{"report_id":"dfe6e891-2950-420c-9e5a-bbf9c1aa452d","version":6,"status":"done","tags":[],"date":"2023-12-05T10:55:50Z","url":{"schema":"http","addr":"3trkmdkqwmifwdczhawy.manxttrider.com/","fqdn":"3trkmdkqwmifwdczhawy.manxttrider.com","domain":"manxttrider.com","tld":"com"},"ip":{"addr":"192.185.113.242","port":0,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"3trkmdkqwmifwdczhawy.manxttrider.com/","fqdn":"3trkmdkqwmifwdczhawy.manxttrider.com","domain":"manxttrider.com","tld":"com"},"title":"Just a moment..."},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:01:45Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"3trkmdkqwmifwdczhawy.manxttrider.com","ip":{"addr":"192.185.113.242","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":93743,"sent_data":503,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.132","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":2,"received_data":135523,"sent_data":886,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2023-12-05 05:09:58","alert_count":0,"request_count":1,"received_data":28954,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"aadcdn.msftauth.net","ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":1455,"first_seen":"2018-11-19 11:50:32","last_seen":"2023-12-05 07:34:10","alert_count":0,"request_count":1,"received_data":17800,"sent_data":525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-12-05 07:37:50","alert_count":0,"request_count":1,"received_data":18682,"sent_data":513,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-23","alert":"Outlook","trigger":"3trkmdkqwmifwdczhawy.manxttrider.com/","verdict":"phishing","severity":"medium","comment":"Outlook","link":"https://openphish.com","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"3trkmdkqwmifwdczhawy.manxttrider.com/","fqdn":"3trkmdkqwmifwdczhawy.manxttrider.com","domain":"manxttrider.com","tld":"com"},"ip":{"addr":"192.185.113.242","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e3c5eb949faa235d4f8cc24f6bb9d44","sha1":"b788b09bca2793165f31c4e081017a1506f581db","sha256":"ba703dc33a8ea1e4f1676e67fa043a6e442a7be6d7f77b09012f79717dd97021","sha512":"975b8e73192ddf7435f569225cfcf9a2571e0703a65e6ef7a2410f8bc8051111c601e352cbef7ce4a5dd7fc54f29483bac2029c8378fc02bfb330b47b92e0b41","ssdeep":"768:8XhjmK51dV9XmeADomulirUxhiMEY4XyO6e7i4ZCajJHtP7s3Wc9KbWp8G5:+9KbW+U","tlshash":"56c3c02c3c14d32f642a1d7f7addb64fa85c7c46aa8d4d4cbc14f9975dd20b8aa200b6","size":122452,"data":"","first_seen":"2023-08-29T15:38:51Z","last_seen":"2024-08-21T07:50:32.929057Z","times_seen":341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-18T20:24:34.499339Z","times_seen":504544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3trkmdkqwmifwdczhawy.manxttrider.com/","fqdn":"3trkmdkqwmifwdczhawy.manxttrider.com","domain":"manxttrider.com","tld":"com"},"ip":{"addr":"192.185.113.242","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0238a2f84082b8fbd2696a0e0656c4cd","sha1":"0ac6c684f756a908c8d7af84fb2c8ec83f764e90","sha256":"320751fbae41fb53dc14eb35f9ad29c8e469c51c73870c108b231582cf0bf6b1","sha512":"b7b9ffafe4146257b692782b4cb7a86956eae4e0ce129f541f8c03c1920422cc36e38eba513f00a9a6c4bed80ea87651f0daf8f90c44c4741894dcb7a61a3400","ssdeep":"","tlshash":"eff002e7310c12c523d85420c63f2b8851ba3af90c2cac54227094803f2a10b65baad9","size":586,"data":"","first_seen":"2023-10-08T13:11:18Z","last_seen":"2024-08-21T05:05:26.603538Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"f48910ef7535639cbf1b256b818d990c","sha1":"d303318fdcfa5de43f2504bf3ced5f2ed9ba8ffd","sha256":"7d55c60fafcec9bc00bce39f105b35f9240bf368f8a5ce2e1c7fad96a155b8b4","sha512":"4c6c42e2a2b1df24c611c8238e251abcd6e20c93dd81c509f56b51d93b75569760757f2ac05306abb166bdc546f3986e97aa8ef7627fcbb6b2457d724d39ad6b","ssdeep":"192:88HlbV2NObfheQq0n+xHCHkZUHKHL8uRf7s3da85fc65HBuDmSyahPCuas7y9MRb:pr08gK0A+hI95xT79VHjK","tlshash":"7472851e56b311852d4396b827fa53492730d007ce09de68bfdea394cf8da546de278c","size":16761,"data":"","first_seen":"2023-08-29T15:38:51Z","last_seen":"2024-08-21T07:50:32.931012Z","times_seen":341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"3trkmdkqwmifwdczhawy.manxttrider.com/","fqdn":"3trkmdkqwmifwdczhawy.manxttrider.com","domain":"manxttrider.com","tld":"com"},"ip":{"addr":"192.185.113.242","port":443,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-05T10:55:39.446Z","timestamp":1701773739446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.manxttrider.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Oct 2023 07:55:00 GMT","end":"Tue, 23 Jan 2024 07:54:59 GMT"},"fingerprint":{"sha1":"10:B9:54:2F:3F:CA:17:0C:B9:A9:AF:CA:93:31:67:C4:C9:B7:7F:99","sha256":"88:6B:4D:63:F3:38:3A:35:B4:97:11:43:A4:26:A0:9A:DE:DC:EE:6E:74:04:52:FD:F2:F8:D9:C0:79:02:16:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 3trkmdkqwmifwdczhawy.manxttrider.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 03 Oct 2023 09:53:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Tue, 05 Dec 2023 10:55:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93515,"size_decoded":0,"mime_type":"text/html","magic":"gzip compressed data, from Unix\\012- data","md5":"0c5e5890563e273f61700a55d151eb94","sha1":"2f0c2695e821a16006a1fe116c2c612f9e2bab82","sha256":"2d63e0c4cb52f8ecaca4b7946a02fb87aaa4802d52668917b4ddb30b2a562c46","sha512":"1eae657ee2b83cf856f51e264428c5576c43f01e6a2c7113f3f286897e5795595afc8158e1e24581e0f6e5b991a74d1c2929a5f5fda9d6601522ce3923a72835","ssdeep":"1536:haA/CaGQgHVTkt4xOtvafcpkhVpA/+x975dO3nO0JibCMxMXE4OioEUyF9PM:D/CaTgH+eOScWpA/+FdvbhbEBHPM","tlshash":"e69312b1f7e0372fe1a811a8676accf5ec4c7a84724f311d2bad647786ac2515c8c457","first_seen":"2023-12-05T11:55:57Z","last_seen":"2023-12-05T11:55:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":255,"dns":0,"connect":121,"send":0,"wait":261,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-23","alert":"Outlook","trigger":"3trkmdkqwmifwdczhawy.manxttrider.com/","verdict":"phishing","severity":"medium","comment":"Outlook","link":"https://openphish.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://3trkmdkqwmifwdczhawy.manxttrider.com/","date":"2023-12-05T10:55:40.705Z","timestamp":1701773740705,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3trkmdkqwmifwdczhawy.manxttrider.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 10:55:34 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-DJ5KV9WamYkRxMGfZY8L3w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 66324\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=Ackid1RDrvI_xquXuBzTHLdDHmTWXoNS3tQbRWXr0dfxbg98j6h2eyDtrV8; expires=Sun, 02-Jun-2024 10:55:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=16.SE=jd73W-iUT6Kljg9yZOuA7YgWDKB0VWmdrurXjy8WEs1ZlJrfzv_uLSxAuaT4sAM60-Ndvs63-lz7t0YZisRCKC7MGGj3OjdiIZC6LsdHHfetvYjbM7Qu8cv4xc4rcayL8XlT3--QTjFv00HxXTxKTMjLZQ7oDpTN5JTP0nsxEHg; expires=Sat, 04-Jan-2025 03:13:52 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\nCONSENT=PENDING+176; expires=Thu, 04-Dec-2025 10:55:34 GMT; path=/; domain=.google.com; Secure\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":66324,"size_decoded":0,"mime_type":"","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12536)","md5":"1a0dae7e95490c93ab1a054e916d8632","sha1":"8d03308cc65acb7a57d520c54998031e4d478c12","sha256":"733f85c6a00d9d69d19e475cc995220982228de81a89629364e329dd2e849af3","sha512":"c40aeff6a58a8d51e3ba01e9b5b00d0d5aac52c60e930fa861944c3354b57d3f774727bb2b9228e17a20cf992b0662e175e792141b04586af3ae81664162f39d","ssdeep":"1536:nHoxHae3Y+Fb/UQbwL047hSW98G0KZpWQurHuohCozwhX4eQ0t6HxNfWrPIj2Vy7:4A02dq2Ypwdr3GUqOWx18EdfjX","tlshash":"1f246b317340703ba813c8e0a0bbae4e3176e41bf80e4ab5a566d570aef5cfb552634d","first_seen":"2023-12-05T11:55:57Z","last_seen":"2023-12-05T11:55:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://3trkmdkqwmifwdczhawy.manxttrider.com/","date":"2023-12-05T10:55:40.717Z","timestamp":1701773740717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3trkmdkqwmifwdczhawy.manxttrider.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 05 Dec 2023 10:55:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27938\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"603e8adc-15d9d\"\r\nlast-modified: Tue, 02 Mar 2021 18:58:36 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 881432\r\nexpires: Sun, 24 Nov 2024 10:55:34 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=R7OoKN7mSnAYPN94TCh4brRZTX9ZxDcs7xJ%2F%2Bl1xHsYq37iNnXFOLyWV5GneqjGCY6vQUwnritp89LGIn2kMqIeRyB%2F3Kx4qotkWQb54cCYj6VVwQypS2u8gdJTqEiXcxsdm0UAU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 830bc1f2fe6eb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27938,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-09-18T20:24:34.499339Z","times_seen":504544,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":4,"dns":0,"connect":1,"send":0,"wait":7,"receive":2,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","fqdn":"aadcdn.msftauth.net","domain":"msftauth.net","tld":"net"},"ip":{"addr":"152.199.23.37","port":443,"asn":15133,"as":"EDGECAST","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://3trkmdkqwmifwdczhawy.manxttrider.com/","date":"2023-12-05T10:55:41.016Z","timestamp":1701773741016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aadcdn.msftauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert SHA2 Secure Server CA","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 Dec 2023 00:00:00 GMT","end":"Sun, 01 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"3C:9E:70:F5:B3:D1:80:80:8C:97:1C:7B:7E:A8:2C:D8:7B:94:95:0B","sha256":"CA:EA:26:E0:08:53:1A:CF:E2:11:03:C4:9E:16:75:E1:E6:E8:F6:5D:84:D4:EC:7A:69:6B:E9:52:FA:83:33:BC"}}},"request":{"raw":"GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1\r\nHost: aadcdn.msftauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3trkmdkqwmifwdczhawy.manxttrider.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding\r\nage: 16273226\r\ncache-control: public, max-age=31536000\r\ncontent-md5: EuPayFgGHQiAI7K9SOL6lg==\r\ncontent-type: image/x-icon\r\ndate: Tue, 05 Dec 2023 10:55:34 GMT\r\netag: 0x8D8731240E548EB\r\nlast-modified: Sun, 18 Oct 2020 03:02:30 GMT\r\nserver: ECAcc (ska/F738)\r\nx-cache: HIT\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 003b7cc6-501e-0067-4768-9344ba000000\r\nx-ms-version: 2009-09-19\r\ncontent-length: 17174\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17174,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors\\012- data","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-09-18T20:17:37.573835Z","times_seen":174564,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://3trkmdkqwmifwdczhawy.manxttrider.com/","date":"2023-12-05T10:55:40.705Z","timestamp":1701773740705,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:18:24 GMT","end":"Mon, 15 Jan 2024 11:18:23 GMT"},"fingerprint":{"sha1":"4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95","sha256":"15:CB:A2:CE:4B:FE:61:1E:1A:B7:EA:EF:89:4D:AC:02:D4:54:5E:C6:82:ED:66:53:FC:05:C1:2F:71:78:EA:AE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3trkmdkqwmifwdczhawy.manxttrider.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 05 Dec 2023 10:55:34 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-tdSqetbYKWXhfD6cQldbAg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 66343\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=Ackid1SYU95aC_B2k0SStpa4jLsS2gSX72pUluUtOikFM1W7EYuH7TqM9jM; expires=Sun, 02-Jun-2024 10:55:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=16.SE=iTYSAiNvjEaGZs4gFvvDYCpQ57yUTRIFAlEVJX565hX7qrsZq2GbJSpfqHy9fGu7eGLpZmwimLZQ_PFz7Lcv_m0N_OBQxPOjTGHGmaIms_AWhgQzPGoa1BBkhBOfey8lzdemYsB-EADitA1EyN4C7t4vtBW_3qOCOsSuahQAAUY; expires=Sat, 04-Jan-2025 03:13:52 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\nCONSENT=PENDING+426; expires=Thu, 04-Dec-2025 10:55:34 GMT; path=/; domain=.google.com; Secure\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":66343,"size_decoded":0,"mime_type":"","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12477)","md5":"81d471cf68f73646ba2bdad37bb4c350","sha1":"3f3b0303f554c8be1b7f5b509ca62c30d49b0500","sha256":"7f6caece2e0bc76be59ccf695a269af0688e244311cdd72ec53a6318d380a48f","sha512":"d9e6ce7baf935c8d7f6945ec1c1802db3dfe6e259f7127019390f4d1eab45cb683ba7d150bf5e64c2cf11143eb6ce6f57e98c1d9361c967cb7d70a615348e145","ssdeep":"1536:SHoxHae3Y+Fb/AQbMc047hSW98G0KZpWQu61PNhCozwh2qedLgiHINfEb1So0vYC:5x02TPvZpwdr3GUvOWxevTdfjo","tlshash":"19245b303300b03ba9139ca0a07baf4e3176a41bf84e0ab5e55ad5b1aff5cf6552674d","first_seen":"2023-12-05T11:55:57Z","last_seen":"2023-12-05T11:55:57Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://3trkmdkqwmifwdczhawy.manxttrider.com/","date":"2023-12-05T10:55:40.719Z","timestamp":1701773740719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://3trkmdkqwmifwdczhawy.manxttrider.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 05 Dec 2023 10:55:34 GMT\r\ndate: Tue, 05 Dec 2023 10:55:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18052,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression\\012- data","md5":"a9f12ced07e16e7c15a283d1ce655968","sha1":"81589f5e8b7da7090dcbbb681bd7ae70e21e894b","sha256":"fb178630b1854062bfef468508345e2b4b94b484991e884c13a61c5a05c082d6","sha512":"5403d53fa5e2c7f33c7dc4d551e07d918bb1d6d61db62b6e47c8ebc154fd2f76ecf46972e6e393778aeecc961c91a015069744de9b6e220b70e4c601dc03e51a","ssdeep":"48:XdO3jSsg8ZH/oEqYJmJk2fgyyyyyyyyyyyyynzQQQQQO:tO39H/HJJmJlQQQQQO","tlshash":"0182765b2f5f4d81ec0b0db80b121e80c5e45c973854dffbdb66b66888b0364ba845eb","first_seen":"2023-09-15T02:22:33Z","last_seen":"2024-08-21T06:51:42.406066Z","times_seen":46,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":44,"dns":1,"connect":8,"send":0,"wait":34,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}