434969fbac28f43a68288bdb7a1703dbe19f5ad5f60eb71193b8b03","ssdeep":"","tlshash":"d7c0c26af389603a048fb42b7851591602038be74e81a215573149ec901b683a125aea","size":190,"data":"","first_seen":"2026-05-27T00:11:11.71847Z","last_seen":"2026-07-16T06:51:04.324299Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c8cb4f4a34e27621b8f138d452327b5c","sha1":"6ffee45829bd2f4ef7d32125aebed3db4947422f","sha256":"1db341efce2f3a2478b2c891f1379dc695f19116b8d85dffe559630d690deb40","sha512":"9c1c74143d57cb4e3a3374a16c1f83e584d73742296cf26c5602cd081a41cb364cfe8e7ac4463d3294dbdbcd3b64c6ec1c2ea3767d7fbf15306001d6e7c55a9d","ssdeep":"","tlshash":"7cd02b9ff7ba621742ca6418949b06171029f7ca0b048bd3003709ea94269c10127e39","size":272,"data":"","first_seen":"2026-05-18T11:46:28.327611Z","last_seen":"2026-07-16T21:57:18.616205Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"59f941af75a9b71a7fffb5104a70ae10","sha1":"82129fed7eb4e27b02248a323f7770b94df29248","sha256":"05e4d77a89ad1e8e28a034361e8a3637e05407413d7d3813ae85603ed981bd4e","sha512":"dcc8f5ed24d7ae9e7815260542b20782962ac99d8a6a21a99eeab4df4307fdb7c9e5df9bffa37667269edaa1d48bba15fd00d037edaa94c0a0024922e2471590","ssdeep":"","tlshash":"eeb02228f2af30202a8230aa202a8022b00aa0208880e202222e00c8a02e3880022a22","size":111,"data":"","first_seen":"2026-06-08T09:34:55.514616Z","last_seen":"2026-07-16T21:57:18.422672Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d1b7defd824a045dc10a1bd045e597c","sha1":"2c18982f622fc81c4b7af9dace5f66e0fd6aaac9","sha256":"d6dceff13180ed6defad0d344b1397076c69147a2b2cc953145ad185495bd694","sha512":"737a67d868141bee56220c385307b10c2e46d661bb1a318e38f5b084387762424e69e7e956683eb5f6d992174438f5b6fe7a4482d329eb4cd84f22f05c98aecb","ssdeep":"","tlshash":"46d02b9ff7ba221743ca6418949b06171029bb8f0b08cb93007709ea94354c10123e39","size":271,"data":"","first_seen":"2026-05-27T18:49:35.130962Z","last_seen":"2026-07-16T21:57:18.354914Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d380c98b806d37090d86e5e8cc9db607","sha1":"2db32e2ce01a3e99dd384bf5de26b59146e34f6d","sha256":"ffccd11d1bde4d3d02f615bb64ab59fb88da57a8d8d109fb4ebf5780873aab2f","sha512":"dc2e1ab2f6a656972f88bf6510e629a39a87b3fa3c60a4c863ae9d33e57bc48ca6d835234db7a36eb840db480eeb09b97f061cb32ac0cf310d62ba3e4701f66f","ssdeep":"","tlshash":"f1c08c3db33a202f054990493c5bcb20905bf6c00e824f3000aa3ed88104a1d50d89a9","size":151,"data":"","first_seen":"2026-06-02T02:17:14.062405Z","last_seen":"2026-07-16T06:51:04.410582Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f4779531e52edead1ac91e114dfb5675","sha1":"a002824704a044c4f1bd53a55650de570b25a618","sha256":"b2fce63751bc8279edb8f5486378bbff9b49f65ca140eeacc05b48ab59867561","sha512":"dbfedebe085e201261943c837ee1ab15205727e73411f1ca2744dd346e09791590b4ae021a31e121d69416d4b143452aae0db4df2de5d3a208f9b386185fd016","ssdeep":"","tlshash":"90d02b9ff7ba621742ca6418d49b06171069f78a4b04cb93003709ea94255c10237e39","size":272,"data":"","first_seen":"2026-03-02T18:01:59.418602Z","last_seen":"2026-07-16T06:51:04.441583Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c1ee377ea0110fdf343d6a209e43d32a","sha1":"1a0990032b30e418fc6240f670a30f6dec61a00f","sha256":"0e77f6d907c9f0aa26713164740be7d2a55a522d32bdc018fc722eff770e20fe","sha512":"7506bae462879a1c44eb8a1229ae8ee83a3e5b567960d219fe623352d78a2f81ac4017f363762ee6ce07a66812cd9f04a60f9441006fe90ed3aa69636b685574","ssdeep":"","tlshash":"28e0122bb29f003f48cb715b78568a11801756f79c4b9b25b3321fbd9017a4ac188efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.208698Z","last_seen":"2026-07-16T21:57:18.229686Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8a6e3052e70a1852370b2c91a6bb6a02","sha1":"27f66236de950466cbbcc3ec96e3f54f82be8d75","sha256":"259a90275fb60b54095b2fd612e99cf15b1900622cb9a96c8992e1a4254cbfe6","sha512":"f76a7e150eec2f75dd2942e7cda49fd7aa0d4c2def6af651569a4e64d1d77d465bc435e3d44d8b1be2808b0e53ee935bbf2488daa6a6b39f9723c8bde0667910","ssdeep":"","tlshash":"d1e01b2bb75d013f08cf615b7ccd4d1180175af7dc479b1572321dfd501a64980489fa","size":358,"data":"","first_seen":"2025-10-22T20:37:51.100522Z","last_seen":"2026-07-16T06:51:04.481583Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f99b1e88a04704ceb30e67736e2f708d","sha1":"d692eac6dcec80c7ba2db3a5988c1d0b6518fafe","sha256":"fbcc3919d686e533b3ef331799f8d35789778ed73faad3417510129728dda27b","sha512":"0bc93f6eec48aee9d953f312cb9112296ad04581a1fe083464e762b0c5143c6fe03285f596e87e9b77980142047285d0d566abbd458e821d861ec16d7418b733","ssdeep":"","tlshash":"90b02b58f2af3035268221a610594001b00251100481c102121d02c4101c2840022e12","size":111,"data":"","first_seen":"2026-06-01T11:22:02.963481Z","last_seen":"2026-07-16T06:51:04.60426Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"71314d39effd197f7cf7b1549435292b","sha1":"52d4dc672fdea6adecd68e521e42d4f887290af5","sha256":"5693e7a48a73290d66e60bfbb0b6ddb159fa309bced1b1f41b55f71f3de04a22","sha512":"f05406608f7fd0c85e319c48e5fbd16905598247e6df782f98ffad6946a752575fad02b5695cf1c7b56948bc9cc5a04b163fe699ef9a5e5bd45afd52fba01269","ssdeep":"","tlshash":"20c0c21af388503e058fb02b38554a1a461707e79e82a215133109ec501ba428004eea","size":190,"data":"","first_seen":"2025-10-11T09:00:05.378157Z","last_seen":"2026-07-16T21:57:18.533632Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1f960c73477593dc9c3096993a290edc","sha1":"5e56e4e5e0c17f3b845c5c78c676f6403f3e3cbb","sha256":"078049e2050a3ad3520a2eb65c4668c4c0e313d38dfa1c4f17e469d72347e353","sha512":"9f5b3d187f4b615132c783cc9feb55eb799ed4ce126d52c7170a275e69e88c863e95a719a1f789747642c1b20df8f3c3f96938e2a72532a557e40380ba51464c","ssdeep":"","tlshash":"22c08c7db23a202f054a904d281bcb10d05bf6c02e828f2000ea3ed88101a1c50d89a8","size":151,"data":"","first_seen":"2026-06-03T14:26:58.49363Z","last_seen":"2026-07-16T21:57:18.234684Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"417d83bbcc9b027fcb261df71bf2ccb9","sha1":"f82e408c5210ccd470bc4c44f394170993bcd939","sha256":"06486eab0c8acce2fbdb7d04d7adbe13bec47f08f9a8dbefd64980450cff1d75","sha512":"c9f8522d54dea411d90520895805c9cadce71dfb9c2219b27417df1da2dd12fcd9c2c95acbde66c5e4960dd2dd25609cf117c872380d216d4c7d1a39bbabb4b3","ssdeep":"","tlshash":"88e0122bb99d013f08cb655fb8859d1181178af7dc479b2572321dfd6017a4ac288afa","size":358,"data":"","first_seen":"2026-06-01T11:22:02.922301Z","last_seen":"2026-07-16T06:51:04.404128Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3ce606ae64f8065c77931e5152434655","sha1":"9a03d3528b69c366032a3507799d11ebb57bc8fa","sha256":"46e37936f292a2605ad5f3fbafc2b440a6f5e588e95c9503606545c0279801d1","sha512":"93c04ab8b1ff4fcb1d44b1a2c724984997dbb4fde844f77a55f2e0315e8b40eb027643f744559d30ed290a4f1b72cd0612b0bec12e189170b4a6a244e70fd07b","ssdeep":"","tlshash":"41b0125db19626a9e34e2017342941212047159609809924a12586e89105b144130ea5","size":90,"data":"","first_seen":"2023-11-30T16:50:00Z","last_seen":"2026-07-16T06:51:04.230093Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4a761e184b54cb99771c2a8599bf5a08","sha1":"3a5a6137da159c86042987029681f2261eeffefb","sha256":"ff20ad8447519fad3bd8ff924e76ca5ea77d5b6d2197413a25d21773a9115d99","sha512":"0b253c15de86c57e699af4f4f98b604d7fe1e6b9362ae37c285f6730d1004609da828c401f4c9cd630afb3b07adee0babb0474ff2fee9f94b9cb34a55246fa0a","ssdeep":"","tlshash":"74e0ed2bb59d083f08cb715b78654911802b96f69c479b35663219fd6016b4a808cafb","size":358,"data":"","first_seen":"2025-10-21T20:04:37.515422Z","last_seen":"2026-07-12T19:53:39.055633Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0d1b8cf8db40446dcfe7e12e95a50c84","sha1":"ecabad3e0f57376a5a6e34b4416e95345ed01cbf","sha256":"6f9cd79d38fb121d55b89b99fb35c19fe28add8c2b2eb3f51156f57e039509c8","sha512":"dfe6b5b3c451b9dbc01a7d77acc26ec167f2da4cfbfa7e9a5ee848fc886854475788b4fa94b2d0588067a77ab4945b3b3bec37175357218bb59febefafd10104","ssdeep":"","tlshash":"df113a6a765c1cfb44ce3d5a78c0057114bbc3b35ac4fbd9bb3956f98c61a014064ea4","size":921,"data":"","first_seen":"2026-05-20T05:55:48.979058Z","last_seen":"2026-07-16T21:57:18.430415Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b5f2f724ebd0512c27ecd6bfdf4a7e24","sha1":"9829bab7f6c7a426f888ea4f2bd9285f27fb4cfc","sha256":"59e7a610c0998c9774bfe82c8e5fa91e3a455749ba21d2ec0e625dacad690414","sha512":"8d1986bce50dcba48eaca7ef6381a5217fcec638fae004df531e9c0d8e6df0482a8413ab36c67836193f396aee75d9ed7310aa579c01d96054269d3a09e48c12","ssdeep":"","tlshash":"74d02b9ff7ba321742ca6518949b06171029b78a0b048b93003709ea94255c10133e39","size":272,"data":"","first_seen":"2026-06-08T09:34:55.698029Z","last_seen":"2026-07-16T21:57:18.354024Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1c078c6768967de0d1aca9d6fb27ce31","sha1":"81b0ebe7381914755663152a2fc5924946f05227","sha256":"1bd72edb23488678da111fc2e25670384951a11141b75fb5998a31ee87ea78d2","sha512":"c22ddb003eb74aa77ad363635fdc0cb82ff20424f245d262c4744c1f58f9cebef39454d878d43de908be3539270b9a07c76b7c39109664203c53a7e26650c039","ssdeep":"","tlshash":"63a01219f3853125034b703a103a41152003066108018201522644d840c92454014da5","size":80,"data":"","first_seen":"2026-05-27T18:49:34.567254Z","last_seen":"2026-07-16T21:57:18.518783Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8c21e09cd070b94f6fba390a0361b702","sha1":"8f1305689e003f7c93e0380fd88007fa575f252e","sha256":"49299448eb037640de7d12e5a2833696cd7669a4e70d97819c3969b5e2115e42","sha512":"99f71d102b757a30049bf737cb6e04f3cdfa6a76cb63660bdbb06aae9476b0b9886e23dc0efb16a6feb80c1aa961d643ec1e747aeafc7326f7817080281c3f9a","ssdeep":"","tlshash":"b4b0125db19a23add34e201734794111204719950980d124613586e89125b684030ea5","size":89,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T21:57:18.276498Z","times_seen":198,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d8dfd69c4fa5d6fa499c214a22a5a213","sha1":"c45612f11da10dcff90eeaf7fa8080a0799512aa","sha256":"a23a0769afd819b647f169c4b48d0d192f1be71f3f56c816a554afe5a6016ba8","sha512":"9b18ae8c351362a1bea64bc4a49770fc3844c1c7732fd7b8c1f405ca55a00138c9f013ce113d4293ec92d870e8abbe60dea75db6a64fee68971a3ff3925a1084","ssdeep":"","tlshash":"afb0125eb29626bad34e2016343945112047169509809534656586e89205b144034eb6","size":90,"data":"","first_seen":"2024-03-18T10:51:40Z","last_seen":"2026-07-16T06:51:04.201408Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83d87ea9d9f45365ffa55893575325bc","sha1":"b9716bf3137a9a0919aad3490cd7a529c44ac85c","sha256":"318fc3f8016aae64a0f53d56e8e388ac5ccf9d9595c79e35b7ddd6375cf72ffd","sha512":"c3a8db1d6c24286291cc6d9befa1b4fca4f8b0a3fe7407bbd98275152ba1d2945f0d5cf763f18e482b3a410157301f402484424ae7f98ded2bdc3ec44e6f6590","ssdeep":"","tlshash":"31112c5a765c0cfb44ce3e2678d0057114fbc3f359c0eb9abb7956b98ca6a014064ea4","size":921,"data":"","first_seen":"2024-05-23T17:50:07Z","last_seen":"2026-07-16T06:51:04.175538Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"57d04e17742bdb72abd054a3932c93a1","sha1":"a1d3ff7fb0d4111b10c29b2e7baebaebcfe813db","sha256":"694881105d7b59f840ad63f1da4da1a8091ec527a848f2a9db7b65278aed35d3","sha512":"d2b0047ddb24629d922e03f8f3b003a4c9988c18d8eac5af59d323b8df615a99e8f3c2443550a21246c824dd34ce40376b7145a43e7fe0f56ec380a5a8e31a14","ssdeep":"","tlshash":"e1d02b9ff7ba231742caa518949b06171169b78a0b088bd3003709ea94264c10123e79","size":272,"data":"","first_seen":"2026-05-28T10:31:18.742736Z","last_seen":"2026-07-16T21:57:18.238408Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"379a71857a4734935cc54f02e161548a","sha1":"cbe7699b397dbf617c3f041ebc6eddf8b249cd2d","sha256":"72c88ea147dc42c699307b8a6b98a0cf07a23528f477fb0b0c1cfe7812f0df49","sha512":"7c305f1e11f688e6a60a0d6f96610d5b644491a0d8bfd715c1aa3fde2efe1bc18a82237228c4088faf3444a7011284403c7f0e7cf9f85383fdf02fbd0241f7ce","ssdeep":"","tlshash":"1eb0125db19a26add35f2016343941112007159609809134612586f8d105b154034ef6","size":90,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T06:51:04.329568Z","times_seen":312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8a540ebe8b9ada2bfff90eb55815f0d0","sha1":"9f47f67a84a6e29303b692481e02c096c7aa38f4","sha256":"dc904f5f1e7cb4875c9b4c31200bf294e9fc6117b178105b953155c8da99d0e8","sha512":"ac09a764751a156a074666f4bc67e42203022a372ccf993df8cc4ecdbef10f3fe3964d00251488f329025447d2d5243b37edef9a28118fa9b46c619d75cddaf2","ssdeep":"","tlshash":"50c08c3eb23a242f054a5049286bcb10d05bf6c00e864f2000aa3ed88100a1c50d89b9","size":151,"data":"","first_seen":"2026-06-08T16:37:15.945554Z","last_seen":"2026-07-12T19:53:39.060368Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b0c5d03a26e8bcb1515b6791815ba427","sha1":"fa600d47aa9201aa9b2a42772e1329a983d1bd83","sha256":"a128c66ce63ae492d07494cb20323dd76875ad6113d368aff4a09551d3c68957","sha512":"64f935d48e8bdaea87b8bb77b54ad8ad6fc48be352ac5361db6601eaed40f224f32a76a1a10b7d68f772ede572970a75a6d93c30393f49c9be426fcfade5f2e0","ssdeep":"","tlshash":"3ec0e95bf38c203f05cfb02b38514a1a514307e75e82f31513321dfc981b6838804af9","size":190,"data":"","first_seen":"2026-06-08T09:34:55.368782Z","last_seen":"2026-07-16T21:57:18.442552Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"20141ca89b04fa5484ea62addbf2547f","sha1":"c51641da1ef489f45690a2af03cd843967f742e5","sha256":"17b333ed44e4e8d06b39d778e96ad661c45aa02ea285d38f7dbb89596e24d94d","sha512":"e5c79678c3df2488fde9f23fd1a8a527e05c8161f463d4f110da3fa0d2a16617db13c4957f6eda9baa91972e4e26c468f12f0c5ea786bf7fd9ea7d01b25f8571","ssdeep":"","tlshash":"5de0122bb59d103f08cb715b78494e1180174bf79c47db25b2321dfd6036a4a8098afe","size":353,"data":"","first_seen":"2025-12-22T06:43:29.910526Z","last_seen":"2026-07-16T21:57:18.160063Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2dbf9e3e2bd890a29e8ff7ef553c9569","sha1":"574b9952d26534b65b6e59ab6f13c7a3e3658a5f","sha256":"2ee312e89936a7810c6407ac47dd1f07e7d9fb17286a955d50a349bbbe5adf9a","sha512":"1394dbdec73783a50668912353674b437cbe5d5f325ac85ceb038b2ae8ed75904a9643c6a6272aa87965a5f9b5438248e7a05a3c7f16a3674c6958c5f753d7eb","ssdeep":"","tlshash":"93e0ed2bb699003f088b655bbc858911811786f69c479b25633219bd9416a4a8198afa","size":358,"data":"","first_seen":"2026-02-11T18:13:10.38196Z","last_seen":"2026-07-16T06:51:04.265259Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0a8b94c010ec5442390275cc5134a9a9","sha1":"b03ec074584e5587ed98e7197c46e34703d3c6d6","sha256":"1770c5a0dc56c4fe69a692e6687be93757243bdf1048e923bb2a567e1a3012fa","sha512":"8f4b663e90ba26974efe445029826922ee8b26fc29396512a20b79b008ed630620275523b7d098603d9fb274cb6023e45f137289c8d60cadba315e8f30ba0e2b","ssdeep":"","tlshash":"12b0125db19622add35e24173429411161472d9509809224612586e8e105f148130ea5","size":90,"data":"","first_seen":"2023-11-30T16:50:00Z","last_seen":"2026-07-16T06:51:04.498843Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"967ba1f9ca85a8b08bb7d89646f512e1","sha1":"4d554650b2cb1dc08591a3ad532028244c7eceac","sha256":"eb7a0057a7930c3b6546881ccdc3e5086c9468d421bdc99aea416461cf430c6b","sha512":"187679372782c985584d203535761d65e917f203f144fdf3f5e8346552973f823d44fb9a55a46713d01527f7b20442f5557f7420ef01c28a7a3a2ace4088a985","ssdeep":"","tlshash":"2fd02b9ff7ba221b42da6419949f0617102ab78a0b088b9300370aea94254c10223e79","size":272,"data":"","first_seen":"2026-06-08T09:34:55.391575Z","last_seen":"2026-07-16T21:57:18.532798Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bd07ba6e5a46c1647df74cf04ebaadf6","sha1":"db639bc371c0c6248777b752d989e2adb112fe8f","sha256":"3dee704ebb452711efa50a2f062e52eef6fbeee9c936e9e5525da9c39ce1ab3d","sha512":"fb19d1b2a8445fb21af9262fc33815386804cf1c8be7a55e26cd5dc6b8611debe31e61cfbc3ff52b157cbf1a9f873e28dc6554e8791c5ffb28deb6186840c004","ssdeep":"","tlshash":"1de0122bf199043f08cb715b78754921801b56f79c47db25b6321dfd9016a4ac09cefb","size":358,"data":"","first_seen":"2026-06-05T13:34:01.110387Z","last_seen":"2026-07-16T06:51:04.503252Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"db67b7ea89a29a10d9665227524c5582","sha1":"55ac484849bdd5b1d5d79bb0661f9b4d356115dd","sha256":"a4d307df52b4f93e593433248869751a4c42439f126d08a1b82b34f7f146218c","sha512":"4f683f2c17f1feb5b2baf6f1d72abd73e2c2a4391130852b5adf7cd7800db201afbfa46a46682969d3d8ac345df09efab0ca3064bb6a845477360c84b2ae5e23","ssdeep":"","tlshash":"0cb0125db6d722a9e34e201a342941213007199509809124a12587e8d105b144170ea5","size":90,"data":"","first_seen":"2023-11-28T22:30:31Z","last_seen":"2026-07-16T21:57:18.385748Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1341fbca601c7adc821a1e727c938080","sha1":"646acfb5bac1b20e85b0fd2a8c0c2cb60a84e8fc","sha256":"d2407fb1b210be5929d59c48e518fc3400128e210c475a0c4ff80586e724fb19","sha512":"5c1f796feef8e54d2c70d8d48d2c1c25c07408ec287868d27f0171559863fe0b2ddceba27eba6185d02daea6af23b8186d7fa12c07be156977321aa191ce72ac","ssdeep":"","tlshash":"35c08c3db23a202f054a504a281bcb10905bfac01e824f2000ea7ed88200a1c51d8da8","size":151,"data":"","first_seen":"2026-01-12T15:19:10.662652Z","last_seen":"2026-07-16T21:57:18.537213Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"679c93fad6a39e7d1299e5953ec373ba","sha1":"23cf6929c0cf1f7fcf89705e82ae37d857577e4e","sha256":"dc137ec69d23c26e1c798dcc2badb5ad8844b5f697e7809109d99dd38d41f311","sha512":"b20ab523247da7793a306f57ba21a490936b975464ab1642e548581b28057020d87943212c79e74b2411868f88b9afff637bcb718ed13bae60afb769b1aa1356","ssdeep":"","tlshash":"a8a01259f38531260347702a506641153113016108058204522644d8540b2454014de6","size":81,"data":"","first_seen":"2026-05-29T14:30:57.168086Z","last_seen":"2026-07-16T21:57:18.254611Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"61cd1bb512540edf2d85f588b039c818","sha1":"744943bef3239827b08693e2c1676bda8e71682e","sha256":"fbb8a0c4f11552804d669d538b2e282315000867f666956eafca782edf3a6083","sha512":"846c4dda6f142e61bfe0136723e43b323a147e1c1c94e026f0ab1cb7bc7bde3a373b7138384ce6d17740999342264e08b9f8e9ebdf3cf26c8100ecb0a3ef6b17","ssdeep":"","tlshash":"bec08c3db23a202f0649504a281bcb11909bf6c02e828f2001aa3ed8c101a1c50d89a8","size":151,"data":"","first_seen":"2026-06-01T11:22:03.003417Z","last_seen":"2026-07-16T21:57:18.593389Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93bb1aa509d8278673b97b19d8526cff","sha1":"6c8bb50e52c6e4ba3dc7b85f09b18dc641e0b981","sha256":"6614aa20eeeeae8c31af7bf39731fb9ba87f16981712cccb125ae56912dd9aab","sha512":"4d588b4912a3a424e9f6e8c0431c42ae530933db77cd05a1eb0ff8266d092f3a55b17205667d1582af122f216d15bc112dac2d31b42212c3a3897946ffd55e0e","ssdeep":"","tlshash":"1fb0125db29e26a9e34f201a343941112007199509809134612586e8910ab154134ef6","size":90,"data":"","first_seen":"2024-03-15T19:21:56Z","last_seen":"2026-07-12T19:53:39.066621Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5653ecf2f8de1e973d723a283ba3abb0","sha1":"7a185d6949869d436fa1cdf41533446b5726173b","sha256":"b9047fbdacc8bdc8f2cb544dc1429a3fa7c4041bf8adf3c240faebb7a6bd1b6b","sha512":"89288492682ed89612cef45d5a973fc667a2c3b41d3c9794216d0b29a434afded63c2572370b1ef04693fbc9978850ebeba58cfea58b4ff2f01ee4545461f459","ssdeep":"","tlshash":"95b0129eb19627aad34e2016347a41112017159509809524616586e89205b144034eb6","size":90,"data":"","first_seen":"2024-03-18T10:51:41Z","last_seen":"2026-07-16T06:51:04.195937Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"eefdb746581b7826f66ada8b85668a5f","sha1":"f7cd384c5b85e3c121641d4c7659a93b4fb731ee","sha256":"4525a22ccf46a78c2bc14427ca1822e72c9bc586e27f2098d557289bb87ff7cb","sha512":"eb0593bf54ab4700bff8b365b15da85c9d45c8b5ea90d5f231906a507ae41a3fcbf6a97ae2f2d15feca1ea349b7c31695bfaf65d86bb6bdbc63001ca062ed744","ssdeep":"","tlshash":"1db02b18f2af3021168624a520194001b01290100440c152521d01c4101d2840022a12","size":111,"data":"","first_seen":"2026-05-27T00:11:11.64645Z","last_seen":"2026-07-16T06:51:04.359173Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"914818b2c89ac4f655ea53d4ee44c2aa","sha1":"4a6b12fa5e5720fd228c1886f37dad4d20d8b75e","sha256":"06b08bee2267237b27158fa36b8655a3906d728e56a2ca3209a45fcef261da8f","sha512":"988c652b5eec0fcfc3c2094179c0783bea73222c7bc2a71211847ba7506fb6b7b8da86ce009a332c0924498d9398174f88b1ad01658c21f57ae045d5cf4b21a1","ssdeep":"","tlshash":"4fe0922bb19b003f08cb711b78454914809752f7ac479b21b2321efc9012a4a8188efa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.715126Z","last_seen":"2026-07-16T21:57:18.58581Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/legacy.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"373a30f1c10381c1a9b6f7cf75abc104","sha1":"eb2b224bd1577f2e112b44ec75d86a9f40617c1d","sha256":"e39b971c57f741685ce756b372ba5bd987279161949ce44c0e87fc749c7f54d6","sha512":"d160b33e50fbf2d18ee830078ec25d0c314e18857d014f22fdc8146540946872a3eb64da5b7f5d092fae82c9d23bc3ff3266c5fb144d9a14b78500dedce56a5d","ssdeep":"192:F+z64zbZ1QKzSPzOnwNsSvorlWvye8BRUb:FA6KQBPNpJvqBqb","tlshash":"fa12c8d6a963d9a402e4adcacc195299f6069c3803ddb894ff59fdc17406c0e30e2bf6","size":9188,"data":"","first_seen":"2026-07-10T12:35:59.968618Z","last_seen":"2026-07-12T21:21:00.137838Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"803279d03bbc4ea03457e74d475f061a","sha1":"50fec35b42e0317354c06fc3d0f61f999be72e6c","sha256":"5bdab77d84873e3cc10cb95084b412f90feefd96f453cdb636250cc11a800fe7","sha512":"4982cdd4d3a219939d576f25df7f638655a97ba32119c6b62d0c8ba6dcdf48e6bb6fe099ac84ccdeb5dc2dd26b58dbdbf43cb8514070b44012860c2696f614b9","ssdeep":"","tlshash":"dee0122bf399003f08cf615b7cc98a11801756f79c8bdb2573321dfd941ba4a8088afa","size":358,"data":"","first_seen":"2026-05-29T14:30:57.118211Z","last_seen":"2026-07-16T06:51:04.19883Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e409e68ae898ab25c2b4210944d8d4f0","sha1":"7f31da98ffbc750b58c6fddcc5fc21c5af5957cf","sha256":"3c9e93e2e74e277b1726cce49fb3faabd0bf39d3c81838652601b0e074981dec","sha512":"c4eb519953bf699c80d55b3c2da3aa9fb8b128406bbe10c51b34b0a4531f004f90300790f05b7674cee72295deb169d1ffc0b425a37e8197cfb6a417729d7ff1","ssdeep":"","tlshash":"8cb0129db29622a9d34e201b3429411160472d9509849224612686e89105f144130eb5","size":90,"data":"","first_seen":"2024-04-03T00:03:26Z","last_seen":"2026-07-16T06:51:04.49029Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2ecd9e7a0b6d904ba957236aedc0da1c","sha1":"bdc19c33587efc7c008b900a5c14c44d31978b07","sha256":"61c5d4247837a1c6355ea0de71608e9560c0016e77e9b66586bab7d45bb41e27","sha512":"8b2bb101fb70bd99fdafda1054dbe2e07a0f85afed1b85f2e2aac15b47e39433bfff0aef96938d58fa02e5a415644911234b4162b5bd56ce40e5fdf0ad25550a","ssdeep":"","tlshash":"ebe0122bb59d003f08cb716b78458911806746f69c4b9b25b3322dfd9056a4a8089efa","size":358,"data":"","first_seen":"2025-11-12T22:00:52.4447Z","last_seen":"2026-07-16T06:51:04.583299Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0df9ba7cfdf8b42b8e5f5f29c49a579f","sha1":"e2c0a88e32130054537f4fa80927de8c02f36a89","sha256":"a718a3e03819835de8cdfe3a1377da072567eb111d7255cc3d22414b4ee6ba5e","sha512":"2dccbf20c35c656f93a86060f96896d9b060f9f42e19dc2a63415812ddfb21b1106c11004606ea0fc2da6e72ddcc738a958c4152b66daa29b994c10ff1001a26","ssdeep":"","tlshash":"48b0125db69632a9d34e301634298111204715950980e124612586e8a905b194030ea5","size":90,"data":"","first_seen":"2024-04-24T13:59:12Z","last_seen":"2026-07-16T06:51:04.519701Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"187f24dd882f4d37a93a373569a19089","sha1":"107011ba872daf0115b6ba2692ec46c763d69ce5","sha256":"a8570ed30ec95d2c92b640d7286845da5c04deb0d9bbdccb085c8557158a959d","sha512":"3304780820211cc81fea54d6fc03610b841bd5a93c91233ca388ddcb725bac4d2e6ffd8778b1449ac54f437887da3350b8693576ff058e0d2c7f73dc9f56ea72","ssdeep":"","tlshash":"c5e0122bb19f403f08cb615b78454a11801756f69c479b25b2322efd6016a5a8188efa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.826758Z","last_seen":"2026-07-16T21:57:18.450093Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www-emu/pbc-core-analytics/v1-stable/comp-data.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e19f22dbce44152b3bcd6a030d6a97d2","sha1":"64f825cf774e0ee7571878bf24d85e3e905142f0","sha256":"e6fa0d5861bf241e0e0cb1834252dbeb6bb8c6be3307bb018474e829baec9753","sha512":"23a5d3bf8fdec1bb9a870cafe6e90b43efd6ebb816b3b2df3d5e010467d1abc0f2350f8229d6107c8d1ec50918eb0f90c2d0e953d20e9cb6311b1043fe5eac7f","ssdeep":"192:N7+zDrAtrzxg68LRkwUVRLcBjTAF6ejxpzDU77BaafkXOgOQCYF29qrncgxas2of:NPt8LxU3LGEfU/Baatg1VnMs34ZNSrv","tlshash":"4262e8e2a612c6b903ed95cad8189145f9592db8064ef548ff4decd6219fc0270e2ff2","size":15601,"data":"","first_seen":"2026-07-10T12:36:00.038992Z","last_seen":"2026-07-12T21:21:00.174059Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5df9ec2d72d1c6a0fde97d62207d6764","sha1":"e36a10665edd4cd0c6d6f7a9e4f2bb8bc25df789","sha256":"6d9ae64ff7d64554479b84a22c7ed5e406e782f0fd6d5b9ca78c89dcf0e2f7ab","sha512":"0d712becdccc7ef23d17ab20926724b4fd188d7e5d04ac519d36dc4d6b0737c57da9afc3f6beb7c84e268d9c122f9f7cf0ee20871e4ba6a23ef344b1fc8d8ef7","ssdeep":"","tlshash":"56e01b2bb759003f08cb715b78454d11801747f69c47971572321ebd9016b499044dfa","size":358,"data":"","first_seen":"2026-05-28T10:31:18.736442Z","last_seen":"2026-07-16T21:57:18.352962Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95a90b027860dba308edc2d238087b08","sha1":"d77ab8eac59802fe80a29a5da2afc955c7f83e1e","sha256":"3c94f3bdefd9f5223e0f9ca0dae4f3aecac0c1d796f81335bb0690d028b3e5fc","sha512":"5cc6757b03e031dd972f0de23a50ac57a2de66b90c31938f0ff04e9e5d74af1e2e33a3616b53a0771dea9cd152768f3006bb8b615c6b62ee4c2c532eff4ced23","ssdeep":"","tlshash":"9be0122bf19d103f08cb666b78554921805b46f79c879b25b3321dbd6056a4a8088afa","size":358,"data":"","first_seen":"2026-03-11T20:39:18.63251Z","last_seen":"2026-07-16T06:51:04.325431Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f546cfa62dd3c6f683cf931c9a0164ac","sha1":"4f6515e5ce58bfd0dee0f8c04e299dcd13139a15","sha256":"a69a27c0b17a57640fbf781fa44790046ad1962824e7158a613e36df2dcf542e","sha512":"18c20698376cc2de94f29c3e0761368ea8a7083490194b4be28592f0acdce0004db18bdd04e0079ec6fe1c4dc0bbc5e33e9412564f77475bb6928a343ad32602","ssdeep":"","tlshash":"31b0129db69733add34e6016342945522007159509809124612587e89506f144130ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.616939Z","times_seen":169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3f206efd14329e39aae838c9e6cb6574","sha1":"59c2e600b896f44d0146480924befbe6d65bc60c","sha256":"0df73923e96944c5037994c607511b3feeae17c5fbc5c52a2ccb88d0be53c8cf","sha512":"afd4f5736362d658397516d1046b880454a72937d8b3164c7a3523c4c8982bea7411f3ade8785a9e7a72147fc01a8d2014402ca1f13ed47d9edf37ba1cf45363","ssdeep":"","tlshash":"e3115c5a7a5c0cfb44ce3d1ab8c0157124bbc3f359c4eb99bb3956fa8c61a014164ea4","size":921,"data":"","first_seen":"2026-01-12T15:19:10.629242Z","last_seen":"2026-07-16T06:51:04.159899Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"06522d0422d4356123af03c70d6c3719","sha1":"7147c7cc813b01278baf6ccdf82256b7b7706062","sha256":"f81e0d12010a045bbfad28d512e2426d5740a232cf9d703c70c3fc6326dc336b","sha512":"a3b98dd3c58e694e1cfe3608069d0603d16869666cf97a48eb49f76b1c69115e5be330a9531214d5ed48f4e60227978c3359e70ad1284e9e107a47e1744e5246","ssdeep":"","tlshash":"a2b0125db29722a9d38e201a34294111300719950a809124612987e89105b244170ea5","size":90,"data":"","first_seen":"2024-03-15T19:22:05Z","last_seen":"2026-07-16T21:57:18.163062Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0b64c66ab499fbb2bf943628ee7d4124","sha1":"4fdd53e116b24b4afea074377a91c92eb7bf0686","sha256":"ceb8f48a46be51b9fea1bc4bed97621b77b1d70eea626dd12f968100936f5fde","sha512":"d93a16953221eef842ebdb463e049ba864fe4a5e201b2762429349a57f5c163d4d372bf65925e1996a447ea6097d8e9ed3c1657171368451d20b913ff268038d","ssdeep":"","tlshash":"fcc08c3db23a202f094a5049282fcb10906bfac00e824f2000aa3ed88100a1c50e89a9","size":150,"data":"","first_seen":"2026-05-27T00:11:11.708487Z","last_seen":"2026-07-16T21:57:18.284456Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"66d58aa3d91115f0773d5f7afc5b3b71","sha1":"2a81de0443d1ff765bfa701661a0a29e870c4878","sha256":"eec5d6fcd01cc8019709c689f320071bb55072dbd5239eb32146960b5ee8373a","sha512":"b18e25d20374d81e16767c021953fedc76beda08521ed4021abc5e184ba4621e9f967372d83f9920ba4fcab7f23012c0baf64ec5b900d226bac22f9bbba5345e","ssdeep":"","tlshash":"b1e0122ff19a103f08cb655b78598921815f56f6bc479b2573321dfd9017a4a8088afa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.888429Z","last_seen":"2026-07-16T21:57:18.364245Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e2de09856f4fbabe574b1cadfff569a4","sha1":"6c869248a52430fa3acd5bfa34582584f47e8971","sha256":"d39a6299d9b0c02abca050cdc21e46db981aaa7e9e2fd635162a3c782270b8ac","sha512":"9cf1029f290863bb462bef0293466c9645baaf8dac8bd0377ffd040c8b275346ef822038343823248449ef5ba1957bd1bf6936bc1d4163e3438f631f742bbb50","ssdeep":"","tlshash":"48e0122bb19d043f08cb655b78694921801b56f7ac47db2577321dbd9016a4ac08cafb","size":358,"data":"","first_seen":"2025-12-23T16:40:21.503889Z","last_seen":"2026-07-16T06:51:04.614242Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fb829e1e0f39ecdb99d71987f7c5bcae","sha1":"a80fd4afef4edd9416b1e1b404f5831b2ffe5f51","sha256":"5804cc4bef21e7c3316985ead3f9c4b4027419bc7addaad82d69643afbbba575","sha512":"637a3dfd9b7d5e20df9a1e8d5201aa2fc39daba0c73b224fe74f51c434a790c74cbbe61d97a987540419b67c4433a7ceed5d79642a0a974f09e38c9c5bc5c904","ssdeep":"","tlshash":"c9113a1a775c0cfb44ce3d167cc0157514bbc3b359c0fb99bb3955b98c66e014164ea4","size":921,"data":"","first_seen":"2026-05-27T00:11:11.755565Z","last_seen":"2026-07-16T06:51:04.574365Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"74529f1da010245b4c97b5355e6dd255","sha1":"740a8905bb0b0d0916190db1b891f553387b482a","sha256":"f9da2899a684b164423415602c9f6f40661735797c288082be14fcda71b9c920","sha512":"c3e66976e52a696264373ab205c8db702f6467bfcf7d92b2c1553fd23aa1c83e366fdceb639abc237f54384ed096f1a18374a1349eb3ccb0b496ea7a5f055a32","ssdeep":"","tlshash":"15b0125db59622a9d34e202634294511208715950a819124a63586e89505b154030ea5","size":90,"data":"","first_seen":"2024-08-20T03:24:43.892327Z","last_seen":"2026-07-16T06:51:04.492751Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/xsf-nav/v1-stable/nav/www/prod/en_us/prospect/config.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56865a02d72acea7c1846b55ba3d8e96","sha1":"dc650cde3600b1f6c03322e35ffe9f47391cc142","sha256":"87b028d9b5e34c260ded7207b069ac8f13684242718e93a35e7c9ec75f03da4f","sha512":"cbfe4fcb80e96181699f2a93fe4d0964f0cb88cd19d5ee67b3949a4c63f15387d82d842bcfde850b335c48b14f6b1c7ec8f6c5811f5b7e67459cbfa5ddc5a611","ssdeep":"768:6oCzjTPbroZrT/hnF95L9LYhfr3pWz0GPBK+eFI7b7kCxIyozR8Q7cF8gDQxlWFh:DCXTPtapF7ACzj61viXAjN6Af2L","tlshash":"379347af0f684633dfa47fd554a7e29fe44e128aca419eccf5909d0952d03d92e2b0e1","size":97089,"data":"","first_seen":"2026-07-12T19:53:38.776562Z","last_seen":"2026-07-12T21:21:00.105428Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9ef52d1c65053938d1976faafd39ee5f","sha1":"7f96eed8077215c6f1ca7182f949b8aab863191c","sha256":"8339fbc1f0a551289136675a618e63c14e063ec86cffd4ffaf6f114dc6acf5ef","sha512":"fe9e405c0df43c8ea1fbec9f866c8db3abc02af8f9dd8bbf5c37f1449395054f652d6d22916261d6ba7bd9bd889944f0aba98f67eeb8f32a980653b45788ddac","ssdeep":"","tlshash":"35c08c3db23a202f05495049281bcb10905bf6c01e824f2000aa3ed88101a1d50d89aa","size":151,"data":"","first_seen":"2026-01-28T18:40:40.594712Z","last_seen":"2026-07-16T21:57:18.445038Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4ad7da59c58dcbdc69edc418c967fdea","sha1":"b72481b6652f6cc4e06826c201f2c4addb2aef72","sha256":"59fad95c312cdd06e5db0f8a7beee0baa05c411da36fde2a6c13489a270e3914","sha512":"21de4bcb5abff3a1902686f324ff8cd38f8033a3332aaf9db349f970a9804522bdd0b4c9d09f4adc112314b471739a79f0ba5b5432df9763b44d9e209b06dcd7","ssdeep":"","tlshash":"6ee0122bb199103f08cb715b784949118117c7f6ac479b25b3326efd6017a4a8498eff","size":358,"data":"","first_seen":"2026-05-27T18:49:35.091626Z","last_seen":"2026-07-16T21:57:18.476616Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f7eb1743ec6946fde7c0627fef344f15","sha1":"0a481a0c51a05396f380074befe19a8e76009eca","sha256":"d77e3af22f9139384837368942290966da24cc1c34efea6ca9b1fef109a50ce5","sha512":"accd0f04af846f8b4a702d63d471b4eea3df308ab80a659fc8a1b059579639f01c2f8669893637261dee0a38bc0d8a1a9d6b1beb530a27b02d528f014a557a02","ssdeep":"","tlshash":"fac0e96ff38c103f45cfb02b39958616510307e74d85e31953320efc901ba829008af9","size":190,"data":"","first_seen":"2026-05-27T18:49:35.11976Z","last_seen":"2026-07-16T21:57:18.235667Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d879b36301a3ce6468d70fca478042f0","sha1":"e106a8104860ab14e3f183aafc3f3c836743da75","sha256":"5723b32a8730edc7d3d41a03cfcb8769d38ec1c42a079b39a4c3bccd1ff23343","sha512":"48e0263ad27605b59e7765df89379781cad3620f692cdee4b19653ddaf8ea08e08fe37fcd6a361d98675a3c51b244cc24c12b3345a62eb8737c345339a8e09d8","ssdeep":"","tlshash":"b7e0122bf199243f08cb715b78c549118017c6f79c47ab2572325dfda456a4a8098efe","size":358,"data":"","first_seen":"2026-03-06T00:02:06.014466Z","last_seen":"2026-07-16T21:57:18.342512Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fda98cf892d69ff585e1e124c8faceca","sha1":"20810e624b668473c903a1cfb048cbdebd6d9b1e","sha256":"4f94efb88e22a09b798ae5b73a537f93bb076bd7fe6b65178b8c7acff8e07280","sha512":"c7970f24a2456e3dbb64c4ab604929911618bbcf6891acddd749027ef8257bea490f43762844c9a9fd93bfe4c31bd5b050e45b16c6dad993bfde04310709bc64","ssdeep":"","tlshash":"0db0125eb2a622aad34e2016342d4511204717a509809124616586f89106b144030ee5","size":90,"data":"","first_seen":"2023-11-30T16:50:02Z","last_seen":"2026-07-16T21:57:18.391456Z","times_seen":805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3ee5e212c7fa03573136cbdee3e07208","sha1":"f454244aaa63308514e2e6af5dbad290d725acdb","sha256":"3d741cfefa249eba1b75b923607c761f44b5aeb744ff0257f6738252350ef96f","sha512":"11719f0fd590363ef814aaa294376be543d4a7ab258776cf5e743eda0661b5da02f2a0b245033d109cc088fc101a7224f1e38e30729122d8f264bfec4108e4d4","ssdeep":"","tlshash":"d2b0125db1a626aad34e201734294111204716950980a524a26586e8910ab148030ee5","size":90,"data":"","first_seen":"2024-12-10T19:46:17.644702Z","last_seen":"2026-07-16T21:57:18.50832Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe1b96b1c4a6bea5d6a1cdb1ca7762e1","sha1":"cf331364aa0c8fd5d76a15a2167d0b5562584f74","sha256":"54deda0c2d63128d03fb7f411b16d6d7282c702d06d81f63414419bf6fa013dc","sha512":"f80c369387981ec9bb392d9118b45c69f4798efc574f06314325f7fb4e0ae16c3133189b252b5c11504ae50dc27f98762965e3407e3c276f589479506edf7bcf","ssdeep":"","tlshash":"d7b0125eb19627aed34e201634394111301715a509849225612586e8a105b145034eb6","size":90,"data":"","first_seen":"2024-03-15T19:22:00Z","last_seen":"2026-07-12T19:53:39.080432Z","times_seen":289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"680e33adbc2922e6cb4ad80ba493fe65","sha1":"70b5be4f0a3bd9240ef1b0837fcef0d2460416e2","sha256":"88e46ba309957df44309f3c6bcd1ce02ac610a781af45cbf38e097a7a78807a3","sha512":"a48cddb6b7849b5a0ce3a878cd0249cc7f712d8a0196ea685956737eb511a5ec89aaa1e21e2621cbda64405145cf9cf44e8a1dbfb002f103de9270368b3041e5","ssdeep":"","tlshash":"abb0125db29663edd74f20163c6942162007159509819124612586ec910ab144030ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T06:51:04.444395Z","times_seen":207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"14d22b39d4f9cc3c5a32d963edc14a2a","sha1":"bed22da732d9619a06c788e77dce9811192ed11a","sha256":"7e797c6a4799f3e8c9434e58d2cc0c9b149ffdfba4eafb02b4b36ec1205bc034","sha512":"eb77b59bcfc040ba752a9a2fbc60e09785db155fde8f50e8fef8ccb139cce25c720b3c27c7fbce9b3d2ed8d863d4ca3433c4eee549202dd5c847a5d1f5f99731","ssdeep":"","tlshash":"d9a01219f3853135024b601a186641293013016208418200522644d8404d2454014d65","size":81,"data":"","first_seen":"2024-08-28T03:37:50Z","last_seen":"2026-07-16T06:51:04.292066Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dc2540df7985f2a470cf974c61704c01","sha1":"7892c85b29a7dff54575a84306c50a96f1513b44","sha256":"c2e728609d6ab9511599fb6f1ce2ad1ee90035066fc7ab3a5986346d7ed8cb30","sha512":"403b8f583cd00cae0c208b6253cfadd7bd6781fb0eaffbe2c7945f95892b9a39a437f7f776bf5b15039333adb72d00f15bd44465bcb7263b08f448af51fe04fa","ssdeep":"","tlshash":"48a01259f3853136024b701a602641152003816108058240522644d8400a2454014d65","size":81,"data":"","first_seen":"2026-05-27T00:11:11.681278Z","last_seen":"2026-07-16T06:51:04.158194Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3ce6d1dbbff524c45fcd974b173d478e","sha1":"c6dede7f2362af5f81db2b41880ddc34cff7deab","sha256":"abd17c0ddffc0778baffd8542d6217ca923df7d188c40ee5663053ebfc56bf6f","sha512":"a214cf9e87c3800cc0695a2c6cb25d758b2571a7f8a700db983b33d90b4a8a3d927bc6d91efe8a886d76c4a9b657b420d288a28e858222cae1ad89b557748b3e","ssdeep":"","tlshash":"97b0125db5d722a9e34e201634294121204715d509809124e1258be89105b144130eaa","size":90,"data":"","first_seen":"2023-11-28T22:30:32Z","last_seen":"2026-07-16T21:57:18.331405Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fa018234a077b27e9e4c1c10683d9f1b","sha1":"af42aaf72b13786a9b728a0047d8a59665fa195a","sha256":"37b4f2fa23b0845cbf354754e18cd3c603a3233928c83da9484b72f63143be4b","sha512":"d7c1ef2feccbd53cd86c6b098790d1d7baacd6deb927bdc11a463bbd3cf46097c1338ed0b70bb991d819be6060386503ecf4d6c5490914f313ccdc9229d92420","ssdeep":"","tlshash":"63b0125db59622add35e201634294111214715950a809124612586e8d506b148170ee5","size":90,"data":"","first_seen":"2023-10-25T20:02:32Z","last_seen":"2026-07-16T21:57:18.567726Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9c676fea9a92f70e4f6791261476159","sha1":"6e6adba248a86959d52a9bcd9ffb929b0963385d","sha256":"3a11473734f132094d74f28202c2176d1f9edceea7f03400bb3958e26c87a078","sha512":"1150c8ab763a1ed0702175cb926633a52f43a5073c050213ab8cc87abb56270b88c2742506706e2cea49ca75384924d3f2a760d429b3bf3f898e4fa38a16c281","ssdeep":"","tlshash":"d4f05cc36d10062fc1b5604c584511dd2568d6474b97dff1865ec48e6b04f652698c18","size":447,"data":"","first_seen":"2023-07-12T00:58:42Z","last_seen":"2026-07-16T21:57:18.565674Z","times_seen":1598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"51e6a0fe4dc2d417ff8a1a3604c98e94","sha1":"0d752ced51f90e0a823bc83f79135a55e8d46c3f","sha256":"4a21c9acf627bb456fb6483916c010e43acc24321108a1041d89978f290a3ff5","sha512":"182988010ae3038063878ce610620f85659fcf7cd4b098ac91fe7d748e245cfe4ac9a1e85db5f0138c564a566e17bc8c6d97e3796aaa9863609e916fc0ebd634","ssdeep":"","tlshash":"15e0688cf0db642802d7305734b88511302f68224068d1a4b2bb86a84ca194d817b968","size":358,"data":"","first_seen":"2026-06-08T16:37:15.850237Z","last_seen":"2026-07-12T19:53:39.084013Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"eaac27e31f5296d128ae681d0cd1e107","sha1":"45bd61aae2cd18d60d20811958e3842100fb5aec","sha256":"f2e220cc9dae5e6054305acee3aee9c3af5cc461f23c302977bc63867f49aad5","sha512":"70d683f8ea144d1ff1c78b006d87b930f635f77b037730fc953562d248fb586513b105c8402d2d1a904633e3dae8470f423732c4afa455de9b4501dd865ed512","ssdeep":"","tlshash":"31e01b2bb559003f08cb655bf8465d11811b57f69c47971572321ebd5017a45c144efa","size":358,"data":"","first_seen":"2025-12-22T06:43:29.924687Z","last_seen":"2026-07-16T06:51:04.19396Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a4a65b0be7bc605523bc6901030e0cd0","sha1":"9644a7ed6a047b5dafb5a427e29f5b036c48aa30","sha256":"e2fb13e92b209a3aeeb659859b78d85f8c86991a5455efe1dda943841e07876f","sha512":"d0495926aeef6c4b8f9687eedb1f1effa03f7794bd333e175016a8fd7cb451b384f009a69127b87950de8a5bd58e6bf9286c008a2f3b0b4460ebab1a512213f8","ssdeep":"","tlshash":"96113a1a765d0cfb44ce3d1678c0067124bbc3b359c1eb99bb7956bd8ca2a014164ea4","size":921,"data":"","first_seen":"2026-06-02T10:00:41.570161Z","last_seen":"2026-07-16T06:51:04.536713Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c0f79c4626b40567ea50c2d10739cd1e","sha1":"803cc1009097063d35145bbb955065479d78ae3f","sha256":"7acfb80e8891fe218bf2941f2142d375d8a63c637120064b85b397d904794504","sha512":"7c31fc68e66b0953d189fd09532cdc34a7e6c72fc21a85365b68e5f5f4c6e48520ab18b6e4c4655105c54aed122cb2fb1278bae5ce5d0dfefea9b7720c8cfbe3","ssdeep":"","tlshash":"ddb0125df29622add34e20163c794122201729950a809124a12586e89109b184034ea9","size":89,"data":"","first_seen":"2023-07-12T03:58:20Z","last_seen":"2026-07-16T21:57:18.159185Z","times_seen":960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"57e208f738f06be4433937684e36d08a","sha1":"71c5d3916e65d3e4458146a931983b2289bc79c6","sha256":"b5e6c686f7e3a2302d62018e0e69b4a11ae8b5f11e1d42dad65f6d75cb012836","sha512":"316fba76adfe3fa32ec3d7d24f30126decd118b30a339b037621be7a57e937b0b4eda72821df9cba5e83d2346a58475de5d4fcab9c212deccd36c4a9cf4d4a92","ssdeep":"","tlshash":"6de0122bb19b003f48cb615b78854a11801746f69c479b25b2721ffda017a4a8588efa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.897415Z","last_seen":"2026-07-16T21:57:18.435407Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8bdd1c8bc20652f665632ebc7be85bec","sha1":"4a75228964541368215df2148553c287384503ad","sha256":"6a5682b1a0ce672d797d69869b2d82315e6cb5708db882f9a63f8ae302bdde80","sha512":"ae9441e54c47a0c30eeca44818d1e4d6b66820069009596ff747099975d2fb9b08c59608b657c31f3a68869e4368828b008f587d1725c56cdfa7aad30cfa5d6f","ssdeep":"","tlshash":"0db0125db19a26a9d34f2016343941112007159509809534a12686e89105b154034efa","size":90,"data":"","first_seen":"2023-11-28T22:30:32Z","last_seen":"2026-07-12T19:53:39.086638Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"54a9b0e7aff173a81cb8a05a4c865b51","sha1":"0ade989749d8349a5a4add9a3eee15ab2a066228","sha256":"9278b208382cafd97aa10b636a10bfe97437b279da1cd373c1963d5be8ccb6f2","sha512":"4216b982dd37a37a9ac40f3cb0d29f85053aff4cf64b4dbb208d1e88e4a49744dae697d541e9f7f4445ef273f5bc2402fb8ec9b4784d475305cdfeedfac636b0","ssdeep":"","tlshash":"6be0122bf199103f08cb715b78894921801756f79c8bab25b3722dfd9417a4a8088afa","size":358,"data":"","first_seen":"2026-04-20T18:55:02.247581Z","last_seen":"2026-07-16T21:57:18.414406Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ef11e308cbf39c40df6e456e258e0e3f","sha1":"ffcda2a9dea51d9bd5cf613177d3920734ee68fc","sha256":"814c482bbaa04b10acdff0f5da36eec1e665445aa6bcac4b2c5c3266bef58ef2","sha512":"0db05b44a43db372cb270d106dfe0958ef3b86f456177cd275f102d54628b93f6afa839b6d85cd4f573af585923e7ea46ec3ea0eea9fd87f073e27a48236b133","ssdeep":"","tlshash":"ceb0125db29662a9d34e60163c694115204755a50a809524a125c6e89109b184030ee5","size":90,"data":"","first_seen":"2023-11-29T11:24:51Z","last_seen":"2026-07-16T06:51:04.317874Z","times_seen":444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"91ea025d9e58b4f6915aee655b40be30","sha1":"f210a2f7be13a3a7839a5cf42112f92e2226e336","sha256":"69e81842c1fb155599b0a250f7331981ecf05425f3a23cd58c86268a0eb6287a","sha512":"6de56e9632c4eb383dc91bafba7fe3fdd3a0d8127dfe7c2e744788c5b4852378613f6fc0f47d28f21558544da577caf645fc73e330ca122183830a4c6fe6b80f","ssdeep":"","tlshash":"13c08c3db23a202f054a6049281bcb10d05bf6d00e826f2000aa3ed88940a1d51d89a8","size":151,"data":"","first_seen":"2026-01-26T17:55:22.963351Z","last_seen":"2026-07-16T06:51:04.349119Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6433dfc60ba2453338703dfdfe3170ab","sha1":"000dbb116cdf036262d6ddae9396d63561ecf639","sha256":"c3ed73a1c20f53b215649b567307b369351d13e75b47f10a76a0fc18c3005a1a","sha512":"dab64ec1caaa2e50e127b2f45054fe3c0bf8d972e7aa8abc2cce8c4578e9e638c33e51ddd992b21bbe9bffddacf75c0c63d7f729b1c7fc0a1bc997181de00213","ssdeep":"","tlshash":"43e0922bb19d003f08cb645bb889491180174af69c879b21b3322dbc9013a4a8188afa","size":353,"data":"","first_seen":"2026-05-27T18:49:35.214725Z","last_seen":"2026-07-16T21:57:18.523821Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bad48a3728fdc7aa4b7883585096049b","sha1":"f7b1130deede661c440ff4f864517d58b09c08eb","sha256":"a5d0300ee01c2ad3b21b7b463441dc207d3ea6ae5f6a79b73b9f6b2c85554b53","sha512":"6fb86aff121cdadefdc59ce04c034d9ff902e1aa6a14a11572922820c58d090e1086b84de99b9e838f044cad4c021d812290534ef0a997f4195a6f2c2ddd12e3","ssdeep":"","tlshash":"14b0125db59626a9d74f202734294615208719d50a80952ca12586ec9105f644030ea5","size":90,"data":"","first_seen":"2024-07-03T04:17:15Z","last_seen":"2026-07-16T06:51:04.360187Z","times_seen":277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c19059d2fef0a14517202f715e2e63f7","sha1":"274205c3907c1e45062f8f42a9198ecc025b80ec","sha256":"4c7686e07455f79571b5096ed537ae777c60c1eae332b34da62dc1f415972033","sha512":"dab4087de707710212a35c75b84d49fba31cecec2f26f80154375282030ba759b4018bc933feefa145498bbb98c7efaa339fd9fbe744f59b25a01380db62ef3e","ssdeep":"","tlshash":"afc08c3db23a202f0549544a681bcb10909bfac01e829f2000aa3ed88100a1c51d8da8","size":151,"data":"","first_seen":"2026-06-01T11:22:03.099434Z","last_seen":"2026-07-16T06:51:04.437526Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"317b397647e6b3bb7b03484207e16ac8","sha1":"8e765c7cd48fc45ad1a9c46bc6a553008952ddfd","sha256":"3b8841c0e6d29f787c62e504e68a66984c1046cc5144b6649b0d409c896dec35","sha512":"69e25798fa396b8fdf16645fb20c4cf32a76ae8912b8281ce4e7d8948a74f4ccfb13cea325fb1a5ede8bea8a38464f5ec4055eb5fd3759cd679cd2ac9d02e710","ssdeep":"","tlshash":"17b0129db29622a9d74f201634294215200715960980d125616586ec9505b144030ea5","size":90,"data":"","first_seen":"2024-03-15T19:22:00Z","last_seen":"2026-07-16T21:57:18.405434Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9fff39131a74340db5617071aa39e0a0","sha1":"e78845665cd7a3aeffd9fcf80efe3fadcad43608","sha256":"c5733648dfdf8e0aa2ff6bc11c749828dfd9d0cbc36a7a092c1fd1fdf3914a2b","sha512":"f7c96a46146d24ead1fc40f902a12a2391bbb5b1efaf5875916516904f103a6cbb02efc46fb36b798cbbe4322dcb1d9c8652ad42787f76744f8b59f7da486285","ssdeep":"","tlshash":"a2e0122bb399003f08cb615bb8494a118017c6f69c479b2572321ebda017a4a9098efe","size":358,"data":"","first_seen":"2026-04-08T22:58:11.859842Z","last_seen":"2026-07-12T19:53:39.099565Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dfc0b0455ffb0761cf82fc0933ca6807","sha1":"3b071aa4185efed35168ae65a9ac5f107ec667c5","sha256":"b850cc55c60b7b2aa171ca1354f2fbc0f02c58c3414438834e4f9623fd2f1608","sha512":"d47a64353dc680ccb113d4c5b9f580ee721f714e2fa8375935fcf4ba6868220480ce90ee1e33c84ed7ec0761f4ac964075e30716aecfd7c69b0b56300df0cd28","ssdeep":"","tlshash":"5ac08c3db23a242f098a5049282bcb10d05bf6c00e824f2004aa3ed88900a1c51dc9a9","size":151,"data":"","first_seen":"2026-01-19T14:11:45.719871Z","last_seen":"2026-07-12T19:53:39.100072Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"698bfd30913e2d0595358ef096c7c61c","sha1":"c3388ea2eae0e52ec72c0c113ef36e65ccb5d641","sha256":"90e011a0829b5ef6e5b4733388b73b56525076076c94d80850b0c8e2770db102","sha512":"9a42049e23661aef54946a1a57d58dfdfb3f4b074f51c742055f7884d1d77ffc0f14e38cbd6d93486d89c7458f35565fe52bc596e77fe14c430f69e6cc8e7db0","ssdeep":"","tlshash":"fce0ed2bb99d143f0c8b615b78658911801b46f6ac479b25763219bda816a4a808cafb","size":358,"data":"","first_seen":"2025-10-21T20:04:37.285707Z","last_seen":"2026-07-16T06:51:04.51737Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"44ec7ec57b07d7e9751f3b1be44abe99","sha1":"6bbeb77308243484a26263b76186332e15447cc1","sha256":"8099ca3f0c5e48056a69b62faaf031d568d9c6f8b86451a9828a34b244f99118","sha512":"c41556466b87709d48705bc097b6130ab3b104c36bf7829a78bbd90403361fa14e32f96405eb0bf20a5a4068bd03e7cf2d85eb4a69bfb6692fcd7d6289cc88c4","ssdeep":"","tlshash":"25e0122bb199003f08cb716b78458951805756f79c4b9b25b2322dfd9457a4a8088efa","size":358,"data":"","first_seen":"2026-05-27T00:11:11.662556Z","last_seen":"2026-07-16T06:51:04.254247Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c59f52050aa7228ecfbda65b443b76c","sha1":"4c45cff32f4af64be23515c96aac50d41bbc9880","sha256":"9592302965258be5be4e987cded53a719a3b8babd6cdde4b298ee7162c882ccb","sha512":"7caf78e97e8fe46222215b5d3962deaa124b5cd9e9ef32cd15674769d7f0f26c9d43bc0f47d7248ce7701790841799d69bbf03cacaf820949cd802bf681dd681","ssdeep":"","tlshash":"44a0241df3c531350347705f10374115300301714c41d300533744dccc0d3454014d75","size":81,"data":"","first_seen":"2026-06-08T09:34:55.626183Z","last_seen":"2026-07-16T21:57:18.48547Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/SessionServer212.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"027be6574d025500127f526bcfa2665d","sha1":"97d37e63f4bf5af2ed1f60d1cbd6ef6da4d1c0b5","sha256":"b722a6e2fea947f99f4a25e026e51554b7e30c9735fa1549f2fbce941a4c10c8","sha512":"818c82d1ef30f4188ff5f35ff881abdae15edaddc6c38d7ab87cd4b8fe89cca6c659775dd5b98dc1caacffa894780652263956559143a9222b12dd2f13a1a6e4","ssdeep":"768:w6kuSAIWgJW6SSO5kNnhnE4kk7NoX1aIfQiw:hkqF6VTc4kqOFaiQiw","tlshash":"4ac209c636d2755986f230e9206f105af03d8e9eb86c9dd0e09ac4d17eb4e97807bf19","size":26707,"data":"","first_seen":"2026-02-13T01:58:22.210836Z","last_seen":"2026-07-16T21:57:18.1006Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e2a485eae4f45b4036014e83ced791eb","sha1":"461ffeb2019be4edff08706a06f52d51653c2c42","sha256":"4efc67f15705283a88d915881ef1f1b6bb5f8c7cbf7201b5a7dc2e2913887dfd","sha512":"27b11ab898e964452b6fae40d8af72a609a30343abd85bb99082941f1dc5ce3d88035bc73851f9f806ea793bff973d5bb957e99d73d3d4de0dd129b5175bbae3","ssdeep":"","tlshash":"12e0922bb19d043f08cb701b78654915801bc7f69c47db21b6321efc6006a4a809ceff","size":358,"data":"","first_seen":"2026-06-08T09:34:55.507085Z","last_seen":"2026-07-16T06:51:04.326023Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d517283b2a0de1a6c9513ca2481a344a","sha1":"dc22b5bf88738d170bf4d5074ba20989b37c6095","sha256":"bb4e80ff646dadcb1f88a781af7be32783b20189c1c1cc881a2bfd82fdc41d24","sha512":"06c5a6d869b8360618514bbf107f71fb4d0ae65e1275ba9bd320de05f27e6425a4fe1f01dfad87555c80fb4d909df8a0727844299616a8dd7250173bfb41f5fd","ssdeep":"","tlshash":"8be0e52bb699003f488f615b7c894a11801756f69c47ab15623219bd501aa4980449ea","size":358,"data":"","first_seen":"2026-06-02T02:17:14.097812Z","last_seen":"2026-07-16T06:51:04.507441Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"171eaf319d52d523d0f586263081ad6d","sha1":"8e1200878f6051e2b77e2181b9d5f79a9236ebbe","sha256":"d2670c441eba2bc33d9ac832af08db5a7b026dd84528cf30393ab854103add38","sha512":"c06d73bbfc6a0750b6b5acccf91b88408590704b80850c2dc5354da80560a21d3a2b1fde5ad7eccec7486daad302acab29f2599536280ed3d933a920886fd22c","ssdeep":"","tlshash":"b3112c5a7a6c0cfb44ce3d1a78c0057114bbc3b759c0ebd9bb7956f98cb6e014064ea4","size":912,"data":"","first_seen":"2025-12-22T06:43:29.862506Z","last_seen":"2026-07-16T21:57:18.263185Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5612bc53d61b7c6780420e3a1939495d","sha1":"dee8155035bc184d9542c76a94bea5ac7c5b81be","sha256":"2929aed208886894d4cd32593e117667f45e9a8198e972adaec5d0b6c438f5a7","sha512":"ea314d4d93125c06fc95f748dbb357bc589ddc27c632d735cfe504d1b45015fadf913c0c325e9f769b7e1533f1030ab8993bce4501ba131758a612efcba01734","ssdeep":"","tlshash":"6fe0482bf39d003f08cb715b78858911801b8bf79c479b25b3321dfd6417a4a9188efa","size":353,"data":"","first_seen":"2026-05-27T00:11:11.654644Z","last_seen":"2026-07-16T21:57:18.418012Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"10cbaffe707a6c99d763b1e34133b491","sha1":"bd9bfab8b42a5b10f97b4627912c1cb88464b7a7","sha256":"039307e73678e7a25f0df4d89555965f21995709d0afed94c4e264a6e8ca6f2f","sha512":"2d6a724c4e0d3c4cc02e3865ac8ea7e3588c30c4d7fa61737e2ae9bdee9536e8e0ae46f953f89bedd860c26afca74252e6fedddff05083d7a65dc0741ee11421","ssdeep":"","tlshash":"0ce0922bb19d003f08cb745fb8499a0181574ef7ac479b2272321dfda002a4a8188afa","size":358,"data":"","first_seen":"2025-10-22T21:45:05.093151Z","last_seen":"2026-07-16T06:51:04.616225Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1db84a9a0053ad7a65c6194ea0a38cd9","sha1":"040746906aec9872e01aefbfed6b5ff9e759cd2c","sha256":"b397a702e3e47cb3f5c89d8b9f8a646c2982c7661d821209086d697a2709a6c0","sha512":"858e17fbba45c67bbdd942d41df694d4d3801051a4945f217ed24a3eec5da23aab38d73f06c31d38e1036671190b8b7719a0511825d5ca3782fc53460895d212","ssdeep":"","tlshash":"90115c6a7a5c1cfb44cf3d1a78c0057114bbc3b359c0fb9dbb3956f98c61a014064ea4","size":921,"data":"","first_seen":"2026-06-08T09:34:55.307951Z","last_seen":"2026-07-16T21:57:18.341667Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"58a3a7dab78b60e780d0651719f1c35a","sha1":"908e97da1b1c11f6d2ab8e2041cc018d90fc3995","sha256":"162b808ff472d3c0049c7f77fb40b34587cb882a4fcbe4eff102fe5e243dc793","sha512":"c11e05ac8588911d345593a12da1ca3e66603ecd3d45bb7bbff869ecb91421165b3bd89f4a8753e50dddae3d20fceb9ae4093d54e7de7a211ae68a01ca1d7233","ssdeep":"","tlshash":"5cb0125db19b26a9d38f3017342942112047259509809524a12587e89105b144134ea5","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T21:57:18.295123Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"22b66f05643293c428e65082f16bdbea","sha1":"09c8040d891073eefdd005b86392fd661b706242","sha256":"8a920ccce350a678ff118c6cb67119a9f5dca3ad0ffc98f011d4ff81f25c4a43","sha512":"dac63cf9000a717b59a67f4c49d3b68924b56895e7d27c24aca41d021ea3d179871f80a28ff0bb1b494e489310db968b87148b817e1f67820bd6de3c0d9e224b","ssdeep":"","tlshash":"1ae0122bb69b003f48cb615b78558e11801756f79c479b25b3322ebd9016b5ac188efa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.684416Z","last_seen":"2026-07-16T21:57:18.367778Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1d37273922ea74682eb8ddb6eb0a2781","sha1":"71763d4a707fe1a71b01014466b2f22b550b4144","sha256":"c6ee285316b85cff68827971b2fe4af910f5b97e77aa20dae460b5b6beab58ef","sha512":"c9eb647f8d2348d3784419428d3a688929bf9838e216da3430af2b30add303810a529e3562174075b4d293f6a40b0234c1a97fbcd6c45de3213e6b7029175713","ssdeep":"","tlshash":"b0b0125db29622bad34e6016342d4111204715a509849124612586f89106f144030ee9","size":90,"data":"","first_seen":"2024-03-01T11:49:07Z","last_seen":"2026-07-16T21:57:18.465851Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a8618e1e07b144f26b59a4a890f2dda5","sha1":"9c64fb304b2e3f14b485adde1710516a1fc9a650","sha256":"6b280244236bc0426895adab0c51626dbfe1f505f58cbbafd278663ae0cab5d9","sha512":"ce635b1c390723ff83082fb13d8dd6693cea75b6275e8cacb34efe39e84c818e0345b30b267bf2e9a3a177156dc7545d6710f826555684bed59178fe75d2823f","ssdeep":"","tlshash":"7de0126bb199043f08cb715b78494911815b57f6bc879b2573331dbd9017a4a8088afa","size":358,"data":"","first_seen":"2025-11-13T17:17:19.730374Z","last_seen":"2026-07-16T21:57:18.456197Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"60e4b1d7f51e23f3cd2c6d1bb3be9b53","sha1":"c2b4cf3d249880389da8802de982fe3e346521fb","sha256":"56efabdc9f395af98c2441452cbf217b903da87010ffbc44ce169f67eac41fb8","sha512":"22ba5fcb44936e99d51caced172fce5d5df2a85c92801878f6c190e7cbbf4a3638fc07cf12ce4b3205bb8b1091293ebe3b167d1613ba1f76dd78b44ad6d07630","ssdeep":"","tlshash":"3411276a775c0cfb44ce3d1bb9c0057124bbc3b359c0eb99ab3955a98862a015064ea4","size":921,"data":"","first_seen":"2024-05-10T15:54:49Z","last_seen":"2026-07-12T19:53:39.124881Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"69b1035222d0e465a9421193e3fb415f","sha1":"72fd1a419971603b436a396c754bd710bd89f195","sha256":"e01368f3cc9533ae3d7badae551b87faa022535f94f2f2ef852dd10b62ee9467","sha512":"7feaf5d3f8722f6acfa175981031dc36d075efc1a0770d9bddf29cf2b1c90f604e84bf29b8bd95f4767519232b2d3a46cd837175a1f1928d70938bb9e1fb51f2","ssdeep":"","tlshash":"88d02b9ff7ba221742ca6418949b06172029b78a0b448b9300374aea94254c10223e39","size":272,"data":"","first_seen":"2026-01-12T15:19:10.772376Z","last_seen":"2026-07-16T21:57:18.167171Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d6e99ee7d557c16198c82aa5c257a77b","sha1":"f83573e5a0e55b8d8054bf041b8b8cd39420f2f4","sha256":"82ed7ba3d801784a3cd51d30a676a2bbfcf6b55d4638a80adff2be9e541ab831","sha512":"fbbd7550c80f551e172f2f3109d4a6f34103a00ac81548a7acf498e64bd95f68432b0d265b268a0ebf8f1cf4557e70192b7962be495b806f5fcac1b1d6854cd9","ssdeep":"","tlshash":"e6e0122bb199083f08cb715b78658911801b56f79c4bdb2576322dfd9416a4ac08cefb","size":358,"data":"","first_seen":"2026-06-08T16:37:15.758219Z","last_seen":"2026-07-12T19:53:39.127469Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"09cfc03f899bc51f539dcba33ccea738","sha1":"305c0d054cc0fe9b3e770dfa4448413f01af9ffc","sha256":"83da7bbcca9ef955fd67a5151f8b9c7b298c35ea50599a847f25c75858cc7a2e","sha512":"e26faf54d630da860b45bce3c1e03f17c7ff70f601f7f34e72b0ff1cc9f9cd27c01dcb74f8c82d842838cf920bf44a2b02ff29a793fad75763ef02600f9c17e6","ssdeep":"","tlshash":"12b0125eb19726aad34e201734294111204725950980a524a165c7e89105b148130ea5","size":90,"data":"","first_seen":"2024-03-15T19:21:57Z","last_seen":"2026-07-16T21:57:18.501082Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6ee898e16f36b1165e1f620c93deaec0","sha1":"9d2c07f8fd4c5dbb90f84f35d49fb9ad5b836fe7","sha256":"699930da1ac1fb840a07f9e9168af58a35e3fa7400b8134f19af822b6842ee4d","sha512":"9b1855e2ceaf976448e38e131ff33307f702976794e89ae02bd45c13e31e2c985e9f820ed871eb701068fc2ef125ab28159d33263bdc244be6159ee8b97b9387","ssdeep":"","tlshash":"96b02228f3ef3020aaca20aa28aa8002b002a0200880c202222e02c8202c2880023a22","size":109,"data":"","first_seen":"2025-12-22T06:43:29.890412Z","last_seen":"2026-07-16T21:57:18.400531Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e8e96f62044338adfedc9261acb833e5","sha1":"5f8eb6c5af3d226afa8ceec5d93dbdc28e1134ad","sha256":"16a9a4d9fbd34e262af8cb01531c3b907ba84badc7921548802497455bda72a3","sha512":"e58394a4c5269971c852d1bf4f79ca23f998f5892f53e7a8ffc8ea2af21b15b01d0b1c88261d2375d1bb28a56d75a1a8ccc91a2347ba58da97f6c2ea992b1f59","ssdeep":"","tlshash":"fac0e96bf38d103f05cfb02b3855891a110347d75e81e31513720dfc901b6429014ef9","size":190,"data":"","first_seen":"2026-06-08T16:37:15.804631Z","last_seen":"2026-07-12T19:53:39.132043Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"13fdfc62eb89c283b13935d11947d5e0","sha1":"6aef7d17bb5c11b5551c4c7a302da8c682a16d18","sha256":"292162a90d006720a80923219bd7572088b47cc8071cbb1a772db4c03e2d0f08","sha512":"be1a2cedc867077537febeb68948e7547473dd22ae49bfdecfb5a43687b2be9a2f66787b480c0571f100b40512c1479a04becaf8f8dc2ad67db8baa6237de815","ssdeep":"","tlshash":"3bc0c21bf38c103e048fb03b3859491a414707db8e81a21a17310aed505b6828044aea","size":190,"data":"","first_seen":"2026-06-08T09:34:55.851789Z","last_seen":"2026-07-16T06:51:04.515795Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c2591bbaeafcb40587b973be02b895e5","sha1":"b05f122c429184cf2a810e208e93e673b6d3e966","sha256":"268ec388e528fb29a9e0c1c9dec922dd39f8807a24e75f44cb6497bf683069b3","sha512":"5fdf0586c1cda04b723b1b57a79514bf7ed4f29acc041c8f40f75109147fe02990bbc1b3ca2e001a413baa0fbf90f665bde7862addd8f15fe241b80fb39a901e","ssdeep":"","tlshash":"fcc0c26af38c603a44cfb02b3851491a510307e78e82b215133109ec581b6838004ae9","size":190,"data":"","first_seen":"2026-06-08T09:34:55.791348Z","last_seen":"2026-07-16T21:57:18.16093Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"191c4c31c1435141368b63d1ae611e94","sha1":"f2c35bf6258388d90a1f3cef349127c50043b9f3","sha256":"1dce7d0adf4cf5c107e69b78a8f2b26e358c6a214083dfa5c30b3e985f7584a8","sha512":"8d460b714619160dc85f46bbb738e0f4e34dd8decc1c72e9de0fba30afc993f795e756aad8ed2ec70117ee6464b7205c1f0ccb17670916e04ec418cee07347f7","ssdeep":"","tlshash":"f2e0122bb1df403f08cb655b78554a21801b56f69c479b25f2321efd6016a4a8188efa","size":358,"data":"","first_seen":"2026-01-12T15:19:10.790156Z","last_seen":"2026-07-16T21:57:18.448472Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d1f4ab85ce0d582ded253c2771ac0904","sha1":"dde044e1cde5aff28c53fee0efb4320ce6b863e5","sha256":"5a846a6a8e67f576c1919a719354229df4744afcffa6e7ac9006c9393a51e768","sha512":"5cccb858cc6961429b8cc60751b60300793704ccfeb888deaff2a9274f7bbdafefdd7e015a37872e27963a669c4a4e6dea336008392eb82d8ef30454e7a9fe2c","ssdeep":"","tlshash":"87d02b9ff7ba221b42ca6418d49b061b1029bb8a0b448bd300370aead4254c10237e39","size":271,"data":"","first_seen":"2026-05-27T18:49:34.609058Z","last_seen":"2026-07-16T21:57:18.336174Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"19cc5b2fe154c101f56050e89966138f","sha1":"ad58003c30107eefc6ba27685515fb6456d53e6b","sha256":"2566d694c5798c8542a5211d919b6f5add374114f123b38e876b7d8995ada9a4","sha512":"e670ee0fd07e79e501212ff836775d2884ae20da3c59e0dc69ea30e0d64c1c8ccfe045c7b8d62c9b18725ab3721fa6e274622f5796cb81289503ab18149e8e9c","ssdeep":"","tlshash":"0fc0c21af38e103a058bf92b28518716111307eb4e81a21653720aec511ba468104ee9","size":190,"data":"","first_seen":"2026-06-08T09:34:55.873055Z","last_seen":"2026-07-16T06:51:04.282115Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"df521cd7527fa577abdd607b8325c289","sha1":"eead147e6812603955c90a9d356c8c3028d679b9","sha256":"e8e23e29ae3d41afdd65b5ffd24c03b3005af98188f5c5791b6f3e98b5144cfb","sha512":"633aafc6b54b4e58ddeb776ac3f77e9a13f89b33d64d5f46dd4e5b88a2b02442be6957000c98c18e17bbbcd2db768db11336b7b3dd9f215e2d0ba8f6e7230cba","ssdeep":"","tlshash":"a4d02b9ff7ba221742ca641894df06171069b78a0b088b93003709ea94254c10123e39","size":272,"data":"","first_seen":"2026-06-01T11:22:03.009739Z","last_seen":"2026-07-16T06:51:04.151521Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"82b1a0028a6e98bc99aa6c889dafca59","sha1":"3dd341f3e5b50411753c00b5273bf8bd57a1fe3e","sha256":"b4211a01a3083207e8b9aa2efb154c9a9b58810a4399c1e1051fe218ca50a7b8","sha512":"8563c2044ab12337bfb62b283a6555d63daaba7964038e9ddd81a187add8198e42cd739492e4aadca27df7dbd0898bcbd0434b515540dcd51ff734e3b175c81d","ssdeep":"","tlshash":"c7e0688cf0d7502401d7705730b89611301f3832806cc0a8b2ab86e84c6588d817b9a8","size":358,"data":"","first_seen":"2026-06-08T16:37:15.759235Z","last_seen":"2026-07-12T19:53:39.136536Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6f94cfff28c9aabe302a9e2850c39e75","sha1":"6b15de2601a360ca3cc6794ac984180b5c4040ad","sha256":"9565b5e362978cf5870070ba929328f08ddbf1a458eda57b27f9663c62c00d52","sha512":"9fee5c974fb1bb549ced85c168b87c712b3921cdf9ea00b90308ae7341703f8f50281b474ad773e35ef2e6478782290bfb5f64bbf8ba0b58f5824b45bae91178","ssdeep":"","tlshash":"bcc0c21bf388183a048fb02b38614916010307d74e85a2251b320aed941ba428009afb","size":190,"data":"","first_seen":"2026-06-08T16:37:15.954011Z","last_seen":"2026-07-12T19:53:39.137078Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"988bc5cee0c78856418599ec9fb13908","sha1":"702d10c77d6981ef7ee74c0abf97e2ea6e935626","sha256":"d01dc948a9f77b339a89320b949820f98c8c8091f5d007f7c301180e6ae23b38","sha512":"9f9be8f36cf9de32180f9675d58ecc93d779a855bc0e3f1d0b7a3e5b000fa124a8b6c50ac9909c319f2b2d62b196d63474e6f050cadf6a03d75c96bb7e05099f","ssdeep":"","tlshash":"4bc0c21af38d103e058bb42ba851561a120387d74e82e31623324ded501b683a225aea","size":190,"data":"","first_seen":"2026-05-27T00:11:11.698014Z","last_seen":"2026-07-16T06:51:04.570476Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e38e7b103df4f49e69e7c17f11db2a2d","sha1":"f17cbb1785d286139d9c46c75f71bd7c1e512a4c","sha256":"9c43bd3e57c2f2548551df75649fd9b71771549a2d1501143f0ffd10bab9429b","sha512":"eaa2b5f4dc338f44e4541f3a4fccb01207065833fb6486dcd7be87a52306dd1ae8d1fd7c2dab180380230d339dbfa24bafeca01a00b1a87535436ca881a6c849","ssdeep":"","tlshash":"3cd02b9ff7ba221742ca751994df0617102ab78a0b048b93003709fa94255c10137e39","size":272,"data":"","first_seen":"2026-06-08T09:34:55.778528Z","last_seen":"2026-07-16T21:57:18.180818Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"afa353d5e4354566416243a267545119","sha1":"4e207aacfd170e5aeae44533ba6d9cef869ed99a","sha256":"eaafb30acbad36a14b1a6a266430ac9c61def999e4411e2011d68090cd15d719","sha512":"4199a89d5b9af5c8bac1371becbcf5c539a9ab4d0d973a7d4cb9b7054c647c638810927be03f8bdfd2ccc139734cc34b236e693a8b1a0d9c50fa519429c69c69","ssdeep":"","tlshash":"e7b0125db1a622abd34e2026342d45112047199509809124a16686e89106b144030ea9","size":90,"data":"","first_seen":"2023-11-30T16:50:01Z","last_seen":"2026-07-16T06:51:04.611079Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d999a2482cce450e28712ee2cb17e2d2","sha1":"5c959a16405d8458b99ff50863d77ce1e26516fc","sha256":"79fec9ce9632ab6b111996e6823352b1d2fb9b09880a418858411248f51efade","sha512":"04f45928116e976b6c88ed7c21b4a6e12cffaddf89ea16c452d8c701101e906b4292a8258a4a8e87d35cfe86b1e7f7b866a4f8f10fafee1a09ccfe8c424db987","ssdeep":"","tlshash":"b2c08c3db23a202f0549604a281bcb21905bfac00f825f2000aa3ed88101a1c50d89a8","size":151,"data":"","first_seen":"2026-05-18T11:46:28.212373Z","last_seen":"2026-07-16T21:57:18.431329Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d7d08d276f7bb3a6d0a8252044ae880f","sha1":"0586caec14db5d60446d92a14ed744fd58e92187","sha256":"c220da728734d132c9423bac8a546ef186ec9ab35bde3b355c917d85c6c91f87","sha512":"d4f7098a3b711031d51dcce2f9d823bb311a81f530ff37ec91a65e269db777a6bf047258ef8772806715dd9ff38949a2da5f1e987001283b4bfcbc9e65d793be","ssdeep":"","tlshash":"c0d02b9ff7be221742ca6418949b06172029b78a0b048b9300370aea94254c10227e39","size":272,"data":"","first_seen":"2026-06-01T11:22:02.903632Z","last_seen":"2026-07-16T21:57:18.321327Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"37a6b0df67e8010bd5f6f4c7d2d215da","sha1":"e9fbbd756cc0dd19e95a6c53d7521d08c8a193fe","sha256":"f5733786e3a9f553bb725355f08b9e8f553037bbd5f6fa0ba209cc732f37eb45","sha512":"fe71f909071d143a6e65be4544fa61759a2c1d64307c8a8dc1fe040e33e3d63e165b723bf6c72a918704c8001377086ba3e8fa1ec22b0a3019fbd37579d46c4b","ssdeep":"","tlshash":"79c08c3db23a202f054a5059281bcb10d0abfac00e824f2000aa3edc8180a1c54d89a8","size":151,"data":"","first_seen":"2026-05-27T00:11:11.71194Z","last_seen":"2026-07-16T06:51:04.57115Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a9261a1c0d4df581a5b506a1c5c56b6b","sha1":"8c56383cdc1a198dfa8253ae24a51e3f8735bbe7","sha256":"7b16ffa778efa0ce84f77b16bce0e9a11dd1a2f257295c3dffe0c2cf4476c7e8","sha512":"a828c73593af8bc4615986b570ff3d1d73dfc90aec98862915840f5404dfc8cc577142c3dd01710f756b1aeffa334a5370733e4a1a6025a99af72664072eaf94","ssdeep":"","tlshash":"54b0125db29632a9d74f701634294211304726950980e124612586eca505b184030ea5","size":90,"data":"","first_seen":"2024-07-31T16:58:56Z","last_seen":"2026-07-16T21:57:18.473507Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1466646474b83b44dcaae413c146a3cd","sha1":"654523d5f68b46fdd555a1c84bdb6da95d140dd7","sha256":"cfe36a9158f8bf69bfa1507c02f168d596ab1e7aa1db9fff3d84e1d2c832bcec","sha512":"213d4ace784e3acaf20e574cecd56cb2d6355f726bbcacdcb552d1d509f395b97e94bf5deb45b01b24d57769db356e6becc4a65c307544b9c04288e7591bb3dc","ssdeep":"","tlshash":"49d02b9ff7ba221743ca641894ab06171029bb8a0b048b93007709ea94254c10127e39","size":271,"data":"","first_seen":"2026-05-27T00:11:11.700019Z","last_seen":"2026-07-16T21:57:18.418775Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"dd279bd226346c1ec6e67b9cd0fb26d0","sha1":"7fc76a2035caae88ec33c1e02ec36308048959a9","sha256":"8af02899020365f017705efba1dbd81ead7e807f4d975809cd087db074027011","sha512":"a9a956c036d79287c89396de7188ba1934f45a55d47f3c5ecbbd77715cab80fad21ec9ba77b7bd20e0c4936bce4dd2ff5732577ce98e86b8569e921e82fac93a","ssdeep":"","tlshash":"17b0129db29723abd34e20163cb941152007159509809224616586e89109b144030ea5","size":90,"data":"","first_seen":"2024-04-22T10:43:27Z","last_seen":"2026-07-16T06:51:04.551242Z","times_seen":503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4c7da2ea5b656b6dc215226e76841a54","sha1":"df24ee4e2c7a9bac7d63af3d7b8b2de6327fde11","sha256":"06d07b48be7a99b1100c0aece46c2d95b995ff3eeaee415db4f6f221a4c68282","sha512":"f8bad87f1e4d6061145a2099200244e727d1418fde0ba09eeb813696592108fa912218517225a4dd2a2f69457c6f6bb23970982fcf45f2efe9013fa2b0445782","ssdeep":"","tlshash":"36b0125db1aa26add34e201634394115200715950980d124a126c6e89105b184038eba","size":90,"data":"","first_seen":"2023-10-25T20:02:30Z","last_seen":"2026-07-16T06:51:04.535674Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"48f0ba61281909f4c09d36104c0cabad","sha1":"40cf38588e835d7c80139c3d65b2cbd6b0b2fa3c","sha256":"54c058fdae6cccef0b791a6f1d75b140b9dae1e4dc0912568e149482d5ae6510","sha512":"20d40c9c7a3684d4b5c723b61ef0ebbf4f8de61345262b80c721f504c91754881c5d52bea80e53f5bb7a80a7b97f46687c4ab8492a1e8b1bca3205047fbd22bb","ssdeep":"","tlshash":"27d02b9ffbba261742ca641998df061b102ab78a0b048b93003709ea94298c10123e39","size":272,"data":"","first_seen":"2026-06-02T02:17:14.01954Z","last_seen":"2026-07-16T06:51:04.30429Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"07c6db8588a62b2957bcdb9a215e9981","sha1":"0a13f08a66ec82d8a330f67c891b500ca45883c4","sha256":"2387796d8bd9836fd9b948954483af490eb4ee5b3bc85bba6380ad462acae841","sha512":"a0a5a848c6c4cf6d0c7ecc55882cbff7a3f5a43d538118b0a2fa7b9a65e49170c313386fc6f2ac397f291bd1ee387a83fe51e23561af3cea84712477f87462ee","ssdeep":"","tlshash":"1db0125db29626a9d34e20177c694115604715950a809924a125c6e89109b184030ee5","size":90,"data":"","first_seen":"2023-10-25T20:02:31Z","last_seen":"2026-07-16T06:51:04.200003Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"948d3293bdbaa27f02a81e02f33ab1bb","sha1":"c51827c6d1f14fd8cb227011f874158423a862db","sha256":"3ac1b7b945c1cda851853d089f532dfc532577f72890011d3518dac6c5a339ff","sha512":"71ee6022f1ac01fd00e2cc877974c6a41099be2daa5621ba1dff7eed1cbd085156f7efff20f4814c626a6381fee2fe6079d54026c916a57cd6af3ad0c13944e8","ssdeep":"","tlshash":"41b0125db29a22a9e34f202a342d45112047199509849124612586e89146b144131ea5","size":90,"data":"","first_seen":"2023-11-30T16:50:00Z","last_seen":"2026-07-16T06:51:04.302274Z","times_seen":272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a46273315a55bd3878a92b6495b0d67b","sha1":"284ef2f5888b771f2e1e4cc2053d77af15fb56ef","sha256":"f2d07b89bf4bcb032d565f4eb77da4bd57a919e9066a3b4ccd6043a7dfc57aa9","sha512":"519f61d4aad8340ac96de506102d7c8375ef88117d42f3a8a6bcbb444eff432a652f60974d8337cc4f9b470c8ab2776cb55f5be618bc43ae488a1583b8c737d8","ssdeep":"","tlshash":"1db0125db19623add34e202634294512305715950a8091246125d6e8a105b584035ea9","size":90,"data":"","first_seen":"2024-04-22T10:43:25Z","last_seen":"2026-07-16T06:51:04.487115Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f6f900d72ae21c4f52ef1bb6db936bf4","sha1":"1b2a2ca1c02e2f2828f2ff2f3a53eca258a21813","sha256":"01c298f8f524c6dcc2f60a70e0c3309a4b87fd3bbd88218fc18ef790d4c32ccd","sha512":"3646272cf5ba3e92943817160d07a60f5fc12e8494a31d0a298ecf17fd660b890b941224ee958fd7680cdbd7ea6badd19b1966a4575265710f73422aa49d9708","ssdeep":"","tlshash":"1511366aba9c1cfb44ce3d1a78c0157114bbc3b359c0fb99bb3956b98ca2e014064ea4","size":921,"data":"","first_seen":"2024-08-28T03:37:44Z","last_seen":"2026-07-16T21:57:18.202624Z","times_seen":192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c2290a0bcd5b00dc83c46eac3b024cff","sha1":"c65f2d33cdf3ae0cd778212f63b943ea8bc7028f","sha256":"f368a3af8dc1e620128929ce1233ccf8994fe76cda78ded2b38e45961c91d18a","sha512":"4018b6c5be38cb30471597af8b63949399d96a23a13c289e006d902f95b1cb9fd0653a4970170687a9797af5d5d288172cec476524d7d5c175856b80e95633ef","ssdeep":"","tlshash":"38d02b9ff7ba221742ca6419d49b0617106dbb8a0b048b93003749ea94254c10223e39","size":272,"data":"","first_seen":"2026-06-01T11:22:02.986629Z","last_seen":"2026-07-16T06:51:04.160974Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"fe9bfc29e4b560df1419e93df7d16c99","sha1":"033e26759626b43b1d57551202604aa895a1fed5","sha256":"79496eb2950dfaac6e84b45b90df917090b4180f3c8e311ad10e3ad19b38a28c","sha512":"9afdf73ce99ba33b7a1eb7f51ef7a29e2ffa8bdab854e60d347368164a8327db8449b1cc765664f2fc3127a1c6fe586345d40166c047a606ce8905293ca6fd64","ssdeep":"","tlshash":"85d02b9ffbba222742ca6418949b0a171069bb8e4b048ba3003709ea94254c10123e39","size":272,"data":"","first_seen":"2026-06-08T09:34:55.89162Z","last_seen":"2026-07-16T06:51:04.559238Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b492b2dc688ebd6e8a0c721b3c2ce4c0","sha1":"ae1348a83094487dc4b738ca7fab9d60093ed289","sha256":"f74fa5b4333187d37c0bf84e54fbfb2a537e23ec8e35c1656f11e61626fd5a55","sha512":"6e56e0b8711c032d85d1e17fae8b4a263bbe6f4ad0ddf88a698f49b017d0f409071ea1417d0b4be04b91f028dca0296a6c4a5227ba71dc3b5ddeb50b64004d68","ssdeep":"","tlshash":"b3d02b9ff7ba221742ca6419949b06171069b78e0b048b93003709fa94294c10123e39","size":272,"data":"","first_seen":"2026-06-08T09:34:55.376258Z","last_seen":"2026-07-16T06:51:04.267142Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2d113eac8fddf395702344fa1c535534","sha1":"ddcd09f2935dec03e0c7d74a4933482409b5579b","sha256":"063e0d50a78aa750b1dc032d90369a7b457623fba2c077644cff17c9fc5f5770","sha512":"1e572d21d9e750f4a45b3bfd1d00bfb750cb30b4d932380551e315d02af77b35cdbf919787fd6a2bf786c2d6e9b77426b0cabbee600ee431c569a100e0697f69","ssdeep":"","tlshash":"88c08c7db23a202f0549505a281bcb10909bf6c41e828f2001aa3ed88180a1c50d89a8","size":151,"data":"","first_seen":"2026-06-08T09:34:55.535836Z","last_seen":"2026-07-16T06:51:04.450211Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6c476b655cb6d5587aed86b3f7b49735","sha1":"e4ccf90a9fd664c19e84388ba850b0bf81e72bea","sha256":"675544e9147ebe452e19f320c6e5cc12667c2ea5cd889baf41c560bbdeb36f15","sha512":"da95a666f26d5116b1ee65df9971f66b47a63946af20e2cf76a9ec8086dbfcfd62cd11157e256e9ce05457d064878a250f6cf47e76ba893c727a49f05a1f1274","ssdeep":"","tlshash":"2de0122bb69a103f08cb716b78494911805786f7ac47ab2573321dbd9456a4a809cafe","size":358,"data":"","first_seen":"2026-05-18T09:59:05.853631Z","last_seen":"2026-07-16T06:51:04.343912Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e2a6d7384f495c00e451a086983fc1cc","sha1":"448597f22fc575ca3b2d90c4ab208089ac18bb2a","sha256":"71fcb933c50402eb7339719d4119a9c3fe526fadbcf339c7406e99e853ccf41b","sha512":"68602ad89a905ccb1b2c4ed2e2fb6f74c2138ce56061d47ce3577f2dea0d2eb11e8e2b6a2f6d9f9c06048c48a4a300e9e3b4438cb76c82799e5dfcec187c2575","ssdeep":"","tlshash":"1ab0125df29632a9f34e701a34694121200719950980a1246165c6e89505b184030ee6","size":90,"data":"","first_seen":"2024-07-31T03:34:17Z","last_seen":"2026-07-16T21:57:18.25218Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1fbb985df93eafec28d6eef7002b4422","sha1":"ea5185867a8c58305027877e7474a7da10896a03","sha256":"dfe5bd6610b7384d8e925ce5cf8976623faf6ab43613931c12d254da62a14e71","sha512":"7cf8dfe508adeb1b0af26ccacf4d6ec75ceeaeb6eaff56d72fbc38fefb6c2a1eb78f58d9106eaeb01df088d5540da8c92f8194ec3974d0b5cb1b5690cdc23d17","ssdeep":"","tlshash":"4ab0125db19626a9e35e202734294521208715950a809a24a12586e89105b644030ea5","size":90,"data":"","first_seen":"2024-05-23T17:50:04Z","last_seen":"2026-07-16T06:51:04.266455Z","times_seen":217,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"74b277148d84dbe2184cdc8f86581e0c","sha1":"405d7bb213ad1deca0aa50d5acbe9126f46657df","sha256":"7a5a55ec52352912ecab12c3df0810493ebac382ce9440860c4dc58a21e5854a","sha512":"77d14f20ffd88f11c118b43481ccd6f2685b641dc54f64077fa0130cc8baee6a9f19d7879e2b86c31d7eb175bd557e581973e8d23be0d0fa5a0255fc78c55841","ssdeep":"","tlshash":"07b0125db19632a9d34e301634294112204716954a80e124a12a86fcd505b144030ea9","size":90,"data":"","first_seen":"2024-12-10T19:46:18.290361Z","last_seen":"2026-07-16T21:57:18.344098Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0affc80c1e9e8e955dc629a02e0b2004","sha1":"fd99cf8b52da7e1e97c424f8bef3d61e4f81283d","sha256":"7e2be672986451f0c4c974800423c66a94c86bf77c89fea4d573e708e2e5cffb","sha512":"9003ea2de0ef8d6d6d657ede18d86929dbd55a60bcdbbade20c5b5484ec159ab7ede78014dacbbf7a6c3bea5ca8ff2144a9188ca600b164dc114429c9edb0314","ssdeep":"","tlshash":"34b0125db29622a9e34e2016342d4121204725d509809524a12587e89215b184030ea5","size":90,"data":"","first_seen":"2024-04-24T13:59:13Z","last_seen":"2026-07-16T21:57:18.382689Z","times_seen":163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e9f56acc4a3cb3d61b18423901e368e5","sha1":"c275ad7ec9b9cecc6224ace98357ca717e9eaef1","sha256":"8016df2f2bb9e6f0099ec42f0c966a82f173a0604ccb7caa3af8d770275742c6","sha512":"417ddc0d9809ec3f82e81f0891891776e96654af9f1edb8e69a0fed902056bf9e55a7f9e4ca8bfc2bfba1c47160e1e4fd627c1e561d1667634e56a22c4883859","ssdeep":"","tlshash":"b1e0122bb699153f08cb715b78468d12801747f79c47ab2573322dbd9816a4ac088efa","size":358,"data":"","first_seen":"2026-06-08T09:34:55.755179Z","last_seen":"2026-07-16T21:57:18.449293Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"login.sf.tumee.com/img/gidr/email.svg","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.257Z","timestamp":1783885979257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /img/gidr/email.svg HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a1a2976a5c935a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Wed, 23 Oct 2024 22:30:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":782,"size_decoded":895,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cb1daad344464b615bf8fd92d67bce42","sha1":"7ba55659ae73be32ce944ec6966d8b6482ae1a7d","sha256":"4843ae7de226f06120cf76ac1c48aedf756de67706c7b7168407b03276e72a57","sha512":"dbf86ab6e356b26141cd97de9c74b6788809fcccb3af3d81b2571d5431d794c4eac883fbfcf42ef41487e53c9c368db71505670406f92aa813aab67107dbd604","ssdeep":"","tlshash":"3701d5b297d4e4e0d403873dd6335ed43ddf30bb578901cdd9949d0718082e28c09e21","first_seen":"2025-05-23T22:28:24.539024Z","last_seen":"2026-07-16T21:57:18.052435Z","times_seen":49,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wp.sfdcdigital.com/en-us/wp-content/uploads/sites/4/2024/12/php-login-free-trial-bg.jpg?resize=768,960","fqdn":"wp.sfdcdigital.com","domain":"sfdcdigital.com","tld":"com"},"ip":{"addr":"95.101.10.184","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.219Z","timestamp":1783885980219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.sfdcdigital.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Aug 2025 00:00:00 GMT","end":"Wed, 12 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:77:77:C9:C2:B6:87:4E:17:34:C9:CC:37:0A:B5:3B:72:02:EC:A6","sha256":"B5:D0:F5:B3:33:2A:89:B4:D9:45:B6:63:6C:9A:0A:5D:21:5F:48:DB:C2:13:95:2C:AC:31:61:D7:83:15:8A:01"}}},"request":{"raw":"GET /en-us/wp-content/uploads/sites/4/2024/12/php-login-free-trial-bg.jpg?resize=768,960 HTTP/1.1\r\nHost: wp.sfdcdigital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/webp\r\ncontent-length: 2724\r\nlast-modified: Tue, 23 Jun 2026 15:39:33 GMT\r\netag: \"567231824c7b3647\"\r\nx-bytes-saved: 4551\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-rq: arn1\r\naccept-ranges: bytes, bytes\r\nstrict-transport-security: max-age=31536000;includeSubdomains;preload\r\ncache-control: public, private, max-age=3780431\r\nexpires: Tue, 25 Aug 2026 14:00:11 GMT\r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=5, ak_p; desc=\"1783885980240_1600457316_750312208_537_11802_3_15_11\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2724,"size_decoded":3372,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6ca877bf7cfcb32105a9f855418b8cfb","sha1":"34a1151ecc34926ca76e6b801557dabe33a887fd","sha256":"1566e96dcce6d0b8fb530d8e618cfd5ac377b6af1681764a43afcfd83169edb1","sha512":"882e43fe05e26124d6ee42ef6b174ea66851f73cfd8fc2c97b3c9300813684ac7c535c6c0716314b22a04a841aef694824cb0c092c4ef32142790e952445b75e","ssdeep":"","tlshash":"a9514d33a2acbe2be1e9322fbe74a504a55163a74486540d15e39153301dba77d5b3c1","first_seen":"2025-01-10T07:49:08.952939Z","last_seen":"2026-07-16T21:57:18.074678Z","times_seen":181,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":3,"send":0,"wait":21,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cookies-data.onetrust.io/cfw/cmp/v1/session","fqdn":"cookies-data.onetrust.io","domain":"onetrust.io","tld":"io"},"ip":{"addr":"104.18.32.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.944Z","timestamp":1783885980944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 05:48:43 GMT","end":"Sun, 06 Sep 2026 06:48:23 GMT"},"fingerprint":{"sha1":"14:E1:42:63:83:13:F8:43:46:D5:18:4F:40:FC:D4:99:E4:3B:78:AE","sha256":"07:C2:1B:4E:62:34:0F:F4:1D:F9:87:A2:B1:6F:15:40:9B:E4:36:BB:B6:8E:72:BA:BE:B5:49:E8:4E:4E:55:B2"}}},"request":{"raw":"OPTIONS /cfw/cmp/v1/session HTTP/1.1\r\nHost: cookies-data.onetrust.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:04 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a1a297888f2a568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":388,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T11:40:27.927553Z","times_seen":17313251,"resource_available":true,"data":null}},"time_used":3149,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":3135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/ot-ext.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.999Z","timestamp":1783885979999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/ot-ext.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976f0d9f5a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"b41813295cdb4142b92632c976cced77:1781683759.844816\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Wed, 17 Jun 2026 08:09:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783885980.d43e44e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1836,"size_decoded":1626,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1800)","md5":"ec2ebd9471d050e3de19a04896b7d664","sha1":"cfae4a849ba4638c23b31a2a15e97384cbb0d15f","sha256":"14510c2d32e480903eff33dc4b7bf2ad5b1bcd315f50980858bf227d9bdd5e9c","sha512":"b4303f3ae985be40e5165bd2de0611103e361aeba11f60db9733e3f3c08b577daf8826099af23e9ba8c078a983ce79c46d98df5d044dc7ef0498b79cc318516e","ssdeep":"","tlshash":"2531d7f436a80f3417fc66b9f29991c2b03e61b2791f4836f58f9da170248c20c5eb65","first_seen":"2026-07-10T12:36:00.018123Z","last_seen":"2026-07-12T21:21:00.129818Z","times_seen":5,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/templates.ecefdc8932e79bab8e8a.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.005Z","timestamp":1783885980005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /c2/public/exp/pbc/server/templates.ecefdc8932e79bab8e8a.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: a1a2976f0db85a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\netag: W/\"c59dd-19f3ed2f300\"\r\nexpires: Wed, 22 Jul 2026 19:53:00 GMT\r\nlast-modified: Tue, 07 Jul 2026 23:49:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nak-uuid: 0.16e61702.1783680670.1151797\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: master-only\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":809523,"size_decoded":78358,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"d4364a6ebf5a66c56b717244b97e0dfb","sha1":"c448162eb695356780463adb159ece61af89dd52","sha256":"49a011be8bed7991b1fb6197f87bedf0e1dc86eb34f5b62ea4462b3c21116b5b","sha512":"16589a0092992dd02144508b4fbbae818b9c84e6ed8aeba926c70c784ad352cfb0ebd18370223b7fc4f2b3704c32495304fea026f3b234d2d4bb74c931cb1c5f","ssdeep":"3072:vGwYx6TR2iYYTbYi7rUa7WmSrnmecEPf7luiTUs:eY0ijTn9fSrnmecEPf7luiTUs","tlshash":"65054464ca6874b0b7f6b2ccd91751163a78bb15e410caa8fa4c85ed0bdcc5335a7b2c","first_seen":"2026-07-10T12:35:59.995692Z","last_seen":"2026-07-12T21:21:00.182429Z","times_seen":5,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/scripts.3e6c58394308c0d5ebc4.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.010Z","timestamp":1783885980010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /c2/public/exp/pbc/server/scripts.3e6c58394308c0d5ebc4.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: a1a2976f1dd85a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\netag: W/\"39bab-19f1a7ecf10\"\r\nexpires: Wed, 22 Jul 2026 19:53:00 GMT\r\nlast-modified: Mon, 06 Jul 2026 16:15:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nak-uuid: 0.16e61702.1783680670.11517ae\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: master-only\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236467,"size_decoded":44900,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"73364fb111159b3b427f8251098f4afb","sha1":"50e3acb384bb907a1230ccfeb69e712519a1deb5","sha256":"5a37bee2798d78c27cc67cfccdbbf9682197f3e8c553dcd7dce8fd3220da4fa0","sha512":"28386e02a732faa56670e964a70485dd3b69fb05ba3e6e2af66cfba64e79371190d4a37905f3dff1110ec9879ec4aa33b4852f8fd4935ce50d1e27794de4998f","ssdeep":"3072:ebkdxHwTslFlx652lXWcIfxkA5HDBL3hq2b:ebkrQO5g1xkA5Hh3kc","tlshash":"7b34e88cb2d5f03102e7a176906f120bf336385aa04ac098f539ddd56db898e6277f79","first_seen":"2026-07-10T12:35:59.998992Z","last_seen":"2026-07-12T21:21:00.133019Z","times_seen":5,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/LoginHint208.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.242Z","timestamp":1783885979242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /jslibrary/LoginHint208.js HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976a4c4a5a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Fri, 21 Nov 2025 00:12:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21183,"size_decoded":6880,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (561)","md5":"3da3701e2fd3986eb5c25e74aa745a3a","sha1":"325a30f7add1a32d7efb730e14681e953d07cb00","sha256":"c707383ddb643c1b3f7f59100f89b02aa93a1e2bd39bd26cdffc6ba9a0d36cbc","sha512":"abf4daa1b3a59fdf470cb57564fdd57990e869c7a8f487a3b6ceff9912b4c1e5bcc9afac4aafd8825b108a1fa0dfc952e3d532638f5f72ecc353471ce426e3e8","ssdeep":"384:pgyMp3LSjcy1R7NiGoyn1K7a1suIb7IxsL5JPZZTuFWyGQgzTMoBUBKxwEvFWpIn:9Q3+gy1Ln0cxk6nGQgzTjBUBKqmFaIn","tlshash":"4992b8b732421a3579ef14eba87a97cdb8b085217c01d8a2841ccd15b538fd264fbe69","first_seen":"2026-02-13T01:58:22.102298Z","last_seen":"2026-07-16T21:57:18.062799Z","times_seen":133,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/img/clear.png","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.256Z","timestamp":1783885979256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /img/clear.png HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: image/png\r\ncf-ray: a1a2976a5c905a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Thu, 21 May 2015 20:40:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":477,"size_decoded":915,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"1cc6ffea5ac6b5c6e7d7b6b9b1a01e9f","sha1":"a4fd54cc5e6cac7e5fee6f9832c817d5e58c7c10","sha256":"dd464055be78eadee2d5d3ecc5380600b788883e462d9e77372877dc04110e6d","sha512":"0989837e455a24c73304ff95557ac76f432ead28c903f677d037e29adb89a9bee32c042ad7f5c7356f3e99a2ae3422476f612633977c7fc25502ec2c92d22dac","ssdeep":"","tlshash":"84f09ebea359d9bee6644473004a229dabc59530321db94a1da78d7196d6c00d0d5b05","first_seen":"2023-05-02T11:35:03Z","last_seen":"2026-07-16T21:57:18.071154Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/SessionServer212.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.sf.tumee.com/login/sessionserver212.html","date":"2026-07-12T19:52:59.675Z","timestamp":1783885979675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /jslibrary/SessionServer212.js HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/login/sessionserver212.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976cff395a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Fri, 21 Nov 2025 00:12:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26707,"size_decoded":9459,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (583)","md5":"027be6574d025500127f526bcfa2665d","sha1":"97d37e63f4bf5af2ed1f60d1cbd6ef6da4d1c0b5","sha256":"b722a6e2fea947f99f4a25e026e51554b7e30c9735fa1549f2fbce941a4c10c8","sha512":"818c82d1ef30f4188ff5f35ff881abdae15edaddc6c38d7ab87cd4b8fe89cca6c659775dd5b98dc1caacffa894780652263956559143a9222b12dd2f13a1a6e4","ssdeep":"768:w6kuSAIWgJW6SSO5kNnhnE4kk7NoX1aIfQiw:hkqF6VTc4kqOFaiQiw","tlshash":"4ac209c636d2755986f230e9206f105af03d8e9eb86c9dd0e09ac4d17eb4e97807bf19","first_seen":"2026-02-13T01:58:22.210836Z","last_seen":"2026-07-16T21:57:18.1006Z","times_seen":108,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/fonts/salesforce-sans/SalesforceSans-Bold.woff2","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.985Z","timestamp":1783885979985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/fonts/salesforce-sans/SalesforceSans-Bold.woff2 HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a2976f091956a3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\netag: \"68a71533d08ff9251d6f179043a4781b:1616101752.180704\"\r\nexpires: Tue, 11 Aug 2026 19:53:00 GMT\r\nlast-modified: Thu, 18 Mar 2021 21:09:12 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.39e61702.1783680670.6b0411d\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670132_35120697_112214301_41_6098_9_18_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27648,"size_decoded":28243,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27648, version 1.655","md5":"68a71533d08ff9251d6f179043a4781b","sha1":"48bd2035de99b4477d6a2624bd52fca362394105","sha256":"13873c462325bd5d2b2bbb385fe971e1ced14d0d698e2eabb917fdf7a4af438a","sha512":"d149072e304887e0d0c77c3804da904bac177018b0142036f63bcfdb07be0ecaec825e7c6ddd9daf0ced0763d5f2aa42dfa1e259fbd993a50c76b19f20a4cc3f","ssdeep":"768:9Q0ocbdBOOvZmBALA5aSayVude/CT0BkNYm66:95tZDvZmAWKywUQ0MR66","tlshash":"f3c2e1e426e94be3d5a0aa477f2c96ef311dc49ec3512e88b2ac0d66c095e74120ad8d","first_seen":"2023-04-24T21:29:35Z","last_seen":"2026-07-17T03:04:56.330999Z","times_seen":5993,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":384,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/css/style.32425e6504689dd1936d.css","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.990Z","timestamp":1783885979990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /c2/public/exp/pbc/server/css/style.32425e6504689dd1936d.css HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncf-ray: a1a2976efd675a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\netag: W/\"b4e1c-19f385cf520\"\r\nexpires: Wed, 22 Jul 2026 19:53:00 GMT\r\nlast-modified: Tue, 07 Jul 2026 15:03:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nak-uuid: 0.16e61702.1783680669.1151745\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: master-only\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":741310,"size_decoded":63277,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bef4c3d58ffcca47837fc6e787c565d4","sha1":"0fcbbdaa6a70488e0490b09653b9d6d26f34a6f2","sha256":"69608657dbd99776093e65a8e49039ea0d004f67c89f0fdba65dda476512db39","sha512":"1bac76bb809b859304539fafb03a461ac5946e3700576e5d049c4190cd006d8c1e8aba6a9e63f30a37a96eea2ea73f66fdec69c0d221bc6378d6125931680863","ssdeep":"3072:h93wg6WK3m7RnQZUrPzNoipzoIwbevLb1FhWhfeTzCn3Q/Ie3W6NB2afNW31lxaB:LTTpIIfErj+ZjMOyE6qoNe","tlshash":"63f44412d562727ee59b4cbfb6a9f53ee53575334b03c2fd9a84b00486ca9d31321a2c","first_seen":"2026-07-10T12:36:00.035451Z","last_seen":"2026-07-12T21:21:00.15894Z","times_seen":5,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/8e783e8c-0ad0-475d-8fca-4a03afa0a02a.json","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.318Z","timestamp":1783885980318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/8e783e8c-0ad0-475d-8fca-4a03afa0a02a.json HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a297710bd15a0f-OSL\r\ncf-cache-status: DYNAMIC\r\nak-uuid: 0.874f2417.1783885980.2a34558d\r\ncache-control: max-age=0, no-cache\r\npragma: no-cache\r\nexpires: Sun, 12 Jul 2026 19:53:00 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:35:57 GMT\r\nserver: cloudflare\r\netag: W/\"87cbef0e2ab647c178b7e5614b36a17a:1780914957.905185\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8615,"size_decoded":2711,"mime_type":"application/json","magic":"JSON text data","md5":"1730fdc1170cc2de64c7c9c7724a5184","sha1":"59d7e162b129f2bacc2f4817c028e7fe61739495","sha256":"d2b960e1ddfe897a64c553d6645f5a801057834ec64eeeee4bb3de487796fbcb","sha512":"c5d10acb4318e918c729188811018688363f2549bda5d56d5bf77d51ed5619834d7003be61b7809a298af25d0845065f0789f69aeda9c54e5b9a4d65f63a2e48","ssdeep":"192:3X5Aj3ymnnr2Gu4l7weKgQPdJhChf3BX3BH8Hs09xD:ijCmnnr2Gu4l7wOQnYfBHBH8Hp9R","tlshash":"1a02530aa68c523ddf5e83d8d01ebd090bdc18722689f804d54b5d6c57afbf218a3997","first_seen":"2026-07-10T12:36:00.001744Z","last_seen":"2026-07-12T21:21:00.12287Z","times_seen":5,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/geo-data.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.319Z","timestamp":1783885980319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/geo-data.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/bottom.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a297710bd65a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"8a20280cac70d598c157b9376abe4ae1:1781683757.440887\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Sun, 12 Jul 2026 05:22:57 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783885980.d43e5a5\r\nakamai-grn: 0.cb37cb17.1783833776.8dc53157\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11567,"size_decoded":4181,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11529)","md5":"5df6c43ea2c3c6ffa4ca6674ea90c1e8","sha1":"18554be278362ee9f9627eb0e83c0e408ff84b63","sha256":"88c4c34efbfa446ce1bb7fcd32147fca46d563478d75d60bed07130ded65ba77","sha512":"b4be03a222dd67baec158d6c6d34d2286bddc63ed45362908988e1272527374436edb0b3f4a8f27ebb3d01dbbfc004f69f000cb8d85bc30df77eed9ab9640394","ssdeep":"192:KUPzwLz2BoEzwU6yNaKWiLby1ldfM7lthVang+d//Ts2VIk:Kb2Be6aKH6130lTAnNJQ2VIk","tlshash":"f932d7e26996da7403e5adcdc8196295f50a9d3843cd78a4fb4efdc0b506c0530e2bf5","first_seen":"2026-07-10T12:35:59.937849Z","last_seen":"2026-07-12T21:21:00.106315Z","times_seen":5,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/otCommonStyles.css","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:01.076Z","timestamp":1783885981076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/otCommonStyles.css HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ; gtm_session_start=1783885980798; OptanonConsent=isGpcEnabled=1\u0026datestamp=Sun+Jul+12+2026+19%3A53%3A00+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202604.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026consentId=f274703b-1789-4378-b4dc-7c9738598e84\u0026interactionCount=1\u0026isAnonUser=1\u0026prevHadToken=0\u0026intType=7\u0026hosts=\u0026landingPath=https%3A%2F%2Fc.sf.tumee.com%2Flogin-messages%2Fpromos.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:01 GMT\r\ncontent-type: text/css\r\ncf-ray: a1a29775ba9c5a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"74999a213b8f98e68a3d640ff2735c26:1780914952.107937\"\r\nexpires: Sun, 12 Jul 2026 23:53:01 GMT\r\nlast-modified: Sat, 11 Jul 2026 01:57:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.cf0a655f.1783885981.2009d8df\r\nakamai-grn: 0.3d411002.1783735058.1e2dbff2\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79957,"size_decoded":11414,"mime_type":"text/css","magic":"ASCII text, with very long lines (37823)","md5":"74999a213b8f98e68a3d640ff2735c26","sha1":"8c5b4d2c9a47eb930231929080296c1714f5fa35","sha256":"06dbe12e6e0df8343b9902746dafca54bc1ed233575233a8bce286dd1a1ea10a","sha512":"7f4fac6ce989b35604524f3ca944ec1c8998ae883a9c49b6ff5a7f011cbb4dd57a0c8acbad91991961bcb32e6315628d5e516483a6b84b7e4e6c9b4a3b45f11b","ssdeep":"1536:KYnpWPnBIK4zIKRmhz5CPct7xxUYDJgcAtatzRD9jSDxQ+iFy53otE+tGi13QO9R:4nBIK4UKRmhz5CPct7xxUYDJgcAtatzZ","tlshash":"cd73cc47f9a1562bf5d74bbd4126aeb6b8a06826bd2359ddf10a233499cc3f30c23315","first_seen":"2026-06-18T15:47:34.373108Z","last_seen":"2026-07-16T21:57:18.123095Z","times_seen":46,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/js/public/nunjucks-slim.min.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.007Z","timestamp":1783885980007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/js/public/nunjucks-slim.min.js HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976f091b56a3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=1714789\r\ncontent-encoding: br\r\netag: \"78fc369d6fdd305de0b0a3eaea038d1f:1626391003.414164\"\r\nexpires: Sat, 01 Aug 2026 16:12:49 GMT\r\nlast-modified: Tue, 26 May 2026 23:42:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nakamai-grn: 0.25ad2c17.1779838935.83431b74, 0.39e61702.1783680670.6b04116\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670104_35120697_112214294_36_3465_10_15_15\";dur=1\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33478,"size_decoded":11296,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (33432)","md5":"78fc369d6fdd305de0b0a3eaea038d1f","sha1":"05d6127f3bf2918323989a8c043f7378b386c887","sha256":"2a99120b93dc55bc88954cc7f5c193533bc18510a105232cf3d6bfdaf07f660f","sha512":"04b7b475b6b1c281b24c9688fd976df884915a0ee0c9e1eeccec7013f97ffbfc2a05716d5bfad99d3220d445c4194f2a4b56921e43358463fc41373f09e63104","ssdeep":"384:usERpZZk9UOuxriJ0okPky/N4RpAdHRksFTdz/5vVocg5IQMywtpdr3mOB7NdOlP:ck9UOdBOJNcKHdJqc2WeiE5","tlshash":"3fe263dcf2d2f06543a3a5b5822f500bf33e6999344e9068a259d4e6bcb954e8037f7c","first_seen":"2023-06-30T17:49:22Z","last_seen":"2026-07-16T21:57:18.127205Z","times_seen":582,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www-emu/page-builder-client-server-components/v1-stable/static/js/login-promo.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.013Z","timestamp":1783885980013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www-emu/page-builder-client-server-components/v1-stable/static/js/login-promo.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976f1df35a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"805c248cb96457017547f9b3307d3e98:1783507692.200792\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Sun, 12 Jul 2026 11:23:14 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783885980.d43e438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":908,"size_decoded":943,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (908), with no line terminators","md5":"805c248cb96457017547f9b3307d3e98","sha1":"fefa7c78f6b158ce85015f350b0e89efd0e11df5","sha256":"57024ac988f409dd69c3ae79a536b06cc961929873f4d5496273f61b5fb675aa","sha512":"b4a5c412c8420c8acb86a439d4aec6f785c73b56861ed00845a939cff1aa62b67cc7517570b63951c286aaf9774d1aff7f3d8623699bf44b0b5414f4b194efb1","ssdeep":"","tlshash":"9811633573465131d2f34bd7b199f3c366700b897c402185f06c0d4739a9867baa5ad3","first_seen":"2026-04-16T20:03:25.364286Z","last_seen":"2026-07-16T21:57:18.081219Z","times_seen":70,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/logos/ddb906c9-f57b-40fc-85a1-c8bcbc371b0d/6a33a761-886e-4860-8e17-abc0832f7a62/corporate_logo_big.png","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:01.391Z","timestamp":1783885981391,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/logos/ddb906c9-f57b-40fc-85a1-c8bcbc371b0d/6a33a761-886e-4860-8e17-abc0832f7a62/corporate_logo_big.png HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ; gtm_session_start=1783885980798; OptanonConsent=isGpcEnabled=1\u0026datestamp=Sun+Jul+12+2026+19%3A53%3A01+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202604.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026consentId=f274703b-1789-4378-b4dc-7c9738598e84\u0026interactionCount=1\u0026isAnonUser=1\u0026prevHadToken=0\u0026intType=7\u0026hosts=\u0026landingPath=https%3A%2F%2Fc.sf.tumee.com%2Flogin-messages%2Fpromos.html\u0026crTime=1783885981339\u0026groups=1%3A1%2C3%3A0%2C4%3A0; webact=%7B%22l_vdays%22%3A-1%2C%22l_visit%22%3A1783885980286%2C%22session%22%3A1783885980286%2C%22l_dtype%22%3A%22Typed%2FBookmarked%22%2C%22l_page%22%3A%22SFDC%3Aus%3Alogin-messages%3Apromos%22%2C%22counter%22%3A0%2C%22pv%22%3A1%2C%22f_visit%22%3A1783885980286%2C%22d%22%3A%227010M000002Mw7O%22%2C%22seg%22%3A%22non-customer%3Aus%22%7D; sfdcConsent=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:01 GMT\r\ncontent-type: image/png\r\ncf-ray: a1a29777b9165a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\netag: \"58ce4d66b1c7f253e02d4caebec650a5:1780914965.889893\"\r\nexpires: Sun, 12 Jul 2026 23:53:01 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:36:05 GMT\r\nserver: cloudflare\r\npragma: no-cache\r\nak-uuid: 0.570a655f.1783885981.fb45ee4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5450,"size_decoded":5886,"mime_type":"image/png","magic":"PNG image data, 398 x 279, 8-bit colormap, non-interlaced","md5":"58ce4d66b1c7f253e02d4caebec650a5","sha1":"b791ce5f8fac2168cbdf0b46e630d7129c51f83f","sha256":"4abcda617812df2679c50d148ffe64cc5d8fb5afd9296e5cbd8970175625fe36","sha512":"61b74c4b3f46a14d88de3b3b35e0e0f792c6efb8a3725f4b9568b3a68fd2ca47506b8c757fbad1b4af5cb1e0c873a46a0e87d17fd204757f284602b921f29384","ssdeep":"96:iGjlDAdJwWd263bo85TrKzkY3h9zpWKt2C8EioOVV95JGqDnKWFtWA8oax:edJPo8lmDzpWT/oOz9TG4ftmoax","tlshash":"32b18e0de6031e43d491dbe6ce12a1486c4cf3e5ce7653d92fa3dab5c2842654e05ec6","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-07-16T21:57:18.097441Z","times_seen":1916,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/login/assets/fonts/SalesforceSans/SalesforceSans-Regular.woff2","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.463Z","timestamp":1783885979463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /login/assets/fonts/SalesforceSans/SalesforceSans-Regular.woff2 HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://login.sf.tumee.com/css/sfdc_210.css?v=7\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a2976ba9b85a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Fri, 24 Jul 2015 20:32:56 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27580,"size_decoded":28069,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27580, version 1.0","md5":"3ccb7b03c77bb2a3e91f6a2fb4c211f8","sha1":"ac4c4df3c4bcc636190e4f94c7a80b81158d0517","sha256":"1f1752651aca663f40e45c60e182172fc426a40df042098f6e68a56db2c459f3","sha512":"0fd58d53f8590ea25a4f5dde4c4a16bee27fccda4ec94604a3a559790f3f3f9e49c748483b3037fd098abc656c56c8d283abe3435f7d2edb6e7074943459f90c","ssdeep":"768:qE6X22YZZE5bi18M7S6RwILPQy+KAiSjcz0:qPXdxQhjwILPqKAHjcz0","tlshash":"52c2f141c44f6a84af0838c7ff2d9181afa8165bb5b3d98114b89806d7fc791812e9fe","first_seen":"2023-05-11T12:50:23Z","last_seen":"2026-07-16T21:57:18.126084Z","times_seen":1473,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/s.gif","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.477Z","timestamp":1783885979477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /s.gif HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: image/gif\r\ncf-ray: a1a2976bb9e65a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Tue, 27 May 2003 18:28:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\norigin-trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":767,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-07-17T10:40:01.628532Z","times_seen":77841,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_ga_tracking.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.012Z","timestamp":1783885980012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_ga_tracking.js HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976f192656a3-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"896b537ab40c719676b181b6f375ee1c:1781646331.760887\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Tue, 16 Jun 2026 21:45:31 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nakamai-grn: 0.844f2417.1783885980.6dc82df\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783885980324_388255620_115114719_73_14392_26_30_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3929,"size_decoded":1934,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"896b537ab40c719676b181b6f375ee1c","sha1":"394d45b85af419d70f2df9a0bd05a0c09d22d02e","sha256":"90fcea0618e9842c88c2955fee356f94d4a236f4ace217ff1d3bc91e6a49cb7d","sha512":"0f917e771bd7d7c6f94799e5ddd12fa68aa9f3b49cf1d516a9120c8cb7e5b5133fc67d28f1f4c45cb5254a13d089f56bfe45da34274a47df598c71e501385c6d","ssdeep":"","tlshash":"978114692bf7203305a3a039579fe149777a601b291bf9643ece02845f9806e4775fd8","first_seen":"2026-05-21T21:31:36.391154Z","last_seen":"2026-07-16T21:57:18.141841Z","times_seen":89,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/img/icon/capslock_blue.png","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.759Z","timestamp":1783885979759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /img/icon/capslock_blue.png HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ; session=1783885979745\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: image/png\r\ncf-ray: a1a2976d88c15a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Tue, 04 Apr 2023 21:01:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\norigin-trial: AqlAE64ET63tVSana3qdVkfkPAgyUhY8GwcehUlpqv067CevOpumeNUlx9YouLkBxJ0CT+EwIb8/SiNbF2NGvwYAAABfeyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2UuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":549,"size_decoded":1273,"mime_type":"image/png","magic":"PNG image data, 33 x 43, 8-bit/color RGBA, non-interlaced","md5":"0b76cfe389e0720a22e73e9a1f63351f","sha1":"c3f0a7e6547e3997f8c9574a011005de748181ee","sha256":"1f21e5aca5794286008ff7bd98038e525e047e36490747681a6ea396a52fd24b","sha512":"03c7a7ebad681a4f86a242eb67532c0a406216b2d29e58020fa0589234c5a65cb9b7d39859b21df9f99efb896365a5c5075f33afde6b486469f40043bb4d304d","ssdeep":"","tlshash":"f4f02094b7e20fa1c64b8a9225b8bf1dc43c38420a6c2bcc301a6c6a530738be11db51","first_seen":"2023-05-30T01:19:07Z","last_seen":"2026-07-16T21:57:18.096624Z","times_seen":1245,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:52:58.033Z","timestamp":1783885978033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a1a29762da275a0f-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache,must-revalidate,max-age=0,no-store,private\r\nx-frame-options: DENY\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nserver: cloudflare\r\nset-cookie: CookieConsentPolicy=0:0; path=/; expires=Mon, 12-Jul-2027 19:52:58 GMT; Max-Age=31536000; secure\nLSKey-c$CookieConsentPolicy=0:0; path=/; expires=Mon, 12-Jul-2027 19:52:58 GMT; Max-Age=31536000; secure\nBrowserId=SHcv9n4rEfGR2OWFTMtTtQ; Domain=.sf.tumee.com; path=/; expires=Mon, 12-Jul-2027 19:52:58 GMT; Max-Age=31536000; secure; SameSite=None\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests, frame-ancestors 'none'\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' *.sf.tumee.com 'report-sample'; style-src *.force.sf.tumee.com 'unsafe-inline' 'self' *.sf.tumee.com *.visualforce.com:*; img-src *.force.sf.tumee.com slack-imgs-mil-dev.com a--static--lightning--force.sf.tumee.com *.slack.com 'self' *.slack-imgs.com slack-imgs-gov.com *.salesforce-experience.com *.slack-edge-gov.com *.my-salesforce.com slack-imgs-gov-dev.com *.slack-edge.com *.cloudinary.com slack-mil-dev.com static--lightning--force.sf.tumee.com blob: *.slack-edge.mil b--static--lightning--force.sf.tumee.com slack-imgs.com slack-gov-dev.com static--sandbox--lightning--force.sf.tumee.com *.sfdcstatic.sf.tumee.com *.sf.tumee.com *.twimg.com slack-imgs.mil data:; media-src 'self' *.sf.tumee.com; frame-src *.force.sf.tumee.com *.quip.com *.arkoselabs.com 'self' *.youtube-nocookie.com *.youtube.co.uk *.cybersource.com *.youtube.com.br *.youtube.es *.salesforce-experience.com *.salesforceliveagent.sf.tumee.com *.adis.ws *.sfdcfc.net *.youtube.ca *.youtube.ie *.cloudinary.com *.vidyard.com *.vimeo.com *.youtube.jp bcove.video *.youtube.fr *.forceusercontent.com *.brightcove.net *.youtube.com *.wistia.net *.sf.tumee.com *.youtube.nl *.youtube.pl; font-src *.force.sf.tumee.com 'self' *.sf.tumee.com blob: data:; connect-src 'self' *.amazonaws.com *.sf.tumee.com https://cdn--cbweb--code-builder--platform.sf.tumee.com api.sf.tumee.com wss://*.api.sf.tumee.com *.api.sf.tumee.com wss://*.slack.com wss://api.sf.tumee.com; report-to sfdc-csp-ep; report-uri https://csp-report--force.sf.tumee.com/_/ContentDomainCSPNoAuth?type=login\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Arkose Labs","description":"Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms.","website":"https://www.arkoselabs.com","common_platform_enumeration":"","icon":"ArkoseLabs.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12316,"size_decoded":6224,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5835), with CRLF, LF line terminators","md5":"27808426455797f52cb97eb6bb75122b","sha1":"ae9eb98795afe8b04019d56723dacf47da0a4996","sha256":"07c312472beed514b3ab41aa1073136a293b506d2fb63c58f16114c9f537f7ab","sha512":"45b102fa24ef653ec184f59d9ce1c96a8751d2aaa9b83652a849179e4b6d9ed3db553049ed493f382361f8074abf3849b1df8a25dd789c666409d89847bf5cd1","ssdeep":"192:m3zAgJaPEHs3PGFoaRMiFmqvBZ/e5MmvJ6Rr3pVfyK:g3JaMMup3mCw5MmvJcr3XaK","tlshash":"b14293b719049c366243c9feb8d2fa9c60afc22f47859d4cb7ac292367c7e19097046d","first_seen":"2026-07-10T12:35:59.953778Z","last_seen":"2026-07-12T21:21:00.124431Z","times_seen":5,"resource_available":true,"data":null}},"time_used":994,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":972,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www-emu/pbc-core-analytics/v1-stable/comp-data.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.002Z","timestamp":1783885980002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www-emu/pbc-core-analytics/v1-stable/comp-data.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976f0db45a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"d950ae4f16f725be4e73d41a19b3c6d4:1776450181.447061\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Sun, 12 Jul 2026 17:35:21 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.cf0a655f.1783885980.2009d5d7\r\nakamai-grn: 0.6b0f3417.1783877721.8f67dd6c\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15601,"size_decoded":5960,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (15562)","md5":"e19f22dbce44152b3bcd6a030d6a97d2","sha1":"64f825cf774e0ee7571878bf24d85e3e905142f0","sha256":"e6fa0d5861bf241e0e0cb1834252dbeb6bb8c6be3307bb018474e829baec9753","sha512":"23a5d3bf8fdec1bb9a870cafe6e90b43efd6ebb816b3b2df3d5e010467d1abc0f2350f8229d6107c8d1ec50918eb0f90c2d0e953d20e9cb6311b1043fe5eac7f","ssdeep":"192:N7+zDrAtrzxg68LRkwUVRLcBjTAF6ejxpzDU77BaafkXOgOQCYF29qrncgxas2of:NPt8LxU3LGEfU/Baatg1VnMs34ZNSrv","tlshash":"4262e8e2a612c6b903ed95cad8189145f9592db8064ef548ff4decd6219fc0270e2ff2","first_seen":"2026-07-10T12:36:00.038992Z","last_seen":"2026-07-12T21:21:00.174059Z","times_seen":5,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/xsf-nav/v1-stable/nav/www/prod/en_us/prospect/config.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.206Z","timestamp":1783885980206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/xsf-nav/v1-stable/nav/www/prod/en_us/prospect/config.js HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a297705b0c56a3-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"77d3ca79104bcf538ed0de0a2c0d4b48:1783724479.026231\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 23:01:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nakamai-grn: 0.a44d2417.1783885980.1cfafa76\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=36, origin; dur=0, ak_p; desc=\"1783885980337_388255140_486210166_3654_3988_25_29_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97089,"size_decoded":18183,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with very long lines (65482)","md5":"56865a02d72acea7c1846b55ba3d8e96","sha1":"dc650cde3600b1f6c03322e35ffe9f47391cc142","sha256":"87b028d9b5e34c260ded7207b069ac8f13684242718e93a35e7c9ec75f03da4f","sha512":"cbfe4fcb80e96181699f2a93fe4d0964f0cb88cd19d5ee67b3949a4c63f15387d82d842bcfde850b335c48b14f6b1c7ec8f6c5811f5b7e67459cbfa5ddc5a611","ssdeep":"768:6oCzjTPbroZrT/hnF95L9LYhfr3pWz0GPBK+eFI7b7kCxIyozR8Q7cF8gDQxlWFh:DCXTPtapF7ACzj61viXAjN6Af2L","tlshash":"379347af0f684633dfa47fd554a7e29fe44e128aca419eccf5909d0952d03d92e2b0e1","first_seen":"2026-07-12T19:53:38.776562Z","last_seen":"2026-07-12T21:21:00.105428Z","times_seen":2,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/page-utils.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.304Z","timestamp":1783885980304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/page-utils.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a29770eb975a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"2c504c86cfd900cb534a519f25794532:1781683759.386195\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Wed, 17 Jun 2026 08:09:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.cf0a655f.1783885980.2009d6d0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11083,"size_decoded":4701,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11043)","md5":"396161a46dbbfc784e6b7a758fccf4a2","sha1":"56fc5254139c79ec38631194cb6df6cd34a6c5e3","sha256":"1f8d43153b0a4d8fabc1651c26a0363bec785505208e3cee748a7f7c6d79d6e5","sha512":"9087630a4ed09304fd213e14f37f5bdf0e4298834569185ff7116422cdf24c8fe5eb4e14fc2af68cea0f447b42eb58a8922b51dfbbb332994b8e71694229fae6","ssdeep":"192:2zgVUM1jzhWYSSBZH6mrLghegVek3eclt+bS8:Bn1DBZ9rLYzXeq+b/","tlshash":"ba32d5c19943ceb503e96dca8c295295f649ac384389b894ff5efcc17606c8a30e1bf5","first_seen":"2026-07-10T12:36:00.015839Z","last_seen":"2026-07-12T21:21:00.130399Z","times_seen":5,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/v2/otPcTab.json","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:01.074Z","timestamp":1783885981074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/v2/otPcTab.json HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ; gtm_session_start=1783885980798; OptanonConsent=isGpcEnabled=1\u0026datestamp=Sun+Jul+12+2026+19%3A53%3A00+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202604.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026consentId=f274703b-1789-4378-b4dc-7c9738598e84\u0026interactionCount=1\u0026isAnonUser=1\u0026prevHadToken=0\u0026intType=7\u0026hosts=\u0026landingPath=https%3A%2F%2Fc.sf.tumee.com%2Flogin-messages%2Fpromos.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:01 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a29775ba955a0f-OSL\r\ncf-cache-status: DYNAMIC\r\nak-uuid: 0.ef4d2417.1783885981.d43e7f9\r\ncache-control: max-age=0, no-cache\r\npragma: no-cache\r\nexpires: Sun, 12 Jul 2026 19:53:01 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:35:53 GMT\r\nserver: cloudflare\r\netag: W/\"a8dbeec2b5827a10192b857fa487e659:1780914953.056582\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69091,"size_decoded":14262,"mime_type":"application/json","magic":"JSON text data","md5":"a8dbeec2b5827a10192b857fa487e659","sha1":"924c1139849270a3886d7b764df5b5525924f6f8","sha256":"d71caf79e94e94761e7557f6575e0b7968a901713cc994ab4ffb84f742a3c487","sha512":"7c52b8ed6865740a3a9fb7d1bba034c1107643de3e68603b4720bbf7f0758ab54cc8382ebd714ab92312a6381a1844abbf4d6c22711f89f0091673ebafa832b5","ssdeep":"768:6pl23MgWAuuZSWGhsHpZXKTq3wOdCPcU85xJ:N+7MVR3PdvU8HJ","tlshash":"b263d99b7aa1530afee38b1deb926de97120c81fbc335dedf1024678868d3e18d51509","first_seen":"2026-06-18T15:47:34.333353Z","last_seen":"2026-07-16T21:57:18.091754Z","times_seen":46,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/SfdcSessionBase208.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.240Z","timestamp":1783885979240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /jslibrary/SfdcSessionBase208.js HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976a4c3d5a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Fri, 21 Nov 2025 00:12:58 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16274,"size_decoded":6468,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (575)","md5":"8e2870fbac46a1cb8236be77c9994949","sha1":"8ff7c8444655613a742d035a29e78ace56bb9f24","sha256":"3472427f067f8339f37000e07b9f7e9ff0bbd4adad5be419e65b2640970f06ec","sha512":"5b76917441dec93fff73c53e95cf4ca8ff2a80074b6e5a8e6b1a247737c890ff872ee8973e9a335604f59e6d27ee5f98f6446695400cbe70ec22c0b5db3522b5","ssdeep":"192:wUPZL9Q5pKURHiMtKKJBEOcjSNOIchZG6F1fqLpISpW7ZUCK4sp5l+NZxIucVwvD:wQL9QHBOjSNOIWgZH8sp5kNZxx2w37","tlshash":"8872d6c2b6c2746289b6b0eb503f1046e57ccd5ab86c4dd1d0e9c6c47fb48aa417bf28","first_seen":"2026-02-13T01:58:22.085082Z","last_seen":"2026-07-16T21:57:18.102199Z","times_seen":154,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/baselogin4.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.244Z","timestamp":1783885979244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /jslibrary/baselogin4.js HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976a4c575a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Fri, 23 Aug 2024 01:29:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3694,"size_decoded":2277,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (511)","md5":"a5c862f98f1364f73bf0233d6e16fe5c","sha1":"ca45e4c6f41cba54314b739495d59a7d26a25381","sha256":"189f242883a88d98ed5da5366f6518a62c537a9883395ab484753c3f0b49652e","sha512":"07ff1ee304a50bf97376e0082b792aca9d1659a2790b9b72abed98afe5c8b14181460408f334949291842f3378219151b2f513a81a5b9d73248a8f12e1c1a065","ssdeep":"","tlshash":"3671f9877134b4316833249121af4a8fb1bd8f689488b4c4dbd8dce165b1d871775f5a","first_seen":"2024-10-11T09:18:50.381887Z","last_seen":"2026-07-16T21:57:18.136334Z","times_seen":296,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/fonts/salesforce-icons/salesforce-icons.woff2","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.986Z","timestamp":1783885979986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/fonts/salesforce-icons/salesforce-icons.woff2 HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a2976f090b56a3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\netag: \"19f7e7ae24cb975b40ecc602f06f1e0b:1616101776.144644\"\r\nexpires: Tue, 11 Aug 2026 19:53:00 GMT\r\nlast-modified: Thu, 18 Mar 2021 21:09:36 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.39e61702.1783680670.6b0411b\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670114_35120697_112214299_54_10475_18_24_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15056,"size_decoded":15653,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15056, version 0.0","md5":"19f7e7ae24cb975b40ecc602f06f1e0b","sha1":"ef70ecc2e8e950748ad0f58740893d68e7aacacc","sha256":"e86f5ad3afdd08d69278cc7e5203407aed8a8069c92bfb04988f8a859990c692","sha512":"d33c3e1aaaf2e5edced4cc37239790cdf1f4e2d926497dba22ccefd5a091d08f8adf7e3d31e6437e1a86d46de70f27c44e5f169daceb297acc0aca3dbd6c77a0","ssdeep":"384:RUufvvH1bsf44UiIIQpy/3RBP3f1/fymWFbacQAeAVOTR:Rn/VbsA4UZIQ0RBPfEm+We+R","tlshash":"4762c0325716b1d1c1b282aa81c361dba70736d9633d44c35ebd179a8e16478e24ccf7","first_seen":"2023-05-03T23:44:13Z","last_seen":"2026-07-16T21:57:18.13825Z","times_seen":3155,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":297,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/otSDKStub.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.993Z","timestamp":1783885979993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/scripttemplates/otSDKStub.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976efd785a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"bae7feef66893a6d54817f5e03d56ec1:1780914944.374662\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:35:44 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.570a655f.1783885980.fb45b9a\r\nakamai-amd-bc-debug: [a=23.205.102.134,b=126018721,c=c,d=1783622706,h=200,k=2,l=0,n=US_TX_IRVING,o=20940,r=2,p=31456]\r\nmpulse_cdn_cache: HIT\r\nmpulse_origin_time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31452,"size_decoded":11080,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (31429)","md5":"c61c9212d44a276e276a64be0104e5b4","sha1":"2a0300f8224b9f13020106f9fda1aabc362603fb","sha256":"4f0bbc6b255b6ff7eb55d7a5c3ec7199e7dec005b41f0577ab236f4756c69f6a","sha512":"cb5406f4074f47de426647588ecbb8aa77767629e85dccd2d3e0c15a825150891c9a9e20410994822ce79866fda3b6bdeac2b985795f58a745f49a36568d0c9e","ssdeep":"384:MLIi8k7hI3RzMABwXeU9LH6rlIgknE8eEaRgCyu8LcwLKvTJ9x4AaHKJx686W7rk:M0izIBAABwXb9wvknECPCJ8gJ9ugwW7o","tlshash":"bae22a99b140ef3447d251dc993be25ab23a746d348ac028f868dce0247dd4b6673fb6","first_seen":"2026-07-10T12:35:59.963347Z","last_seen":"2026-07-12T21:21:00.127957Z","times_seen":5,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/legacy.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.001Z","timestamp":1783885980001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/legacy.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976f0dae5a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"d8766acc6d24eb8f040b1cece9807c8f:1781683757.574933\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Wed, 17 Jun 2026 08:09:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783885980.d43e42e\r\nakamai-amd-bc-debug: [a=23.36.77.198,b=275065320,c=p,d=1782344440,h=200,k=2,l=0,n=NO__OSLO,o=20940,r=2,p=9180]\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9188,"size_decoded":3887,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (9152)","md5":"373a30f1c10381c1a9b6f7cf75abc104","sha1":"eb2b224bd1577f2e112b44ec75d86a9f40617c1d","sha256":"e39b971c57f741685ce756b372ba5bd987279161949ce44c0e87fc749c7f54d6","sha512":"d160b33e50fbf2d18ee830078ec25d0c314e18857d014f22fdc8146540946872a3eb64da5b7f5d092fae82c9d23bc3ff3266c5fb144d9a14b78500dedce56a5d","ssdeep":"192:F+z64zbZ1QKzSPzOnwNsSvorlWvye8BRUb:FA6KQBPNpJvqBqb","tlshash":"fa12c8d6a963d9a402e4adcacc195299f6069c3803ddb894ff59fdc17406c0e30e2bf6","first_seen":"2026-07-10T12:35:59.968618Z","last_seen":"2026-07-12T21:21:00.137838Z","times_seen":5,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_identify.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.011Z","timestamp":1783885980011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/open-blade-libs/qualified/v1.0.0/qualified_identify.js HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976f192056a3-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"df8b22f19c089482eeac4e0f8d23e70f:1781646330.361227\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Tue, 16 Jun 2026 21:45:30 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nakamai-grn: 0.a44d2417.1783885980.1cfafa7d\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783885980352_388255140_486210173_41_13841_31_35_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6125,"size_decoded":2588,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"c06adac341baba15f12d0fc47eeb45f9","sha1":"b7246f95ef892327c4de02326bdb4418901620b3","sha256":"5976b13da122502ea6c6be930f0b2e5d5c2c4e65b52754dde03a85a094bbe8b4","sha512":"d995c3321103fe7356c78e58b9fce2c70610396f50d344d9ab269d3a9ff2eef4fd8d9b7b1878f5e4076d0846f51ca3fcf8af55ee8fb251989894b05f02cf119a","ssdeep":"96:XFlKGIsGOGyHpZlpdZTBDoc46/iE3XCIG2It8GWyiH3aGeScJ15GeShMMP9S/1EK:XFNpd/DocnD3tA8FyTU9SNCO","tlshash":"2bc1a5892be7307605a330796f9fe005b63190172d49ed907c8e9244bf6061faa73fd5","first_seen":"2026-07-10T12:35:59.981204Z","last_seen":"2026-07-12T21:21:00.104776Z","times_seen":5,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wp.sfdcdigital.com/en-us/wp-content/uploads/sites/4/2025/04/PHP-login-free-trial-BG.jpg?resize=768,240","fqdn":"wp.sfdcdigital.com","domain":"sfdcdigital.com","tld":"com"},"ip":{"addr":"95.101.10.184","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.218Z","timestamp":1783885980218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.sfdcdigital.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Aug 2025 00:00:00 GMT","end":"Wed, 12 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:77:77:C9:C2:B6:87:4E:17:34:C9:CC:37:0A:B5:3B:72:02:EC:A6","sha256":"B5:D0:F5:B3:33:2A:89:B4:D9:45:B6:63:6C:9A:0A:5D:21:5F:48:DB:C2:13:95:2C:AC:31:61:D7:83:15:8A:01"}}},"request":{"raw":"GET /en-us/wp-content/uploads/sites/4/2025/04/PHP-login-free-trial-BG.jpg?resize=768,240 HTTP/1.1\r\nHost: wp.sfdcdigital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/webp\r\ncontent-length: 1070\r\nlast-modified: Tue, 23 Jun 2026 15:39:33 GMT\r\netag: \"fcdc8ab353f3bb67\"\r\nx-bytes-saved: 41442\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-rq: arn1\r\naccept-ranges: bytes, bytes\r\nstrict-transport-security: max-age=31536000;includeSubdomains;preload\r\ncache-control: public, private, max-age=3780431\r\nexpires: Tue, 25 Aug 2026 14:00:11 GMT\r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=3, ak_p; desc=\"1783885980447_1600457316_750312384_584_10568_3_0_11\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1070,"size_decoded":1718,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x240, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7c43dcd804b4d02b1e97d1f130f251cd","sha1":"5ef249cdcde861022d709b006d54697bd347d701","sha256":"68d996bfd92aa77497755c92e71b3b77e5608cc16763eb1181712fa5a55cb67b","sha512":"9abe04d6e4f44650ef9af9e8a95c0a9a6715d9774d47fea0b937ba8ac7361bd25b35f83e960b2b961c874be1b22298c46b309622ac8457a4adbaf77b1ff5e546","ssdeep":"","tlshash":"3b11215c56343698d32e53f6502051fb431eb36f0677921cd26c98b3405574d2f1e6ac","first_seen":"2025-10-11T09:00:05.263181Z","last_seen":"2026-07-16T21:57:18.132721Z","times_seen":108,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":20,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privacyportal.onetrust.com/request/v1/consentreceipts/anonymous","fqdn":"privacyportal.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.945Z","timestamp":1783885980945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 23:56:45 GMT","end":"Tue, 25 Aug 2026 00:56:41 GMT"},"fingerprint":{"sha1":"C9:CF:D5:82:20:E4:3C:8E:93:0C:23:4A:84:47:8B:9E:D8:DC:41:3D","sha256":"B4:81:5F:D3:A8:70:D4:91:CC:77:29:81:DF:82:FC:65:34:A8:46:CD:3D:25:6F:86:32:99:AA:46:88:A7:CE:40"}}},"request":{"raw":"POST /request/v1/consentreceipts/anonymous HTTP/1.1\r\nHost: privacyportal.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nContent-Type: application/json\r\nContent-Length: 13382\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13382,"data":"{\"requestInformation\":\"eyJhbGciOiJSUzUxMiJ9.eyJvdEp3dFZlcnNpb24iOjEsInByb2Nlc3NJZCI6IjM0YThmZjNhLTAwNTAtNDU3Ny1iZWU1LTk1ZDExZDY5YTZkNyIsInByb2Nlc3NWZXJzaW9uIjo0NSwiaWF0IjoiMjAyMy0wNi0yM1QxNTo0NDoyOS44OTciLCJtb2MiOiJDT09LSUUiLCJwb2xpY3lfdXJpIjoic2FsZXNmb3JjZS5jb20iLCJzdWIiOiJDb29raWUgVW5pcXVlIElkIiwiaXNzIjpudWxsLCJ0ZW5hbnRJZCI6ImRkYjkwNmM5LWY1N2ItNDBmYy04NWExLWM4YmNiYzM3MWIwZCIsImRlc2NyaXB0aW9uIjoiVGhpcyBjb2xsZWN0aW9uIHBvaW50IGNhcHR1cmVzIHRoZSBjdXJyZW50IHNpdGUgdmlzaXRvciBjb25zZW50IHByZWZlcmVuY2VzIGZvciB0aGUgZG9tYWluOiBzYWxlc2ZvcmNlLmNvbS1lbiBzcGVjaWZpZWQuIiwiY29uc2VudFR5cGUiOiJDT09LSUVCQU5ORVIiLCJhbGxvd05vdEdpdmVuQ29uc2VudHMiOmZhbHNlLCJkb3VibGVPcHRJbiI6ZmFsc2UsInB1cnBvc2VzIjpbeyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiI0MThhZGJlZi0zZWZmLTQ5ZTYtYjU0My1iMWEyMTczY2Q3NzYiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiZDAwYWQyNTAtZDlmNC00YzZjLWJiYzUtNThmZmI4MTNlZjM3IiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6Ijc4ZDRlYWU4LWFhNzUtNDViOS1hNWUxLWVmMzVjYWJmM2FlNiIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiI2ZTA2MjhhMC02MDcwLTQ1ODMtODJhNy1jYWEyNzZlMjIzNjkiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiMDRkOTUzYTItNzcwNi00YzY1LTllNDItNGIwNzcxYjk2YzRhIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjQyLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiJmNWEzODBlZi02NWFiLTQwMDQtOTc3MS01OGUxY2E5Y2YyOTQiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiZjc3NzE1NzQtNmJmMi00NDQwLTg4YjktYThkYTY4MzgwYzFhIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6ImI5ODI3MTI2LWIzYjQtNDEyYy05OTAxLWRhNGYzYjM0YzM3YSIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiI1ZWEwM2U5My0xNzI3LTRlNjEtOWU5OS0xMTY5NDA0NzM3NzAiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiMTVjZjRkZmMtMWFiMC00NDUyLWI0MzYtYjg2Mjk1ODU1ZDQwIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6IjA5MWNjZDRkLTYwNmEtNDVhNi1iMjhkLTQxMGZhMTUxZmQ2MyIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiJhNzBlZmQ5Ny0wN2JmLTQyMWQtODMwMy1iZmExZmYwZTRiZTciLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MywicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiNDk0OGJkN2UtOGZmNC00OGIwLTliNGQtYzQwODA4NzE2MDc1IiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6ImM4MzBhN2IwLTgwMmYtNDMxZC1iMWY5LWI5ZTk3ZWUxNzZmNyIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjo0MiwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiNmE0MDBmMmUtMWNhNS00YmI5LTljZGUtNWMxZWMyZjZjMjU1IiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6IjcxOTkxYWVhLTJlOTItNGFmYi05YzQ1LWI4N2ExMzM4YTliMyIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiJjYjZjNTI1Ny0xODYyLTQyMTAtYTYzNC00MTZmNGUyMjc5OTQiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiNzJkZmY1ZGEtNWQ2OC00ZWNjLWFjZjgtY2NiZDJiNzBhMDUwIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6ImE1NDUwNjA2LTNlOGQtNDE2YS04NWQzLTE2NTg2ZDVjNGI3MCIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiJkYTkwNTFlNi1iODBlLTQ2MGItYjNkMC1mMmZiMzliNzAxY2EiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiMmFlNTVjNjQtOGJkNy00NzcyLWJmNWMtY2JmMTA4ZGU5MTlhIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6IjEyYTkxNTk2LWE4ZjMtNGY3Mi05YjU1LWE2YjFkZWJmMTAwNiIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjo0MywicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiNDhjZTJlMjUtMDQ3OC00Nzk2LTkwNWQtZGFmYmRhNjVkNzQzIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6ImZmZWYyYjlmLTk3ZGEtNDZjMS05ZTJmLTFlZjIwYTY1MWMwMSIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiI1NzEyMjFkYi02NzI4LTQ2YjYtYjZiNC03ZDhmZTFlZTY2MDAiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiYzIzODgxMWQtOWY3Yy00MDkwLThmYTQtOGQ1OTU2NzRlMTI4IiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6ImU4ODliZjUxLTFjYWMtNDE2OC05Yjc3LWU1OGRmYzNiMjAzZSIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiJlMTI5MDA1My03ZjJlLTQ3MDYtODUwYy01Y2RmNzY3NmQzNDYiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiZTE0YWYyMmMtMzBlMy00OTU1LTg0OWYtZGJiNDBjMGMwZGJjIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6ImMyMTViZGRmLTY0NWItNGFhMy05ZDc0LTFkZjFjZGFkN2NmMiIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiI0ZDRlOTkwOC0wM2NhLTQwNWYtODFjNS1mMjA2MjRiZWMxZjciLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiZDE0NGFjZTgtMmE1NS00ZWIzLTk2ZjItMGNmNjAwZmZhYzZiIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6IjM2MGIwNDMwLWZiOWItNDA5My05YjQ5LTE2MTY2Y2M0NmQxNCIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiIzMWQxMzQ0ZS03Mjc2LTQyYzEtODJlOC0wNzI5M2I4NmRlOWYiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiZWFkZDU4MDEtY2Q1Mi00MTNjLWIzZDAtZTExYzNlZWRlMGI5IiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6IjJjZGQ4MmFkLWQ1YWEtNGExMS04ZTgxLTYwZTNkMDY1NTc0NSIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiI3NjY2MTdjMi0zMzdhLTRlYWMtYTg4Yi1hMmFiZmMyMmNiOTMiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiMmQxZDAyYjItM2RkNy00MzFlLWE5NWYtNjE1ZDlkMmU0MTkxIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6IjdjNjU3NWJiLWE5N2ItNDJlYS04Yzg0LWU5MWE0MjAyZTJmNCIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiJmODUyMTAzOS0yYWNlLTQxZTgtYmM1MS03NTZkZjZlMDRkMDEiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiNDUyMTA1NzItZjgzMS00OGY0LTlkYTktNDgxMzlkMmEzNGM0IiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6IjljZTRkOWM2LTg1ZDgtNDg1Zi1iNDNkLWM1ZmRlYmRhMzUyNSIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjo0LCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiI5OTU5NWI2Mi0yZmE2LTRkODAtODA3OC00OTYyOTgyOWMxYWUiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiMDA3NzhjNWUtOWQwNi00YmJhLTk5MjMtY2ZmNTBiMjc4ZDkyIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6ImM4OTA0YTg0LWU1MTctNGYyMy05YjQ3LTJhNjM1ZmRmNWFkNSIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiI4YmU1M2ZhOS01MzlkLTQwZTktYmExYy0yYzAyYTkzY2Y2ODUiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119LHsidmVyc2lvbiI6MSwicGFyZW50SWQiOm51bGwsImVuYWJsZUdlb2xvY2F0aW9uIjpmYWxzZSwiaW1wbGljaXRDb25zZW50TGlmZVNwYW4iOjAsImlkIjoiYWU5YTUyOTAtNzBiZi00ZjFmLWI1MzYtMzRkMDMyNGE1NjdhIiwidG9waWNzIjpbXSwiY3VzdG9tUHJlZmVyZW5jZXMiOltdfSx7InZlcnNpb24iOjEsInBhcmVudElkIjpudWxsLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImltcGxpY2l0Q29uc2VudExpZmVTcGFuIjowLCJpZCI6ImE3OWMzZWEyLTRmMjUtNDUzYS05OGJhLWZlZTMyZjg4NGY5YyIsInRvcGljcyI6W10sImN1c3RvbVByZWZlcmVuY2VzIjpbXX0seyJ2ZXJzaW9uIjoxLCJwYXJlbnRJZCI6bnVsbCwiZW5hYmxlR2VvbG9jYXRpb24iOmZhbHNlLCJpbXBsaWNpdENvbnNlbnRMaWZlU3BhbiI6MCwiaWQiOiJhNWZmNGJlMy0wNjExLTQ2NTctOWI4ZS03MDIxMzkxOTgzMDYiLCJ0b3BpY3MiOltdLCJjdXN0b21QcmVmZXJlbmNlcyI6W119XSwibm90aWNlcyI6W10sImRzRGF0YUVsZW1lbnRzIjpbIlVzZXJBZ2VudCIsIkNvdW50cnkiLCJJbnRlcmFjdGlvblR5cGUiLCJDb25zZW50TW9kZWwiLCJBZ2VHYXRlTGFzdFVwZGF0ZWQiLCJBZ2VHYXRlTG93ZXJCb3VuZCIsIkFnZUdhdGVVcHBlckJvdW5kIl0sImF1dGhlbnRpY2F0aW9uUmVxdWlyZWQiOnRydWUsInJlY29uZmlybUFjdGl2ZVB1cnBvc2UiOmZhbHNlLCJvdmVycmlkZUFjdGl2ZVB1cnBvc2UiOnRydWUsImR5bmFtaWNDb2xsZWN0aW9uUG9pbnQiOmZhbHNlLCJhZGRpdGlvbmFsSWRlbnRpZmllcnMiOltdLCJtdWx0aXBsZUlkZW50aWZpZXJUeXBlcyI6ZmFsc2UsImVuYWJsZVBhcmVudFByaW1hcnlJZGVudGlmaWVycyI6ZmFsc2UsInBhcmVudFByaW1hcnlJZGVudGlmaWVyc1R5cGUiOm51bGwsImFkZGl0aW9uYWxQYXJlbnRJZGVudGlmaWVyVHlwZXMiOltdLCJlbmFibGVHZW9sb2NhdGlvbiI6ZmFsc2UsImRhdGFFbGVtZW50VHlwZU1hcCI6eyJJbnRlcmFjdGlvblR5cGUiOiJVU0VSX0lOUFVUIiwiQ29uc2VudE1vZGVsIjoiVVNFUl9JTlBVVCIsIlVzZXJBZ2VudCI6IlVTRVJfSU5QVVQiLCJBZ2VHYXRlVXBwZXJCb3VuZCI6Ik5VTUJFUiIsIkFnZUdhdGVMb3dlckJvdW5kIjoiTlVNQkVSIiwiQ291bnRyeSI6IkNPVU5UUlkiLCJBZ2VHYXRlTGFzdFVwZGF0ZWQiOiJOVU1CRVIifSwidGVuYW50S2V5IjozNjV9.ev7LMGuqRFMp54zWbtyEYy3Mzazw79iHmZwa4iGg4MPlsYMTRff5gpqNztfSC3CAJRlYW-BhUCo0Tz3GZ_fsojJPDQMQYIkC5fWGcsltXpX7utXADreATZ5KlzrK0xBNpNiGMIsUevMXxAljq78lAxv0D1kOrk8diORxix847tk2Ox_g66i9ELu8CdRO3s3vyTlEhIXqan67Quult4Iv9r9gBWie8ZOrdzp7a4ldsZTY-TM84QXTfoDY0HSelCvlQ-vYjBn2CSQFmjyIU72tltOzx7O4T4MlMFQofaodAgEIdNmm7tO8FbaHLgwS61pMDPHrTFg_LMNZg7i5pvRIfCZ-YivRgp8C3ISKhBfEm7LedV11Q0IIbLgQwiY9x8nuPQZ2oEVUpHLtkLRK44Dnchny5SeHtokPdQxu-x4j3YBKoted_KJIzb6EINLk98nmhtSQl5AORLItvqwHHjsRlOpL8thlKywkELjPfMO-rS1QRCZrM-bhWZbPFJxx0tR4zbNCLZ6KSzQLG_HPOEYLTKEMGiq0Im-zohmNlXHxPScZ7bRxw67Cgbhep7rsY5oXcsnAguMT14OBd2zRrm_h-Ti0LH7IyiMCHt2UHRaCwIMmAoVH1hHwSzETq-4ToPk0-Z_PPFFygc66553iqLaJWdqa3Gz3Yh3SnyN4CqxOlCY\",\"identifier\":\"f274703b-1789-4378-b4dc-7c9738598e84\",\"identifierType\":\"Cookie Unique Id\",\"customPayload\":{\"Interaction\":1,\"AddDefaultInteraction\":true},\"isAnonymous\":true,\"test\":false,\"purposes\":[{\"Id\":\"6A400F2E-1CA5-4BB9-9CDE-5C1EC2F6C255\",\"TransactionType\":\"OPT_OUT\",\"PurposeNote\":{\"noteId\":\"7e7ff8a7-f724-4e0a-b1fe-3e834c081045\",\"noteType\":\"UNSUBSCRIBE_REASON\",\"noteText\":\"Opted out due to GPC signal.\"}}],\"dsDataElements\":{}}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:01 GMT\r\ncontent-type: application/json\r\nx-onetrust-receiptid: 019f57e3-e5f4-76cd-96ed-a4221d8f29ca\r\nvia: 1.1 turnstile\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a29775dbdd4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2455,"size_decoded":2036,"mime_type":"application/json","magic":"JSON text data","md5":"6ea1a879533b3966c3f413be2eaa165c","sha1":"753c1a0b23314185b5f3945558b862f8b9d4d713","sha256":"3c33a65e20cabb092d2a9eb5da5281fe378f0659676e9aaf165b807561d3a3aa","sha512":"ccacbd02ab17f04a54a904878d4e48402c6688978c2227ff86acd755696a0162fcfd9f5f41fee183ea32d73129c74392bf7be9324bd650cb1da5b37dcf2b95f9","ssdeep":"","tlshash":"7f51b65f98231adcba05a98228f4505683195cc31fc3689fe72ebdc3a8b12dbf4d025c","first_seen":"2026-07-12T19:53:38.78627Z","last_seen":"2026-07-12T19:53:38.78627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/fonts/salesforce-sans/SalesforceSans-Regular.woff2","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.981Z","timestamp":1783885979981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/fonts/salesforce-sans/SalesforceSans-Regular.woff2 HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a2976f091256a3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\netag: \"aa41afdaceb8b78c56529555448bcf44:1616101752.085331\"\r\nexpires: Tue, 11 Aug 2026 19:53:00 GMT\r\nlast-modified: Thu, 18 Mar 2021 21:09:12 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.25e61702.1783680670.2db04e7\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670180_35120677_47908071_31_3943_25_29_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27684,"size_decoded":28279,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27684, version 1.655","md5":"aa41afdaceb8b78c56529555448bcf44","sha1":"03d934b119785f6130103507ecff57eb19f05be9","sha256":"6f2251079db9fde7d456ba66a9294899f3024dac928bec71b3ce42e1568f304f","sha512":"d2dd37566d4cff30102b565fee5d10889509c493061331cc64f01450694d2d2a264fb3a7d8e47beb25d38260faa26a627b16ac9fc7e0ed656da0e44db1423999","ssdeep":"384:Pw3MIlCSXNMQxZJcEeMrYuyhKbJSYU9GeRGoYh98muYjWlaaGQ/jhzP4GSWL:TQCSXNBFcEeMrYAJhw69iYjWuQ6lg","tlshash":"0ec2e1394e82eb05d02db776042b6467be592086d08f6bc54e7f6c627fd2638870b7e4","first_seen":"2023-04-24T21:29:35Z","last_seen":"2026-07-17T03:04:56.343332Z","times_seen":6234,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":3,"connect":4,"send":0,"wait":375,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/fonts/avant-garde/AvantGardeForSalesforceW05-Dm.woff2","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.988Z","timestamp":1783885979988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/fonts/avant-garde/AvantGardeForSalesforceW05-Dm.woff2 HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a2976f091756a3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\netag: \"9c63b3c7d486337425fd8eba72f19b2a:1666632161.138976\"\r\nexpires: Tue, 11 Aug 2026 19:53:00 GMT\r\nlast-modified: Mon, 24 Oct 2022 17:22:41 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.39e61702.1783680670.6b04119\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670103_35120697_112214297_73_7426_19_22_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68020,"size_decoded":68616,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 68020, version 0.0","md5":"9c63b3c7d486337425fd8eba72f19b2a","sha1":"3b55caf7071e741d43f0979643bfc9903eff19d5","sha256":"c9e4fa78c0c98df6a1903d28156534861220ffabdc6491a028b2d77184b20abc","sha512":"0649a10393c1204e5054629681412db781ade27f6cd40a5a72d532ce7aba4f4b4859245cc34f1fee62272e4daaec1794d40bc5c9019a3351df1bfe9fe57973d4","ssdeep":"1536:KOuzDEoBQDk2LehAE0HXmg7vpcvS5yaLy7JQ7aPUfP16jQo9NKByO:KB3RBQD/QA3XHhq/xtEN18Qo9NJO","tlshash":"606301866e354c48e1d8f810c8b6431327655a1d2974c46323d320bdb973afbfafd86a","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-07-17T03:04:56.332347Z","times_seen":2849,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":369,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/login/assets/fonts/SalesforceSans/SalesforceSans-Light.woff2","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.489Z","timestamp":1783885979489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /login/assets/fonts/SalesforceSans/SalesforceSans-Light.woff2 HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://login.sf.tumee.com/css/sfdc_210.css?v=7\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a2976bda1c5a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Fri, 24 Jul 2015 20:32:54 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27736,"size_decoded":28225,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27736, version 1.0","md5":"f4c092cda9a56b8e26cc307f208949b4","sha1":"dac76c1196988545bc7c7609d609fdc58cf079e5","sha256":"b7df2d6cb9d0ecda707a1de1302b3c9d9bda16247dc382e696579a8308d49771","sha512":"8d482a592f4a7874351e5879f56fd5df06ee268f469a608b1b746486f590834bb3f86a71b9fe273d9c043e929c38eaf571216d6332f154626571f375606b832a","ssdeep":"768:uG994gZ31ZyJicxFisGOMdzIjYXDBZ40Q54N/YifwyIBbzAu:X94gZLyJicxFdMaYBS0i+/BoyKzAu","tlshash":"72c2f1650942c7af851e13b2e5fa656124d894bd20d9facb48f8edccf85000f5e9a3cc","first_seen":"2023-05-11T12:50:23Z","last_seen":"2026-07-16T21:57:18.106868Z","times_seen":1433,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/login/sessionserver212.html","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.494Z","timestamp":1783885979494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /login/sessionserver212.html HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncf-ray: a1a2976bda3a5a0f-OSL\r\ncf-cache-status: DYNAMIC\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public,max-age=86400\r\nx-content-type-options: nosniff\r\nexpires: Mon, 13 Jul 2026 19:52:59 GMT\r\nlast-modified: Wed, 23 Aug 2017 20:39:30 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91,"size_decoded":654,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"f1375ef84643a5974d735836e66d3829","sha1":"a8ea06a865b284d2965aeb5108c445ff53e5a285","sha256":"db743dbd91a699d36f6a755ad2c8eec5ce0d1b3715df50a651b7c24de11c1811","sha512":"23a5641b009cfdc0b0bfd0abf913ed9f0a1835fc94fa0884e0c4cf6e1537fe10e25e0840cf7e186bad3a28dca96c35845448f5f0965a94d6e11f4d3060daae86","ssdeep":"","tlshash":"13b011ca2e8ac8a880c088c0a8f0e00c822e8020c222cc0003e888ba2b83b8c0c20288","first_seen":"2023-04-05T16:54:26Z","last_seen":"2026-07-16T21:57:18.129118Z","times_seen":1016,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.992Z","timestamp":1783885979992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976efd745a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"f6526294d846e88395151672a72cdb01:1781683760.197415\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Sun, 12 Jul 2026 03:31:40 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.cf0a655f.1783885980.2009d61e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17292,"size_decoded":6275,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (17259)","md5":"f43b73cbfac0a6ea618295d65a23591c","sha1":"255aa6fb02e3ce0190985255aa464e6180e27d1e","sha256":"98df6e935ef2d14dce377f16c1707fad159d5ed377cacd92feb6a18b1eda72ac","sha512":"088b0ddbce09d3364d9b3605ffc663f3441314b336a0046af2dc058f9e922c2afdb3c4eeadb9160ccb29f1294c24113e3ad803e572cbc6f3229466c339c4d63f","ssdeep":"384:aoA97P5RskmQLz6KpcXacSo9nYugy86OJvSRX5di:a9aSz6azo9nYuz75di","tlshash":"2e7207d1a65aca7403f869ddd42e9245f21a1d79438db450ff8efc90201ad4a30e6ffa","first_seen":"2026-07-10T12:35:59.988075Z","last_seen":"2026-07-12T21:21:00.180839Z","times_seen":5,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/favicon.ico","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.546Z","timestamp":1783885979546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: image/x-icon\r\ncf-ray: a1a2976c2bc05a0f-OSL\r\ncf-cache-status: EXPIRED\r\ncache-control: public, max-age=86400\r\nexpires: Mon, 13 Jul 2026 19:52:59 GMT\r\nlast-modified: Sun, 12 Jul 2026 19:52:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5430,"size_decoded":1262,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"ccda8df05e9a37b3131afd4d451b44ec","sha1":"ed9d0f9c4224fbd4c768be237b4b59f27f1b718c","sha256":"92842fc6c2f66b46f69458c14621fc2eca5d6c02d7937f9124fe8a3a9a55bc91","sha512":"a91f53c07b327c35864fe903acfe30afe2de3c26fdce1bdbf65842598b3a7b2fb19e54de27495519bf1e2a2bf7358561da16e931324e5b1112da4fe7efe4bc7e","ssdeep":"48:uZY/S81C1A58ZrvB0Ze/kPm3Cn8GaxOcBXmD:lSRu8ZrvBj/kuXG9","tlshash":"48b18900d99da8d2c0c976f6c655e5b12d2a2d3c6e2002260135ba7fad71e93ff6c1cc","first_seen":"2023-05-01T19:13:19Z","last_seen":"2026-07-17T00:17:42.496162Z","times_seen":3658,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/login-messages/promos.html","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.756Z","timestamp":1783885979756,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /login-messages/promos.html HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-ray: a1a2976d88d05a0f-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: max-age=0, no-cache, no-store\r\nx-xss-protection: 0\r\nx-sfdc-page-render-type: nunjuckspbc\r\nexpires: Sun, 12 Jul 2026 19:52:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.874f2417.1783885979.2a345499\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: master-only\r\nx-sfdc-agent-cohort-apply-experiment: false\r\nx-sfdc-agent-cohort-decision: \r\nx-sfdc-agent-cohort-source: none\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19112,"size_decoded":5627,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4578)","md5":"468235db058d0ac0809b865ebc7eb0db","sha1":"93ba3226305be5208cef04d746648761015c2a0d","sha256":"2b03a7336722262cd6a903d6f77fdc6d9b8fe1ec83fed55e70d84ed7bcbed534","sha512":"eee59df09f4efa5f1e64e222cdc273cdacc524ed1701815a24fa6b7aaa19c4ca1870c2da665442078611df11d659dd28e56fb79b66e2afd9f0b62d1881a6dc66","ssdeep":"192:2Gm352bIZ+jNPWsWkpWOWXWsw+0+yJxzy3k46L4pT8jo0eh7tC4THd/dTKa:2Gm3JZ+5uBkcXGJjzCkRsw6tCgjP","tlshash":"af82d77b8b94a536161065b2d3e5f609e88de117da09dddcf6ec4cdcefc03a90e61288","first_seen":"2026-07-10T12:35:59.907232Z","last_seen":"2026-07-12T21:21:00.17025Z","times_seen":5,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/fonts/salesforce-sans/SalesforceSans-Italic.woff2","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.983Z","timestamp":1783885979983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/fonts/salesforce-sans/SalesforceSans-Italic.woff2 HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: font/woff2\r\ncf-ray: a1a2976ef8fa56a3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\netag: \"afa7774ce458bd2fc11c0f838f95a920:1616101751.986621\"\r\nexpires: Tue, 11 Aug 2026 19:53:00 GMT\r\nlast-modified: Thu, 18 Mar 2021 21:09:11 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.39e61702.1783680670.6b0410d\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783680670088_35120697_112214285_32_3384_10_14_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28344,"size_decoded":28940,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28344, version 1.655","md5":"afa7774ce458bd2fc11c0f838f95a920","sha1":"f68b970baf81b04ede146804b1daafa83ff146dd","sha256":"ebe5756120946b9fbab10ce9abc04c7b196966aac60b85a582c87c983b4725a8","sha512":"0da24d27b80860ab29bb938e544b34d6e419d8306ca638a58195e26470a7138d90c3afbc3ae1a1d53277aa2079c40f94eace7ce74cece1f2ebd6c6d9ac315745","ssdeep":"768:VkvR+FrTsH+kyFcEUQGl5YI7Kf0DMh9fK2R:wtekyrtGBKcDMh93","tlshash":"ccd2f115265bf815f80f9e9e4a9dd4d2058bd010620ff317f2ced278ba12a735a2c1be","first_seen":"2023-05-20T00:08:51Z","last_seen":"2026-07-17T03:04:56.340512Z","times_seen":1301,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":370,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/img/logo214.svg","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.254Z","timestamp":1783885979254,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /img/logo214.svg HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a1a2976a5c8b5a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Thu, 22 Mar 2018 19:27:56 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6696,"size_decoded":2934,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2833432dbcd3a500a9b32628c5d91d0d","sha1":"18ae542c01a2a81eb8b4c0f676ccf2e01bfb8a8e","sha256":"a48f997fa23140662c20f7a46e93cefcef071fbf81ce038067582f2d822d86d5","sha512":"c03512164c8e5125c480626e4ed175d6271f111d273ba36c581ca344b3f1d41e3a71f2914fe307f96e184ac55597a427cdf7390391c99d88f188a05100c4b370","ssdeep":"192:mBgoKjaCfeCaSNlXajN5taR1Vr4arRNrx4arRsPSSbi6BAQo7Vwv:mBIeRylKjQ/NntA6Fwv","tlshash":"ecd1042b4309dbd9bfad042ce944288db5a4e9e794a4f1c0fb6b5401e48c4e9f94c7ed","first_seen":"2023-05-11T12:50:23Z","last_seen":"2026-07-16T21:57:18.094077Z","times_seen":426,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/202604.1.0/otBannerSdk.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.436Z","timestamp":1783885980436,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/scripttemplates/202604.1.0/otBannerSdk.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a29771bdd85a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"923e2982a99225d07a2aadaece8c7a4e:1780914945.779965\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Sun, 12 Jul 2026 14:12:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783885980.d43e5f6\r\nakamai-grn: 0.51a4c017.1783865565.1c5a2728\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":552369,"size_decoded":117828,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"923e2982a99225d07a2aadaece8c7a4e","sha1":"6890a7d31129ba4611fc6cc5ce979a9a5768f45c","sha256":"8792de1e018ac8499769a13bc7b80dcf1c0126e6009f7712807f4994734d1203","sha512":"ae7b243cb6f4bee3956b9d00d6c3cd47222d7ff3da1be36cddb296a973746aae9429ee0a968e6c574387528855f28b3668a5cae3cb58f51f96e2cdcf5c9b8c68","ssdeep":"6144:eDLxvLEQyS3m1me9rgeNC5g5j5AZ3vtxDZ6aaeUi31xp567ExExdXrN8Dq6Zhj:eDNIQyS3m1mF3RbUiN5fExdXrNB6Zp","tlshash":"d0c43a8d7590753547e762b9c02b514ab63534acac85806cb41cc4f90bf9f862ea3fbb","first_seen":"2026-04-15T01:04:59.905492Z","last_seen":"2026-07-16T21:57:18.056746Z","times_seen":2019,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/logos/static/ot_guard_logo.svg","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:01.371Z","timestamp":1783885981371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ; gtm_session_start=1783885980798; OptanonConsent=isGpcEnabled=1\u0026datestamp=Sun+Jul+12+2026+19%3A53%3A01+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202604.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026consentId=f274703b-1789-4378-b4dc-7c9738598e84\u0026interactionCount=1\u0026isAnonUser=1\u0026prevHadToken=0\u0026intType=7\u0026hosts=\u0026landingPath=https%3A%2F%2Fc.sf.tumee.com%2Flogin-messages%2Fpromos.html\u0026crTime=1783885981339; webact=%7B%22l_vdays%22%3A-1%2C%22l_visit%22%3A1783885980286%2C%22session%22%3A1783885980286%2C%22l_dtype%22%3A%22Typed%2FBookmarked%22%2C%22l_page%22%3A%22SFDC%3Aus%3Alogin-messages%3Apromos%22%2C%22counter%22%3A0%2C%22pv%22%3A1%2C%22f_visit%22%3A1783885980286%2C%22d%22%3A%227010M000002Mw7O%22%2C%22seg%22%3A%22non-customer%3Aus%22%7D; sfdcConsent=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:01 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a1a2977798c45a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"b57c99c9d1e3c50b2114c6db053d7ff0:1780914965.434407\"\r\nexpires: Sun, 12 Jul 2026 23:53:01 GMT\r\nlast-modified: Sat, 11 Jul 2026 15:01:33 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.cf0a655f.1783885981.2009d9a7\r\nakamai-grn: 0.15361302.1783782093.10b29067\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":868,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-07-17T11:41:21.315439Z","times_seen":172095,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/jslibrary/LoginMarketingSurveyResponse.js","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.249Z","timestamp":1783885979249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /jslibrary/LoginMarketingSurveyResponse.js HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976a5c765a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Fri, 23 Aug 2024 01:29:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1175,"size_decoded":1105,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (559)","md5":"02bc0d2087326d4b0fbdfc0a80ec1f1d","sha1":"2878b53a2bf784c212f89d7593a660c93f3e2f90","sha256":"51c7fa0719e80398c74a788208999a9e92398a740e4850ea456e2ada18fe4879","sha512":"ed17248eb726618ac637f3d893531f0d097fe7322413b5d580c48a6916e3c7202bdc02c8706b503b266bf0aa42634ea0d0072f387f01f325e550203b09d87b6a","ssdeep":"","tlshash":"b721fec9ba907094675a38908a3f9b0cb06a8069ba00d581e514c4e0bd3565f803ee9f","first_seen":"2024-10-11T09:18:50.387359Z","last_seen":"2026-07-16T21:57:18.13732Z","times_seen":296,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/ext/v1-stable/gdpr.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.289Z","timestamp":1783885980289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/ext/v1-stable/gdpr.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a29770db4c5a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"4158e00287f236ba5af2f02fc8847cd1:1745301939.005293\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Tue, 22 Apr 2025 06:05:39 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.cf0a655f.1783885980.2009d6c4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3642,"size_decoded":2278,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3608)","md5":"ed10bc90a74a91dfb9ebbebf2d70ba2f","sha1":"3b82b2eebd740f1e1a71265bb7b5d1ed32247057","sha256":"d2bb902ab169e35913be24976a7dd7a51613acdcdcd87d35e4593758bd9675ad","sha512":"4c33b85bac5af7a56c57390b160e5f57a6e4f5162f5a5194bba3adfb19945a200d7e4923aea21b9522a5526572cf22df965bd69717b5ba84a0adfc0d8d398f65","ssdeep":"","tlshash":"9971a5ba73b8f33a53d534edd4688180bd0c197b974d4419f06e69a21016b4227fbfb2","first_seen":"2026-07-10T12:36:00.022552Z","last_seen":"2026-07-12T21:21:00.121181Z","times_seen":5,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privacyportal.onetrust.com/request/v1/consentreceipts/anonymous","fqdn":"privacyportal.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.947Z","timestamp":1783885980947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 23:56:45 GMT","end":"Tue, 25 Aug 2026 00:56:41 GMT"},"fingerprint":{"sha1":"C9:CF:D5:82:20:E4:3C:8E:93:0C:23:4A:84:47:8B:9E:D8:DC:41:3D","sha256":"B4:81:5F:D3:A8:70:D4:91:CC:77:29:81:DF:82:FC:65:34:A8:46:CD:3D:25:6F:86:32:99:AA:46:88:A7:CE:40"}}},"request":{"raw":"OPTIONS /request/v1/consentreceipts/anonymous HTTP/1.1\r\nHost: privacyportal.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:01 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a1a2977509824c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":429,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T11:40:27.927553Z","times_seen":17313251,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":1,"dns":0,"connect":1,"send":0,"wait":129,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-ogs/v1-stable/sdk/interactions-core.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.293Z","timestamp":1783885980293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-ogs/v1-stable/sdk/interactions-core.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a29770db655a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"ec4097c311d03feccdf4af2121e5c9e7:1782836532.616981\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Tue, 30 Jun 2026 16:22:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.cf0a655f.1783885980.2009d6c9\r\nakamai-amd-bc-debug: [a=23.63.30.73,b=1074952506,c=c,d=1783477712,h=200,k=3,l=213,n=US_TX_DALLAS,o=20940,r=216,p=42861,j=[[a=23.45.117.133,b=1074952506,c=o,d=1783477712,h=300,k=105,l=49,m=7,r=161,p=1259]]]\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42849,"size_decoded":17009,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (42802)","md5":"2526a49f34b0d243909904b998c23915","sha1":"3ff5ec59125544082c9664ac20f801a0a52793b9","sha256":"ff5619c79f44d01990f71a2373c49df0b90ccc924673ed5f7fcc31693eebb164","sha512":"d61ef9bc69e1ec6afafb7df23b0851a630a9730bf0cd16580d7de02b326b9a102c85b9f40a075b5aec2849cd6b097dfbf339c25b9fb5915406b8fe44f0790cd1","ssdeep":"768:RHHkfN4VBn09Ybe9JDSwWJsqPcLiXqdLg1QzuLdX05LckI/+k2Op9z+HUB8OuZAi:Rnkl4VB4YbenSdJsqPcLiXqds+yq5Lkg","tlshash":"bc13e6971f6a413e93baf06cb01d3149b81cae885549d888e36c6d2a33c4d0971bdfbd","first_seen":"2026-07-10T12:36:00.000382Z","last_seen":"2026-07-12T21:21:00.138376Z","times_seen":5,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/en.json","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.809Z","timestamp":1783885980809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/consent/8e783e8c-0ad0-475d-8fca-4a03afa0a02a/019e3ba8-766d-7651-b31b-58a351ff3987/en.json HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ; gtm_session_start=1783885980798\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a297741d685a0f-OSL\r\ncf-cache-status: DYNAMIC\r\nak-uuid: 0.874f2417.1783885980.2a34566c\r\ncache-control: max-age=0, no-cache\r\npragma: no-cache\r\nexpires: Sun, 12 Jul 2026 19:53:00 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:36:02 GMT\r\nserver: cloudflare\r\netag: W/\"387f6fbe9d9d8a13971fdce6a10d2caa:1780914962.395596\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":338758,"size_decoded":52879,"mime_type":"application/json","magic":"JSON text data","md5":"274487ef889465c7600f0f8fc2534da8","sha1":"af1cafca240aa8ae95b3c3bd469fdd404aa799d9","sha256":"c936bab92661d989014656f2e11a5267426749c4144583cb8e3bcc0228fe5e4a","sha512":"9134b5450b4e28768ffcec50497a239135a755956621d5a9c870b8a5750f250c62153d35062908d63a5a38d969d3962185ab07d3274fc7db455edd0688811152","ssdeep":"6144:HDDpUQCVCdCbCBCtCHCiCJC8C0CKLCyCdRXO1Vk2krkUjB2Y3uy7Z:jDPRXO1Vk2krkUjB2Y39","tlshash":"6e7476059ba45cf84b0f039118a1bb8de33c4667eb50de9eec4c4e3ac293be55977186","first_seen":"2026-07-10T12:35:59.924793Z","last_seen":"2026-07-12T21:21:00.18132Z","times_seen":5,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/shared/images/pbc/icons/check.svg","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.876Z","timestamp":1783885980876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /shared/images/pbc/icons/check.svg HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:01 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a1a29774781856a3-OSL\r\ncf-cache-status: BYPASS\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=14400\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=52, origin; dur=0, ak_p; desc=\"1783885980956_388255620_115115169_5150_5110_31_35_15\";dur=1\r\nexpires: Sun, 12 Jul 2026 23:53:01 GMT\r\nlast-modified: Tue, 19 Dec 2023 20:48:53 GMT\r\nserver: cloudflare\r\nakamai-grn: 0.844f2417.1783885980.6dc84a1\r\netag: W/\"8d13fbb5e47df294a844f370641ecdff:1703018933.776628\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":901,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8d13fbb5e47df294a844f370641ecdff","sha1":"fda34cba121908d603ce94f68d338f8d8d28586f","sha256":"0c997ead6e38bf80c08f52a0be0bbba70db8d56ae37540f86b233be266b9dde0","sha512":"40f7508e7533d90007d7972817a61a01d92b9d893751c75a460ff2041f3f24612e4aeaaae4fedfea7dc610961052f9106b310d88668ae39635d174bcab348724","ssdeep":"","tlshash":"38e02b9786c15cde6da5c83ce078688a6586f433443880c19f9a741ed9dd0d418ee648","first_seen":"2024-02-27T19:14:42Z","last_seen":"2026-07-16T21:57:18.128194Z","times_seen":248,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/bottom.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.995Z","timestamp":1783885979995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/bottom.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976efd8a5a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"dc6a7cc71c41648477149493f1f18b06:1781683757.154656\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Sat, 11 Jul 2026 06:22:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.cf0a655f.1783885980.2009d62a\r\nakamai-grn: 0.d7386368.1783750931.69f8af2\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15693,"size_decoded":5909,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (15657)","md5":"8db122cea9be6f9e55ee75e9db2dc4e2","sha1":"0864984f0a123e31f1bfbc52fd84b5052bf74905","sha256":"afc0886603db1ed4ad2cc6b5bdc3c4ae7e7ce680461773331f7dfc4211e6ecc8","sha512":"f292da69d9736567fbda96bb141adf6f50e7a545eff96adf58005f7b8d2b726166c56b68518ba4b37e5797ff56803bc631546c662b82d7ae2e262f6d2fbb6ad6","ssdeep":"384:DirtSUV2zQ5tM5k3ZLbQ3euj/DEksBcfgch0A:O50u4klEEdBcYM0A","tlshash":"8562f5d1aa63e97403e9a8d9d81d4145f606ac79479db860ff8dfe88700ad0930e2ff5","first_seen":"2026-07-10T12:36:00.043031Z","last_seen":"2026-07-12T21:21:00.128501Z","times_seen":5,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a--sfdcstatic.sf.tumee.com/digital/@sfdc-www/xsf-nav/v1-stable/navs-ssg.js","fqdn":"a--sfdcstatic.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.208Z","timestamp":1783885980208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/xsf-nav/v1-stable/navs-ssg.js HTTP/1.1\r\nHost: a--sfdcstatic.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a297705b0f56a3-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"00f9fe4c67bcf75f3c598a27f1c904aa:1783724472.154122\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Fri, 10 Jul 2026 23:01:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nakamai-grn: 0.a70a655f.1783885980.10a91485\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1783885980355_1600457383_279516293_58_6169_31_50_15\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":534753,"size_decoded":115002,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"185319741a3fb824d2c36e4d44d6f5e8","sha1":"861830c9171ed0c9ef7c562d0686d3ac43153f7d","sha256":"e3b92adc41ee954f2c622731200d3a5b0017ef3f13e06cdde9abf459fc97fa77","sha512":"44109299a8d4de86a559d92da478b0498092747bdec4720278d51be80c0931cfecb97c2b7a70e9f309ac957b7e42c8459f7b64aafa5e69c1557867fa7c2ffb32","ssdeep":"12288:p13dpryCVJQ72azkhE6X0do49QCe3YIa2/8adXFth7D+anFBeLSMN6Gqv9:p13dpryCVJQ72azkhE6X0do49QCe3YIn","tlshash":"9bb44a59b352503a62f707f9e0675c03f35c3851a40ad4d8b2aa5afa5fce59b2022f3d","first_seen":"2026-07-10T12:35:59.986097Z","last_seen":"2026-07-12T21:21:00.162783Z","times_seen":5,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"a--sfdcstatic.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wp.sfdcdigital.com/en-us/wp-content/uploads/sites/4/2025/04/PHP-ELF-Trial-fg.png?resize=768,489","fqdn":"wp.sfdcdigital.com","domain":"sfdcdigital.com","tld":"com"},"ip":{"addr":"95.101.10.184","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.216Z","timestamp":1783885980216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.sfdcdigital.com","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 13 Aug 2025 00:00:00 GMT","end":"Wed, 12 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"90:77:77:C9:C2:B6:87:4E:17:34:C9:CC:37:0A:B5:3B:72:02:EC:A6","sha256":"B5:D0:F5:B3:33:2A:89:B4:D9:45:B6:63:6C:9A:0A:5D:21:5F:48:DB:C2:13:95:2C:AC:31:61:D7:83:15:8A:01"}}},"request":{"raw":"GET /en-us/wp-content/uploads/sites/4/2025/04/PHP-ELF-Trial-fg.png?resize=768,489 HTTP/1.1\r\nHost: wp.sfdcdigital.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/webp\r\ncontent-length: 151292\r\nlast-modified: Tue, 23 Jun 2026 15:39:33 GMT\r\netag: \"0dfdd49e748af49e\"\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-rq: arn1\r\naccept-ranges: bytes, bytes\r\nstrict-transport-security: max-age=31536000;includeSubdomains;preload\r\ncache-control: public, private, max-age=3780431\r\nexpires: Tue, 25 Aug 2026 14:00:11 GMT\r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=18, ak_p; desc=\"1783885980224_1600457316_750312207_4853_11961_3_0_11\";dur=1\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151292,"size_decoded":151922,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb49112ee973c254241049fc1b283299","sha1":"03a78b22f7e63a68b3c609c1c68df14b6638bf7f","sha256":"6a2c094d61fb8efdf3703f40add516e9813a1ba6e327177431ffce8cae8f0289","sha512":"d59ecf30d6bca7d0dc8fb94830cc3260164d73eba32c9785e729fe2ad3f70abad8f32b2ff895e3fb809f35228c87953fa4338190933f1c33a989e83206bde503","ssdeep":"3072:Z1kJD8bkAGQnEdY5Pzr4Vx+xnx2LTIsH0wBozQxeujAhMmqn:ZmJDSkwnEdYVzrExGxod0RQIwC0n","tlshash":"e9e3127e4fee79e6929db9c7943503f6b133dd8bd8124f9d2e4c47a921a8153022a4b0","first_seen":"2026-06-12T02:45:02.557087Z","last_seen":"2026-07-16T21:57:18.105058Z","times_seen":28,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":64,"receive":12,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/analytics.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.302Z","timestamp":1783885980302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/analytics.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/top.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a29770eb8c5a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\netag: \"4bd7d2a9c164e738a1e54a8c509232f8:1781683756.775186\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Sat, 11 Jul 2026 07:53:21 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.cf0a655f.1783885980.2009d6c3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15360,"size_decoded":5772,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (15321)","md5":"b0743b6fa3b85b1add5bce3e76f93b36","sha1":"79c0bf44f6e2d5194b7b3eda380b530d9edbcffa","sha256":"41088dceef55b132a870669325a59e8fa1256737ce16526460f7b2dbf9731749","sha512":"8cdc9de5c292d5e4dac359fb6c0e32e01fc1401d140e92cb95ac09c1ce675861b7ae19a6f2424d63f83c5dd37438e380841728b21c93fa3f12c4bc72832ce791","ssdeep":"384:DYHZSxbB7QdjZMSjnxuoeHFhTU5Ktpstc26:c5BfxkfU5KHan6","tlshash":"e862e6d19a63d97403e9add9981d5154f60aac7947cdb850ff4eee88700ac0a30e1ff9","first_seen":"2026-07-10T12:35:59.93379Z","last_seen":"2026-07-12T21:21:00.171814Z","times_seen":5,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-ogs/v1-latest/sdk/interactions-core.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.874Z","timestamp":1783885980874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-ogs/v1-latest/sdk/interactions-core.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/c2/public/exp/pbc/server/scripts.3e6c58394308c0d5ebc4.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ; gtm_session_start=1783885980798\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:01 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a297747ea45a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"014a26717b3270405c543a5f7be6e25a:1783610662.696332\"\r\nexpires: Sun, 12 Jul 2026 23:53:01 GMT\r\nlast-modified: Thu, 09 Jul 2026 15:24:22 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.cf0a655f.1783885980.2009d84f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45188,"size_decoded":17675,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (45141)","md5":"09caaebb93ae4155b32b3233238f288d","sha1":"4e98fea1b45f3363a571ecc208dfd32710888213","sha256":"3fbb451f6e842bbb73581fa1be9cd7c5daba01bcf981076cf8c3d566bb37a524","sha512":"ff3d2dee7afc45e6c5fdca66826c06da57285def5036afddc3d58368037aae9596adf3eaace475249caeec164df9b28c36a0ca7dc499e936ec3e740989898479","ssdeep":"768:yMMnVOgQBo/H8myCaVqJPCC1Wg1QzuLdX05LcD1Jk2Op9z+HUQf3ZFbt83:yRcgQBOH8mZPl17+yq5Ljp6UW3ZRu3","tlshash":"3113f8971e5a413e93baf06ca01d3149f81caed40549e898e76dad6a33c4d0970bdfbc","first_seen":"2026-07-10T12:35:59.921645Z","last_seen":"2026-07-12T21:21:00.166918Z","times_seen":5,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/@sfdc-www/clientlibs-web-components/v1-stable/identity.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:52:59.998Z","timestamp":1783885979998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/@sfdc-www/clientlibs-web-components/v1-stable/identity.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/x-javascript\r\ncf-ray: a1a2976f0d9d5a0f-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\netag: \"0621c7a1adf257859311b66cf891eb8b:1781683759.504043\"\r\nexpires: Sun, 12 Jul 2026 23:53:00 GMT\r\nlast-modified: Wed, 17 Jun 2026 08:09:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nak-uuid: 0.ef4d2417.1783885980.d43e423\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8375,"size_decoded":3398,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (8337)","md5":"fca56bdfe3e31efaa975c1714ebf3468","sha1":"077ae0ee618bffbe45ea62885f16bb6def5111a4","sha256":"1afa9703700f948aa56e1ea8cb30c0b3d9e8af0a9cd8c2df38bc62eaaa80f504","sha512":"da51719e05780c11df513b41a2c63b79f9633fbf56892e2034cd566442b6e4f09b269503d49caac0c66aafc21ba0aa5c91a1815df394247ea30d2feb489838f3","ssdeep":"96:iyKV//kWYy4wHMT8n1YzZQy4/bzKykL9SGm/wLbYN4moE6dKDWA5yjjs9nix:YmpzwHM+gQz3fkL9bCwwN4qiye","tlshash":"930282c29857daa802d5adcacc1a22a8f7459c3853cab894ff4efdc5b506d4930d0bf5","first_seen":"2026-07-10T12:36:00.010685Z","last_seen":"2026-07-12T21:21:00.173595Z","times_seen":5,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/c2/public/exp/pbc/server/nunjucksFilters.426f86e3c82cc4d676f4.js","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.008Z","timestamp":1783885980008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /c2/public/exp/pbc/server/nunjucksFilters.426f86e3c82cc4d676f4.js HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncf-ray: a1a2976f0dce5a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\netag: W/\"9267-19f3ed2f300\"\r\nexpires: Wed, 22 Jul 2026 19:53:00 GMT\r\nlast-modified: Wed, 08 Jul 2026 01:58:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nak-uuid: 0.29e61702.1783680670.567159e\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: master-only\r\nx-xss-protection: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37455,"size_decoded":11337,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37455), with no line terminators","md5":"fb201a927e0155d6119423560ad87f20","sha1":"b0e3f22dd0ade295bd73af0ca94c0875fbcf7190","sha256":"d6ad9a0d69b3b684189ffe8292369e43cc789f73feaeb64172bf70b236084bf1","sha512":"d8edf46dbb0fc27d478607f7d82f700e9c53e574ecf84367d4d742e9dce39fd78cc7c4ad5fef05b35cdda3e72204ac655de68518497417e02d5b46e79e578b8f","ssdeep":"768:pC6CgCT/Hick0CrhJec+UcHt7Vn+zECGDgZ/CpDFOf:wHickBhJejtZu/CDY","tlshash":"c7f2eac8b2c1f263db6732b5509f710bf23d641a988c9484d216dc9578f994a8273ffa","first_seen":"2026-07-10T12:35:59.997569Z","last_seen":"2026-07-12T21:21:00.176279Z","times_seen":5,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WRXS6TH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.316Z","timestamp":1783885980316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:35:29 GMT","end":"Mon, 14 Sep 2026 08:35:28 GMT"},"fingerprint":{"sha1":"4E:CE:B0:5B:5A:94:F2:15:05:64:F7:63:8C:23:58:95:2F:72:74:7B","sha256":"16:29:FC:E9:EC:BC:FF:2E:2F:4D:FB:5F:6A:E5:8F:51:7A:25:FE:6D:73:E4:66:1E:AE:DF:5B:F6:06:F3:36:E9"}}},"request":{"raw":"GET /gtm.js?id=GTM-WRXS6TH HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-origin: https://c.sf.tumee.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\nexpires: Sun, 12 Jul 2026 19:53:00 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 12 Jul 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 220797\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":850833,"size_decoded":221476,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65316)","md5":"b0f4dedf3158e7793d5b8fb98e2e07c2","sha1":"296631dab513ccfb431fc840eaa2c0e85b896660","sha256":"3ac65ec617b7e179aa6534f678fd38def0e1a740a4d0111dbef7b215a2542272","sha512":"8e23debe2c789fa06c0aec777806eebedb529bf2fb21e11a5a2144e7b41bdcef954e0f24f7dab613a163e24f1a74281f383254cc2e00648ec0bdb52ca7d49c41","ssdeep":"6144:XGUPBCfuwQMi8VPPTvRse4WBXuYF5KTZe7Xo0Jf7wozbF3V512qp6q0Zci0SJGW+:bQftmZe7bZFp2IUtnSkAC7++XK","tlshash":"0b05fb8df2c56836c3a69564a83f014a663d34f2b28c58a1f0d9ccd42eb85756193fef","first_seen":"2026-07-12T19:53:38.816432Z","last_seen":"2026-07-12T19:53:38.816432Z","times_seen":1,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":82,"receive":77,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geolocation.onetrust.com/cookieconsentpub/v1/geo/location","fqdn":"geolocation.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:00.388Z","timestamp":1783885980388,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geolocation.onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 21:41:59 GMT","end":"Sat, 22 Aug 2026 22:41:56 GMT"},"fingerprint":{"sha1":"93:76:32:53:5C:65:90:46:51:92:D0:F8:89:F5:35:43:B6:35:EA:49","sha256":"82:42:EB:F6:6E:80:5B:80:5B:27:44:7D:D9:E6:17:06:14:D4:93:89:9A:FA:F2:1C:12:D6:AD:C5:7F:B0:2F:5B"}}},"request":{"raw":"GET /cookieconsentpub/v1/geo/location HTTP/1.1\r\nHost: geolocation.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/\r\nOrigin: https://c.sf.tumee.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:00 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a297718987120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":444,"mime_type":"application/json","magic":"JSON text data","md5":"8d896eded71ee5fc863cf1ec1485da75","sha1":"b36c99cd02aa88e94a55b028381d9c5cb61cbbef","sha256":"3dddf5b1f3c0e76d359e7fe585b61f721980981a612e17d7ebfedfc3e6fc3b3d","sha512":"a216a2ec987ed8aa509d4bf88075844374819f15767190c2f9fc1b7dc05436cb33ac0fa3466bd207bd3104e455cd3c72fb8622dd0759ab64f197ac216850382e","ssdeep":"","tlshash":"3da0025864599d1d9dfd824a530e726a1244a309828751c6c6c9ed75c5812c9b05c480","first_seen":"2025-06-02T14:25:58.002399Z","last_seen":"2026-07-17T11:41:21.205425Z","times_seen":161964,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":13,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.sf.tumee.com/digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/otCenterRounded.json","fqdn":"c.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://c.sf.tumee.com/login-messages/promos.html","date":"2026-07-12T19:53:01.072Z","timestamp":1783885981072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /digital/one-trust/core/stable/scripttemplates/202604.1.0/assets/otCenterRounded.json HTTP/1.1\r\nHost: c.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://c.sf.tumee.com/login-messages/promos.html\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: BrowserId=SHcv9n4rEfGR2OWFTMtTtQ; gtm_session_start=1783885980798; OptanonConsent=isGpcEnabled=1\u0026datestamp=Sun+Jul+12+2026+19%3A53%3A00+GMT%2B0000+(Coordinated+Universal+Time)\u0026version=202604.1.0\u0026browserGpcFlag=1\u0026isDntEnabled=0\u0026isIABGlobal=false\u0026consentId=f274703b-1789-4378-b4dc-7c9738598e84\u0026interactionCount=1\u0026isAnonUser=1\u0026prevHadToken=0\u0026intType=7\u0026hosts=\u0026landingPath=https%3A%2F%2Fc.sf.tumee.com%2Flogin-messages%2Fpromos.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:53:01 GMT\r\ncontent-type: application/json\r\ncf-ray: a1a29775ba905a0f-OSL\r\ncf-cache-status: DYNAMIC\r\nak-uuid: 0.874f2417.1783885981.2a3456da\r\ncache-control: max-age=0, no-cache\r\npragma: no-cache\r\nexpires: Sun, 12 Jul 2026 19:53:01 GMT\r\nlast-modified: Mon, 08 Jun 2026 10:35:46 GMT\r\nserver: cloudflare\r\netag: W/\"e19b43ebdd1a5ede4a814d671ef093a4:1780914946.363942\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10478,"size_decoded":3115,"mime_type":"application/json","magic":"JSON text data","md5":"e19b43ebdd1a5ede4a814d671ef093a4","sha1":"4aa6b57c52d77f3c57cb16b14425426b89c1b4c9","sha256":"17caef0a24465473c69b4ca85ff22b5bf77a3a97163d847893020090e0f91c50","sha512":"eb7366c4b421c225d0e0bebf87383aee52e9a0535b7f8c73d657ff6a57dd3bbebc04c00894f3a5570d0d1493e56971e9b74e3c351cd892c795b5f20aa6c39b58","ssdeep":"192:ZqCYyAQgtNBIWguxw68uCZItctpFwhTwfTh3fYwuoOE5YBTi+Q+Qsf1POyj/0PpH:C4rsCJ9OO51N","tlshash":"fe22a8167e101b2cf1ebcbad9d9275c834226d8ffd3389dc8259a77482ad2f20e65710","first_seen":"2026-06-18T15:47:34.301017Z","last_seen":"2026-07-16T21:57:18.133619Z","times_seen":46,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"c.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"c.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.sf.tumee.com/css/sfdc_210.css?v=7","fqdn":"login.sf.tumee.com","domain":"tumee.com","tld":"com"},"ip":{"addr":"104.18.8.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login.sf.tumee.com/","date":"2026-07-12T19:52:59.239Z","timestamp":1783885979239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sf.tumee.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 00:11:28 GMT","end":"Fri, 09 Oct 2026 01:11:16 GMT"},"fingerprint":{"sha1":"D1:DA:79:88:55:34:C3:DE:EF:B0:EA:65:C4:26:AC:CF:66:31:C0:B1","sha256":"70:2F:A7:CA:AF:E9:5F:C3:C2:15:98:F9:53:63:3C:7E:86:6F:56:54:64:1D:BB:4F:41:83:8F:80:C8:07:D4:CB"}}},"request":{"raw":"GET /css/sfdc_210.css?v=7 HTTP/1.1\r\nHost: login.sf.tumee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://login.sf.tumee.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: CookieConsentPolicy=0:0; LSKey-c$CookieConsentPolicy=0:0; BrowserId=SHcv9n4rEfGR2OWFTMtTtQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:52:59 GMT\r\ncontent-type: text/css\r\ncf-ray: a1a2976a4c335a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\ncache-control: public, max-age=10368000\r\ncontent-encoding: gzip\r\nexpires: Mon, 09 Nov 2026 19:52:59 GMT\r\nlast-modified: Wed, 05 Nov 2025 17:03:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29065,"size_decoded":6614,"mime_type":"text/css","magic":"ASCII text","md5":"65ead91845215fa8276588de1e8d725e","sha1":"ba4adc4999e6412e31d58ab7c53bd8a0dda47bf2","sha256":"e48e663b72a4aef93a4bab74718fefeed852ab4c21563437bc5e4ddf01776b71","sha512":"9668d7b1527921df3df76b409987f941aa535ead1d0e295d72bd901545008a7e64df47a17d047adbdbb4dbd45d7a6d881b416a87037e95ee5f019c29139cb6cd","ssdeep":"384:axtBlwIBeS2FqZSQiV20JUPugDyf1Op5n0CwyYdwuQzu:IwewYCJUPugDyf1Of0/nOZ6","tlshash":"86d2a663ab81280ab21b90a9ffa5a7d5532d80179f0e4dbef955313cef840d401b2bdd","first_seen":"2026-02-13T01:58:21.956078Z","last_seen":"2026-07-16T21:57:18.10588Z","times_seen":179,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-12","alert":"Phishing Block","trigger":"login.sf.tumee.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"login.sf.tumee.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}