{"report_id":"fa84c052-8018-4bf6-b276-056b6ef08b0e","version":6,"status":"done","tags":[],"date":"2024-05-15T05:31:34Z","url":{"schema":"http","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/","fqdn":"0.232.205.92.host.secureserver.net","domain":"0.232.205.92.host.secureserver.net","tld":""},"ip":{"addr":"92.205.232.0","port":0,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"title":"Swisscom Login"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T16:54:22Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2024-05-15 02:49:13","alert_count":0,"request_count":2,"received_data":43358,"sent_data":1074,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2024-05-14 18:18:43","alert_count":0,"request_count":1,"received_data":22796,"sent_data":491,"comment":"","tags":null,"fingerprints":null},{"fqdn":"0.232.205.92.host.secureserver.net","ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":8,"request_count":8,"received_data":251238,"sent_data":4326,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2015-04-17 22:46:33","last_seen":"2024-05-14 18:20:26","alert_count":0,"request_count":1,"received_data":448153,"sent_data":456,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/js/html5shiv.min.js","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"40bd440d29b3a9371b0c63fec41ee64f","sha1":"e790c26449c57de298923c686cb3434d1d461a1d","sha256":"dc9cbf19b48bae0d28f72e59e67d6ec34ab1644087ec2e8e42954180d1586b48","sha512":"50326d2577f37ec88f3e09c8e52d74d3414f2c11cc86fcc0317d7923ea86d84d8e0330bd3f527353024e7e7ca95e2387ecc44f6aace13db0460cd363ef305fa0","ssdeep":"","tlshash":"9551a8493163b04a876b117ba17f6b0ff5f8216699650060e0d9d8bcf930df8817bf65","size":2730,"data":"","first_seen":"2023-03-07T12:03:04Z","last_seen":"2026-08-11T09:08:04.248135Z","times_seen":1832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/js/respond.min.js","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"78915bb8b3dd6696d3842d82ed48b104","sha1":"504cce482567765d63843d7b9d00c4195109c449","sha256":"1944a255577a8ed66ae984c6f6356281ff6f29dc84a2af6f1facf258c7dab62e","sha512":"fae71ebe045ce6a2c190b47bda2a0dd9f042c659c8225f566a31ddf1872de61048b99efcb9d9dfb02860e5304940b30c1dfcfdc00c96424f6e97374738139fcf","ssdeep":"96:/mP1v2KA5+8G4bqZ2HhSE48KZ/piV+TGvjBicTe2hfkb/tQMYjUewElSUHl7A5Yg:/W1vy5tGVZwi8KZ/piV+TQAcnVkDtQMf","tlshash":"f2a1d9a967602004739a382656bf4536f87788a639484850c615e8bdbd34fec10bbfb6","size":4593,"data":"","first_seen":"2023-03-07T12:03:04Z","last_seen":"2026-08-11T09:08:04.249231Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/js/all.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0b7e001e9f8a42f5ac1c1cd612b4a66","sha1":"9ff3cfb2e15856f9b77bdda2661876614f46a245","sha256":"75ca5d1ab7947e7c19b4914a8ebaf31f5ef8547fee7fe3c4b49125fa9159fee4","sha512":"c858d96d3611089a1d9eec8696c29a98d13f2e511a100c525037b9faeeb5995f33cea25514e1fb4e750b136fcf3ff979bca5a950d9c5e1519591787732380bb2","ssdeep":"6144:+ZmgvFsUIY0mRrSWAept/X8Xt6kXTfyGmlvWyHjmhu9kO0n6FUwumFbMSAwLc/d:4qUD0JPvgJmhulEoMSlLc/d","tlshash":"8e65c56c97a193fc5d6ac3e18e2040b47d8f96ee7650a33cd279c670b1625ecc5c8c9a","size":1464905,"data":"","first_seen":"2023-03-07T13:17:59Z","last_seen":"2026-08-11T14:39:52.087305Z","times_seen":617,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/js/jquery-3.5.1.min.js","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-12T10:29:53.990313Z","times_seen":266470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/js/bootstrap.min.js","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cabc5d07dec4c381f521bbcd41c009db","sha1":"ca329d086682a4d75b5528d326a66a6d3fffab13","sha256":"2909d4fa86cf09191e768576e1a6eab7f2635a2627549c45d29595ffac9c0da9","sha512":"66f6e36c99f2b57f526b4dff01c6cffe787d2bde6d6abe11d080314d2da08760a18889de7ebd6bec4a675429694d650437b55aaef12c1f7aaebe463587474016","ssdeep":"768:+hkw5E0MWirtTVU4t8GMqm7MT8VbdPyqzgqqqLWpeki3iMFpnkIID0Jhp6zvsv1z:+Z2TTktMqTiaDkIxIzcn","tlshash":"ef538249b254787206df747a817b460bb73a2899a046813cb97ad8dd1f7cc893173fb8","size":62411,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-08-11T09:08:04.259045Z","times_seen":2538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/js/jquery.mask.js","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"24992f1ed62baf9393609f3c6c2ad20e","sha1":"34716cf70f7f7a9cd072e7796c34ce987f85d18c","sha256":"a199620fe981df00a825f78761d3f7c8870f8117daa4a890e08018dec386dae8","sha512":"dd181bfff8972676cdcd068a59eed0e61bdd04214c4f49216fc783b8b58ab8414eb0d06c1be03f71f982502000f848d4c0ebc455eb78bce2737dff39c5f1cd91","ssdeep":"384:suPmGzmECrshSSQCyF8jKQze/he/UilGA2Al:BO9EQ8jK78Rl","tlshash":"b5a24f4929f32262566372bd0bef4009b7b68613149eed00bd4d63819f01a7897f7fe9","size":23176,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-08-12T10:02:51.767204Z","times_seen":4230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T10:40:49.828313Z","times_seen":17853882,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/js/all.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:08.490Z","timestamp":1715751068490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Mon, 03 Jul 2023 00:00:00 GMT","end":"Tue, 02 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D","sha256":"D9:9E:DA:D7:6F:5A:E0:87:16:F3:3E:A0:A8:34:8B:84:B7:B0:98:30:2D:18:D8:53:E6:3C:09:06:19:48:07:54"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/js/all.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0.232.205.92.host.secureserver.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 May 2024 05:31:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 447131\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620188b3-6d29b\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1247407\r\nexpires: Mon, 05 May 2025 05:31:08 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e14k7%2BNFMn7AAYg3mKjwmccSah%2Bw1qZVkNSGS2aUoqp1nfjMV3QhXpvOpi0WUuXn9a3%2FW68oW1VmdDff1t%2BA7W1R4dmhO4pqwtEKPVhY3%2FFFhO5aOdRCiZQzV70gtNzd1JAC54fy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\ncf-ray: 8840bd724f35b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":447131,"size_decoded":1464905,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65317)","md5":"f0b7e001e9f8a42f5ac1c1cd612b4a66","sha1":"9ff3cfb2e15856f9b77bdda2661876614f46a245","sha256":"75ca5d1ab7947e7c19b4914a8ebaf31f5ef8547fee7fe3c4b49125fa9159fee4","sha512":"c858d96d3611089a1d9eec8696c29a98d13f2e511a100c525037b9faeeb5995f33cea25514e1fb4e750b136fcf3ff979bca5a950d9c5e1519591787732380bb2","ssdeep":"6144:+ZmgvFsUIY0mRrSWAept/X8Xt6kXTfyGmlvWyHjmhu9kO0n6FUwumFbMSAwLc/d:4qUD0JPvgJmhulEoMSlLc/d","tlshash":"8e65c56c97a193fc5d6ac3e18e2040b47d8f96ee7650a33cd279c670b1625ecc5c8c9a","first_seen":"2023-03-07T13:17:59Z","last_seen":"2026-08-11T14:39:52.087305Z","times_seen":617,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":31,"dns":29,"connect":1,"send":0,"wait":12,"receive":29,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mukta/v14/iJWKBXyXfDDVXbnBrXw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:08.933Z","timestamp":1715751068933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 16 Apr 2024 04:17:07 GMT","end":"Tue, 09 Jul 2024 04:17:06 GMT"},"fingerprint":{"sha1":"15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD","sha256":"DB:2E:48:65:32:3B:D8:3D:29:10:24:C3:70:2D:11:D2:D2:72:E6:80:13:80:91:9C:CD:AC:E4:E2:A5:08:E6:23"}}},"request":{"raw":"GET /s/mukta/v14/iJWKBXyXfDDVXbnBrXw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://0.232.205.92.host.secureserver.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 May 2024 02:10:34 GMT\r\nexpires: Fri, 09 May 2025 02:10:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 530435\r\nlast-modified: Tue, 02 May 2023 15:48:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20552,"size_decoded":20552,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20552, version 1.0","md5":"d99795212c7f43e8650770f064849417","sha1":"f896e56cdb1d2f3ff2a4543f2f9384b0254ea4a0","sha256":"7ed7103cf260025b17419c7e5b364f742d87430eff60e586a924cd3cfc1d528a","sha512":"8a18ffa9be08f00a7d7c7fccc511c0604095e456a3284136ee2a71f8ffd5f9333adef99920f5fe00b164ffa5f7845ba03829d7cf4ef58777dfe3bc15671a976a","ssdeep":"384:c91ZNbir1kkjG0PfSw30Wad0kBfZfjqeNJzbksaIlZbBVzmgJ:k1fir1kkNPf4Wad0klZ7Jzw3OZbvzmg","tlshash":"4492e038c8bb880e1588c072618377fbd9cd06bc60f5641455ee44faf09bd61a871eea","first_seen":"2023-05-05T19:29:02Z","last_seen":"2026-07-17T02:34:22.687456Z","times_seen":230,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":10,"receive":4,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Mukta:wght@200;300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:08.637Z","timestamp":1715751068637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 16 Apr 2024 04:17:12 GMT","end":"Tue, 09 Jul 2024 04:17:11 GMT"},"fingerprint":{"sha1":"36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79","sha256":"23:DD:07:1F:72:2A:DF:F8:3E:19:82:BD:3E:57:B3:B3:27:9A:8D:E2:40:FF:DD:D9:00:91:EE:05:D1:EC:81:B4"}}},"request":{"raw":"GET /css2?family=Mukta:wght@200;300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0.232.205.92.host.secureserver.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 May 2024 05:31:08 GMT\r\ndate: Wed, 15 May 2024 05:31:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22166,"size_decoded":22166,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max compression","md5":"bbf18fc005a037230c0cc2867b9bd14f","sha1":"f804af1006d096b1b83fdb4904aa0105ac8eae1b","sha256":"d88b9f4c6b5006965dc72783084567fe1de7b94e864aa3d5f98bc616ca3c20b5","sha512":"7b08aee0f3a2b9585946eaf5f14e7fc4e1b2011f9cb0b403ef7b377f593f6c2ee7aa81425a3400f43faf8b6452234ae8c48e593e6ab420e43a7cd72d3cfaa4e4","ssdeep":"384:wtAqvviO1BXpbQYn2+vR+qULETv0W1Y2P2NGHxgo1PgDdjRX7HFm948V0pMvm:wVvfBXpbQHQULIsWe2PkGiioLXRmam0V","tlshash":"35a2d0b9b3b73dd2fe150365a22a36906f0e9f280586e9b5d78f4da08441c4a08cddda","first_seen":"2024-08-19T22:55:00.918262Z","last_seen":"2024-08-19T22:55:00.918262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":142,"dns":97,"connect":8,"send":0,"wait":19,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mukta/v14/iJWHBXyXfDDVXbFqj2md8WA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:08.940Z","timestamp":1715751068940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 16 Apr 2024 04:17:07 GMT","end":"Tue, 09 Jul 2024 04:17:06 GMT"},"fingerprint":{"sha1":"15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD","sha256":"DB:2E:48:65:32:3B:D8:3D:29:10:24:C3:70:2D:11:D2:D2:72:E6:80:13:80:91:9C:CD:AC:E4:E2:A5:08:E6:23"}}},"request":{"raw":"GET /s/mukta/v14/iJWHBXyXfDDVXbFqj2md8WA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://0.232.205.92.host.secureserver.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 May 2024 06:36:36 GMT\r\nexpires: Sat, 10 May 2025 06:36:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 02 May 2023 15:48:19 GMT\r\ncontent-type: font/woff2\r\nage: 428073\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21140,"size_decoded":21140,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21140, version 1.0","md5":"cbd267bc765067b15567aa3d0d617794","sha1":"f7dd8c99d6e561c0d29060d95711102d2419cc32","sha256":"18efe70c0ef13ab8ccac687d4cfd1a56e6acc691ec1bd7f242127e5cc0d6afd2","sha512":"69c5266161487dce8caa2275d2047383616494bc64887ba744c3645e765412fc1c8dd3afd41f1af6f09fefb0555896289b4c8de4fc240afe012455d620042887","ssdeep":"384:/bc0aJeCHLlzfciRxetQENXwhnHXsooojcoERI4H9sLpYSJs3xSNsUp4:/b7AOiveRXwhnHXcojc24HiLud3xSNst","tlshash":"b092d174d612f454eab6ccb5b2d6cdb4acf86734d5614b00873adf6e96181c75821c34","first_seen":"2023-05-10T16:25:11Z","last_seen":"2026-06-02T21:53:21.968113Z","times_seen":98,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":63,"dns":1,"connect":7,"send":0,"wait":15,"receive":3,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/css/test.css","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:08.481Z","timestamp":1715751068481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0.232.205.92.host.secureserver.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 May 2024 08:15:59 GMT","end":"Mon, 12 Aug 2024 08:15:58 GMT"},"fingerprint":{"sha1":"51:4F:30:97:11:D7:C9:34:90:49:A9:1F:60:EF:C8:20:4C:3E:BC:E4","sha256":"00:C2:D3:D6:8D:7B:D4:DC:DF:9C:E6:DD:46:77:B1:9E:FF:87:CA:DA:AF:82:DD:4D:04:D1:98:6A:7E:67:2D:4F"}}},"request":{"raw":"GET /lclbluewin08812/css/test.css HTTP/1.1\r\nHost: 0.232.205.92.host.secureserver.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0.232.205.92.host.secureserver.net/lclbluewin08812/\r\nCookie: PHPSESSID=994r3070hi2s00plmu00rpr6k7\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 May 2024 05:31:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 21 Feb 2024 03:25:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d56d0e-91d\"\r\nexpires: Wed, 15 May 2024 17:31:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7109,"size_decoded":7109,"mime_type":"text/css","magic":"gzip compressed data, from Unix","md5":"4a63a38195acd61b4372a4d7676f4f42","sha1":"a57c096722c6a12cb751dbc22c65985a5bf6d981","sha256":"7c3bd1b55135b1b0239bd903d14419ef544676462ba97ade97e5629c91afedca","sha512":"8305310c2d4760b7565247e789e3fb124166b39110a2a0ef68d79d1981be5a83bef89bcb8d66bb3a168a34cdfb20bcfc56c08591aa4fefafb88242a172308b54","ssdeep":"96:OIa2DEEaKlNzWHjX9J9yCZgT8wS1NyPFWnrWOVxhmaKAd2YqeAwOnKt8x3L2iQPX:IEPkj9yCZuUWNWnKOVTL/9DAwFZFAY","tlshash":"3ae19e42735c4010e16907b5f15258b897bf39c45a3acfe7cb9c58d554b9c4b287bba0","first_seen":"2024-08-19T22:55:00.919824Z","last_seen":"2024-08-19T22:55:00.919824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/js/respond.min.js","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:08.486Z","timestamp":1715751068486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0.232.205.92.host.secureserver.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 May 2024 08:15:59 GMT","end":"Mon, 12 Aug 2024 08:15:58 GMT"},"fingerprint":{"sha1":"51:4F:30:97:11:D7:C9:34:90:49:A9:1F:60:EF:C8:20:4C:3E:BC:E4","sha256":"00:C2:D3:D6:8D:7B:D4:DC:DF:9C:E6:DD:46:77:B1:9E:FF:87:CA:DA:AF:82:DD:4D:04:D1:98:6A:7E:67:2D:4F"}}},"request":{"raw":"GET /lclbluewin08812/js/respond.min.js HTTP/1.1\r\nHost: 0.232.205.92.host.secureserver.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0.232.205.92.host.secureserver.net/lclbluewin08812/\r\nCookie: PHPSESSID=994r3070hi2s00plmu00rpr6k7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 May 2024 05:31:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Jan 2017 06:50:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"588aedac-11f1\"\r\nexpires: Wed, 15 May 2024 17:31:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8958,"size_decoded":8958,"mime_type":"application/javascript","magic":"gzip compressed data, from Unix","md5":"1b264c77f7de5eec7e8d9f05c07753e1","sha1":"5153c803df61d64c746b2b9049316a058bd75882","sha256":"226625cdc672ecf40dcca2393c7e42ab36a032618ac66824403ee85be234a5cf","sha512":"3760414de9d7036ee71a24db9c7860964b36bdf7dc2cd8c97db556f786e5a2501072ba0c8bfad8dee17be90ed53f7b2f147c919e6768658c96a909b411955e43","ssdeep":"192:kyceURe8uLy48a/Ec1WMUiqvv89poITs1IGZO6CdA2DFDECyck:rqRMd8QEcmH8HoYsKGY6uyck","tlshash":"ff029e03bd5a46a6c5ed907808c9523aef912fca80ff9fc23755760d312c1935ab9839","first_seen":"2024-08-19T22:55:00.920502Z","last_seen":"2024-08-19T22:55:00.920502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/image/re.png","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":0,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-05-15T05:31:09.571286324Z","timestamp":1715751069571,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0.232.205.92.host.secureserver.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 May 2024 08:15:59 GMT","end":"Mon, 12 Aug 2024 08:15:58 GMT"},"fingerprint":{"sha1":"51:4F:30:97:11:D7:C9:34:90:49:A9:1F:60:EF:C8:20:4C:3E:BC:E4","sha256":"00:C2:D3:D6:8D:7B:D4:DC:DF:9C:E6:DD:46:77:B1:9E:FF:87:CA:DA:AF:82:DD:4D:04:D1:98:6A:7E:67:2D:4F"}}},"request":{"raw":"GET /lclbluewin08812/image/re.png HTTP/1.1\r\nHost: 0.232.205.92.host.secureserver.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0.232.205.92.host.secureserver.net/lclbluewin08812/\r\nCookie: PHPSESSID=994r3070hi2s00plmu00rpr6k7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 May 2024 05:31:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Feb 2024 17:15:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d4de3a-11a9\"\r\nexpires: Fri, 14 Jun 2024 05:31:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":8514,"size_decoded":8514,"mime_type":"application/x-gzip","magic":"gzip compressed data, from Unix","md5":"4fe5002c4ff1b68556ef81e8d498a76c","sha1":"492e519c25b962105fa87fa81936fd45ac97c00c","sha256":"7c7eb7b2942cb58c3c23b1036fe4e92c6430adf09397c9cdd630b43f654a9fb7","sha512":"5a7e512047ea649f4ac91a5b98412a3a1ce1d8a19e267b4918151eb5043d00ac9bd59abaa185dec3912e6dcfe31789d9584fd4010215abe6422b59c15cbd51bd","ssdeep":"192:9DrNhY0EAABaMzErq0ygovafYEnG3GhV1rFyawI7m/2xtHkTIkp4xyawKDs:9jY2rOEeUovagEG3QFyhI7vjEEkpK1s","tlshash":"6b029fa717344e92fd0347311ca5ed126f24de53ea482a55039b8fad5329f91db32740","first_seen":"2024-08-19T22:55:00.921181Z","last_seen":"2024-08-19T22:55:00.921181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/image/le.png","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:08.491Z","timestamp":1715751068491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0.232.205.92.host.secureserver.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 May 2024 08:15:59 GMT","end":"Mon, 12 Aug 2024 08:15:58 GMT"},"fingerprint":{"sha1":"51:4F:30:97:11:D7:C9:34:90:49:A9:1F:60:EF:C8:20:4C:3E:BC:E4","sha256":"00:C2:D3:D6:8D:7B:D4:DC:DF:9C:E6:DD:46:77:B1:9E:FF:87:CA:DA:AF:82:DD:4D:04:D1:98:6A:7E:67:2D:4F"}}},"request":{"raw":"GET /lclbluewin08812/image/le.png HTTP/1.1\r\nHost: 0.232.205.92.host.secureserver.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0.232.205.92.host.secureserver.net/lclbluewin08812/\r\nCookie: PHPSESSID=994r3070hi2s00plmu00rpr6k7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 May 2024 05:31:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 20 Feb 2024 18:03:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d4e958-182b6\"\r\nexpires: Fri, 14 Jun 2024 05:31:08 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98998,"size_decoded":98998,"mime_type":"image/png","magic":"PNG image data, 485 x 618, 8-bit/color RGBA, non-interlaced","md5":"e4d42741c0b226ade31ee8e351614256","sha1":"9a101852d626d820ee2211f3458681510d6ce74f","sha256":"5bf09d7de18b50a0f421b919a5934b532ef1b46b82801294fd6a1b8e1cc5aba5","sha512":"0f4afc961b280682046e41b0f26deef2d35922ea1f0fca0154ebb2b69f41014d417c7b0d3958e9e29dff01c7942fc8cecc73b01e413613c70b82bac69a20f806","ssdeep":"1536:W/uuu5t80GjYKcjbupGRjvnF4JK4jApocPeId6FYdQfFm2Zrf6ur/xUQKsJkJSY9:PuIcjYh+pg/aJ/Apo26FvFlYsJl3+F","tlshash":"86a312a752e4d3d8e118aac3c70a8e0ace0d5968b31ae71efcc6f537530e5d448a52d3","first_seen":"2024-03-02T07:44:40Z","last_seen":"2026-08-05T04:15:31.41158Z","times_seen":43,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/js/jquery.mask.js","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:08.501Z","timestamp":1715751068501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0.232.205.92.host.secureserver.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 May 2024 08:15:59 GMT","end":"Mon, 12 Aug 2024 08:15:58 GMT"},"fingerprint":{"sha1":"51:4F:30:97:11:D7:C9:34:90:49:A9:1F:60:EF:C8:20:4C:3E:BC:E4","sha256":"00:C2:D3:D6:8D:7B:D4:DC:DF:9C:E6:DD:46:77:B1:9E:FF:87:CA:DA:AF:82:DD:4D:04:D1:98:6A:7E:67:2D:4F"}}},"request":{"raw":"GET /lclbluewin08812/js/jquery.mask.js HTTP/1.1\r\nHost: 0.232.205.92.host.secureserver.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0.232.205.92.host.secureserver.net/lclbluewin08812/\r\nCookie: PHPSESSID=994r3070hi2s00plmu00rpr6k7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 May 2024 05:31:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Mar 2020 15:30:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5e7a27a8-5a88\"\r\nexpires: Wed, 15 May 2024 17:31:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23176,"size_decoded":23176,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"24992f1ed62baf9393609f3c6c2ad20e","sha1":"34716cf70f7f7a9cd072e7796c34ce987f85d18c","sha256":"a199620fe981df00a825f78761d3f7c8870f8117daa4a890e08018dec386dae8","sha512":"dd181bfff8972676cdcd068a59eed0e61bdd04214c4f49216fc783b8b58ab8414eb0d06c1be03f71f982502000f848d4c0ebc455eb78bce2737dff39c5f1cd91","ssdeep":"384:suPmGzmECrshSSQCyF8jKQze/he/UilGA2Al:BO9EQ8jK78Rl","tlshash":"b5a24f4929f32262566372bd0bef4009b7b68613149eed00bd4d63819f01a7897f7fe9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-08-12T10:02:51.767204Z","times_seen":4230,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/image/logo.svg","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:08.493Z","timestamp":1715751068493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0.232.205.92.host.secureserver.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 May 2024 08:15:59 GMT","end":"Mon, 12 Aug 2024 08:15:58 GMT"},"fingerprint":{"sha1":"51:4F:30:97:11:D7:C9:34:90:49:A9:1F:60:EF:C8:20:4C:3E:BC:E4","sha256":"00:C2:D3:D6:8D:7B:D4:DC:DF:9C:E6:DD:46:77:B1:9E:FF:87:CA:DA:AF:82:DD:4D:04:D1:98:6A:7E:67:2D:4F"}}},"request":{"raw":"GET /lclbluewin08812/image/logo.svg HTTP/1.1\r\nHost: 0.232.205.92.host.secureserver.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0.232.205.92.host.secureserver.net/lclbluewin08812/\r\nCookie: PHPSESSID=994r3070hi2s00plmu00rpr6k7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 May 2024 05:31:08 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 20 Feb 2024 17:10:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d4dcf8-1813\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6163,"size_decoded":6163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7381cdcbce2523a084f171e8a6e5fcb6","sha1":"c6949b26a191cbf6eedb5bcae00515ebc7df7bf9","sha256":"9bd85c27c040d0239a0df93308d4a5de256af7444d4b5d9c8fea7197b61b85c8","sha512":"8d5ebb17a9a1084036054c6214310dd7af31e6ce4e07f10c0603dffd00b31e00a495f6c7e151ddc2fc1520a0f360abf4039fc9151cf02819884a07d241af8184","ssdeep":"","tlshash":"","first_seen":"2023-04-30T20:26:51Z","last_seen":"2025-04-05T12:58:27.753954Z","times_seen":40,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/js/jquery-3.5.1.min.js","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:08.498Z","timestamp":1715751068498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0.232.205.92.host.secureserver.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 May 2024 08:15:59 GMT","end":"Mon, 12 Aug 2024 08:15:58 GMT"},"fingerprint":{"sha1":"51:4F:30:97:11:D7:C9:34:90:49:A9:1F:60:EF:C8:20:4C:3E:BC:E4","sha256":"00:C2:D3:D6:8D:7B:D4:DC:DF:9C:E6:DD:46:77:B1:9E:FF:87:CA:DA:AF:82:DD:4D:04:D1:98:6A:7E:67:2D:4F"}}},"request":{"raw":"GET /lclbluewin08812/js/jquery-3.5.1.min.js HTTP/1.1\r\nHost: 0.232.205.92.host.secureserver.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0.232.205.92.host.secureserver.net/lclbluewin08812/\r\nCookie: PHPSESSID=994r3070hi2s00plmu00rpr6k7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 May 2024 05:31:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Nov 2020 01:18:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"5fbc5f62-15d84\"\r\nexpires: Wed, 15 May 2024 17:31:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89476,"size_decoded":89476,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-12T10:29:53.990313Z","times_seen":266470,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0.232.205.92.host.secureserver.net/lclbluewin08812/image/logo.svg","fqdn":"0.232.205.92.host.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"92.205.232.0","port":443,"asn":21499,"as":"Host Europe GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0.232.205.92.host.secureserver.net/lclbluewin08812/","date":"2024-05-15T05:31:09.095Z","timestamp":1715751069095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"0.232.205.92.host.secureserver.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 May 2024 08:15:59 GMT","end":"Mon, 12 Aug 2024 08:15:58 GMT"},"fingerprint":{"sha1":"51:4F:30:97:11:D7:C9:34:90:49:A9:1F:60:EF:C8:20:4C:3E:BC:E4","sha256":"00:C2:D3:D6:8D:7B:D4:DC:DF:9C:E6:DD:46:77:B1:9E:FF:87:CA:DA:AF:82:DD:4D:04:D1:98:6A:7E:67:2D:4F"}}},"request":{"raw":"GET /lclbluewin08812/image/logo.svg HTTP/1.1\r\nHost: 0.232.205.92.host.secureserver.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0.232.205.92.host.secureserver.net/lclbluewin08812/\r\nCookie: PHPSESSID=994r3070hi2s00plmu00rpr6k7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 15 May 2024 05:31:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 20 Feb 2024 17:10:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65d4dcf8-1813\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6163,"size_decoded":6163,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7381cdcbce2523a084f171e8a6e5fcb6","sha1":"c6949b26a191cbf6eedb5bcae00515ebc7df7bf9","sha256":"9bd85c27c040d0239a0df93308d4a5de256af7444d4b5d9c8fea7197b61b85c8","sha512":"8d5ebb17a9a1084036054c6214310dd7af31e6ce4e07f10c0603dffd00b31e00a495f6c7e151ddc2fc1520a0f360abf4039fc9151cf02819884a07d241af8184","ssdeep":"","tlshash":"","first_seen":"2023-04-30T20:26:51Z","last_seen":"2025-04-05T12:58:27.753954Z","times_seen":40,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2024-05-14","alert":"Swisscom IT Services AG","trigger":"0.232.205.92.host.secureserver.net/","verdict":"phishing","severity":"medium","comment":"Swisscom IT Services AG","link":"https://openphish.com/","meta":null}],"urlquery":null}}]}