{"report_id":"f0ee1a2a-7f60-4af8-9585-4c114ef03dc0","version":6,"status":"done","tags":["microsoft","phishing"],"date":"2026-03-10T11:59:10Z","url":{"schema":"http","addr":"owasxwheks-mph9pg.fly.dev","fqdn":"owasxwheks-mph9pg.fly.dev","domain":"owasxwheks-mph9pg.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.124.91","port":0,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"owasxwheks-mph9pg.fly.dev/","fqdn":"owasxwheks-mph9pg.fly.dev","domain":"owasxwheks-mph9pg.fly.dev","tld":"fly.dev"},"title":"0utl00k Web App","dom":{"size":41763,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10416)","md5":"68370f439a5767cea7c3205002d270ca","sha1":"e448c531c1f7e22305dd6d8c7b1883dc5e05d715","sha256":"c91d4f3ad6513c1e41100a4f8fbbfa7f332f9d8492c734c56939f48fd2bf22ba","sha512":"4382d4145be89d2eb62a705ac587599e13ac6d28b46955e2e0307ad88ab52a473b31210105531e6f9d5684ad132706e17f36a238f526835c71222fce89c29a95","ssdeep":"768:74akzdKV7aQblSoJmgK4e2Fuz/0CclXUcYs:74aUkF5G4nFuncicYs","tlshash":"4e13ae3e65aa391a547390f0f2f3a1093d50880b48d7dbaaf4ad3b54dfdaf715523288","dom_hash":"domhash8277441c9180629a3498b0453b3b43b5","first_seen":"2026-03-10T11:09:42.625567Z","last_seen":"2026-03-10T12:07:54.666235Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"owasxwheks-mph9pg.fly.dev","fqdn":"owasxwheks-mph9pg.fly.dev","domain":"owasxwheks-mph9pg.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.124.91","port":0,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-14T11:59:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":4,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"owasxwheks-mph9pg.fly.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"owasxwheks-mph9pg.fly.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"owasxwheks-mph9pg.fly.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"owasxwheks-mph9pg.fly.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Generic phishing","verdict":"phishing","severity":"medium","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]},"summary":[{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-03-08T23:22:09.687975Z","alert_count":0,"request_count":2,"received_data":171156,"sent_data":908,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2026-03-09T01:56:39.807405Z","alert_count":0,"request_count":1,"received_data":51950,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ia601505.us.archive.org","ip":{"addr":"207.241.227.115","port":443,"asn":7941,"as":"INTERNET-ARCHIVE","country":"United States","country_code":"US"},"domain_registered":"1995-12-14","domain_rank":4466266,"first_seen":"2017-01-29T12:23:47Z","last_seen":"2026-03-10T10:28:51.0023Z","alert_count":0,"request_count":1,"received_data":9759,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ia903201.us.archive.org","ip":{"addr":"207.241.234.111","port":443,"asn":7941,"as":"INTERNET-ARCHIVE","country":"United States","country_code":"US"},"domain_registered":"1995-12-14","domain_rank":4982328,"first_seen":"2020-09-10T13:53:25Z","last_seen":"2026-03-05T23:06:32.766933Z","alert_count":1,"request_count":1,"received_data":9843,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"owasxwheks-mph9pg.fly.dev","ip":{"addr":"66.241.124.91","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":6,"request_count":1,"received_data":42451,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"BootstrapCDN:4.1.3","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:2.0.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Generic phishing","verdict":"phishing","severity":"medium","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"owasxwheks-mph9pg.fly.dev/","fqdn":"owasxwheks-mph9pg.fly.dev","domain":"owasxwheks-mph9pg.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.124.91","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e393c5c68269d671ce3dc67e9960b4c4","sha1":"496643e3cd099941185e776efa00aa2f47753801","sha256":"fc2e5022eb955b4513bbf9127a9430bc2098d1d2e7f47b4b9a76240af60138df","sha512":"d9dc446623be2836e7137b9d8311aea8db739bf82d9c3e311ed897c0ff0f288ec74759318d666091ff2d4f6b4efb7252b776c0b2c9b325254e59e208adb5ce0d","ssdeep":"","tlshash":"6180000b020202c0a22b820f0a82002022200003a03a8c20300c00a00f2002c2002220","size":27,"data":"","first_seen":"2023-03-13T00:54:59Z","last_seen":"2026-05-07T23:56:35.785073Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","size":51039,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-11T08:12:51.351406Z","times_seen":126103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"owasxwheks-mph9pg.fly.dev/","fqdn":"owasxwheks-mph9pg.fly.dev","domain":"owasxwheks-mph9pg.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.124.91","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"293d9dcfd9b045ef53c5dcd257121826","sha1":"1181306ac37376134297bd8c8b5abc0074b0ec24","sha256":"5d99453f0989f7bdd4937f7410ed00424920a361f0f9ce726222f6b3ca87382a","sha512":"fa02f52ad721e9352bc719c75fccf2aa9733faa4950fa1a5ea05d6e8fe3e89579dc99aa35d9aeee8e976545996b4d8af5a87c1852cb580d3d36e2e0eb0390234","ssdeep":"","tlshash":"b0c04c596a4206a41ab6b65d329f1101374180435b05f88c747de1018b10a834878f8c","size":153,"data":"","first_seen":"2023-03-07T15:52:47Z","last_seen":"2026-05-11T12:36:59.62156Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccd0edd113b78697e04fb5c1b519a5cd","sha1":"a6eedf84389e1bc9f757bc2d19538f8c8d1cae9d","sha256":"a57b5242b9a9adc4c1ef846c365147b89c472b9cd770face331efcb965346b25","sha512":"7a9cc9f66b3ed0fabecc532b1b595754dbe311782d7cac7d8ae116ab3de199b694da6fc3a75a5c9a9633b927432ea5fa3cc223ccc3b2185c0c73e4a480584c16","ssdeep":"1536:mnWi6p4BmVLFijGb2gXke71t5tgPBHlxNLIJBanUEwf7rmvsMn3lhMr:GUL5uxNL/4Cr3lOr","tlshash":"8083f9dd73c2b06257bb20b9006f640ff2364d6a280d8564f125d8e9bcb5a4d827bf6d","size":83606,"data":"","first_seen":"2023-03-07T01:16:40Z","last_seen":"2026-08-10T21:23:39.475125Z","times_seen":9873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T07:57:21.010764Z","times_seen":294248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"owasxwheks-mph9pg.fly.dev/","fqdn":"owasxwheks-mph9pg.fly.dev","domain":"owasxwheks-mph9pg.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.124.91","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a43e171be6db16ed2e87cab1a3086af1","sha1":"6abf4546aee405cffbeecf70d75b51420f1791b5","sha256":"3577f385c73ed5a411e3d2e8a20679751d13bf17dca82e76ecdaffcfa44796c2","sha512":"4228de719a0b40fdba8769b232e63e6565f9567271ecd2bee4d9840ffe73e8aad5d3f1694293a8d88ad2d278503cb833ac2e1b6cbbaa6ad297e38abab23f3a8c","ssdeep":"","tlshash":"bea0020c04af42510e1be93d2566cc4851635453a1a69b15780c03469f418a485f1ad5","size":84,"data":"","first_seen":"2023-03-13T00:54:59Z","last_seen":"2026-05-11T12:36:59.622068Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"owasxwheks-mph9pg.fly.dev/","fqdn":"owasxwheks-mph9pg.fly.dev","domain":"owasxwheks-mph9pg.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.124.91","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d96255284990ec4028b6f26220904ad","sha1":"c3a74b32897bb83f7f3aa0c1e08e897a2a3f6242","sha256":"f535de885edc7850af17045e5cfcb3969f7b45d0a29df719f29ea7a7cf7b1e62","sha512":"d5eb4f7b3883357021026a9fae1053e374bee9d515a0eaea32a6ec45e721a8c70233b839b6eb5b964f609e7ab397bbac94e5b5f16dfefc77fc3f306f75ca1941","ssdeep":"48:QE6+fzmLvVK/UG/LVeLmaYKN0dBOUTW+K7vmT1uhD/G87V6pexeCSgK7r/t6:XmLvVK80VeNNOBTYA1u9jEwxeCS97rF6","tlshash":"4991f289f8a731d2297370b92b7f920476a2494f0d48ce44746d7984af1cf2abd7b1c6","size":4241,"data":"","first_seen":"2026-03-10T11:09:42.633339Z","last_seen":"2026-03-10T22:12:53.548318Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"owasxwheks-mph9pg.fly.dev/","fqdn":"owasxwheks-mph9pg.fly.dev","domain":"owasxwheks-mph9pg.fly.dev","tld":"fly.dev"},"ip":{"addr":"66.241.124.91","port":443,"asn":40509,"as":"FLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-10T11:58:49.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fly.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 21 Feb 2026 23:24:17 GMT","end":"Fri, 22 May 2026 23:24:16 GMT"},"fingerprint":{"sha1":"5F:7D:DD:F5:56:3F:19:83:BA:2A:F6:6A:94:07:F8:02:A2:16:91:24","sha256":"AE:B9:F7:79:A8:3C:BC:E7:2A:3F:BB:FE:36:B5:BD:76:D3:BE:5E:3A:FA:18:B3:33:F9:1A:E8:84:F7:DA:58:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: owasxwheks-mph9pg.fly.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sun, 08 Mar 2026 12:55:53 GMT\r\ndate: Tue, 10 Mar 2026 11:58:49 GMT\r\nserver: Fly/50a1d3082 (2026-03-09)\r\nvia: 2 fly.io, 2 fly.io\r\nfly-request-id: 01KKBSTC9WYKW7JPQJTSJ8E042-arn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"BootstrapCDN:4.1.3","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:2.0.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:4.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":42138,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10416), with CRLF line terminators","md5":"65d4cec4bc5cff043092b456a802a568","sha1":"58aede7a5771c949f69bd35335ab9f8429186ce7","sha256":"dd0374118dfaf496aefef4fac733e52796b72c1e8fc845ab534570389648d75e","sha512":"ab8080891b11d535d44f3f58132c30319b6fecb14f1a2ed20f21f0eda0551124ac624f35cddab59e856991142b6e1aa22a7e42fb6fe25a4c734f8c30d7684805","ssdeep":"768:3csIk2dKV7aQblpoJmgK4e2FuzR1bchM9cg4:3csI/kF5h4nFuzcecg4","tlshash":"2f13af3e6588391a547392f0f1f2a209fd51850b09d39baaf4ad3b57dff6e304523688","first_seen":"2026-03-10T11:09:42.626879Z","last_seen":"2026-03-10T12:07:54.685465Z","times_seen":3,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":32,"dns":3,"connect":8,"send":0,"wait":56,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"owasxwheks-mph9pg.fly.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"owasxwheks-mph9pg.fly.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-10","alert":"Phishing Block","trigger":"owasxwheks-mph9pg.fly.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-10","alert":"Sinkholed","trigger":"owasxwheks-mph9pg.fly.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic phishing","verdict":"phishing","severity":"medium","comment":"","tags":["phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Known Phishing Kit detected","verdict":"phishing","severity":"high","comment":"","tags":["phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://owasxwheks-mph9pg.fly.dev/","date":"2026-03-10T11:58:49.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /ajax/libs/jquery/2.0.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://owasxwheks-mph9pg.fly.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29440\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 15:02:51 GMT\r\nexpires: Fri, 05 Mar 2027 15:02:51 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 420958\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83606,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32023)","md5":"ccd0edd113b78697e04fb5c1b519a5cd","sha1":"a6eedf84389e1bc9f757bc2d19538f8c8d1cae9d","sha256":"a57b5242b9a9adc4c1ef846c365147b89c472b9cd770face331efcb965346b25","sha512":"7a9cc9f66b3ed0fabecc532b1b595754dbe311782d7cac7d8ae116ab3de199b694da6fc3a75a5c9a9633b927432ea5fa3cc223ccc3b2185c0c73e4a480584c16","ssdeep":"1536:mnWi6p4BmVLFijGb2gXke71t5tgPBHlxNLIJBanUEwf7rmvsMn3lhMr:GUL5uxNL/4Cr3lOr","tlshash":"8083f9dd73c2b06257bb20b9006f640ff2364d6a280d8564f125d8e9bcb5a4d827bf6d","first_seen":"2023-03-07T01:16:40Z","last_seen":"2026-08-10T21:23:39.475125Z","times_seen":9873,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":241,"dns":12,"connect":20,"send":0,"wait":46,"receive":11,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://owasxwheks-mph9pg.fly.dev/","date":"2026-03-10T11:58:49.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:27:05 GMT","end":"Wed, 03 Jun 2026 06:27:01 GMT"},"fingerprint":{"sha1":"04:A8:A2:DB:A5:D9:6E:A1:96:19:8E:E4:20:63:9D:DD:4B:05:E5:4A","sha256":"86:F0:31:59:6F:27:50:6B:1C:65:39:9A:BF:6D:0C:A8:82:D5:B2:A6:36:4B:9C:0A:EB:05:EE:13:0F:EE:25:EC"}}},"request":{"raw":"GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://owasxwheks-mph9pg.fly.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Mar 2026 11:58:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncf-ray: 9da226570a10767a-ARN\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"67176c242e1bdc20603c878dee836df3\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:06 GMT\r\ncdn-cachedat: 08/01/2025 15:36:25\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1078\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a78b5a25cfaf2df533c60a6d4fa388d4\r\ncdn-cache: HIT\r\nage: 1788982\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51039,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50758)","md5":"67176c242e1bdc20603c878dee836df3","sha1":"27a71b00383d61ef3c489326b3564d698fc1227c","sha256":"56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4","sha512":"9fa75814e1b9f7db38fe61a503a13e60b82d83db8f4ce30351bd08a6b48c0d854baf472d891af23c443c8293380c2325c7b3361b708af9971aa0ea09a25cdd0a","ssdeep":"768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+","tlshash":"3533b649725078b201df9176913f460bb736788ea907816cb95d98ed2e7cd89322bf3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-11T08:12:51.351406Z","times_seen":126103,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":51,"dns":17,"connect":8,"send":0,"wait":17,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://owasxwheks-mph9pg.fly.dev/","date":"2026-03-10T11:58:49.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://owasxwheks-mph9pg.fly.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 08 Mar 2026 05:12:17 GMT\r\nexpires: Mon, 08 Mar 2027 05:12:17 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 197192\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85578,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T07:57:21.010764Z","times_seen":294248,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":239,"dns":10,"connect":21,"send":0,"wait":23,"receive":24,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ia601505.us.archive.org/21/items/uy_o_lj/favicon.ico","fqdn":"ia601505.us.archive.org","domain":"archive.org","tld":"org"},"ip":{"addr":"207.241.227.115","port":443,"asn":7941,"as":"INTERNET-ARCHIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://owasxwheks-mph9pg.fly.dev/","date":"2026-03-10T11:58:49.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us.archive.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 08 Jan 2026 22:09:20 GMT","end":"Tue, 09 Feb 2027 22:09:20 GMT"},"fingerprint":{"sha1":"1C:EA:74:84:A3:A8:2C:37:15:81:79:32:8F:F6:1D:9A:0A:AC:02:33","sha256":"2F:C8:D2:48:9A:9E:A3:DD:2A:EC:0C:14:40:D8:69:E5:D0:9A:B7:B9:34:20:91:99:52:29:21:31:C0:6D:F7:22"}}},"request":{"raw":"GET /21/items/uy_o_lj/favicon.ico HTTP/1.1\r\nHost: ia601505.us.archive.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://owasxwheks-mph9pg.fly.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx/1.24.0\r\ndate: Tue, 10 Mar 2026 11:58:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://ia903201.us.archive.org/24/items/uy_o_lj/favicon.ico\r\nstrict-transport-security: max-age=15724800\r\ncontent-security-policy-report-only: report-uri https://archive.org/services/csp-report; default-src *; img-src * data: blob:; object-src 'none'; media-src * blob:; connect-src * data:; style-src 'unsafe-inline' https://archive.org/ https://ia601505.us.archive.org https://esm.archive.org/ https://esm.ext.archive.org/ https://offshoot.prod.archive.org/ https://av.archive.org/css/ https://av.dev.archive.org/css/ https://accounts.google.com/gsi/ https://synerg.adp.com/; script-src 'nonce-b9f8b8eb32147b924c42494c876ebd16' https://archive.org/includes/ https://ia601505.us.archive.org/includes/ https://archive.org/components/ https://ia601505.us.archive.org/components/ https://archive.org/v/ https://ia601505.us.archive.org/v/ https://ia601505.us.archive.org/upload/app/ https://archive.org/offshoot_assets/ https://ia601505.us.archive.org/offshoot_assets/ https://esm.archive.org/ https://esm.ext.archive.org/ https://polyfill.archive.org/v3/polyfill.min.js https://offshoot.prod.archive.org/ https://av.archive.org/ https://av.dev.archive.org/ https://openlibrary.org/query.json https://emularity-engine.ux-b.archive.org/ https://emularity-config.ux-b.archive.org/ https://emularity-bios.ux-b.archive.org/ https://archive.org/services/emularity/ https://ia601505.us.archive.org/services/emularity/ 'wasm-unsafe-eval' 'sha256-CoX53XgCdkM1zegYEEpMUeYIZnv663inNm8bQv2VRbM=' https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://workforcenow.adp.com/ https://synerg.adp.com/ https://apollo.archive.org\r\nreferrer-policy: no-referrer-when-downgrade\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7886,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T07:57:31.65745Z","times_seen":17832625,"resource_available":true,"data":null}},"time_used":692,"timings":{"blocked":-1,"dns":21,"connect":149,"send":0,"wait":363,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ia903201.us.archive.org/24/items/uy_o_lj/favicon.ico","fqdn":"ia903201.us.archive.org","domain":"archive.org","tld":"org"},"ip":{"addr":"207.241.234.111","port":443,"asn":7941,"as":"INTERNET-ARCHIVE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://owasxwheks-mph9pg.fly.dev/","date":"2026-03-10T11:58:50.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us.archive.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 08 Jan 2026 22:09:20 GMT","end":"Tue, 09 Feb 2027 22:09:20 GMT"},"fingerprint":{"sha1":"1C:EA:74:84:A3:A8:2C:37:15:81:79:32:8F:F6:1D:9A:0A:AC:02:33","sha256":"2F:C8:D2:48:9A:9E:A3:DD:2A:EC:0C:14:40:D8:69:E5:D0:9A:B7:B9:34:20:91:99:52:29:21:31:C0:6D:F7:22"}}},"request":{"raw":"GET /24/items/uy_o_lj/favicon.ico HTTP/1.1\r\nHost: ia903201.us.archive.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://owasxwheks-mph9pg.fly.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0\r\ndate: Tue, 10 Mar 2026 11:58:50 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 7886\r\nlast-modified: Sun, 02 Aug 2020 09:52:38 GMT\r\netag: \"5f268ce6-1ece\"\r\nstrict-transport-security: max-age=15724800\r\ncontent-security-policy-report-only: report-uri https://archive.org/services/csp-report; default-src *; img-src * data: blob:; object-src 'none'; media-src * blob:; connect-src * data:; style-src 'unsafe-inline' https://archive.org/ https://ia903201.us.archive.org https://esm.archive.org/ https://esm.ext.archive.org/ https://offshoot.prod.archive.org/ https://av.archive.org/css/ https://av.dev.archive.org/css/ https://accounts.google.com/gsi/ https://synerg.adp.com/; script-src 'nonce-d35a421653e4db62bd58f529dccf612e' https://archive.org/includes/ https://ia903201.us.archive.org/includes/ https://archive.org/components/ https://ia903201.us.archive.org/components/ https://archive.org/v/ https://ia903201.us.archive.org/v/ https://ia903201.us.archive.org/upload/app/ https://archive.org/offshoot_assets/ https://ia903201.us.archive.org/offshoot_assets/ https://esm.archive.org/ https://esm.ext.archive.org/ https://polyfill.archive.org/v3/polyfill.min.js https://offshoot.prod.archive.org/ https://av.archive.org/ https://av.dev.archive.org/ https://openlibrary.org/query.json https://emularity-engine.ux-b.archive.org/ https://emularity-config.ux-b.archive.org/ https://emularity-bios.ux-b.archive.org/ https://archive.org/services/emularity/ https://ia903201.us.archive.org/services/emularity/ 'wasm-unsafe-eval' 'sha256-CoX53XgCdkM1zegYEEpMUeYIZnv663inNm8bQv2VRbM=' https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://workforcenow.adp.com/ https://synerg.adp.com/ https://apollo.archive.org\r\nexpires: Tue, 10 Mar 2026 17:58:50 GMT\r\ncache-control: max-age=21600\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7886,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"759fade9033aa298629e4b000dcd6dde","sha1":"34a1adf5c7326d7bde5b5735471b5d81e611c189","sha256":"cf0808a61ec571e0c4975663903b288009d55502ac0445d9948983b339a5cf6e","sha512":"e96e93b13d70420d4d509d89a6337651440ae049b2a23d57c6250987003c46512c40c85c41bfa1c473a704801c961ffbe421522b89a1c34ba3b9e82a6d0769ed","ssdeep":"48:g8KokgDQoxTP0Vh0jV/H2kPxL6GUEtcrCOmgfzQumtGCzYoITin0iarrWtwVWsiw:97DdTGhGW6yS7Kvs/WjiUKqWmNQOWY","tlshash":"0cf130334afb6800e6171df04556f774c16a2d16394e58c3d88c3a6ae037be6706a9ef","first_seen":"2023-05-01T18:01:52Z","last_seen":"2026-08-10T12:50:51.312741Z","times_seen":5716,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":0,"dns":35,"connect":151,"send":0,"wait":160,"receive":15,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}