{"report_id":"fe2ea0a5-77d9-4823-a16b-2125cc709a8c","version":6,"status":"done","tags":["dropbox","phishing"],"date":"2023-12-04T02:39:23Z","url":{"schema":"https","addr":"clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","fqdn":"clouds-voice-509b.incaamand.workers.dev","domain":"incaamand.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.45.38","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"clouds-voice-509b.incaamand.workers.dev/26017b9a-3457-484d-9da7-b92dcf41036e","fqdn":"clouds-voice-509b.incaamand.workers.dev","domain":"incaamand.workers.dev","tld":"workers.dev"},"title":"Share Point Online"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:16:35Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"1.bp.blogspot.com","ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":8403,"first_seen":"2012-05-21 15:44:19","last_seen":"2023-12-02 22:28:07","alert_count":0,"request_count":1,"received_data":78150,"sent_data":507,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":634,"first_seen":"2012-05-21 19:28:02","last_seen":"2023-12-03 05:09:22","alert_count":0,"request_count":2,"received_data":61882,"sent_data":845,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.iconscout.com","ip":{"addr":"104.18.29.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-06-01","domain_rank":43939,"first_seen":"2017-01-06 18:08:07","last_seen":"2023-12-03 14:58:03","alert_count":0,"request_count":1,"received_data":6908,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ka-f.fontawesome.com","ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2012-10-18","domain_rank":3598,"first_seen":"2019-12-17 07:36:13","last_seen":"2023-12-03 12:57:01","alert_count":0,"request_count":2,"received_data":89104,"sent_data":1081,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kit.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2012-10-18","domain_rank":1868,"first_seen":"2019-12-16 20:51:31","last_seen":"2023-12-03 05:09:04","alert_count":0,"request_count":1,"received_data":12501,"sent_data":440,"comment":"","tags":null,"fingerprints":null},{"fqdn":"clouds-voice-509b.incaamand.workers.dev","ip":{"addr":"104.21.45.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2023-08-10 18:23:12","last_seen":"2023-12-02 15:04:54","alert_count":4,"request_count":2,"received_data":3135199,"sent_data":1065,"comment":"","tags":null,"fingerprints":null},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":724,"first_seen":"2014-06-18 02:37:31","last_seen":"2023-12-03 05:09:31","alert_count":0,"request_count":1,"received_data":145801,"sent_data":482,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2013-06-10 22:14:26","last_seen":"2023-12-03 06:08:10","alert_count":0,"request_count":1,"received_data":1925,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"contractso.web.app","ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2019-01-08","domain_rank":0,"first_seen":"2022-07-30 00:35:46","last_seen":"2023-12-03 14:58:03","alert_count":9,"request_count":9,"received_data":187272,"sent_data":3744,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":12905,"first_seen":"2013-08-16 11:51:31","last_seen":"2023-12-03 07:59:58","alert_count":0,"request_count":1,"received_data":31012,"sent_data":407,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"Office365","trigger":"clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-28","alert":"Office365","trigger":"clouds-voice-509b.incaamand.workers.dev/","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com/","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":[{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-11-12","alert":"Other","trigger":"clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-11-12","alert":"Other","trigger":"clouds-voice-509b.incaamand.workers.dev/favicon.ico","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null}]},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a4f097fe3b39048c7cc31c5184e8811","sha1":"40ac3aa18a0c941ff8caf262dda528e88706b988","sha256":"63b5bafd5fc268c432c14a1c4a9500bdb06c8e81f5ba380b652f147ab723d4b6","sha512":"79e7ab7d1ac440b92c7d8c2760cff44c4ff3ddf67f3730b824e4ebd1ea766c353ba24d7062f68c5ea415e1a20bf13da123587c3d56f6d02d4b5cc77782e662b0","ssdeep":"24576:Gm0s4k9JKITDK5a7k9+CCrG0wZeigoakAA80vJk5qn5BjXCribzc90Yjd9oGJJ0o:A29JKZOn","tlshash":"9e5553fd32578551c5b08592add987ec03e1741bd5d8a18ccafa30afd06a4cf11bcbaa","size":1407683,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.681866Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.1.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-12T16:44:21.039414Z","times_seen":143697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clouds-voice-509b.incaamand.workers.dev/26017b9a-3457-484d-9da7-b92dcf41036e","fqdn":"clouds-voice-509b.incaamand.workers.dev","domain":"incaamand.workers.dev","tld":"workers.dev"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2bbb4d5b2347a5bf0a9ec09a388f38f","sha1":"31705b12e656a13322bcfe3f5b925b9d98fa3a8b","sha256":"8ed8f3c4a01fffb6e8732f4a7609461d6067b3162d5797ab8598435303a53b3d","sha512":"48ba1a715c5b9a897c8e547bb4fa3b6698d0b77754cfba7a5eaf2c362e87ac8b6f11db4cb086b562ccda8bbbfab7b441f7506133642efef7899743401b27d168","ssdeep":"24576:oOa7P8VwkJ8/ngrbNoWYl8/ngrbNoWYtrazps3z2cUTXzYYw:oiwkJ8/ngrbeWYl8/ngrbeWY2s3icUTO","tlshash":"3d65e766b5f233a14f18ac733132e85891aa1027ecdd7c4bfe7dec4489a0f6542ed685","size":1415975,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.679154Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"671b0b897f5d8596d46b05c3c534a4bb","sha1":"345ea6fdb57ef98d0fd9236ff5d30e94ecc419e5","sha256":"167fed2c684e0894686e3afa67c9591425e80892e783a57032885c017a5bc8b1","sha512":"c5a5ab53854be57af93c59ba00ca123656faba94e8e4cad27442a0ebed0eafaef8d04310aadf9be6c002db3385aa314c2519be9e426db892416316b1717cc4d9","ssdeep":"12288:+ggaUjF3QY6+pugggaUjF3QY6+puJJ6Rhj1CHzb8zCo92pFPuwx/RZrrCr7XN+L9:m3Qe3QT0RhoToz0x5FrCr7XN+LgovZ","tlshash":"f045e8da7f61e24768ddbf83cb6588d809209c493ead0d0efdd23b67509428c1eb5879","size":1173834,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.679831Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c80b39b34d26e29e872add3c8e3431e","sha1":"c7a30093df854ca4dc6d32250b9b1bcb2fb2d3c3","sha256":"c1f2e428e8a1f634e590cc8d3cbb1f110dda97aa2b5453895437e15ea9e7b9f4","sha512":"da33effcf509def62fdcea53ca58d2583c92d05f1f3dd794e26c7d95b024b03bcde9b00cdcbe0a5640257833bce7249185496119c301e71a88ec1ce15f349cb3","ssdeep":"6144:G1ssuYCbZIvXe15a/ha5NIfreFILj5FBiWTb3vA6Vp+ocUbihW6fy1bYkBATSuKd:E9vu+RRt","tlshash":"dd1554f3abca4b7bdd1a3596c63350b79752308f3728819b04fb88cb354c49652b6a35","size":894962,"data":"","first_seen":"2023-11-04T01:19:18Z","last_seen":"2024-08-20T21:01:25.677545Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"be62868904644afc25830dd2795d2114","sha1":"802342f75a3d087eb2303d54eaf5ee8938b78b2f","sha256":"49a6af47e6924ab9f155f1c0edbbaebe44ab00fbe8f6e4876a8d3087f544132e","sha512":"bc5df96df24a29a79144a8ad2a780701f434dff8c78eeb601288519924789b5f285f3f36dc86129cacd52c6495efa6063f2c5d049169e8e2cff2b70bdb09f0c1","ssdeep":"768:cGGaXvP05YVAH/0QViS4s/eiWffOX/JzdRL8t0tTR3DbNsQcJZpBjCQqik+jILWc:XL05YVAf00iS4wevQNV","tlshash":"d7035bc6b2c670c523d30ff13b6f75c5f69a15e07aa59006f021f884a9e6168fb8da31","size":38364,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.683491Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a05b71ad045902096e3cf1220f42e2e","sha1":"6727e08fcdb6bf9218ad7ab406d0ecbc19e20f4b","sha256":"db092ac14dff4b9be9d91bac183cc4c98e87e13bd3442bf35493801ae1501e6a","sha512":"f94c5b19cc549cf763c4329ffb533e9cc21315be0d40d92157e1757911d2a35e2b6c1de3f8c6b28f5e3633dd1e18af8841a44317bc6e71dfae25d71e8a470323","ssdeep":"192:wecReMahwJuLX5EyXizS6bbiOg5N56RwbDUJ28O1:wXeMamwVEyXizS6bbiHN6s","tlshash":"4922f78cd37271c905901ebfbe308e7cd298fa05da5de22493e3be1543d1d48a5b6e62","size":10767,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.680416Z","times_seen":577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"af417f0a00cfa1a42e5c14785e52da03","sha1":"b5084ce99b3c2da0256c5397477afe0e8a2c91ba","sha256":"2c7f6cf682a48eae717717a92cdffb523a137e35fe7b179f8b7c8f196e3f8401","sha512":"7e8f2fc7559ed4f1aa149b64bd377dbbb1f10da08b5251c23018adf487c3b131e98f7c1deae94340c157536be5a34bd628240cd9f934b9c40a5aca03831d76e5","ssdeep":"6144:Gl0odzigm8cLdZysl0odzigm8cLdZyBgzLBuEyF9Ck2OHuSDsYuwA4YZreyDmCGb:nodugm8Ez2odugm8Ezwgnc/QvN4YZq","tlshash":"8325b841f885987f88f4da33311fd2bbe0a542409128978e7ec66c451fecd64bbd62e9","size":994858,"data":"","first_seen":"2023-11-04T01:19:18Z","last_seen":"2024-08-20T21:01:25.676764Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-12T19:43:14.885708Z","times_seen":284419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d25a20950a7c621b00adcc055aef3d0","sha1":"5ee675502036c14ee91fbd5b4856cb149c08d2ae","sha256":"c82a0101a19de585c5a3de6afd59971b74b64aa4c42559b00d962b3ee04f498a","sha512":"1222d02dd21ab0275f87fb7d39072373a88d321dd4dee9936eb8709adf69cc096f6b399d84031f13506c42144787b96aa6e6d682b33edd35a452b4675c876690","ssdeep":"","tlshash":"1b1176e2170168fc0da464c71fbcca8569df7c280b1851f246db97226715facd745e06","size":832,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.682951Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/585b051251.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55d343a40c7166a79fd314f13cbb2e93","sha1":"96904a849c32ca220e0aaa2ae3e81cf2b5cdf764","sha256":"a1f75d6278713a84a8f28a392c77ca8a6a7c32bf14314d4a34a6ce2f06cfdf7a","sha512":"518ac396e7f82899cab4a6e3cb68116f2b599d680d015a1a8024926bc39e9a5d3ed68935b2150da33ad41a9103e4cfd5031a7e89036901c972eee257546bb1c5","ssdeep":"192:GO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:GdRCchzzYfnqejah3e1Q5l8h6vb0","tlshash":"d732c2997694f1b646ab7160c03f620bf276352a3006d020e25dd9e4ac7dd6e9233f2e","size":11893,"data":"","first_seen":"2023-11-29T01:32:53Z","last_seen":"2025-11-14T14:58:52.675593Z","times_seen":7510,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f3a81640be28a89f21dc15cb1680fd4","sha1":"b8e5e8ba1502143726924e346b3389aa6d2aff26","sha256":"6395487c6559da5d4a5be6185d89fff96ce9bed440801f797988205eda92aeb1","sha512":"751b15e15660185c42fc8fbc27609d74b398e0c290aea1411b6cae681edb4ebee1485a0810fd0312381baecb4fdd8e4b8cf3c495317348a9a97542c9c361a599","ssdeep":"384:tRPPqR9UT70uAH4U3yLN+ubzvP7+s+YrRGhKc9rAnVL37gDcDZUOphuKnvquYJhV:tRqR9UT70uQFyLN+ubzvD+s+Yr+DoL3m","tlshash":"ff824c49f3c274c423eb57f6676bb2d9e96724e7bc45580be011fa682f1112ac9da430","size":18710,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.682429Z","times_seen":574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dc7d55589ef3f975ca7dd13fad33103","sha1":"4cd297bdd2c58f650b49fc621ece14807f534918","sha256":"a93af568ed6951a4860b052a9eba6cc0025fde1f10cd05e4e99a2953567bb7bd","sha512":"12d68214b37c3fbed374b63ec345f8f78ddf2bd4b8fa9902684407fdfc5e878a38f1ee85a7f0363571b020ae21c4e961156bb7bffe415717b53a6f2c71107b3a","ssdeep":"3072:kr37m5T3U0+9NiQGlBYwdTcr6gXypTFwvHoFdYMS:kHm5Tk0ndY+pTFwvInvS","tlshash":"64c312720c4ce325a660fdafb679a05ce13af9c9c2454f16f731688bd7cd500a79ea84","size":128617,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.680995Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"8290045c31005004c1773cd0501754d55030443330401d411d45d4444d7151c033d45c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-12T19:30:59.406985Z","times_seen":85733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"edd9aa9f9b2f4698f4e787f197ccec13","sha1":"d693288e979051cf8ff3a3c3e84da8258bd7ed63","sha256":"ec80481307e9fba705480c74dda4a614129d7f7baaffdd21fb9a0273b35ef39f","sha512":"b614c50f3c68e0ab2dff9a30179a216c00588952319434ae19522964c2fe464819babae05ea83d81f86268666898d6b7a438919de2a1b2c8205daf044a45cf54","ssdeep":"6144:LbQKFVjgn02Z2AiiEHvDEPTvyFsosFioo6jKjSaThtHEbQKFVjgn02Z2AiiEHvDa:LpVUn+zUposKXEpVUn+zUposKXS","tlshash":"8c8595c59d4598facca4ba13b12ec15ae0d403c4a12caa4e7dc2bcc86dd8d94f7973e5","size":1792654,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.684224Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"56e35d2faaea914e3e5bd847af34143a","sha1":"d7a7cd380f3fb297252826dd9d0f20077a62125c","sha256":"7a2b588cc0fa36f81457b0f8ad7d4a8adf2ab63cdd616562d11920f625c8ba08","sha512":"6590b3c3623130775ee76be95e6776c210c6b8f0c2e6b63ca83b073de39e84f969422e7ba8c6060250aa926e593876d8cc974df237dc17dab9584224b3413f63","ssdeep":"24576:JlClLscimHlClLscimYrlK500OGlAI1rqkHKx7y:tmPmY5w","tlshash":"ea4586b26fa2f25bf4feb341cf55d5664733b95614e92d1a58f01803e0ad0b90e7e80a","size":1169666,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.684925Z","times_seen":555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c30c48193f7885c9f8ab204245e5d73f","sha1":"87a38b5dee16b0b7fa82b8e98938f0ebf4dd8ab6","sha256":"7383d8e588b3e385317fc7548d21b36abf2356d3d4b114d4b9b97412bd4d38b3","sha512":"08953f5dc1335125854e58f7b64ad8b56da0e488c512144851de553a0b706fb7061dda25f4c11cd82b64a2f932ac5bbfb06508d9fe32870ea70577e9a5c99ae6","ssdeep":"192:vKCqsfL12fQrCaPhqtlEyTA8DDkQ1y8hcXj8UXlMbK5Ed1PwNoHexRIqpU3qHIGw:vKCqsfQFSDn5+z","tlshash":"23e17fbb265f361263d99cb8681f075cd3ca134d32b047d28ebad8f5b65da4028dd7a0","size":7259,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-10-06T09:22:23.822286Z","times_seen":1539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bdc6ff2191a180b385e39c1b83850b21","sha1":"9073008cd292dec08f74a06ceb53ce1ab51b9a3c","sha256":"2e3cf4b8c0726a49882b890099f2e536f8b435c3f6abb3757a0350548358e425","sha512":"dd2e32f13018d2e4fc89c6307023a1ad7d231b2662fe99c38986b1d48ba998a3e9d0d97e888d8d58b3e222bcecad948d5e837d40ffc861f2974e4308ba814e82","ssdeep":"192:BOV1L41jMxoI5lIdSWsYqcRNmRd6Msb8wU9ZlMWEiEXvvlq9fl1EvQTe4yaf3T:BOjmE5A1sYqcRNmRd6MswwUrlMXiEXvE","tlshash":"4822b68c7abdb1ae2a0b75f7663721cf65681cd577d80c398250dcc8769122ed0eca38","size":10729,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.379617Z","times_seen":1511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"10416d8c462c2e5861a8896c1e28418e","sha1":"e7274c311eeb9a5b9f09b079fbd5ca7edeb706fa","sha256":"dcaaf3e4a0249321b02cefb59179bac81afe2b02c816a078fac35fd2c80b61c7","sha512":"e8c88a3ef2bbf0c64dd629c8ac6a35b665361e954fe2bfe2647a736b71c46f08bb69813d28240e4356e247b258d85bee7e3e3d76cc61a06ae00d93053c9698c6","ssdeep":"96:/mO7czo/OHhrv3jLyaXEVBPnliBP29fIXqBGgclyQauxW1aV0eGI3ZBDWiJ9hwEi:/z7yaQJjLyaXEXnluPSAXqBG7lyQauUV","tlshash":"d1c1fd29723b7151a3c9b8b32a0fea5dd58c5d7db4a03aa58f77e4d0721980218c9eb0","size":5949,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-10-06T09:22:23.8412Z","times_seen":1539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7a512c8ec1083050edaaaeab63c53dc8","sha1":"d59b399b41311b9e83955d1ae3db1123c868c822","sha256":"90c7b7a76e054f1466e81af525ceb8294f7499f26fbc404da888e23bb5b63eec","sha512":"3c5319eb39aed158ef7678019e2d4305875dd630cd87f7122e8fc5e219b07b65708dd02ce4abf2d3eb1dc89fd8bd2d267286ab2921c1dd15a3bff6252798f47a","ssdeep":"24576:2GhM6qGhM6/Ww32O3SFqm1XDlVLZh89UE:2GLqGLObO2+","tlshash":"4f45c73cd27a4c40c5c8e2d653e463005642fa54f5f8f89c0a2a7dfb6e79e9ac5d8932","size":1188796,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.687051Z","times_seen":555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"2c5f45e8b9a983f2c0c93ecbd0ac3990","sha1":"4dcab27bbd2c74381a275e7f509b6c1ad0ca8c9f","sha256":"01fddc0e51a6b50df2b75799092f0ce662b09d17ec49ec9e11f5bcc90c9915fd","sha512":"ccdfbecf694f9690571d3a642f0190248011c6424444a2b556d43b851a53998b5158c15a1b215ac826dbbb4094966e92507d86371aefb4a8b66cfb73ef73d32d","ssdeep":"","tlshash":"8a01fea37550900941618789b9f5b01efcc2680b6ac82954bdeb623b1fb126f883bc48","size":694,"data":"","first_seen":"2023-04-20T08:02:09Z","last_seen":"2024-10-06T09:22:23.874765Z","times_seen":1791,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3cfcacb214eb73814ad9e2bd778320cc","sha1":"af97f165ed1201ae8a45b39fddd7dfc521caa19c","sha256":"72325336ffb4c44d13eaec003e2583fa7de34ac8491ff22be50e1c3b925c3cca","sha512":"d034da4df3fb8f7c71949c5484ceadd128f4eef8228cc161295a1a164109684a116812663b94e7bef88758937df94e4bcb339266729f4bc766f7889a66de875c","ssdeep":"","tlshash":"0a71d995d315885ce07cacec7c433b9868a0f5ebd9c4a42146ac83756eb917162f8b8d","size":3520,"data":"","first_seen":"2023-06-29T01:01:25Z","last_seen":"2024-10-06T09:22:23.88331Z","times_seen":1539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a9e0a5ec489628dd544b533c75c9bdd0","sha1":"f593e8619b8dfc1db2d005cd321eadc302f82607","sha256":"40358d1cb836be590ff7506f3cd77afa6982bf5ebd37474f826fa25e046c8612","sha512":"111110460dea6351a79b501cbe63d80c72c709433b7cf3daaf389b33b2f01d083c52272d64dac8cbae62c56cc4f0d0045fb187ff122241882f3bface01ba58dc","ssdeep":"48:b7DTnWe5yxxbLvytfS2F58LAQkquyiVD5Wep5vIur8S5k5K945SMKgY/trWVpqgB:b7DTWeUxx/6pVQiCep+uHerKRpWrN/","tlshash":"c9c1ce9ae3565c01f2b9cdc4b4853be1a5c0b61e8eca09344bbce2b5f5cc576367078a","size":6089,"data":"","first_seen":"2023-06-29T01:01:25Z","last_seen":"2024-10-06T09:22:23.849747Z","times_seen":1539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4ff4a45f105a3132ddfee6cf89a809a0","sha1":"b7fce4d7833db1cce78d94982bcb4000899b1743","sha256":"cfeeb95658eb888e92f91480718bd777422612735daf46009dce45619381a763","sha512":"10bf14e5dc9ad443d2d2d1146561ee4ed84eec70805990a213d563faa9b7ca4fbafc5301e1feb541147bbd2f35b8b4913b7e64bf4452bdaf3ad1c06ab189069c","ssdeep":"24576:lm0s4k9JKITDK5a7k9+CCrG0wZeigoakAA80vJk5qn5BjXCribzc90Yjd9oGJJ0D:F29JKZOq","tlshash":"3f5553fd32578551c5b08592add987ec03e1741bd5d8a18ccafa30afd06a4cf11bcbaa","size":1407798,"data":"","first_seen":"2023-11-04T01:19:20Z","last_seen":"2024-08-20T21:01:25.692594Z","times_seen":555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"edf1296b12fb9e5bff496544256eb76a","sha1":"517174cec54cc4b15bfffffc550055678dca49b7","sha256":"7484494a06692628605b2fc8a8101e41f1d640b4f25ea9c854d945bfd84cb6da","sha512":"ab447dc131728e16c155a40a2e3506fb79bcb7181fd4d834028b6fe9a22ad502a1235ea122ac93aa026abee85f50509a3e5fa606b99efd5e66914c735741980b","ssdeep":"12288:kggaUjF3QY6+pugggaUjF3QY6+puJJ6Rhj1CHzb8zCo92pFPuwx/RZrrCr7XN+Ls:o3Qe3QT0RhoToz0x5FrCr7XN+Lgovw","tlshash":"e145e8da7f61e24768ddbf83cb6588d809209c493ead0d0efdd23b67509428c1eb5879","size":1173844,"data":"","first_seen":"2023-11-04T01:19:20Z","last_seen":"2024-08-20T21:01:25.693259Z","times_seen":556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"067f8ffa6201a1d12cfcc5c429ee3009","sha1":"dec0fe11e02f650c0aa17037640d905fcdcd29a2","sha256":"6784e72dfcd4f78d37f59b44f36b1b37e2f1767b5aff8be95f384fd697359c0e","sha512":"8c0a0a1c8286fc3589cf8fd99a1fb18a8dce96ec546c7f0b207856df80c7753bceed9090ad81f69bb05e51884109f9c1b5500d55cbf734aacf811e9ebc62ea89","ssdeep":"","tlshash":"1c3172621bd0d5af18a180c73530628e6c50f01b590ddbde36fe97329ba1fae0b1791d","size":1776,"data":"","first_seen":"2023-06-29T01:01:25Z","last_seen":"2024-08-21T06:51:47.386724Z","times_seen":1522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f648592643cf6bf632a855b48af7de51","sha1":"e3445dc66b6224a9a15690786dbaff3555ad6998","sha256":"e2eb242131260ee3e8c556fb8758283cce7a11c751480d3062239c02d87a2aa2","sha512":"ca41bf977ecdd0335dffda438427bdd57cf44d90c3fe51ccacbbbd14e9e219da4a919c0327f15c0b28ebde36ddc4b20cfa92ebb98aa44529b583750d44addd3e","ssdeep":"","tlshash":"cb51fd45d331ac6ce4788cce684637d1b4e0b5fbcac49721867ce3756aad0f162a8749","size":3051,"data":"","first_seen":"2023-06-29T01:01:24Z","last_seen":"2024-08-21T06:51:47.38212Z","times_seen":1511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4c910fc07b927ee2d687892fe1505b7e","sha1":"562fffec18681d16b8b5a2df08b5ef4d4965ea74","sha256":"626022c606105cae1f60004303f40d40746d1487353729754fa08f75b17bd9b3","sha512":"f739c21f6700f12fe57dbc11ebc826692f7cc285df8b44b5048791cf267b0e81c929b6b74fbf2579567436f7cc459287237802adc1e5eaf24b214c4d83e95891","ssdeep":"6144:4l0odzigm8cLdZysl0odzigm8cLdZyBgzLBuEyF9Ck2OHuSDsYuwA4YZreyDmCG6:1odugm8Ez2odugm8Ezwgnc/QvN4YZj","tlshash":"e625b841f885987f88f4da33311fd2bbe0a542409128978e7ec66c451fecd64bbd62e9","size":994868,"data":"","first_seen":"2023-11-04T01:19:20Z","last_seen":"2024-08-20T21:01:25.694091Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"15020bb6ea75e76c096974867bca2d25","sha1":"960757d3570af507f539dc535e18600f63b8a0dc","sha256":"00bc2181e3cf91bae23a17e47ea4f02bf4ba3e2d48738b0d8a2c0ce9baa5573a","sha512":"fe22307671eeccbbdb45ab2376f67d629a8abd1fd59e6bf3054e1157a14a73203a212c3c729271374b2bfb521bcd3413e701e5da4e4edd9cf921da83357c992e","ssdeep":"6144:J1ssuYCbZIvXe15a/ha5NIfreFILj5FBiWTb3vA6Vp+ocUbihW6fy1bYkBATSuKs:j9vu+RRc","tlshash":"bd1554f3abca4b7bdd1a3596c63350b79752308f3728819b04fb88cb354c49652b6a35","size":895083,"data":"","first_seen":"2023-11-04T01:19:19Z","last_seen":"2024-08-20T21:01:25.688548Z","times_seen":557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.4.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:08.153Z","timestamp":1701657548153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.4.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clouds-voice-509b.incaamand.workers.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15851\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:02 GMT\r\nage: 6855342\r\nx-served-by: cache-lga21965-LGA, cache-bma1621-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 9, 670088\r\nx-timer: S1701657543.709599,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30638\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30638,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-12T19:39:27.857202Z","times_seen":133522,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":27,"dns":2,"connect":8,"send":0,"wait":9,"receive":3,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.1.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.036Z","timestamp":1701657552036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 11 Jul 2023 00:00:00 GMT","end":"Sun, 14 Jul 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D","sha256":"B1:CA:3A:23:BA:70:1D:18:3F:EC:99:D7:BE:6D:B2:FD:66:5F:5C:A7:7D:7F:C1:FC:16:D1:FD:89:4B:CC:15:34"}}},"request":{"raw":"GET /jquery-3.1.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-152b5\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:06 GMT\r\nage: 6856945\r\nx-served-by: cache-lga21947-LGA, cache-bma1621-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 119, 139163\r\nx-timer: S1701657547.562796,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30070\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30070,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-06-12T16:44:21.039414Z","times_seen":143697,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contractso.web.app/storages/box.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.045Z","timestamp":1701657552045,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/box.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"280c381de202e3f1a64c9dea771f491d2e7ce777c60b74e664d09c804d95e655-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:06 GMT\r\nx-served-by: cache-bma1620-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657547.648482,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 9042\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":9042,"size_decoded":0,"mime_type":"","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\\012- data","md5":"1bc69aa63f9cab6a06f547fa69fddbc5","sha1":"a3f5e6d1480763884bef1b8d250a2d8b27a5be38","sha256":"5efe924f8689e6afc5438dfe5499e09c4726e03bee7ce6e6614f3867f9761dc7","sha512":"3e4335d378cde0360bb6ab25d353225b27a1bd05f4958044926019065a0d24d507deb8dc36f935b460819d0484eef6e41854148a6873eaa17774ad0e7bb9131c","ssdeep":"192:sSDS0tKg9E05Tvkidu5Kz+q7f0XAL6H7uSSxsaCPYylBX:rJXE05oidu5Kz+ICAL8RSFCTlp","tlshash":"74b28d13ee70b675a46964300ecd350a5f321243ca453e41be9d0d9ddf21be9af4b0a3","first_seen":"2023-04-11T09:03:30Z","last_seen":"2026-05-24T16:36:33.031271Z","times_seen":1846,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":73,"dns":3,"connect":8,"send":0,"wait":16,"receive":1,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.025Z","timestamp":1701657552025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Nov 2023 18:39:35 GMT\r\nexpires: Thu, 28 Nov 2024 18:39:35 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 374371\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30028,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-12T19:43:14.885708Z","times_seen":284419,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":90,"dns":0,"connect":8,"send":0,"wait":11,"receive":12,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contractso.web.app/storages/gmail.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.082Z","timestamp":1701657552082,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/gmail.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"cf7fbbb1613832a431b620911a0c86395c0414fe4a81ffcb6073ed75b15c9710-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:06 GMT\r\nx-served-by: cache-bma1620-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657547.648978,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 57443\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":57443,"size_decoded":0,"mime_type":"","magic":"PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced\\012- data","md5":"dce2f2b0e50cb1dbb0246d152791cb46","sha1":"d0a69c159304edc08db005163e7a0daf5a1e98a6","sha256":"acf087c1757f08b0cfd53d59066544d7ef0bfcc50999e77c5813739cd9dc1479","sha512":"91054b36ef1673b24e4fe3dc324cbe339f4e9eb72785a6a4c355c7b2a11a9a7c6e188ff9bf5b34ffdd2805d4bbed71ef6ca4975ee3e330fd8d8e383ed64b28ee","ssdeep":"1536:FxqKcVqezl0vLoYxEuKoYk5LHjGkT3b1mQOEj0+R+EH:FsK2qezl0zoYxEuKo7CYrOb+Rb","tlshash":"a063f1d3246210eef3a535f0aefdb4433a102ade0605465b2a9f982dfc335a726c5689","first_seen":"2023-04-11T09:03:30Z","last_seen":"2026-06-11T01:38:07.306546Z","times_seen":2778,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":19,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/aol1.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.068Z","timestamp":1701657552068,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/aol1.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"dd7f7f55e783563d8fc532b4e4126d742794a7683b9653e7f9b91ada85bb925d-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:06 GMT\r\nx-served-by: cache-bma1620-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657547.690899,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12234\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":12234,"size_decoded":0,"mime_type":"","magic":"PNG image data, 253 x 218, 8-bit/color RGBA, non-interlaced\\012- data","md5":"ec9cbc1048239b3927ad0276fc983019","sha1":"17c27c038644bdb141381b606c7c94a177c07326","sha256":"f8a8cf4f1928938c796e2f35f8c21b0d510d4e3f16e016ee83d1f206f8ebde14","sha512":"72b033c7062df73b0ccb14921f580888c09faa7d753450a06d2c4127bb05404395e120569037c674245a35fb18c90193d580607ca0665bb3697f70ec4304e473","ssdeep":"384:yBiKaPw7bGJTBF15Er1AO4AHHA8ygKNNqKY7+:miQGtEtHAggNqK4+","tlshash":"fec2ad09bcb8b183494a9d7a2eca3d496c33174798556cd0bede9c564f01bb64d4b2c3","first_seen":"2023-04-11T09:03:30Z","last_seen":"2026-06-11T15:10:41.449116Z","times_seen":3038,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":92,"dns":1,"connect":10,"send":0,"wait":9,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/outlook1.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.064Z","timestamp":1701657552064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/outlook1.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-type: image/png\r\netag: \"181232938be6b7bd118aacdee7c09fedfe42c183843baa23a645f0262b8fb326\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:06 GMT\r\nx-served-by: cache-bma1620-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657547.695019,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 771\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\\012- data","md5":"c3fc46c5799c76f9107504028f39190f","sha1":"519096ad3f03410cf9ce3c9b9fcca6b439d97b23","sha256":"57898461712a639d119bdf88b7145919dcc8956c7a271d2e4a1084b29eae6785","sha512":"df4a0a2f78b2013035fb738bf405119b275d4cfec31a23071eb9af499d5f31fdc4be22754ce791c975d7d417e908b5cad16f962b0add3dfdcde19844d74f6678","ssdeep":"","tlshash":"7b01ba6112735f3abfc72613591562350df2c51dd4439781167f14cd650b3eca014751","first_seen":"2023-04-30T20:33:19Z","last_seen":"2026-06-11T15:10:41.442441Z","times_seen":3832,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":101,"dns":7,"connect":12,"send":0,"wait":10,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.iconscout.com/icon/free/png-256/yahoo-2752017-2284834.png","fqdn":"cdn.iconscout.com","domain":"iconscout.com","tld":"com"},"ip":{"addr":"104.18.29.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.075Z","timestamp":1701657552075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sni.cloudflaressl.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"Cloudflare Inc ECC CA-3","organization":"Cloudflare, Inc."},"validity":{"start":"Sun, 16 Apr 2023 00:00:00 GMT","end":"Mon, 15 Apr 2024 23:59:59 GMT"},"fingerprint":{"sha1":"93:0D:DD:B0:E7:BD:A9:D4:6E:BB:0D:78:78:44:C1:8E:20:2B:4F:E9","sha256":"6C:9E:D4:62:F8:26:AC:BB:81:9D:8A:D6:8E:43:79:B0:47:2B:2D:EA:9A:8E:DB:65:97:DB:25:0C:A0:3F:DF:C7"}}},"request":{"raw":"GET /icon/free/png-256/yahoo-2752017-2284834.png HTTP/1.1\r\nHost: cdn.iconscout.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:39:06 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5888\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Accept,X-CSRF-TOKEN,Authorization,Client-ID\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length,Content-Range\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=9419\r\ncontent-disposition: inline; filename=\"yahoo-2752017-2284834.webp\"\r\nvary: Accept\r\netag: \"44d83ef016dbc382f3c1da2f736b035a\"\r\nlast-modified: Fri, 28 Aug 2020 05:06:06 GMT\r\nx-amz-replication-status: REPLICA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: MWs1xHxgg6L8sR56AhPDsOrjRgXB0axw\r\ncf-cache-status: HIT\r\nage: 1032378\r\nexpires: Tue, 03 Dec 2024 02:39:06 GMT\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-ray: 8300ad52c9a7b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image\\012- data","md5":"462937c010fe51f29e217145ac614c99","sha1":"90cb7f5542e4da877887fa5f675aeda8c41ff6f8","sha256":"37a14f4abecd152fc284270ca1a8af00674335182acd9f7ed1d5db103983ead7","sha512":"8f9bc647daec8dafacc3d2e49a151a464d038bbc4834c7da45ec18c6eb23f49e19bee3579e3a7d14ef54d33df85caef762dd040cb1d509ccf362f2e9b289713d","ssdeep":"96:aw3oUV77feeqqXTQcS06p/MFrsuO0s3Q0G/8UmnDj+2At0iD4xzkDCO7CHcGSU:aw3ow7jFq+TeJxMFIuO0CQUi2AtsOCO8","tlshash":"79c19ea4a5fc8d7a16bd10c9b3716fe0625014d8b218eebbd2f784600b1bab4d81b4f5","first_seen":"2023-05-09T20:45:19Z","last_seen":"2024-09-19T21:02:05.643296Z","times_seen":1830,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":87,"dns":0,"connect":2,"send":0,"wait":14,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contractso.web.app/storages/office3651.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.071Z","timestamp":1701657552071,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/office3651.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"42fa0ba0204a61d1b8c3baf6f50fdd22c35a7becb928510effaf056fdc99c9d1-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:06 GMT\r\nx-served-by: cache-bma1620-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657547.691259,VS0,VE6\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3687\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":3687,"size_decoded":0,"mime_type":"","magic":"PNG image data, 187 x 188, 8-bit/color RGBA, non-interlaced\\012- data","md5":"a5cdadd60382e9ae6228121542eb1c2a","sha1":"cec15f6470d0237569e931d7d11752b41ac5d8a3","sha256":"71e729939e175f4ae9d3fcc645d6b7389ec341a47a84950e047197331fdc22f1","sha512":"d7cc71e07f00d47ecb7b0c74bc9bd3fceae72845415036dd2af6f4abf428d8c8246eabf73a8dd92c115a157dcd0888f533ac418b50c3fd04c4c630985945fb14","ssdeep":"96:OSTWvkiTJq6UqENG+GfNFrNnVhsc5l8vQ1BDTQ+OLb3iMXLGe8Q/e9cv5:OSCkiNq6UqEw7A41N0+OnLbbTe9E","tlshash":"0682f751fcb1b09490ae993325d43040bc7b8bc3da858c897d8d4d626f057ad5ebbde2","first_seen":"2023-04-11T09:03:30Z","last_seen":"2026-06-11T15:10:41.446264Z","times_seen":3912,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":90,"dns":4,"connect":9,"send":0,"wait":15,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/other1.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.077Z","timestamp":1701657552077,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/other1.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"702685aceaca9ed1ba709d4a1508fb913b5a4b2001c7c96548651d10b57446be-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:06 GMT\r\nx-served-by: cache-bma1620-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657547.698848,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7679\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":7679,"size_decoded":0,"mime_type":"","magic":"PNG image data, 190 x 187, 8-bit/color RGBA, non-interlaced\\012- data","md5":"6843a244e12fab158aa189680b5e7049","sha1":"0e1c691f87cc4fa35c88344974f2829c40176b70","sha256":"3a9b144d6482b78afc4e0a940a1d3c22240f14fa535b808cf4dab9635339569f","sha512":"145010c45b6b83ea4005eb367c0507959ff0817e482f19e9973504081acae1b7827cbd1172cec7732b13f4e0cec058271bd6700444fbcf61fb6a3c068a3744c4","ssdeep":"192:ESCkiDw7e9Mg/wio0EYm9FWyo2XdJfXoOZdEDfmiIJQdiRVi/WTanY:DBiDw7eAdq+FWyo2/fXoZbDIJ0ci/BnY","tlshash":"d6a26d36fd727d60d68da6311cd82989ac3b8f43a9104d417ade08297f05fb99d1f542","first_seen":"2023-04-11T09:03:30Z","last_seen":"2026-06-11T01:38:07.306033Z","times_seen":3863,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":91,"dns":9,"connect":11,"send":0,"wait":11,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"1.bp.blogspot.com/-CYDSHib_wQY/X5G7l5LqTDI/AAAAAAAAklg/uJxZb4zeb0EXG_Rle2xUJGeVT7dzPUHDQCLcBGAsYHQ/s2048/Gmail%2Bnew%2BLogo%2B2020.webp","fqdn":"1.bp.blogspot.com","domain":"bp.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.050Z","timestamp":1701657552050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:28 GMT","end":"Mon, 15 Jan 2024 11:23:27 GMT"},"fingerprint":{"sha1":"07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B","sha256":"EA:70:51:EC:3A:D6:B1:37:97:90:B3:2A:F0:E8:6E:B9:0E:21:0B:ED:2C:E5:05:28:23:05:33:D0:BA:EB:CC:D5"}}},"request":{"raw":"GET /-CYDSHib_wQY/X5G7l5LqTDI/AAAAAAAAklg/uJxZb4zeb0EXG_Rle2xUJGeVT7dzPUHDQCLcBGAsYHQ/s2048/Gmail%2Bnew%2BLogo%2B2020.webp HTTP/1.1\r\nHost: 1.bp.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"Gmail new Logo 2020.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 77605\r\nx-xss-protection: 0\r\ndate: Mon, 04 Dec 2023 01:01:16 GMT\r\nexpires: Tue, 05 Dec 2023 01:01:16 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 5870\r\netag: \"v9259\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77605,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 2048x1790, components 3\\012- data","md5":"3a83eb416a79a3fc30964bcedaa8af00","sha1":"abbe5c585ec8749379279a7c2aa4ee88780aae28","sha256":"b058764dadaa97342511495fc1119f662970a0d056614e69fc4ec98753235969","sha512":"568260434c5b65c882c3889db54b44b8889002f3dad4c42575934bc5a754b4bd0b5f495cfdb241f3f1090d5fa80e493c9715338280e2cf7cceb5104db66a87ba","ssdeep":"768:5BDqU0sH/mvCajBdurC8/nQzrLLIAa04wr6fqpjnR+OcflEe8fg/4ENdx+tg:b2UdOvFjTgC8/nQrfa04wGfqVRKu+VTh","tlshash":"9273d01a7cb9cfe9c46652353af75a3e258307a2b11b852460fb1b6e09227d0cd3de85","first_seen":"2023-05-09T12:23:07Z","last_seen":"2024-10-06T09:22:23.77719Z","times_seen":1849,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":112,"dns":25,"connect":11,"send":0,"wait":9,"receive":22,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contractso.web.app/reglastefarg/hover.css","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.556Z","timestamp":1701657552556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /reglastefarg/hover.css HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6272\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"e4c7b38ebf0c1bb7f7bc9193113d305dfd11817279517afe7904b1a9cf19a91f-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:07 GMT\r\nx-served-by: cache-bma1672-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657547.079518,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6272,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fac4178c15e5a86139c662dafc809501","sha1":"ef1481841399156a880ec31b07dda9cfaa1ace39","sha256":"bb88454962767eb6f2ddb1aabaaf844d8a57de7e8f848d7f6928f81b54998452","sha512":"0902219b6e236fbf9d8173d1d452c8733c1bf67b0eb906cc9866ea0c27c2d08f6da556d01475e9b54e2c6ce797b230bfbd5f39055ce0c71ea4d3e36872c378d9","ssdeep":"1536:67O7EesvXIPRX4PT8aZv8qoXIoqbTFaFeTxvyAZ+D7M71D:qXIPRX4PT3","tlshash":"bcb38bf56591210432278a0cc3cf5f79a73cd0a3aa61dcb9b746584bcf52a5c63cab27","first_seen":"2023-04-05T06:16:47Z","last_seen":"2026-06-12T01:24:55.172647Z","times_seen":6018,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/dropbox-white.png","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.853Z","timestamp":1701657552853,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/dropbox-white.png HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6144\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"83b1a0250e9cda3994de60934d33f5c9d740a6512ecb810681105776b9ee833b-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:07 GMT\r\nx-served-by: cache-bma1672-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657547.385207,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":6144,"size_decoded":0,"mime_type":"","magic":"PNG image data, 512 x 140, 8-bit/color RGBA, non-interlaced\\012- data","md5":"58bd50faf57210090ca6826861832728","sha1":"dd3f528f59b292cb33e01e6021eee41ad84a24a5","sha256":"20e7b7353a4986f22af95d1a3263aa768d401fce4e77ff4758af8780e43f8532","sha512":"b274a4800ead758c5a33a421ef5b482141a2492816cec0aea698dd1bb7770d4822fa4191717e0bd064fba237d7d44dfffe96b86331fcc1e45a532d8fe451c934","ssdeep":"192:cS0tKg9E05TzktB5sCQCRxtzeQS/byJSK:wXE05stB5sARxcnbyl","tlshash":"07923925bdb07068a84eb9311dd832419d721a0bddc13d40bade5ddb6f21f8a8e4b492","first_seen":"2023-04-11T09:03:30Z","last_seen":"2025-07-10T11:45:47.02143Z","times_seen":1370,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"contractso.web.app/storages/5.jpg","fqdn":"contractso.web.app","domain":"contractso.web.app","tld":"web.app"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:13.246Z","timestamp":1701657553246,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web.app","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 13 Nov 2023 20:32:12 GMT","end":"Sun, 11 Feb 2024 20:32:11 GMT"},"fingerprint":{"sha1":"91:91:14:02:FC:83:4D:86:C4:39:E9:2F:0A:4D:72:FC:05:07:86:F3","sha256":"4D:98:CC:7A:B3:F3:71:FE:FF:06:3D:22:A7:13:70:46:6A:4C:0F:E2:91:50:07:75:20:6D:08:52:90:7F:BC:18"}}},"request":{"raw":"GET /storages/5.jpg HTTP/1.1\r\nHost: contractso.web.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 78623\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/jpeg\r\netag: \"57cfc159820f604fa47a62349cf85beaabe550a47a689be56f4d205d3ace05d8-br\"\r\nlast-modified: Tue, 10 May 2022 10:26:43 GMT\r\nstrict-transport-security: max-age=31556926; includeSubDomains; preload\r\naccept-ranges: bytes\r\ndate: Mon, 04 Dec 2023 02:39:07 GMT\r\nx-served-by: cache-bma1672-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1701657548.775987,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":78623,"size_decoded":0,"mime_type":"","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1000x751, components 3\\012- data","md5":"bf1ee3df9e8f071c3eb1d4c8619e6fa3","sha1":"013ea067cb271bbfc951a077c0024f0898e81316","sha256":"e807e8bb8700b79f0f423e1ec0b47bff9a4857a65afb021b00b25efeebd22a93","sha512":"acfe7fd379a0de5c6f2c261d04ec3008790decdac123ab308e7916e621d62763d68df6c091cbdf0a80bae7fecdb39ee71a9258804521c43ee09481deafd88e8b","ssdeep":"1536:hbcZEGeaMAU518G8tFlStml+7f6+2o9F8D5oi1Mu1T0MZeupwKN0Oarc1:hwZLa5ItFItm8W+X9i9o9ueL9KNzaI1","tlshash":"6373022f93928bd8fe43ac3a6c5e32e5ee4b3a5bd3794ed82b740572d105502520ec95","first_seen":"2023-04-11T09:03:30Z","last_seen":"2026-05-24T16:36:33.03329Z","times_seen":839,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Dropbox","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Dropbox phishing","tags":["dropbox","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.785Z","timestamp":1701657552785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 08 Nov 2023 07:11:36 GMT","end":"Tue, 06 Feb 2024 07:11:35 GMT"},"fingerprint":{"sha1":"BC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81","sha256":"95:DB:E6:BD:0B:8B:40:88:04:6D:9A:E7:2D:72:2B:65:28:9E:D8:5F:A3:7A:9D:8A:55:13:EE:FB:3C:93:E7:10"}}},"request":{"raw":"GET /releases/v5.15.4/css/free.min.css?token=585b051251 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://clouds-voice-509b.incaamand.workers.dev/\r\nOrigin: https://clouds-voice-509b.incaamand.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:39:07 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 04 Aug 2021 18:53:09 GMT\r\netag: W/\"a12ec7ebe75a4d59a5dd6b79e2ba2e16\"\r\ncache-control: max-age=31556926\r\naccess-control-allow-headers: fa-kit-token\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c58391b07051938ceda6615614fbabb0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR50-P1\r\nx-amz-cf-id: Ar63KYp-RqfP0VhnGrR_6jGZ05J0JNZpE8Z6WJqrpJpZcQL9e-FlEA==\r\nage: 169339\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=8gD6xVv5yTTLLqOOlLsFniHTOPJOHI0dJnugRTUqG4veAL1zXkO92j3d4ZASrxCggStZir4YEtDy%2FyCa4jwp2JcVQDMO2LTh%2F8vyFt7qRY%2BzpP1dInseXfBv4KgteiJevZAFH4JoXg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8300ad574c894916-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60130)","md5":"a12ec7ebe75a4d59a5dd6b79e2ba2e16","sha1":"28f5dcc595ee6d4163481ef64170180502c8629b","sha256":"fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda","sha512":"28b9ea5f3f95807259c2745162424aceecac2556bc1ab9a3b33e4e15b54c6970a4df4a5892fe83c1155c82ca8d93aebb173be32f1a7f8b9d3ce038b2dd1e6ffe","ssdeep":"768:PUh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz8:PU0PxXE4YXJgndFTfy9lQQ","tlshash":"5b430bb8e54d01c9b732c44bbf81b2bc61baf73de5910d95f00e691c2ad26a811c5f7a","first_seen":"2023-04-05T03:17:09Z","last_seen":"2026-06-12T16:28:53.027151Z","times_seen":23424,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":79,"dns":2,"connect":30,"send":0,"wait":37,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.204.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.788Z","timestamp":1701657552788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Wed, 08 Nov 2023 07:11:36 GMT","end":"Tue, 06 Feb 2024 07:11:35 GMT"},"fingerprint":{"sha1":"BC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81","sha256":"95:DB:E6:BD:0B:8B:40:88:04:6D:9A:E7:2D:72:2B:65:28:9E:D8:5F:A3:7A:9D:8A:55:13:EE:FB:3C:93:E7:10"}}},"request":{"raw":"GET /releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://clouds-voice-509b.incaamand.workers.dev/\r\nOrigin: https://clouds-voice-509b.incaamand.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:39:07 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Wed, 04 Aug 2021 18:53:09 GMT\r\netag: W/\"76f34b71fc9fb641507ff6a822cc07f5\"\r\ncache-control: max-age=31556926\r\naccess-control-allow-headers: fa-kit-token\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 eb3d2bd89447108973b8d2779fc789e4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: LHR50-P1\r\nx-amz-cf-id: 8RFpjso34fFXag38GR-lvym0kytpVk3ziNe-EEDWxKDdTwOCvVrzDQ==\r\nage: 325114\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=I6dE1%2Fsu36jU%2Bb4NDaMr4%2FthAggUA2Mo1UMitODq7ONg0fnPNjgBWPrKJLiBukLHalhTixxmUO6Q%2FNyNpMWFHBQ9A7NaYBhT6JiAioy3o%2FRJUdHY9XBHtcQjuZ4srYCpCljEDRTk8Q%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8300ad573c854916-LHR\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26682,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26500)","md5":"76f34b71fc9fb641507ff6a822cc07f5","sha1":"73ed2f8f21cd40fb496e61306acbb5849d4dbff4","sha256":"6dea47458a4cd7cd7312cc780a53c62e0c8b3ccc8d0b13c1ac0ea6e3dfcecea8","sha512":"6c4002ce78247b50bfa835a098980af340e4e9f05f7097c1e83301289051ce1282e647abab87db28a32fbfe0263c7318d2444b7d57875873908d6d5ed2af882f","ssdeep":"192:kP6hT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPhJVR8XD7mycP:Phal4w0QK+PwK05eavpmgP1eXD7mycP","tlshash":"bec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T03:17:09Z","last_seen":"2026-06-12T16:28:52.980163Z","times_seen":22188,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":71,"dns":0,"connect":31,"send":0,"wait":38,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/585b051251.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.554Z","timestamp":1701657552554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fontawesome.com","organization":"Fonticons Inc"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 22 Nov 2022 00:00:00 GMT","end":"Sat, 23 Dec 2023 23:59:59 GMT"},"fingerprint":{"sha1":"6C:69:02:A7:9B:07:84:8E:D0:3D:0A:10:61:8E:01:80:88:37:EF:5E","sha256":"F6:72:03:2C:D0:96:E1:1E:BD:AD:77:14:74:82:CE:BB:40:88:41:FC:D2:F9:16:2B:93:34:73:8F:84:4F:FC:82"}}},"request":{"raw":"GET /585b051251.js HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://clouds-voice-509b.incaamand.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:39:07 GMT\r\ncontent-type: text/javascript\r\naccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: max-age=60, public, stale-while-revalidate=30\r\nvary: origin, accept-encoding, access-control-request-headers, access-control-request-method\r\nx-request-id: F5xwbVxbFyhe2AJTE7TC\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 8300ad557e6cb50b-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11893,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (11461)","md5":"55d343a40c7166a79fd314f13cbb2e93","sha1":"96904a849c32ca220e0aaa2ae3e81cf2b5cdf764","sha256":"a1f75d6278713a84a8f28a392c77ca8a6a7c32bf14314d4a34a6ce2f06cfdf7a","sha512":"518ac396e7f82899cab4a6e3cb68116f2b599d680d015a1a8024926bc39e9a5d3ed68935b2150da33ad41a9103e4cfd5031a7e89036901c972eee257546bb1c5","ssdeep":"192:GO3pHufQPTACpF4Pvhzz6E/ra/sb4nZIPWfz3JBGvh3e1Q5l8h6LDeFTjC0:GdRCchzzYfnqejah3e1Q5l8h6vb0","tlshash":"d732c2997694f1b646ab7160c03f620bf276352a3006d020e25dd9e4ac7dd6e9233f2e","first_seen":"2023-11-29T01:32:53Z","last_seen":"2025-11-14T14:58:52.675593Z","times_seen":7510,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":40,"dns":29,"connect":1,"send":0,"wait":154,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","fqdn":"clouds-voice-509b.incaamand.workers.dev","domain":"incaamand.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.45.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T02:39:07.723Z","timestamp":1701657547723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"incaamand.workers.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 08 Oct 2023 14:59:46 GMT","end":"Sat, 06 Jan 2024 14:59:45 GMT"},"fingerprint":{"sha1":"34:25:AE:08:F2:2C:35:70:81:3B:AD:3A:F9:00:C6:80:95:72:20:53","sha256":"30:98:84:DA:50:F5:FB:43:79:89:64:36:2E:7C:8E:68:60:F8:20:72:F8:14:90:9D:BA:9E:C6:3E:B6:E5:14:23"}}},"request":{"raw":"GET /a0a5bbd3-3b4e-4493-b045-9c431778e0a5 HTTP/1.1\r\nHost: clouds-voice-509b.incaamand.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:39:02 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=eAtWh%2BZtzOL760bRI%2BX0PNI8Ax2fE3hmliYk7kDlFYx%2FgM8CHXPdYYoLxhtR38oVFb%2FsCVdkyaBx0%2FH28sOmA%2BVGScpKP9rAnlq85DHdlijZB7DZqv2k1KQ4%2F6cmF3o7g5Uyd472nRrLi1liavP9PdoipSfaw8X4VKM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8300ad371efa7131-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1889012,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T19:48:55.662748Z","times_seen":16366178,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":2,"dns":1,"connect":1,"send":0,"wait":15,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-12-03","alert":"Office365","trigger":"clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-11-12","alert":"Other","trigger":"clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.550Z","timestamp":1701657552550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Thu, 30 Nov 2023 00:15:17 GMT","end":"Wed, 28 Feb 2024 00:15:16 GMT"},"fingerprint":{"sha1":"34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04","sha256":"43:DF:F0:50:19:18:94:64:CA:28:1D:82:84:B3:9A:EC:06:DB:BE:07:DE:82:E2:0D:5C:52:19:05:67:1E:BF:A6"}}},"request":{"raw":"GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://clouds-voice-509b.incaamand.workers.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 04 Dec 2023 02:39:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: W/\"450fc463b8b1a349df717056fbb3e078\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-cachedat: 10/31/2023 18:48:44\r\ncdn-proxyver: 1.04\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 752\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requestid: f7b1e7ca2e0b2310cfb8c9a947c7020e\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 739423\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncf-ray: 8300ad557ac9b518-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144877,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-06-12T17:32:32.915258Z","times_seen":57441,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":43,"dns":29,"connect":1,"send":0,"wait":10,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Archivo+Narrow\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:12.553Z","timestamp":1701657552553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:07 GMT","end":"Mon, 15 Jan 2024 11:24:06 GMT"},"fingerprint":{"sha1":"CC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42","sha256":"9A:90:D4:1D:0C:D1:CA:9D:4D:19:37:44:C4:E6:E4:28:27:C0:F5:0A:9C:B4:56:89:C4:D1:8A:63:A7:01:28:54"}}},"request":{"raw":"GET /css?family=Archivo+Narrow\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 04 Dec 2023 02:39:07 GMT\r\ndate: Mon, 04 Dec 2023 02:39:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1293,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1320), with no line terminators","md5":"d2dc9e6ce6319f62a7fc6e4f736b5985","sha1":"5a3a070c02d12b29592414c8bad9fcead7545200","sha256":"52f85c1c70023b87eaf4d6bdf4ff5c4c315b046b0832e2218dd7c884e30de975","sha512":"ad91bf8e1ae1ee083ccc23f6eeb1bcef68c710d1425d03051437f951d40fac2d0b5ac7f31b36f914fa6911753ff5ad637d9cfd4628f7482e4559ed3c0972db3a","ssdeep":"","tlshash":"d0216e80241b2a04a6834fd627db7b31ad0e7791b86191366ffd14db8cced36231971d","first_seen":"2023-09-15T01:57:36Z","last_seen":"2024-08-21T06:51:49.144161Z","times_seen":14316,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":29,"dns":1,"connect":7,"send":0,"wait":18,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clouds-voice-509b.incaamand.workers.dev/favicon.ico","fqdn":"clouds-voice-509b.incaamand.workers.dev","domain":"incaamand.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.45.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5","date":"2023-12-04T02:39:08.474Z","timestamp":1701657548474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"incaamand.workers.dev","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sun, 08 Oct 2023 14:59:46 GMT","end":"Sat, 06 Jan 2024 14:59:45 GMT"},"fingerprint":{"sha1":"34:25:AE:08:F2:2C:35:70:81:3B:AD:3A:F9:00:C6:80:95:72:20:53","sha256":"30:98:84:DA:50:F5:FB:43:79:89:64:36:2E:7C:8E:68:60:F8:20:72:F8:14:90:9D:BA:9E:C6:3E:B6:E5:14:23"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: clouds-voice-509b.incaamand.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clouds-voice-509b.incaamand.workers.dev/a0a5bbd3-3b4e-4493-b045-9c431778e0a5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 04 Dec 2023 02:39:02 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=dUiTt%2Fw2Mt47jUC7ShcYLfBKwk6nGWm0aUHWGAub2luWfkGkuHctsbNohIDXMX3rqaKRbfCWgH2g%2Bp5IT3rs8j9SKasakc5DddK5RwNEFOJuYJwdhwmVIOH%2FERbhrVA3HrxuDCeM2xhKViM6jR%2FgIamNLBzriNs8PLA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8300ad3baa4d1bfe-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1245007,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-12T19:48:55.662748Z","times_seen":16366178,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2023-11-28","alert":"Office365","trigger":"clouds-voice-509b.incaamand.workers.dev/","verdict":"phishing","severity":"medium","comment":"Office365","link":"https://openphish.com/","meta":null},{"sensor_name":"phishtank","sensor_type":"url","title":"","description":"PhishTank","scan_date":"2023-11-12","alert":"Other","trigger":"clouds-voice-509b.incaamand.workers.dev/favicon.ico","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null}],"urlquery":null}}]}