GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=a_pageload&q=%7B%22pageLoadTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:12 GMT
X-Firefox-Spdy: h2
GET therecord.media/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
104.18.42.30200 OK 12 kB URL GET therecord.media/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type JavaScript source, ASCII text, with very long lines (12331)
Hash 88a769d2fe35899fd45a332a0a032cc0
514c6c1d8475d17e412849a4c90159517d0fa10a
ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:08 GMT
content-type: application/javascript
last-modified: Mon, 30 Jun 2025 18:08:27 GMT
etag: W/"6862d29b-302c"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd2dd0b5684-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Tue, 08 Jul 2025 07:25:08 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
GET cms.therecord.media/uploads/The_Record_Centered_9b27d79125.svg
104.18.42.30200 OK 7.3 kB URL GET cms.therecord.media/uploads/The_Record_Centered_9b27d79125.svg
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type SVG Scalable Vector Graphics image
Hash dc1bc64ee3511cfb4e4b68390ad70917
473b8eb13bf268835be93ecea249ffb5ac8ae661
54c76c41df5975085389626fc4c3920abdc817d033688ab9d9a98a362ad2f2e7
GET /uploads/The_Record_Centered_9b27d79125.svg HTTP/1.1
Host: cms.therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: image/svg+xml
cache-control: max-age=300
etag: W/"63c03e2b-1c5f"
expires: Sun, 06 Jul 2025 07:30:09 GMT
last-modified: Thu, 12 Jan 2023 17:06:51 GMT
traceresponse: 00-184f98bb10998955bddcfc67c3b26eaa-5b218d13283f3a4b-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: r6uchqjqwmfqi-production-vohbr3y
x-platform-processor: yzs7ggztuurocnodlgeyqu6sde
x-platform-router: qk5ll65emgqnxbcwb6fko7g64m
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd2fd295684-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET cms.therecord.media/uploads/format_webp/large_Hospital_unsplash_PP_e69856eccd.jpg
104.18.42.30200 OK 34 kB URL GET cms.therecord.media/uploads/format_webp/large_Hospital_unsplash_PP_e69856eccd.jpg
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x581, Scaling: [none]x[none], YUV color, decoders should clamp
Hash e979518e22ebcc9e89379ff554654230
08b3332155245d5b2af93de9707c77d01033b99e
4b313c75bfadc480b5e272989032d55949be7f0a2aa96f20be3d94638391c681
GET /uploads/format_webp/large_Hospital_unsplash_PP_e69856eccd.jpg HTTP/1.1
Host: cms.therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: image/webp
cache-control: max-age=31536000, public, s-maxage=31536000
etag: "830e-CLMzIVUkXVsq+T3pcHx30BAzuZ4"
traceresponse: 00-184f98bb108c2a2ba5eec873bd6de698-bc65253516281634-01
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: r6uchqjqwmfqi-production-vohbr3y
x-platform-processor: yzs7ggztuurocnodlgeyqu6sde
x-platform-router: qk5ll65emgqnxbcwb6fko7g64m
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd2fd2a5684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/interpol-west-africa-cybercrime-compounds.json?slug=interpol-west-africa-cybercrime-compounds
104.18.42.30200 OK 52 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/interpol-west-africa-cybercrime-compounds.json?slug=interpol-west-africa-cybercrime-compounds
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 4a86f82328eddf1bafe6f56ffe7d635f
f304bc380f3f18d550393116975e9d9655ad65ca
380625078255ef5217da42205d28eff859474478a1656d5b8df7f802daa45994
GET /_next/data/-_c2CxCCiwViDEENA117g/interpol-west-africa-cybercrime-compounds.json?slug=interpol-west-africa-cybercrime-compounds HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "esejte1wsd141r"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8f35564a1515d87e99989b16-10edbb8a7647be01-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1dc7d5684-OSL
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A16%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A15%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%224010%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A16%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A15%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%224010%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A16%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A15%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%224010%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:16 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:16 GMT
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/elections.json?slug=news&slug=elections
104.18.42.30200 OK 54 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/elections.json?slug=news&slug=elections
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 8843f9577222de60924f7589a5b8268b
ea7de06810710cad887856f45ffd0b3d49e15eb5
96706915e8d5afdf807396479dd477f352f5c1cb4cb490ac514a80c7bdff4e29
GET /_next/data/-_c2CxCCiwViDEENA117g/news/elections.json?slug=news&slug=elections HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "tky0welqt7160s"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8c67780f5af7781967e2ff33-ddecbddc63e10a91-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de18c395684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/cybercrime.json?slug=news&slug=cybercrime
104.18.42.30200 OK 54 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/cybercrime.json?slug=news&slug=cybercrime
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash f5ee39a638a457f30d6602705832c5fd
86ac46e40bd9f5a8125a5d4b0afcc93f2ded5897
f7c5707918988ea58c1f34032231638e216e0b225b9e5aa3fb5c7c642e7f954a
GET /_next/data/-_c2CxCCiwViDEENA117g/news/cybercrime.json?slug=news&slug=cybercrime HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "137nmbnsv4l15zv"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8c349dd144fa45fe1be3f1a3-bd5774b1f934f8b9-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de18c2e5684-OSL
X-Firefox-Spdy: h2
GET js.hs-banner.com/252628.js
172.64.147.16200 OK 63 kB URL GET js.hs-banner.com/252628.js
IP 172.64.147.16:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecths-banner.com
Fingerprint35:D9:55:8F:61:11:B5:E3:D1:7E:BA:0F:7B:79:53:E6:0F:46:A0:25
ValiditySun, 18 May 2025 21:58:26 GMT - Sat, 16 Aug 2025 22:58:22 GMT
File type JavaScript source, ASCII text, with very long lines (60854)
Hash 3b8144a2ffa3e6a086324b70f701b4fd
49459bda0185d1285a74c9593ef9fe17a7a8f0f4
65bf639b42e5915901eb3e8105b64f6fc5241e82b68adf857ccda2eae69b79c0
GET /252628.js HTTP/1.1
Host: js.hs-banner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:12 GMT
content-type: text/javascript; charset=UTF-8
x-amz-id-2: xHuszC+Ii/89yCsSAaSdZBjtj8qKhsIiATJduhdt1x/kz25QvERdydViB2kXhHxLy11Su6j4dZk=
x-amz-request-id: 3A5RYMXSM8CWXHWB
last-modified: Mon, 07 Apr 2025 16:39:52 GMT
etag: W/"3b8144a2ffa3e6a086324b70f701b4fd"
x-amz-server-side-encryption: AES256
cache-control: max-age=300,public
x-amz-version-id: .VOKeuyKRX0sj_MLV1NMDUobuvkkDqI6
access-control-allow-origin: https://securitytrails.com
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timing
access-control-allow-credentials: true
access-control-max-age: 604800
timing-allow-origin: *
vary: origin, Accept-Encoding
expires: Sun, 06 Jul 2025 07:24:45 GMT
content-encoding: gzip
x-envoy-upstream-service-time: 22
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-hubspot-correlation-id: cf752fcf-b3cb-4638-b224-991cd21595e2
x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-fbbff5ddb-xlmgn
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-request-id: cf752fcf-b3cb-4638-b224-991cd21595e2
cf-cache-status: HIT
age: 107
set-cookie: __cf_bm=njwxJB1xsMz5xOkHsCxNzG5KBk7vRpb4FrSkXmYubAs-1751786712-1.0.1.1-NvdoHtSOBjoyJo2X7vhsb_qk6bd0Lkyt3hvYWYxlVqYMyKFS8Vm1ksGNxpGyv_3BhTpEoVVYyYkAMMy5JPBmGPC1u1xElsCYacgxhR9Vnd4; path=/; expires=Sun, 06-Jul-25 07:55:12 GMT; domain=.hs-banner.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 95ad5de699410afa-OSL
X-Firefox-Spdy: h2
GET ipv6.6sc.co/
95.101.10.131200 OK 4 B IP 95.101.10.131:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type ASCII text, with no line terminators
Hash 37a6259cc0c1dae299a7866489dff0bd
2be88ca4242c76e8253ac62474851065032d6833
74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b
GET / HTTP/1.1
Host: ipv6.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 4
expires: Sun, 06 Jul 2025 07:25:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:12 GMT
server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1751786712074_1600457316_433132778_23_850_0_31_21";dur=1
6si-ipv6: null
access-control-allow-origin: https://therecord.media
vary: Origin
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A15%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A14%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%223008%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A15%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A14%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%223008%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A15%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A14%20GMT%22%2C%22timeSpent%22%3A%221001%22%2C%22totalTimeSpent%22%3A%223008%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:15 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:15 GMT
X-Firefox-Spdy: h2
GET cms.therecord.media/uploads/format_webp/2025_0514_Record_Ads_970x250_1_d144dbf901.png
104.18.42.30200 OK 19 kB URL GET cms.therecord.media/uploads/format_webp/2025_0514_Record_Ads_970x250_1_d144dbf901.png
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 970x250, Scaling: [none]x[none], YUV color, decoders should clamp
Hash a8ace6526e1242309385ba242f4b9182
5c1b88477c93a8016629c3fe5f87b8b61e45dc30
8ce6074b4b915b213a9a9a6dd086ccbe6a1ecdaa34a5c53abd594ad7c9a1867d
GET /uploads/format_webp/2025_0514_Record_Ads_970x250_1_d144dbf901.png HTTP/1.1
Host: cms.therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: image/webp
cache-control: max-age=31536000, public, s-maxage=31536000
etag: "48ae-XBuIR3yTqAFmKcP+X4e4th5F3DA"
traceresponse: 00-184f98bb1095ba2305f538a9d59dc226-3518cfcb65f4dda6-01
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: r6uchqjqwmfqi-production-vohbr3y
x-platform-processor: yzs7ggztuurocnodlgeyqu6sde
x-platform-router: qk5ll65emgqnxbcwb6fko7g64m
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd2fd2e5684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/static/chunks/pages/%5B%5B...slug%5D%5D-4602bfed4ec0dd2c.js
104.18.42.30200 OK 76 kB URL GET therecord.media/_next/static/chunks/pages/%5B%5B...slug%5D%5D-4602bfed4ec0dd2c.js
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Hash 7997570c8e3289fb399d33ed13fdeafe
d8571754cfd17590142956b80629d4c7d89cf435
2994e09dd9f086c453e0ed5fd774401b9bd020630c2c28298109057b5394f98b
GET /_next/static/chunks/pages/%5B%5B...slug%5D%5D-4602bfed4ec0dd2c.js HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: application/javascript; charset=UTF-8
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
etag: W/"129c0-197a617160a"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb344910a614e4f8bc296a6699-4b53de9d3d758450-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6a9795684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/static/chunks/webpack-6ef43a8d4a395f49.js
104.18.42.30200 OK 2.1 kB URL GET therecord.media/_next/static/chunks/webpack-6ef43a8d4a395f49.js
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type JavaScript source, ASCII text, with very long lines (2100), with no line terminators
Hash 88c94c47471d10e71f72551352060fce
784f8a24befaee1e8f3a92b8feab1ea6a0f862f7
38ea73ab67fc116151506874fc35620aacfc4d7465b5b76b307bd38c4fb9fdd8
GET /_next/static/chunks/webpack-6ef43a8d4a395f49.js HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: application/javascript; charset=UTF-8
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
etag: W/"834-197a6171611"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb34711614a4500a68545807c6-bcb5bad2a172a722-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6b98e5684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/static/media/e4af272ccee01ff0-s.p.woff2
104.18.42.30200 OK 48 kB URL GET therecord.media/_next/static/media/e4af272ccee01ff0-s.p.woff2
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0
Hash 65850a373e258f1c897a2b3d75eb74de
1dc044f4824fd5af6bfed67fee48be70fa069f3f
c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4
GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: font/woff2
content-length: 48432
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"bd30-197a6171613"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98baffd67a4fffd29304751eef0a-7b526d16c4e5f1c7-01
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd2cd035684-OSL
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtm.js?id=GTM-PVJ5W86
142.250.178.72200 OK 314 kB URL GET www.googletagmanager.com/gtm.js?id=GTM-PVJ5W86
IP 142.250.178.72:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint06:CD:2A:9C:6E:F9:40:51:AA:E0:81:4A:BB:69:6C:BA:FA:AD:AB:4D
ValidityTue, 17 Jun 2025 20:01:48 GMT - Tue, 09 Sep 2025 20:01:47 GMT
File type JavaScript source, ASCII text, with very long lines (5296)
Size 314 kB (314192 bytes)
Hash c60a79fbf61bcc0c623dfd328076b1c3
b950383723919486ad9d2b57d194cae1ccd6cdf6
0e146febc23a9ad0854575dfdd1df19634354ca137432ad4dd70195517349a96
GET /gtm.js?id=GTM-PVJ5W86 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Jul 2025 07:25:10 GMT
expires: Sun, 06 Jul 2025 07:25:10 GMT
cache-control: private, max-age=900
last-modified: Sun, 06 Jul 2025 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1319:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1319:0
report-to: {"group":"ascgcycc:1319:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1319:0"}],}
server: Google Tag Manager
content-length: 105347
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/leadership.json?slug=news&slug=leadership
104.18.42.30200 OK 54 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/leadership.json?slug=news&slug=leadership
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 851a663f827827df7d723bf40fe80325
0442b4179d7a6ca6de24f0ddae863686eef2e937
e134fd898ebb1df7cdd6e5a086c002a28ffe67c2a1853f2883127378f0f7ffac
GET /_next/data/-_c2CxCCiwViDEENA117g/news/leadership.json?slug=news&slug=leadership HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "v89jq4ilan161e"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8c0495d7409a6c840ca07887-6f38e0a5605adb29-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de17c295684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/virginia-county-says-ransomware-attack-exposed-ssns.json?slug=virginia-county-says-ransomware-attack-exposed-ssns
104.18.42.30200 OK 50 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/virginia-county-says-ransomware-attack-exposed-ssns.json?slug=virginia-county-says-ransomware-attack-exposed-ssns
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash bad736a7c6a7a5a02d6f9bc55fca1405
48f6631a2c79d2d7d92873044f18583a220ecfb8
8e2a6189ab648ddd106858dc1634a07040224bbd6229ddc119da846e72170516
GET /_next/data/-_c2CxCCiwViDEENA117g/virginia-county-says-ransomware-attack-exposed-ssns.json?slug=virginia-county-says-ransomware-attack-exposed-ssns HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "n7no1tqpg312a1"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8f3d06eef6eefad48cd7007a-9e39ceeac454e3eb-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1cc715684-OSL
X-Firefox-Spdy: h2
GET js.hscollectedforms.net/collectedforms.js
104.16.111.254200 OK 77 kB URL GET js.hscollectedforms.net/collectedforms.js
IP 104.16.111.254:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecthscollectedforms.net
FingerprintB9:5E:88:5B:61:8A:9C:1C:9C:51:76:DA:3F:BF:72:66:C8:4A:20:58
ValidityFri, 16 May 2025 20:17:29 GMT - Thu, 14 Aug 2025 21:17:27 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65327)
Hash d374e9efbf5e558327f9a1db866edc85
c888658582ebf5b40f37170d10b5f526889915c5
c1e83a0c6315aadcb3166df401edf4fd3879a1eb6a6de4aedfc637f43722884c
GET /collectedforms.js HTTP/1.1
Host: js.hscollectedforms.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:12 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Wed, 11 Jun 2025 10:10:11 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: 9d4vq9ts.bFZV77tVlbNVqzuFhqIVFBF
content-encoding: gzip
etag: W/"d374e9efbf5e558327f9a1db866edc85"
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,accept-encoding
x-cache: Hit from cloudfront
via: 1.1 36b04143ac1626bb30bb225fb2cccb1e.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: hUjZSzMm5KDp1OrdZ8D-mF7x-fYRM8Ibvantm-3gGHMT_skuKNvyXA==
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.2820/bundles/project.js&cfRay=95a5084829255429-ARN
cache-control: s-maxage=600, max-age=300
x-hs-target-asset: collected-forms-embed-js/static-1.2820/bundles/project.js
x-content-type-options: nosniff
x-hs-cache-status: MISS
x-envoy-upstream-service-time: 11
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-hubspot-correlation-id: dc955a90-ed75-4d9d-be62-fa8128b63a13
x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-554d564d77-wd8rl
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-request-id: dc955a90-ed75-4d9d-be62-fa8128b63a13
cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 107
set-cookie: __cf_bm=39tCJmfynHVC8Kh.GJVvpfM2YQqPW2QV_2CFGM_K0zE-1751786712-1.0.1.1-81y_AsAaBFDPGMea0Fhxli7h1fZ1kNNv7P1js8GtRCArfgqqBw6FGfdKXV4jvX5AnXYWlahqU7KbBfX5bSY8qT9VhSFNb7Ox90SRAAGtGnQ; path=/; expires=Sun, 06-Jul-25 07:55:12 GMT; domain=.hscollectedforms.net; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 95ad5de69e0756be-OSL
X-Firefox-Spdy: h2
GET forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1
104.18.80.204200 OK 35 B URL GET forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1
IP 104.18.80.204:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecthsforms.com
FingerprintC3:AB:44:C8:AE:00:A7:C2:8C:BF:4E:55:73:28:9D:42:57:02:A7:4C
ValidityThu, 08 May 2025 17:02:39 GMT - Wed, 06 Aug 2025 18:02:35 GMT
File type GIF image data, version 89a, 1 x 1
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1
Host: forms.hsforms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 06 Jul 2025 07:25:12 GMT
Content-Type: image/gif
Content-Length: 35
Connection: keep-alive
Cache-Control: max-age=0, no-cache, no-store
vary: origin
access-control-allow-credentials: false
x-content-type-options: nosniff
access-control-expose-headers: X-Origin-Hublet
x-robots-tag: none
x-envoy-upstream-service-time: 1
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-hubspot-correlation-id: ebbfa4ca-115c-4a35-a760-1aaadf8004be
x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-5c76648889-6628h
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-request-id: ebbfa4ca-115c-4a35-a760-1aaadf8004be
cf-cache-status: DYNAMIC
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Set-Cookie: __cf_bm=iAiHrr.eB5zv2AfQwpJHgXQZjlyrhY450mKFeczJ.kI-1751786712-1.0.1.1-eD8CgRR_KLCEI9NBBiqVVuONW7Cb3jQZk0EAFxu7l22zLHIyiEfrH6X2QZ1JRlfiT5mjMqJ64745PdetoYN0ivxravw0auj4_syKGpkbxn8; path=/; expires=Sun, 06-Jul-25 07:55:12 GMT; domain=.hsforms.com; HttpOnly; Secure; SameSite=None
_cfuvid=RwC2oe633drZRJADiCMBnbozc.n1n8EA8THuheP8ZG4-1751786712932-0.0.1.1-604800000; path=/; domain=.hsforms.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 95ad5deb1cc5b4f1-OSL
alt-svc: h3=":443"; ma=86400
GET forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=252628&utk=
104.16.111.254200 OK 134 B URL GET forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=252628&utk=
IP 104.16.111.254:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecthscollectedforms.net
FingerprintB9:5E:88:5B:61:8A:9C:1C:9C:51:76:DA:3F:BF:72:66:C8:4A:20:58
ValidityFri, 16 May 2025 20:17:29 GMT - Thu, 14 Aug 2025 21:17:27 GMT
Hash 6ffdfe55a189f58cafbd25f4262bc773
2dbbb0faed2f33ab484c1a182540c70c75dd83c1
a7d394b9daf469f6c4ad62dab48f458ec7006bf90004fe28a06f46c4adb54ee6
GET /collected-forms/v1/config/json?portalId=252628&utk= HTTP/1.1
Host: forms.hscollectedforms.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:12 GMT
content-type: application/json;charset=utf-8
vary: Accept-Encoding
cache-control: max-age=0
x-content-type-options: nosniff
x-robots-tag: none
access-control-allow-origin: https://therecord.media
access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD
access-control-allow-headers: *
access-control-max-age: 180
x-envoy-upstream-service-time: 4
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-hubspot-correlation-id: c43afbb0-66dd-45e5-bcb6-e53ddc82cded
x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-554d564d77-9tjgj
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-request-id: c43afbb0-66dd-45e5-bcb6-e53ddc82cded
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=BHDfkbRg76ULkAo2_FoCtRquoqnFkXto2NSJ4OKEF50-1751786712-1.0.1.1-.IYSAhLH0KzsRDvzL0oasTvv2eBLpJd7QlnIaiz7RjmEtR3cbkMKigEkLqo0sY4pWGzQk5qzPCXHM80zNgJzaaj_VEMKH2wHn.K7uRxGvV8; path=/; expires=Sun, 06-Jul-25 07:55:12 GMT; domain=.hscollectedforms.net; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 95ad5de8d91f56be-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET therecord.media/_next/static/css/34a2bd707827f515.css
104.18.42.30200 OK 69 kB URL GET therecord.media/_next/static/css/34a2bd707827f515.css
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type Unicode text, UTF-8 text, with very long lines (61861)
Hash 28987dbaa71826f5709ebd7ec972dcb1
74a4f4999635b009031992a1d38498737c71daa3
eaf371c65968b5ebc795835929c98dcbc0e399c4706cac891b1a1467a8fe8e69
GET /_next/static/css/34a2bd707827f515.css HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: text/css; charset=UTF-8
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
etag: W/"10d48-197a6171611"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb0edf053d869b3092d5427251-fdc79374fedb2012-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd2cd055684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/static/chunks/pages/_app-22497c4ea49eeae5.js
104.18.42.30200 OK 122 kB URL GET therecord.media/_next/static/chunks/pages/_app-22497c4ea49eeae5.js
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 122 kB (121494 bytes)
Hash 3f37d7749e8da473bfe6927945e1d732
efbd197e55daa9a17dabb2fd96813b8137ad6b2e
368bd496d1cce6ff3af3b5e017ad40e7db1017957453d1ba24b7cf8a9747ff84
GET /_next/static/chunks/pages/_app-22497c4ea49eeae5.js HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: application/javascript; charset=UTF-8
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
etag: W/"1da96-197a617160a"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb347686f89a0d913b2063cb3e-44e1a983db5f13f3-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6b9885684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/static/chunks/framework-64ad27b21261a9ce.js
104.18.42.30200 OK 140 kB URL GET therecord.media/_next/static/chunks/framework-64ad27b21261a9ce.js
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 140 kB (139978 bytes)
Hash bf0dbea2c1509e290fc7ddbdd9477a3b
296721ce3728c51c7fac5fb35c971baf5fd92b7b
4250d53f0bc756ece2ddd690a008add1d7fdc887528c671f4dfe8d916d7787b7
GET /_next/static/chunks/framework-64ad27b21261a9ce.js HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: application/javascript; charset=UTF-8
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
etag: W/"222ca-197a6171609"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb34000b6896340a1eec0f657f-873a5afec5ba9dd2-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6b98a5684-OSL
X-Firefox-Spdy: h2
GET cms.recordedfuture.com/uploads/format_webp/drat_v2_updated_drat_emerges_tag_140s_arsenal_25f194fd6f.jpg
104.18.35.90200 OK 39 kB URL GET cms.recordedfuture.com/uploads/format_webp/drat_v2_updated_drat_emerges_tag_140s_arsenal_25f194fd6f.jpg
IP 104.18.35.90:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerDigiCert Inc
Subject*.recordedfuture.com
FingerprintD7:56:14:1C:51:43:A4:45:F8:9F:86:9B:D6:A9:12:B7:2A:7C:57:A7
ValidityWed, 19 Feb 2025 00:00:00 GMT - Wed, 11 Mar 2026 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x600, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 6f6b30cea5e86d05a8322f42b3476797
2ca0b944fba6c4dc2f082842ba1a383d0b72a1e5
37230a7f4ebd167747478a7bf917b48f70231c12b98762cb70dad12036a5c138
GET /uploads/format_webp/drat_v2_updated_drat_emerges_tag_140s_arsenal_25f194fd6f.jpg HTTP/1.1
Host: cms.recordedfuture.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: image/webp
content-length: 39390
cache-control: max-age=300, public, s-maxage=300
etag: "99de-LKC5RPumxNwvCChCuho4PQtyoeU"
last-modified: 1750643323635
traceresponse: 00-184ee9b11df81b7e064c0658df16c373-d2a35e96556c683a-01
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-server: i-72f68d9e5fc844fb8d11227fc18ff9f4, i-72f68d9e5fc844fb8d11227fc18ff9f4
cf-cache-status: HIT
age: 210
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
set-cookie: _cfuvid=oA5j3KNLyZAp3jPCAFkk6yRg1XVIY0pruUwqtHbUWQI-1751786709821-0.0.1.1-604800000; path=/; domain=.recordedfuture.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 95ad5dd84a6ab503-OSL
X-Firefox-Spdy: h2
GET js.hs-scripts.com/252628.js
104.16.140.209200 OK 2.7 kB URL GET js.hs-scripts.com/252628.js
IP 104.16.140.209:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecths-scripts.com
Fingerprint2D:C4:86:D4:81:42:4C:11:CE:16:4B:AF:A5:53:9B:7D:62:C4:01:04
ValidityTue, 20 May 2025 02:37:34 GMT - Mon, 18 Aug 2025 03:37:32 GMT
File type ASCII text, with very long lines (536)
Hash 020ee06045ee6e4be75b9329a12ca3c8
5d9432bfce176fcd2b3a5d6f7a6b8b00b8bc7277
5d5e7a2b3dd2cc5403d4003d520c2aa2a865b63ac1b7ca9648542ec89789b90e
GET /252628.js HTTP/1.1
Host: js.hs-scripts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/javascript;charset=utf-8
content-length: 715
vary: origin, Accept-Encoding
x-hubspot-correlation-id: 6ef71746-74cc-4d1f-9754-9f2a3254c611
content-encoding: gzip
access-control-allow-credentials: true
x-content-type-options: nosniff
access-control-max-age: 3600
access-control-allow-origin: https://therecord.media
last-modified: Sun, 06 Jul 2025 07:25:11 GMT
cf-cache-status: EXPIRED
expires: Sun, 06 Jul 2025 07:26:41 GMT
cache-control: public, max-age=90
accept-ranges: bytes
set-cookie: __cf_bm=6r45bb017p26.R8.cEDvWQIGD.vAh1sThoqrIJ0OYnM-1751786711-1.0.1.1-9H3kloSqB_PYEQPNqIPzhaxfgVpcQgaxwthv7mFFHAoyYEq0onHW32uSYZVtfvLWK_Mwtf5ADcJaMogxBB5Ph4e.PDFVuWNjCHYq9JWPwVE; path=/; expires=Sun, 06-Jul-25 07:55:11 GMT; domain=.hs-scripts.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 95ad5de3ac1f56b9-OSL
X-Firefox-Spdy: h2
GET j.6sc.co/6si.min.js
95.101.10.104200 OK 70 kB IP 95.101.10.104:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type JavaScript source, ASCII text, with very long lines (31995)
Hash bc32411fd6fa348d8203d2f26dd9866d
f4abdc1b3c92857e9d3079cc7b3f08ab85c3b00b
91c20c70d36b608cf919e894b0ac9e32298d6b3ac3ca59c45a85e7c44161d170
GET /6si.min.js HTTP/1.1
Host: j.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 19 Feb 2025 12:59:27 GMT
content-encoding: gzip
x-amz-server-side-encryption: AES256
x-amz-version-id: P3wU2zsFsU_YKU_VzrjthagDfojxxkBN
etag: W/"bc32411fd6fa348d8203d2f26dd9866d"
vary: accept-encoding
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: 7CQj1JfWc5hroyt6J1h1nd4D3DDY0Xkd1kIcDxFTmD0POM3zg-FKEw==
content-length: 18919
cache-control: private, max-age=10800
expires: Sun, 06 Jul 2025 10:25:11 GMT
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/javascript
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=ni%3AasyncSettingsAudit&q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22f2675e8089b7d209a58fce8ad312f51c%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%2247c555096cc32557d3e6e7a333d7cb3ea692cee1%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIgnorePageUrlHash%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableRetargeting%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setWhiteListFields%5C%22%2C%5C%22value%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setCustomMetatags%5C%22%2C%5C%22value%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22storeTagId%5C%22%2C%5C%22value%5C%22%3A%5C%2264dc3ec5-330c-4652-88d3-147ee65e90ba%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableEventTracking%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setCompanyDetailsExpiration%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableMapCookieCapture%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableCompanyDetails%5C%22%2C%5C%22value%5C%22%3A%5C%22%5Btrue%2Cnull%2C3%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%5D%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=ni%3AasyncSettingsAudit&q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22f2675e8089b7d209a58fce8ad312f51c%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%2247c555096cc32557d3e6e7a333d7cb3ea692cee1%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIgnorePageUrlHash%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableRetargeting%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setWhiteListFields%5C%22%2C%5C%22value%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setCustomMetatags%5C%22%2C%5C%22value%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22storeTagId%5C%22%2C%5C%22value%5C%22%3A%5C%2264dc3ec5-330c-4652-88d3-147ee65e90ba%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableEventTracking%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setCompanyDetailsExpiration%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableMapCookieCapture%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableCompanyDetails%5C%22%2C%5C%22value%5C%22%3A%5C%22%5Btrue%2Cnull%2C3%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%5D%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=ni%3AasyncSettingsAudit&q=%7B%22settings%22%3A%22%5B%7B%5C%22name%5C%22%3A%5C%22setToken%5C%22%2C%5C%22value%5C%22%3A%5C%22f2675e8089b7d209a58fce8ad312f51c%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22disableCookies%5C%22%2C%5C%22value%5C%22%3A%5C%22false%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setEpsilonKey%5C%22%2C%5C%22value%5C%22%3A%5C%2247c555096cc32557d3e6e7a333d7cb3ea692cee1%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIPv6Ping%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableIgnorePageUrlHash%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableRetargeting%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setWhiteListFields%5C%22%2C%5C%22value%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setCustomMetatags%5C%22%2C%5C%22value%5C%22%3A%5C%22%5B%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22storeTagId%5C%22%2C%5C%22value%5C%22%3A%5C%2264dc3ec5-330c-4652-88d3-147ee65e90ba%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableEventTracking%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22setCompanyDetailsExpiration%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableMapCookieCapture%5C%22%2C%5C%22value%5C%22%3A%5C%22true%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%2C%7B%5C%22name%5C%22%3A%5C%22enableCompanyDetails%5C%22%2C%5C%22value%5C%22%3A%5C%22%5Btrue%2Cnull%2C3%5D%5C%22%2C%5C%22dateTime%5C%22%3A%5C%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%5C%22%2C%5C%22timeSincePageLoad%5C%22%3A%5C%220%5C%22%7D%5D%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:12 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:12 GMT
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A20%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A19%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%228021%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A20%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A19%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%228021%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A20%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A19%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%228021%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:20 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:20 GMT
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A21%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A20%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%229023%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A21%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A20%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%229023%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A21%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A20%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%229023%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:21 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:21 GMT
X-Firefox-Spdy: h2
GET therecord.media/_next/static/media/icomoon.fa65de99.ttf
104.18.42.30200 OK 5.2 kB URL GET therecord.media/_next/static/media/icomoon.fa65de99.ttf
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon
Hash f5cef26de356a0071c368e4c4c5ebdb4
9ea8a8b067f42cd4a49a7507d95f1c8a59c1a272
746b98750085001fd460be5762114bb0dd129376804ddb079dabe3a534ac8164
GET /_next/static/media/icomoon.fa65de99.ttf HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/_next/static/css/34a2bd707827f515.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: font/ttf
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
etag: W/"1428-197a6171614"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb3627f05b5492dbe28050c4d2-2fe6161ee71e9ee9-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6e9c25684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/static/-_c2CxCCiwViDEENA117g/_buildManifest.js
104.18.42.30200 OK 1.5 kB URL GET therecord.media/_next/static/-_c2CxCCiwViDEENA117g/_buildManifest.js
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type ASCII text, with very long lines (1506), with no line terminators
Hash 69847dee5070ccecb08ce2af24543826
2421bf40308ab5a3af9a53a5f75a8bd42f24bee3
ce64439f50655a5a3ab42c4c56cb9b8435e01e5abe5aba66bbf0cb5ced58675f
GET /_next/static/-_c2CxCCiwViDEENA117g/_buildManifest.js HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: application/javascript; charset=UTF-8
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
etag: W/"5e2-197a6171606"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb33e10c90e2644f9a9ffbb8b4-46bc16b531495f03-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6a9775684-OSL
X-Firefox-Spdy: h2
GET therecord.media/favicon-16.png
104.18.42.30200 OK 497 B URL GET therecord.media/favicon-16.png
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 967dc7e0c47426526676b00a29de5df0
9b9fe7adf38eeb8e4a015187c3f8345cdf851688
53773d14ffb4d6732b4670533c00891202283da9201e3b1b17c98e5beb306376
GET /favicon-16.png HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:10 GMT
content-type: image/png
content-length: 497
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=0
etag: W/"1f1-197a6113110"
last-modified: Wed, 25 Jun 2025 07:50:34 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb5afe37657901a7ec0cfa0870-8e2490031ea95eef-01
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5ddc5f2d5684-OSL
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-EYNZBT8ZP2&cx=c>m=45He5710v832426714za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891
142.250.178.72200 OK 397 kB URL GET www.googletagmanager.com/gtag/js?id=G-EYNZBT8ZP2&cx=c>m=45He5710v832426714za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891
IP 142.250.178.72:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint06:CD:2A:9C:6E:F9:40:51:AA:E0:81:4A:BB:69:6C:BA:FA:AD:AB:4D
ValidityTue, 17 Jun 2025 20:01:48 GMT - Tue, 09 Sep 2025 20:01:47 GMT
File type JavaScript source, ASCII text, with very long lines (6004)
Size 397 kB (397090 bytes)
Hash 3c3d7349a22b58a6c94aeac1aa39c684
13b7c164178fd87f90f126eb489e9061accaf3c3
14180f40e8f54ce76c90883a87e901d413e684e1db8f3e6d185a208f017cbbe3
GET /gtag/js?id=G-EYNZBT8ZP2&cx=c>m=45He5710v832426714za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Jul 2025 07:25:11 GMT
expires: Sun, 06 Jul 2025 07:25:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 132388
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET therecord.media/icons/svg/x-social-media-black-icon.svg
104.18.42.30200 OK 468 B URL GET therecord.media/icons/svg/x-social-media-black-icon.svg
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type SVG Scalable Vector Graphics image
Hash cdf41bd3b7303f8abc82e74db3b2d009
9587f0efbc314c144f61c604102f8804c9f9b751
5b793cae1eac36fdbd918ed31f7f4287739e8cbaca478b7ad33345aa0aaff2b2
GET /icons/svg/x-social-media-black-icon.svg HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/_next/static/css/34a2bd707827f515.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0
etag: W/"1d4-197a6113110"
last-modified: Wed, 25 Jun 2025 07:50:34 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb235c5b07a8520cb66695fe36-ba3aa2c35715d897-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6894a5684-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/spain-arrests-two-data-leaks-targeting-gov-officials-journalists.json?slug=spain-arrests-two-data-leaks-targeting-gov-officials-journalists
104.18.42.30200 OK 51 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/spain-arrests-two-data-leaks-targeting-gov-officials-journalists.json?slug=spain-arrests-two-data-leaks-targeting-gov-officials-journalists
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 426175b4f3b70e129bfb4184cedd2119
4e5e2788f86925eb9db05c24bb0d593085e98b2d
2ba73cfa952acbb56a617ff3e1ed1cc421f93267cf91c6c3b9509870d9354116
GET /_next/data/-_c2CxCCiwViDEENA117g/spain-arrests-two-data-leaks-targeting-gov-officials-journalists.json?slug=spain-arrests-two-data-leaks-targeting-gov-officials-journalists HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "byw1rwmd0k13an"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb9edb8c4c86e168ae8d14ad72-bd540716bb8fcd3a-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: STALE
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1ec995684-OSL
X-Firefox-Spdy: h2
GET cms.therecord.media/uploads/format_webp/2025_0514_Record_Ads_300x1050_1_0f2f11757e.png
104.18.42.30200 OK 32 kB URL GET cms.therecord.media/uploads/format_webp/2025_0514_Record_Ads_300x1050_1_0f2f11757e.png
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x1050, Scaling: [none]x[none], YUV color, decoders should clamp
Hash eb74cdb072769ba3f45be1b1169690a5
5aebe279f22b5d2275d2c62a4ba7263ee5f32317
fb68267889a79bd83558a62a5afe7cabfb9e49e5ef231a4f78415e6e4ec9ce86
GET /uploads/format_webp/2025_0514_Record_Ads_300x1050_1_0f2f11757e.png HTTP/1.1
Host: cms.therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: image/webp
cache-control: max-age=31536000, public, s-maxage=31536000
etag: "7ef6-WuviefIrXSJ10sYqS6cmPuXzIxc"
traceresponse: 00-184f98bb10935c1f42425ff093e7361f-b2db369cc5439450-01
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: r6uchqjqwmfqi-production-vohbr3y
x-platform-processor: yzs7ggztuurocnodlgeyqu6sde
x-platform-router: qk5ll65emgqnxbcwb6fko7g64m
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd2fd2c5684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/static/css/ef46db3751d8e999.css
104.18.42.30200 OK 0 B URL GET therecord.media/_next/static/css/ef46db3751d8e999.css
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_next/static/css/ef46db3751d8e999.css HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: text/css; charset=UTF-8
content-length: 0
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"0-197a6171612"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb0fd0460715ea7edc0e04b427-f7811ebb7602efd9-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd2dd085684-OSL
X-Firefox-Spdy: h2
GET therecord.media/icons/svg/x-social-media-white-icon.svg
104.18.42.30200 OK 468 B URL GET therecord.media/icons/svg/x-social-media-white-icon.svg
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type SVG Scalable Vector Graphics image
Hash c8c5a8fee6b91fa8b79ff1c86df7ca0c
5d0ba7c66aa0d807d24d1ca0c90c0c4821859176
b75b6a546eada5a99d20305b2a6f5c213c73418a5f4a3b710420d3b177b04e6d
GET /icons/svg/x-social-media-white-icon.svg HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/_next/static/css/34a2bd707827f515.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0
etag: W/"1d4-197a6113110"
last-modified: Wed, 25 Jun 2025 07:50:34 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb22b5d47ed6a2d0f1ba972ac2-10f04805277c678a-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6793a5684-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET cdn.matomo.cloud/recordedfuture.matomo.cloud/container_41sBJe2I.js
54.240.174.65200 OK 28 kB URL GET cdn.matomo.cloud/recordedfuture.matomo.cloud/container_41sBJe2I.js
IP 54.240.174.65:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerAmazon
Subjectcdn.matomo.cloud
FingerprintD8:AD:3D:2D:1E:3E:0C:10:B1:C8:0C:BF:87:27:C4:2F:0B:E3:00:50
ValidityWed, 25 Sep 2024 00:00:00 GMT - Thu, 23 Oct 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1086)
Hash 5e35853a2d108cbfa6e973d78c44521a
d1f1b1f6fed4811a9fa7e9033f0b29533f9468ad
937f78d12f5329d4a08003eff15ce162bb0be8511b430e1798bec7f39afc3ca1
GET /recordedfuture.matomo.cloud/container_41sBJe2I.js HTTP/1.1
Host: cdn.matomo.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: CloudFront
content-type: application/javascript; charset=utf-8
date: Sun, 06 Jul 2025 06:02:17 GMT
last-modified: Wed, 02 Oct 2024 23:15:00 GMT
content-encoding: br
cache-control: max-age=691200
x-amz-version-id: 8NAWYImqW9lIJ8623NOLxRiF7UzqZhWi
etag: W/"5e35853a2d108cbfa6e973d78c44521a"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TboIjc1Rv6hTACdF_AEEsD-4CX3H5gUd-zwbtxjh-Ypw6PrkqMYULw==
age: 4974
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: accept-encoding, Origin
X-Firefox-Spdy: h2
POST recordedfuture.matomo.cloud/matomo.php?action_name=therecord.media%2FHHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News&idsite=2&rec=1&r=684946&h=7&m=25&s=10&url=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&_id=7a8e782c9fc7fccb&_idn=1&send_image=0&_refts=0&pv_id=sxpeO5&fa_pv=1&fa_fp[0][fa_vid]=KPFxy3&fa_fp[0][fa_fv]=1&pf_net=49&pf_srv=436&pf_tfr=125&pf_dm1=67&pf_dm2=1212&pf_onl=15&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024
18.195.235.189204 No Content 0 B URL POST recordedfuture.matomo.cloud/matomo.php?action_name=therecord.media%2FHHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News&idsite=2&rec=1&r=684946&h=7&m=25&s=10&url=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&_id=7a8e782c9fc7fccb&_idn=1&send_image=0&_refts=0&pv_id=sxpeO5&fa_pv=1&fa_fp[0][fa_vid]=KPFxy3&fa_fp[0][fa_fv]=1&pf_net=49&pf_srv=436&pf_tfr=125&pf_dm1=67&pf_dm2=1212&pf_onl=15&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024
IP 18.195.235.189:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerAmazon
Subject*.matomo.cloud
Fingerprint20:11:4C:63:17:FD:99:09:3C:43:B7:CC:E0:3C:3D:1B:68:53:F3:19
ValidityMon, 21 Apr 2025 00:00:00 GMT - Wed, 20 May 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /matomo.php?action_name=therecord.media%2FHHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News&idsite=2&rec=1&r=684946&h=7&m=25&s=10&url=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&_id=7a8e782c9fc7fccb&_idn=1&send_image=0&_refts=0&pv_id=sxpeO5&fa_pv=1&fa_fp[0][fa_vid]=KPFxy3&fa_fp[0][fa_fv]=1&pf_net=49&pf_srv=436&pf_tfr=125&pf_dm1=67&pf_dm2=1212&pf_onl=15&uadata=%7B%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1
Host: recordedfuture.matomo.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Sun, 06 Jul 2025 07:25:10 GMT
server: nginx
access-control-allow-origin: https://therecord.media
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A18%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A17%20GMT%22%2C%22timeSpent%22%3A%221004%22%2C%22totalTimeSpent%22%3A%226016%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A18%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A17%20GMT%22%2C%22timeSpent%22%3A%221004%22%2C%22totalTimeSpent%22%3A%226016%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A18%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A17%20GMT%22%2C%22timeSpent%22%3A%221004%22%2C%22totalTimeSpent%22%3A%226016%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:18 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:18 GMT
X-Firefox-Spdy: h2
GET j.6sc.co/j/64dc3ec5-330c-4652-88d3-147ee65e90ba.js
95.101.10.104200 OK 7.8 kB URL GET j.6sc.co/j/64dc3ec5-330c-4652-88d3-147ee65e90ba.js
IP 95.101.10.104:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type ASCII text, with very long lines (7759), with no line terminators
Hash 3fdac343b2a409e8e59493c09517ac69
b8a825ceb27986d83dc2d3a8f4ee048e9bde18de
4512d280d6e3770022a6aced807c4b08d410ae107294c0ac19801ad24f6ef0f5
GET /j/64dc3ec5-330c-4652-88d3-147ee65e90ba.js HTTP/1.1
Host: j.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 25 Jul 2024 13:22:42 GMT
etag: "3fdac343b2a409e8e59493c09517ac69"
x-amz-server-side-encryption: AES256
x-amz-meta-content-type: application/json
x-amz-version-id: MbzeuKlSNW9OmZUUgXztIvtYg.jH191L
accept-ranges: bytes
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: 230z5WuDeUCIr7uKsQHCBq1xONcGJABARNwLdDZ3kxp5HX05XdVO5Q==
vary: Accept-Encoding
content-encoding: gzip
content-length: 2186
cache-control: private, max-age=1800
expires: Sun, 06 Jul 2025 07:55:11 GMT
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/javascript
X-Firefox-Spdy: h2
GET therecord.media/hhs-warns-of-citrix-bleed-bug
104.18.42.30200 OK 84 kB URL User Request GET therecord.media/hhs-warns-of-citrix-bleed-bug
IP 104.18.42.30:443
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (47366)
Hash 4d533a3cce54b327f41f2d663282c80b
1a1fdb316ddf29cab51759de1e2c9c504dbe5403
54ef04ccbaa2ba3aa759bc6b27a7ba18b98baefebf70c23fb6a9dc24b9cb173d
GET /hhs-warns-of-citrix-bleed-bug HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:08 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bae5401b220feb8ca463fe28f7-1471396847f4641f-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
x-powered-by: Next.js
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dce283e5684-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET therecord.media/icons/svg/mastodon-social-media-logo-icon.svg
104.18.42.30200 OK 662 B URL GET therecord.media/icons/svg/mastodon-social-media-logo-icon.svg
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type SVG Scalable Vector Graphics image
Hash 64d718e85b25c2c33e96d68174856c91
d6b4cb9bb27680e3780f88a054ff8945fe75fc81
d6a3db8fc57bcda285f5b3f4a160720f6f5d04b78ed3721ac15747cc302093ed
GET /icons/svg/mastodon-social-media-logo-icon.svg HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/_next/static/css/34a2bd707827f515.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0
etag: W/"296-197a6113110"
last-modified: Wed, 25 Jun 2025 07:50:34 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb236301ed36b71d16e5289942-33d5e69d3f47bfe2-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6894f5684-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET therecord.media/_next/static/-_c2CxCCiwViDEENA117g/_ssgManifest.js
104.18.42.30200 OK 99 B URL GET therecord.media/_next/static/-_c2CxCCiwViDEENA117g/_ssgManifest.js
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type ASCII text, with no line terminators
Hash fe21dc72429730b3443d8cb9130a2733
7aeb9bd09be0ddf00622bcec87b5cd01108576bd
11bc5c5457d219bd5836c09acf8b0b335ff4b6be3cb66d60e9478b09967c5029
GET /_next/static/-_c2CxCCiwViDEENA117g/_ssgManifest.js HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"63-197a6171606"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb33dd9a56bfa670843546ba1c-4975038e954685b2-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6a9755684-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET therecord.media/_next/static/chunks/main-be7cba59a887cc81.js
104.18.42.30200 OK 111 kB URL GET therecord.media/_next/static/chunks/main-be7cba59a887cc81.js
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 111 kB (110817 bytes)
Hash edf56aec39ef38825c5a6a2989aee8a0
0e290b0fc19c7d6d85dd84f67d244110dd2b4f04
63f65b291ba21494ccb3ec4222e6e412c2a0cfd48fdbb3b70f6d1fd92e708c7d
GET /_next/static/chunks/main-be7cba59a887cc81.js HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: application/javascript; charset=UTF-8
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
etag: W/"1b0e1-197a617160a"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb3411553aae8c83a64cc14581-a0d641d8ace8ea2a-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6b9895684-OSL
X-Firefox-Spdy: h2
GET cms.recordedfuture.com/uploads/format_webp/threats_2025_nato_summit_745b9b78b0.jpg
104.18.35.90200 OK 34 kB URL GET cms.recordedfuture.com/uploads/format_webp/threats_2025_nato_summit_745b9b78b0.jpg
IP 104.18.35.90:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerDigiCert Inc
Subject*.recordedfuture.com
FingerprintD7:56:14:1C:51:43:A4:45:F8:9F:86:9B:D6:A9:12:B7:2A:7C:57:A7
ValidityWed, 19 Feb 2025 00:00:00 GMT - Wed, 11 Mar 2026 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x600, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 284dfac786b98cc1d812e3e2cb9a4a7c
8f6f8538772eb2bfe42bd572f09f24a55e4b0539
51f264ed37efebc612eb5f0047ed4c7af955e11f11265c944365bb2d6ee8cdff
GET /uploads/format_webp/threats_2025_nato_summit_745b9b78b0.jpg HTTP/1.1
Host: cms.recordedfuture.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: image/webp
content-length: 33660
cache-control: max-age=300, public, s-maxage=300
etag: "837c-j2+FOHcusr/kK9Vy8J8kpV5LBTk"
last-modified: 1750222518913
traceresponse: 00-184e59ed8eba527a262f2f81c3928cf1-6bef6ef379828563-01
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-server: i-72f68d9e5fc844fb8d11227fc18ff9f4, i-72f68d9e5fc844fb8d11227fc18ff9f4
cf-cache-status: HIT
age: 210
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains
x-content-type-options: nosniff
set-cookie: _cfuvid=XhqjrNoEBZKSJ52Dkq4Jlc29_s2YBi7_2_cOBsC6tec-1751786709832-0.0.1.1-604800000; path=/; domain=.recordedfuture.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 95ad5dd85a86b503-OSL
X-Firefox-Spdy: h2
GET cdn.matomo.cloud/recordedfuture.matomo.cloud/matomo.js
54.240.174.65200 OK 208 kB URL GET cdn.matomo.cloud/recordedfuture.matomo.cloud/matomo.js
IP 54.240.174.65:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerAmazon
Subjectcdn.matomo.cloud
FingerprintD8:AD:3D:2D:1E:3E:0C:10:B1:C8:0C:BF:87:27:C4:2F:0B:E3:00:50
ValidityWed, 25 Sep 2024 00:00:00 GMT - Thu, 23 Oct 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2915)
Size 208 kB (208019 bytes)
Hash f5235e5398ce084a3e668855bd999b04
bfd07cf1210a9c6200bcd4b2a7c83b838a00280f
bb90770c73f6a59c39eca9e258381c30d521b91728ff17bbf04f4311a8f9b630
GET /recordedfuture.matomo.cloud/matomo.js HTTP/1.1
Host: cdn.matomo.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: CloudFront
content-type: application/javascript; charset=utf-8
date: Sun, 06 Jul 2025 06:02:17 GMT
last-modified: Wed, 18 Jun 2025 01:06:29 GMT
content-encoding: br
cache-control: max-age=691200
x-amz-version-id: Abl6U_I9FDEIQ9n3b5xjXWFdmz_Rw7Qx
etag: W/"f5235e5398ce084a3e668855bd999b04"
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: KwNX3C1KDp2p0EbtIjDLYrzQqOFmYNDLdeRVly_rwUPBaR-SpDNgbw==
age: 4974
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
vary: accept-encoding, Origin
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/russia-jails-man-over-pro-ukraine-cyberattacks.json?slug=russia-jails-man-over-pro-ukraine-cyberattacks
104.18.42.30200 OK 51 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/russia-jails-man-over-pro-ukraine-cyberattacks.json?slug=russia-jails-man-over-pro-ukraine-cyberattacks
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash ef9546ed34be7eb10f429f520cf45aeb
415ef3a6a13a737c65bbf14e2d301f921f2c0660
35950a4193d26813034563e121b90c169b4058ef3327afab31c2b600858b7e19
GET /_next/data/-_c2CxCCiwViDEENA117g/russia-jails-man-over-pro-ukraine-cyberattacks.json?slug=russia-jails-man-over-pro-ukraine-cyberattacks HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "yff1ghvvwa130f"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8f40b37b3f3f033b93b8adaf-42224651155cea04-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: STALE
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1dc835684-OSL
X-Firefox-Spdy: h2
GET therecord.media/favicon-192.png
104.18.42.30200 OK 6.4 kB URL GET therecord.media/favicon-192.png
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Hash 45da7b48c564b60a3805680482a3e204
c6c6237ac87e415fe057349e05d7abacaab65154
98b00760f5970ce24d703dcb109537080fe5719cbddb701c6748d4cafc968746
GET /favicon-192.png HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:10 GMT
content-type: image/png
content-length: 6381
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=0
etag: W/"18ed-197a6113110"
last-modified: Wed, 25 Jun 2025 07:50:34 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb5b32f9451aee3dc4d1201b4b-4af557e948ad89fe-01
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5ddc5f2b5684-OSL
X-Firefox-Spdy: h2
GET cms.therecord.media/api/articles?populate[0]=categories&populate[1]=categories.page&populate[2]=editors&populate[3]=editors.page&populate[4]=editor&populate[5]=editor.page&populate[6]=image&populate[7]=image.desktop&populate[8]=image.tablet&populate[9]=image.mobile&populate[10]=tags&populate[11]=tags.page&populate[12]=page&filters[id][$ne]=3966&filters[date][$gte]=2023-12-01T22%3A00%3A00.000Z&filters[page][id][$notNull]=true&filters[page][publishedAt][$notNull]=true&filters[$and][0][$or][0][showFrom][$null]=true&filters[$and][0][$or][1][showFrom][$lte]=2025-07-06T07%3A25%3A10Z&filters[$and][1][$or][0][listingShowFrom][$null]=true&filters[$and][1][$or][1][listingShowFrom][$lte]=2025-07-06T07%3A25%3A10Z&pagination%5BpageSize%5D=1&sort%5B0%5D=date%3Aasc
104.18.42.30200 OK 9.6 kB URL GET cms.therecord.media/api/articles?populate[0]=categories&populate[1]=categories.page&populate[2]=editors&populate[3]=editors.page&populate[4]=editor&populate[5]=editor.page&populate[6]=image&populate[7]=image.desktop&populate[8]=image.tablet&populate[9]=image.mobile&populate[10]=tags&populate[11]=tags.page&populate[12]=page&filters[id][$ne]=3966&filters[date][$gte]=2023-12-01T22%3A00%3A00.000Z&filters[page][id][$notNull]=true&filters[page][publishedAt][$notNull]=true&filters[$and][0][$or][0][showFrom][$null]=true&filters[$and][0][$or][1][showFrom][$lte]=2025-07-06T07%3A25%3A10Z&filters[$and][1][$or][0][listingShowFrom][$null]=true&filters[$and][1][$or][1][listingShowFrom][$lte]=2025-07-06T07%3A25%3A10Z&pagination%5BpageSize%5D=1&sort%5B0%5D=date%3Aasc
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 5a72289eec7de5102a256c5fd0fd3eff
86da86115de7f50a76a2d39eac6d431b6906e21f
5aa9a8251d94490a526e58438848f05a2e69aa6fb1626b4ed49fcc868029a747
GET /api/articles?populate[0]=categories&populate[1]=categories.page&populate[2]=editors&populate[3]=editors.page&populate[4]=editor&populate[5]=editor.page&populate[6]=image&populate[7]=image.desktop&populate[8]=image.tablet&populate[9]=image.mobile&populate[10]=tags&populate[11]=tags.page&populate[12]=page&filters[id][$ne]=3966&filters[date][$gte]=2023-12-01T22%3A00%3A00.000Z&filters[page][id][$notNull]=true&filters[page][publishedAt][$notNull]=true&filters[$and][0][$or][0][showFrom][$null]=true&filters[$and][0][$or][1][showFrom][$lte]=2025-07-06T07%3A25%3A10Z&filters[$and][1][$or][0][listingShowFrom][$null]=true&filters[$and][1][$or][1][listingShowFrom][$lte]=2025-07-06T07%3A25%3A10Z&pagination%5BpageSize%5D=1&sort%5B0%5D=date%3Aasc HTTP/1.1
Host: cms.therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://therecord.media
content-security-policy: img-src * data: blob: https://market-assets.strapi.io;script-src 'self' cdn.jsdelivr.net blob:;connect-src 'self' https:;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
traceresponse: 00-184f98bb7bd4c385b649e29a6fa416db-f41bd988459150be-01
vary: Origin
x-content-type-options: nosniff
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-platform-cluster: r6uchqjqwmfqi-production-vohbr3y
x-platform-processor: yzs7ggztuurocnodlgeyqu6sde
x-platform-router: qk5ll65emgqnxbcwb6fko7g64m
x-powered-by: Strapi <strapi.io>
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 95ad5ddfca735684-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/podcast.json?slug=podcast
104.18.42.30200 OK 56 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/podcast.json?slug=podcast
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash c5c3af686b6f75d28a411b92a6236e77
0c378a3bdfb747495ca5b8020b35174bc33e0f6b
dea75f8b55b589ca12b126397f878229dde6811fd75656bdbe7c4769a1684356
GET /_next/data/-_c2CxCCiwViDEENA117g/podcast.json?slug=podcast HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "n05ohdpaal172c"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8e259ac01e7d76ea44c8e921-ae727f2fffeb05c8-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1bc595684-OSL
X-Firefox-Spdy: h2
GET epsilon.6sense.com/v3/company/details
99.83.231.3200 OK 730 B URL GET epsilon.6sense.com/v3/company/details
IP 99.83.231.3:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerAmazon
Subjectepsilon.6sense.com
FingerprintE8:7A:E2:14:AE:87:91:10:50:3C:34:5B:41:BA:91:2A:B4:BB:D5:94
ValidityWed, 02 Oct 2024 00:00:00 GMT - Fri, 31 Oct 2025 23:59:59 GMT
Hash ad6221afb794886c0776e9accb2a514a
79a71a8aaac3ec9412dba6d45707af18929607f7
35783b75b4255e9b5446410b8f747923affa9290eaaa8a44a45fa548d1679ad7
GET /v3/company/details HTTP/1.1
Host: epsilon.6sense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Authorization: Token 47c555096cc32557d3e6e7a333d7cb3ea692cee1
X-6s-CustomID: WebTag 64dc3ec5-330c-4652-88d3-147ee65e90ba
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:12 GMT
content-type: application/json
content-length: 387
timing-allow-origin: https://6sense.com
x-6si-region:
access-control-expose-headers: X-6si-Region
access-control-allow-origin: https://therecord.media
access-control-allow-credentials: true
vary: Origin, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A13%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%221003%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A13%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%221003%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A13%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A11%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%221003%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:13 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:13 GMT
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A14%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A13%20GMT%22%2C%22timeSpent%22%3A%221004%22%2C%22totalTimeSpent%22%3A%222007%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A14%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A13%20GMT%22%2C%22timeSpent%22%3A%221004%22%2C%22totalTimeSpent%22%3A%222007%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A14%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A13%20GMT%22%2C%22timeSpent%22%3A%221004%22%2C%22totalTimeSpent%22%3A%222007%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:14 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:14 GMT
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A19%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A18%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%227019%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A19%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A18%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%227019%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A19%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A18%20GMT%22%2C%22timeSpent%22%3A%221003%22%2C%22totalTimeSpent%22%3A%227019%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:19 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:19 GMT
X-Firefox-Spdy: h2
GET therecord.media/_next/static/chunks/61-d5fc4e6ac9a5e0d2.js
104.18.42.30200 OK 16 kB URL GET therecord.media/_next/static/chunks/61-d5fc4e6ac9a5e0d2.js
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type JavaScript source, ASCII text, with very long lines (15794), with no line terminators
Hash cdb3f5809aa0af04c8e9dfe3aff55535
d36b8502cace6b3361ac5446d0224c64e06a2d4e
ca7a5bef3ebbb73326528cf3dbe403919bab712ae544c43fdd86bb2011ee3d56
GET /_next/static/chunks/61-d5fc4e6ac9a5e0d2.js HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: application/javascript; charset=UTF-8
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
etag: W/"3db2-197a6171609"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb3490c432d17965f434c06a66-18a7f6358fc5aeb1-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6b9875684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/index.json
104.18.42.30200 OK 88 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/index.json
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash fff1ebd1753fed1f87bbf449fbb58a9b
ef7f83256bfb7c98c55f9f8047027c77d41b5939
161674959a9241c7edc893c039e4954a91f9b8b3e1a19b7d003318aefaf88a25
GET /_next/data/-_c2CxCCiwViDEENA117g/index.json HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
content-encoding: gzip
etag: "4j5mub40vn1vki"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8b4075ea8857248cf83ddc8e-f1f6987252693e54-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: STALE
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de16c0c5684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/subscribe.json
104.18.42.30200 OK 42 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/subscribe.json
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash ffc5b457d383e654f10b14614df958c5
64e31b9331dfad1d47dcb7a4a671d1ef206820a0
01fbc69f0a3edebf4ea58f1a87630af40062f91b2f794ef77e69171aef264a6f
GET /_next/data/-_c2CxCCiwViDEENA117g/subscribe.json HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "od7c163ygcw97"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8d9588c16974a0b460d6cb18-941cf51c554d83f6-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1ac515684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/author/jonathan-greig.json?slug=author&slug=jonathan-greig
104.18.42.30200 OK 41 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/author/jonathan-greig.json?slug=author&slug=jonathan-greig
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash a7db3c8e055d512330c4d1e8e3dc28be
3c56410bb6a9bc2364929360fd20bb197a7bdb2e
af45e49226b685c450b2e8d7614673fb30b1cb202ec04be1ffcbc5eff1e23fdb
GET /_next/data/-_c2CxCCiwViDEENA117g/author/jonathan-greig.json?slug=author&slug=jonathan-greig HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "12fmfeem0nfvev"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8ea475b330217398e85f7c37-8581bdacb0937b4a-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: STALE
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1cc6e5684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/government.json?slug=news&slug=government
104.18.42.30200 OK 40 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/government.json?slug=news&slug=government
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 69cb545b7ec94aad51cf2b1d98b6abef
7efd4fb5d05f7a2b7d8c85ef3131b097d7ea285c
031c2981e3125a30c12055b3402a3753639807bf305dc94da871a1755d1822fa
GET /_next/data/-_c2CxCCiwViDEENA117g/news/government.json?slug=news&slug=government HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "hdp5hsl0pfv06"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb9b8e62485dbf37c765c8bc23-11956c6a870d49a4-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de31dd25684-OSL
X-Firefox-Spdy: h2
GET js.hsleadflows.net/leadflows.js
104.18.141.17200 OK 560 kB URL GET js.hsleadflows.net/leadflows.js
IP 104.18.141.17:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecthsleadflows.net
FingerprintA6:23:13:F2:65:3C:1A:99:F1:8F:F9:3A:BA:27:FD:16:E4:C2:45:0B
ValidityFri, 23 May 2025 17:15:44 GMT - Thu, 21 Aug 2025 18:15:22 GMT
File type JavaScript source, ASCII text, with very long lines (65460)
Size 560 kB (559810 bytes)
Hash 4097dec1f0713bb76738aff07f7ad9cf
139820411a0a68d241c706ee844c38dcf50dd5bc
dd92ae0e301d0050a1dcc418e5a328ad7995e99e4b90d601c327c0dee9a9d156
GET /leadflows.js HTTP/1.1
Host: js.hsleadflows.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:12 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
x-amz-replication-status: COMPLETED
last-modified: Wed, 18 Jun 2025 10:12:50 UTC
x-amz-server-side-encryption: AES256
x-amz-version-id: Ch6C_E8NMOwqEusedP5TwoeMiBl6xfjC
content-encoding: gzip
etag: W/"4097dec1f0713bb76738aff07f7ad9cf"
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,accept-encoding
x-cache: Miss from cloudfront
via: 1.1 b77313059f3d50280ced20238b151620.cloudfront.net (CloudFront)
x-amz-cf-pop: IAD12-P3
x-amz-cf-id: wl558cEvucmm08ISR6_dOgTy70955mQ5KktTQZa9Sz1cSV4P_q4Ngw==
content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=lead-flows-js/static-1.3786/bundle/main/lead-flows-release.js&cfRay=9590c9d03b7701fa-WAW
cache-control: s-maxage=86400, max-age=0
x-hs-target-asset: lead-flows-js/static-1.3786/bundle/main/lead-flows-release.js
x-content-type-options: nosniff
x-hs-cache-status: MISS
x-envoy-upstream-service-time: 36
x-evy-trace-route-service-name: envoyset-translator
x-evy-trace-virtual-host: all
x-hubspot-correlation-id: 90196e57-0ad6-472a-b827-2cf1138e8c5c
x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-554d564d77-79h6k
x-evy-trace-listener: listener_https
x-evy-trace-route-configuration: listener_https/all
x-request-id: 90196e57-0ad6-472a-b827-2cf1138e8c5c
cache-tag: staticjsapp-lead-flows-cloudflare-web-prod,staticjsapp-prod
cf-cache-status: HIT
age: 84401
set-cookie: __cf_bm=ylBp3XNb.rZOM4dipqKKCZDrbs_9fQTUXWwKZn47kJ8-1751786712-1.0.1.1-9uQaG5mP1c2sH7j8UXhk9RJl_KxNjG3SAwjqrSpOvAcHZStVmwkbJFWnoDnMprSdTbacHiQiA_JDWlGgzdIrCER5JePV.2hVtoqYpCTR6SE; path=/; expires=Sun, 06-Jul-25 07:55:12 GMT; domain=.hsleadflows.net; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 95ad5de64dc9b505-OSL
X-Firefox-Spdy: h2
GET c.6sc.co/
95.101.10.104200 OK 7 B IP 95.101.10.104:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type ASCII text, with no line terminators
Hash d97623d172f087d9640da9acd38830ff
515bd358bb7d990930f0e2b3de399db1787a2567
fe04a9dc88d3f3be8d4f6bc63a9a80f45a4c6d8460e7551dab849457c091920a
GET / HTTP/1.1
Host: c.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 7
date: Sun, 06 Jul 2025 07:25:12 GMT
access-control-allow-origin: https://therecord.media
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET,POST
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/nation-state.json?slug=news&slug=nation-state
104.18.42.30200 OK 54 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/nation-state.json?slug=news&slug=nation-state
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 0176f3c5c09857916ffad3ccb2c91f7a
3d5fea10f9b15f3dc9986289737c54e4a2449822
20f630fed6f38900958914e1f6506f70c24ce1c95e72fddfa1e456dd67340eb2
GET /_next/data/-_c2CxCCiwViDEENA117g/news/nation-state.json?slug=news&slug=nation-state HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "13zl2ovt51h161o"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8c52dd37096bcf0b1a5ab84a-b21f4e70286391ed-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de18c375684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/subscribe.json?slug=subscribe
104.18.42.30200 OK 42 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/subscribe.json?slug=subscribe
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash ffc5b457d383e654f10b14614df958c5
64e31b9331dfad1d47dcb7a4a671d1ef206820a0
01fbc69f0a3edebf4ea58f1a87630af40062f91b2f794ef77e69171aef264a6f
GET /_next/data/-_c2CxCCiwViDEENA117g/subscribe.json?slug=subscribe HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "od7c163ygcw97"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8e2ef818ece825b841092833-3fe5be77e1ee1a3a-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1bc5c5684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/surmodics-medical-device-company-reports-cybersecurity-incident.json?slug=surmodics-medical-device-company-reports-cybersecurity-incident
104.18.42.30200 OK 50 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/surmodics-medical-device-company-reports-cybersecurity-incident.json?slug=surmodics-medical-device-company-reports-cybersecurity-incident
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 50f2ba01db32cf046be8062e2d167ff8
d589a3d6254bcceeb7db112237093933cb2ee09f
b220bd9cd88bd8f8f4c5d2566699c029485a0e2fbee6a9878b4d5af61b640d51
GET /_next/data/-_c2CxCCiwViDEENA117g/surmodics-medical-device-company-reports-cybersecurity-incident.json?slug=surmodics-medical-device-company-reports-cybersecurity-incident HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "fhvyz6io4x12fb"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb9f23bf7588096103acad229b-f19de113a4a601a9-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: STALE
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1ec905684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/welthungerhilfe-german-hunger-relief-charity-ransomware-attack.json?slug=welthungerhilfe-german-hunger-relief-charity-ransomware-attack
104.18.42.30200 OK 50 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/welthungerhilfe-german-hunger-relief-charity-ransomware-attack.json?slug=welthungerhilfe-german-hunger-relief-charity-ransomware-attack
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash e7c980dff8daad613bef0f2463b015ef
b331ab46730905983b8138de0ad0f9f58da2e2b4
df168854205a99f21c659fbd2ba44bd3e9a302053e2c10bbf4c65ab9124f9c62
GET /_next/data/-_c2CxCCiwViDEENA117g/welthungerhilfe-german-hunger-relief-charity-ransomware-attack.json?slug=welthungerhilfe-german-hunger-relief-charity-ransomware-attack HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "1836iwbr5ij128j"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb9f8d99f9625b2df6e1488989-bfeae6ac2c3acb7c-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: STALE
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1ec9f5684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/trump-national-cyber-director-pick-clears-senate-panel.json?slug=trump-national-cyber-director-pick-clears-senate-panel
104.18.42.30200 OK 52 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/trump-national-cyber-director-pick-clears-senate-panel.json?slug=trump-national-cyber-director-pick-clears-senate-panel
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 650491f983e46814fed960edcf5b00ec
ad683720d72c0433ac4fd3c850e3d9ef7fd9bd5b
feecf753cb96804027b5ef8c44153f5b39bbfd5425e6bfe6cdd3f83d4dfbea3f
GET /_next/data/-_c2CxCCiwViDEENA117g/trump-national-cyber-director-pick-clears-senate-panel.json?slug=trump-national-cyber-director-pick-clears-senate-panel HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "m99ecj6rue141h"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb9fb9bc02090e270e8e34adaf-97efeb9253d8a0f6-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: STALE
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1fca45684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/static/chunks/432-a989985b2b7ae427.js
104.18.42.30200 OK 719 kB URL GET therecord.media/_next/static/chunks/432-a989985b2b7ae427.js
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 719 kB (719149 bytes)
Hash 049e280b2d0064540860a985b5da999f
454963d8f7f26e1a657f88a2c24911211e0d3b84
48cadca7c3221d22867715ae8247d5eabef2221d89968e71dec1a2e4ac423dcf
GET /_next/static/chunks/432-a989985b2b7ae427.js HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:09 GMT
content-type: application/javascript; charset=UTF-8
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
etag: W/"af92d-197a6171609"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb346bf7053e0d062abf1f28aa-c9825316031c285d-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5dd6b97e5684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/technology.json?slug=news&slug=technology
104.18.42.30200 OK 54 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/news/technology.json?slug=news&slug=technology
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 85998f621c84c0b6270a30f8851334cb
de7b9457409db5f10b3b7e7f75fea3defe90fc55
c09d38ed463b3e1060af248804ca224ea965de32fc64ca06fa264541fc6e01bf
GET /_next/data/-_c2CxCCiwViDEENA117g/news/technology.json?slug=news&slug=technology HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "x3feoxj3in15zi"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb8d3b7b49ff65c9ee8951f5ce-129db3a4df84e35c-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: HIT
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1ac4a5684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/static/css/ef46db3751d8e999.css
104.18.42.30200 OK 0 B URL GET therecord.media/_next/static/css/ef46db3751d8e999.css
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_next/static/css/ef46db3751d8e999.css HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: text/css; charset=UTF-8
content-length: 0
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
etag: W/"0-197a6171612"
last-modified: Wed, 25 Jun 2025 07:57:00 GMT
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bba07b2143710192c7102bdeb1-a5fa8b1898166eac-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de3aebf5684-OSL
X-Firefox-Spdy: h2
OPTIONS epsilon.6sense.com/v3/company/details
99.83.231.3200 OK 0 B URL OPTIONS epsilon.6sense.com/v3/company/details
IP 99.83.231.3:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerAmazon
Subjectepsilon.6sense.com
FingerprintE8:7A:E2:14:AE:87:91:10:50:3C:34:5B:41:BA:91:2A:B4:BB:D5:94
ValidityWed, 02 Oct 2024 00:00:00 GMT - Fri, 31 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v3/company/details HTTP/1.1
Host: epsilon.6sense.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization,x-6s-customid
Referer: https://therecord.media/
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:12 GMT
content-length: 0
timing-allow-origin: https://6sense.com
x-6si-region:
access-control-expose-headers: X-6si-Region
access-control-allow-origin: https://therecord.media
access-control-allow-credentials: true
access-control-max-age: 1800
access-control-allow-methods: OPTIONS,GET
access-control-allow-headers: authorization,x-6s-customid
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A17%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A16%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%225012%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A17%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A16%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%225012%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A17%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A16%20GMT%22%2C%22timeSpent%22%3A%221002%22%2C%22totalTimeSpent%22%3A%225012%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:17 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:17 GMT
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A25%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A22%20GMT%22%2C%22timeSpent%22%3A%223002%22%2C%22totalTimeSpent%22%3A%2213032%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A25%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A22%20GMT%22%2C%22timeSpent%22%3A%223002%22%2C%22totalTimeSpent%22%3A%2213032%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A25%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A22%20GMT%22%2C%22timeSpent%22%3A%223002%22%2C%22totalTimeSpent%22%3A%2213032%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:25 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:25 GMT
X-Firefox-Spdy: h2
GET recordedfuture.matomo.cloud/plugins/HeatmapSessionRecording/configs.php?idsite=2&trackerid=wQn29I&url=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug
18.195.235.189200 OK 116 B URL GET recordedfuture.matomo.cloud/plugins/HeatmapSessionRecording/configs.php?idsite=2&trackerid=wQn29I&url=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug
IP 18.195.235.189:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerAmazon
Subject*.matomo.cloud
Fingerprint20:11:4C:63:17:FD:99:09:3C:43:B7:CC:E0:3C:3D:1B:68:53:F3:19
ValidityMon, 21 Apr 2025 00:00:00 GMT - Wed, 20 May 2026 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d578d82be1595ac4c2408ba58b4698c7
83a786eeb5568d9b5b6e5a3b19bfc79ff42bca3a
53b60dd284e1b436c194aabb23a3c73073c8bcedfd3f80e0c5dc330c3a5d81e7
GET /plugins/HeatmapSessionRecording/configs.php?idsite=2&trackerid=wQn29I&url=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug HTTP/1.1
Host: recordedfuture.matomo.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:10 GMT
content-type: application/javascript
server: nginx
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
GET cms.therecord.media/api/articles?populate[0]=categories&populate[1]=categories.page&populate[2]=editors&populate[3]=editors.page&populate[4]=editor&populate[5]=editor.page&populate[6]=image&populate[7]=image.desktop&populate[8]=image.tablet&populate[9]=image.mobile&populate[10]=tags&populate[11]=tags.page&populate[12]=page&filters[id][$ne]=3966&filters[date][$lte]=2023-12-01T22%3A00%3A00.000Z&filters[page][id][$notNull]=true&filters[page][publishedAt][$notNull]=true&filters[$and][0][$or][0][showFrom][$null]=true&filters[$and][0][$or][1][showFrom][$lte]=2025-07-06T07%3A25%3A10Z&filters[$and][1][$or][0][listingShowFrom][$null]=true&filters[$and][1][$or][1][listingShowFrom][$lte]=2025-07-06T07%3A25%3A10Z&pagination%5BpageSize%5D=1&sort%5B0%5D=date%3Adesc
104.18.42.30200 OK 12 kB URL GET cms.therecord.media/api/articles?populate[0]=categories&populate[1]=categories.page&populate[2]=editors&populate[3]=editors.page&populate[4]=editor&populate[5]=editor.page&populate[6]=image&populate[7]=image.desktop&populate[8]=image.tablet&populate[9]=image.mobile&populate[10]=tags&populate[11]=tags.page&populate[12]=page&filters[id][$ne]=3966&filters[date][$lte]=2023-12-01T22%3A00%3A00.000Z&filters[page][id][$notNull]=true&filters[page][publishedAt][$notNull]=true&filters[$and][0][$or][0][showFrom][$null]=true&filters[$and][0][$or][1][showFrom][$lte]=2025-07-06T07%3A25%3A10Z&filters[$and][1][$or][0][listingShowFrom][$null]=true&filters[$and][1][$or][1][listingShowFrom][$lte]=2025-07-06T07%3A25%3A10Z&pagination%5BpageSize%5D=1&sort%5B0%5D=date%3Adesc
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 2fce6dfc29d9cf35ea5369234a7dc21b
a63b2fdddd9c7283444602096a482f9b670be558
212632240d97cdd16a2fae13d44d504ada85367e511d5472074da79db9939ab3
GET /api/articles?populate[0]=categories&populate[1]=categories.page&populate[2]=editors&populate[3]=editors.page&populate[4]=editor&populate[5]=editor.page&populate[6]=image&populate[7]=image.desktop&populate[8]=image.tablet&populate[9]=image.mobile&populate[10]=tags&populate[11]=tags.page&populate[12]=page&filters[id][$ne]=3966&filters[date][$lte]=2023-12-01T22%3A00%3A00.000Z&filters[page][id][$notNull]=true&filters[page][publishedAt][$notNull]=true&filters[$and][0][$or][0][showFrom][$null]=true&filters[$and][0][$or][1][showFrom][$lte]=2025-07-06T07%3A25%3A10Z&filters[$and][1][$or][0][listingShowFrom][$null]=true&filters[$and][1][$or][1][listingShowFrom][$lte]=2025-07-06T07%3A25%3A10Z&pagination%5BpageSize%5D=1&sort%5B0%5D=date%3Adesc HTTP/1.1
Host: cms.therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: https://therecord.media
content-security-policy: img-src * data: blob: https://market-assets.strapi.io;script-src 'self' cdn.jsdelivr.net blob:;connect-src 'self' https:;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'
referrer-policy: no-referrer
strict-transport-security: max-age=31536000; includeSubDomains
traceresponse: 00-184f98bb7bdd8fb5f473d0561d2e22e5-149045f129be0cbc-01
vary: Origin
x-content-type-options: nosniff
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-permitted-cross-domain-policies: none
x-platform-cluster: r6uchqjqwmfqi-production-vohbr3y
x-platform-processor: yzs7ggztuurocnodlgeyqu6sde
x-platform-router: qk5ll65emgqnxbcwb6fko7g64m
x-powered-by: Strapi <strapi.io>
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 95ad5ddfca715684-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/germany-israel-deepen-cyber-cooperation.json?slug=germany-israel-deepen-cyber-cooperation
104.18.42.30200 OK 49 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/germany-israel-deepen-cyber-cooperation.json?slug=germany-israel-deepen-cyber-cooperation
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 72202a935416f50a2f951e42a5892e63
48039b9e7f9774c58bd3185cea504d28d4488522
198d90d4ab4733d32f970fab8cd0b6a202b45d0d300ec22ba32969ff45c0e003
GET /_next/data/-_c2CxCCiwViDEENA117g/germany-israel-deepen-cyber-cooperation.json?slug=germany-israel-deepen-cyber-cooperation HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "17rhwgbucnk11xu"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb9f1e565588c9a5612ad78d2d-36179fdd27bb110b-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: STALE
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1ec925684-OSL
X-Firefox-Spdy: h2
GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/spain-europol-cryptocurrency-investment-scheme-takedown.json?slug=spain-europol-cryptocurrency-investment-scheme-takedown
104.18.42.30200 OK 51 kB URL GET therecord.media/_next/data/-_c2CxCCiwViDEENA117g/spain-europol-cryptocurrency-investment-scheme-takedown.json?slug=spain-europol-cryptocurrency-investment-scheme-takedown
IP 104.18.42.30:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subjecttherecord.media
Fingerprint33:16:82:FC:B6:98:B7:49:4D:3A:99:5F:2F:1E:43:FD:F7:5B:91:78
ValidityWed, 04 Jun 2025 06:46:07 GMT - Tue, 02 Sep 2025 07:45:53 GMT
Hash 70dee5e59a449372ea1eea547e46cfec
9ce19cc9d839552dc9ebc944886bbcb4d3504570
cbbda9b6adbf5558c18f0d276e9486188a1f8a055c4ddc3caf0ba76d42961c32
GET /_next/data/-_c2CxCCiwViDEENA117g/spain-europol-cryptocurrency-investment-scheme-takedown.json?slug=spain-europol-cryptocurrency-investment-scheme-takedown HTTP/1.1
Host: therecord.media
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/hhs-warns-of-citrix-bleed-bug
purpose: prefetch
x-nextjs-data: 1
DNT: 1
Connection: keep-alive
Cookie: _pk_id.2.de70=7a8e782c9fc7fccb.1751786710.; _pk_ses.2.de70=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Jul 2025 07:25:11 GMT
content-type: application/json
access-control-allow-origin: *
cache-control: s-maxage=120, stale-while-revalidate
content-encoding: gzip
etag: "3o6sumzfir134m"
permissions-policy: geolocation=(self "https://*.recordedfuture.com/")
traceresponse: 00-184f98bb9f9651a7efebc0f35cfe6672-d63965f65dd5d25a-01
vary: Accept-Encoding
x-debug-info: eyJyZXRyaWVzIjowfQ==
x-nextjs-cache: STALE
x-nextjs-matched-path: /[[...slug]]
x-platform-cluster: 6l7w2dvltmj6g-production-vohbr3y
x-platform-processor: xgztqld4evaw2suiwyeszt2fga
x-platform-router: pzzg6kk2mvryq2jfoxqht4lu3u
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000; includeSubDomains
server: cloudflare
cf-ray: 95ad5de1fca75684-OSL
X-Firefox-Spdy: h2
GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-EYNZBT8ZP2&cid=1672299449.1751786712>m=45je5710v9117850958z8832426714za200zb832426714&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891~104908321~104908323&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891~104908321~104908323&z=786498211
142.250.178.67200 OK 42 B URL GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-EYNZBT8ZP2&cid=1672299449.1751786712>m=45je5710v9117850958z8832426714za200zb832426714&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891~104908321~104908323&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891~104908321~104908323&z=786498211
IP 142.250.178.67:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subject*.google.no
FingerprintB5:FA:4E:47:35:A5:8D:7A:48:7F:12:75:C1:F1:76:46:ED:A8:AF:B8
ValidityTue, 17 Jun 2025 20:04:45 GMT - Tue, 09 Sep 2025 20:04:44 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-EYNZBT8ZP2&cid=1672299449.1751786712>m=45je5710v9117850958z8832426714za200zb832426714&aip=1&dma=1&dma_cps=syphamo&gcd=13l3l3l2l1l1&npa=1&frm=0&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891~104908321~104908323&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891~104908321~104908323&z=786498211 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Jul 2025 07:25:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST region1.analytics.google.com/g/collect?v=2&tid=G-EYNZBT8ZP2>m=45je5710v9117850958z8832426714za200zb832426714&_p=1751786710079&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891~104908321~104908323&cid=1672299449.1751786712&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1751786711&sct=1&seg=0&dl=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&dt=HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=3715
216.239.32.36204 No Content 0 B URL POST region1.analytics.google.com/g/collect?v=2&tid=G-EYNZBT8ZP2>m=45je5710v9117850958z8832426714za200zb832426714&_p=1751786710079&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891~104908321~104908323&cid=1672299449.1751786712&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1751786711&sct=1&seg=0&dl=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&dt=HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=3715
IP 216.239.32.36:443
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint06:CD:2A:9C:6E:F9:40:51:AA:E0:81:4A:BB:69:6C:BA:FA:AD:AB:4D
ValidityTue, 17 Jun 2025 20:01:48 GMT - Tue, 09 Sep 2025 20:01:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-EYNZBT8ZP2>m=45je5710v9117850958z8832426714za200zb832426714&_p=1751786710079&_gaz=1&gcd=13l3l3l2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891~104908321~104908323&cid=1672299449.1751786712&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_s=1&sid=1751786711&sct=1&seg=0&dl=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&dt=HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=3715 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://therecord.media/
Origin: https://therecord.media
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://therecord.media
date: Sun, 06 Jul 2025 07:25:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0
report-to: {"group":"ascnsrsggc:158:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A22%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A21%20GMT%22%2C%22timeSpent%22%3A%221007%22%2C%22totalTimeSpent%22%3A%2210030%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
23.36.77.185200 OK 43 B URL GET b.6sc.co/v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A22%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A21%20GMT%22%2C%22timeSpent%22%3A%221007%22%2C%22totalTimeSpent%22%3A%2210030%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31
IP 23.36.77.185:443
ASN #20940 Akamai International B.V.
Requested by https://therecord.media/hhs-warns-of-citrix-bleed-bug
Certificate IssuerLet's Encrypt
Subject6sc.co
Fingerprint2F:6D:EF:76:BB:44:AE:85:EB:89:5C:CE:E4:C2:62:58:62:7E:25:94
ValidityFri, 23 May 2025 19:53:23 GMT - Thu, 21 Aug 2025 19:53:22 GMT
File type GIF image data, version 89a, 1 x 1
Hash f837aa60b6fe83458f790db60d529fc9
14af87ccec7f81bb28d53c84da2fd5a9d5925cda
dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b
GET /v1/beacon/img.gif?token=f2675e8089b7d209a58fce8ad312f51c&svisitor=null&visitor=ca42eb7b-c37c-4b53-8247-37f2f1df628d&session=b8063b73-a62f-475d-8fb4-eee4d64fabd8&event=active_time_track&q=%7B%22currentTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A22%20GMT%22%2C%22lastTrackTime%22%3A%22Sun%2C%2006%20Jul%202025%2007%3A25%3A21%20GMT%22%2C%22timeSpent%22%3A%221007%22%2C%22totalTimeSpent%22%3A%2210030%22%7D&isIframe=false&m=%7B%22description%22%3A%22The%20U.S.%20Department%20of%20Health%20and%20Human%20Services%20is%20warning%20hospitals%20and%20healthcare%20facilities%20across%20the%20country%20to%20patch%20a%20vulnerability%20known%20as%20%E2%80%9CCitrix%20Bleed%E2%80%9D%20that%20is%20being%20used%20in%20attacks%20by%20ransomware%20gangs.%20%22%2C%22keywords%22%3A%22%22%2C%22title%22%3A%22HHS%20warns%20of%20%E2%80%98Citrix%20Bleed%E2%80%99%20attacks%20after%20hospital%20outages%20%7C%20The%20Record%20from%20Recorded%20Future%20News%22%7D&cb=&r=&thirdParty=%7B%7D&v2=1&pageURL=https%3A%2F%2Ftherecord.media%2Fhhs-warns-of-citrix-bleed-bug&pageViewId=d269717b-53c9-42b4-8474-7dd2e6074c55&an_uid=-1&webTagId=64dc3ec5-330c-4652-88d3-147ee65e90ba&v=1.1.31 HTTP/1.1
Host: b.6sc.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://therecord.media/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
content-length: 43
x-content-type-options: nosniff
accept-ranges: bytes
expires: Sun, 06 Jul 2025 07:25:22 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 06 Jul 2025 07:25:22 GMT
X-Firefox-Spdy: h2