{"report_id":"0140bcde-207b-4b0b-84d0-cb01e0bac9d1","version":0,"status":"done","tags":[],"date":"2026-06-20T12:30:22Z","url":{"schema":"http","addr":"copilotupgrade.offices-support.com/i/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"title":"Microsoft","dom":{"size":112823,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (62429)","md5":"80ad173ed4566dc62b5c7a8087bd79b7","sha1":"f72fdafbf0348dbf61829dabce53a78cc32b7e92","sha256":"f42e3bae015c2815928d6c84b2494aa67ba11d3536df60ec425c80602155a82c","sha512":"2bd3258dd4d48e7b01ab590fda5ccb8832e397de6a7453f692106880e9856ccc0f15f6febfa4497a4825be97bab3a289512ecd620cad6b8473a05b5529480e06","ssdeep":"1536:B4kuhw+ExiazA/PWrF7qvEAFiQcpmaB9sG6yVUnjOO6:B4EBgyVUKj","tlshash":"5bb3d89069243c269037873561d1bd4762211503f637aebbf62e6db9cf896cb0f32e49","dom_hash":"domhash1cfe12660c23b66a9d7314c0ef7d9a28","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/i/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-25T12:30:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"copilotupgrade.offices-support.com","ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2023-07-07","domain_rank":0,"first_seen":"2026-06-20T12:30:25.919236Z","last_seen":"2026-06-20T12:30:25.919236Z","alert_count":48,"request_count":16,"received_data":842170,"sent_data":8093,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-06-14T22:55:30.147967Z","alert_count":0,"request_count":5,"received_data":2776148,"sent_data":2684,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-14T22:19:01.724334Z","alert_count":0,"request_count":2,"received_data":81882,"sent_data":1108,"comment":"","tags":null,"fingerprints":null},{"fqdn":"google.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1,"first_seen":"2013-10-02T17:25:49Z","last_seen":"2026-06-15T17:39:20.445657Z","alert_count":0,"request_count":3,"received_data":58402,"sent_data":2064,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/bootstrap/js/bootstrap.min.js?tn=261214474892","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","size":39685,"data":"","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-06-20T14:51:48.471987Z","times_seen":2272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c28e1a713da25d2088d3305294ff6df","sha1":"ddc97df485e2f0aed1660704266dca05d671eed4","sha256":"1e9b08065ee24a58aef84e475131935c05ea53f4d58b5a716ceba258c4366999","sha512":"13cab6d34bd5cc571dcaf6a1bc7d7e0dfe51f3d118b0be87e53abdfabb401ffdf34895e4f3c9282a27cd8085af9da52447c30bdfa7eb5004324db788dfa7e77b","ssdeep":"","tlshash":"91c0922b61baa801422710a9bbab68142f1978528202aa90390dea491f593a5055d59c","size":140,"data":"","first_seen":"2026-06-09T19:59:15.509191Z","last_seen":"2026-06-20T12:31:05.389078Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"459ba207f9e28cdd8e0c1dcde0dae0cc","sha1":"b15cc1f2f73923867607f333cc487680fb4ce107","sha256":"64511e38db8c9de4583969b40f0cf4a37e567551d2842dadf9030b8c61ac431d","sha512":"864c3f028c7af0549f4196431655bf82187c0b2bc8ecf2b4f9243bdd32a9746397f9e24e255176c95c8bf6c9a2ede4449c15a8c409c1d6197057d8adfb7bbb51","ssdeep":"","tlshash":"eaa0223b0020800a23cbf3e82e8c0c20a0203020aa2030cb3c0c0320cb8200820c0a88","size":72,"data":"","first_seen":"2026-06-09T19:59:15.510811Z","last_seen":"2026-06-20T12:31:05.393081Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0b12fbc94a653908cb55cf9005f9f3","sha1":"74bc71dcf11951359f781da6b35038e84d93e6f2","sha256":"214e1064ecba6bfdf8f31e3b038658a90d143ef5a7562fa8b8f1035b47db3d47","sha512":"e0304c83afd6a71ea354c405d267a1708b8051d807997934a0d281a086d9d99b4cbc5735e503ec367344eb660c5cfa6d7ea2a47c332e10cfe196d6c223ac049b","ssdeep":"","tlshash":"bac0123b0c1309a056b744294727b144cd209f330300ecacfa2c057c8f419001a9c733","size":137,"data":"","first_seen":"2026-06-09T19:59:15.51206Z","last_seen":"2026-06-20T12:31:05.395596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e6dd87fc55bd583ae39dd3fde8e8b34","sha1":"eccfe0842785c2ee3dee3665b20c30637b339c72","sha256":"7ec708dec24c2344589258028f3732dd324195536605aa6424983e0b425b9d6e","sha512":"3617ab12f076cb2656c699715cd868bff2adb98db1f2649be284299badd58760aced5cd8e3bdb9bf4ab21f9447ad92ddf3f6f4047fa44cb035978dcbb622c581","ssdeep":"","tlshash":"101129b378f31062057f61bb112b9318ba73c5170944ce51b96c89948f68e705e6a7c9","size":1072,"data":"","first_seen":"2026-06-10T13:02:23.002667Z","last_seen":"2026-06-20T12:31:05.397431Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"971d701c98497d86115e7fc7be8f9de2","sha1":"87af30c5f948810ae741e2088769b53b9dfb8fbd","sha256":"e9fe4b018ad7c2f77dd07201f5a96b15f9737e730e76bc9b727f9d07669ad827","sha512":"bf0cecbe4ada5ac698a684b30787e4bc2c6f06e747181440742e587309134135cdc304ed8494b017a87e90f9c5027a3656001931244a7157f93b6c599f1832c4","ssdeep":"12288:CqGf5BvnyWJkwGlInrmP1m1580nszaM34HMpc0FWac68Dp0zHipQOpDe3:EBvzk9q5sFWIcp0zCFe3","tlshash":"b01518e9709170f28332b9fa6067205d933d906ac4dc4e5db1a985f12fb588d607aef3","size":895587,"data":"","first_seen":"2026-06-10T15:44:34.29654Z","last_seen":"2026-06-20T16:28:16.587411Z","times_seen":7960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/jquery/jquery.min.js?tn=261214474892","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89503,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-20T16:30:21.171698Z","times_seen":19984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/jqueryui/jquery-ui.min.js?tn=261214474892","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4baecb73b7a75044853d7f4d363cb49","sha1":"cee14f8598c3c7f75ed141896f976fe94ed286a0","sha256":"9d9b75e6bf99296f7797ed12f73137f52966dbb02180ff054c6c01680c7bdb1d","sha512":"b5e6510052414b90c694c0a01835a7b49c73801757bc12f0afa7bb96808fc63e474a38cc7c28adcf3a4a43d145be9dccf0a1923a405777fe3d2fd06474583229","ssdeep":"3072:nDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:TNdIVWjNS9cdzAV","tlshash":"c344f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","size":255089,"data":"","first_seen":"2023-03-11T15:29:49Z","last_seen":"2026-06-20T12:31:05.384698Z","times_seen":1999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/js/userInteraction.js","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff6837888c07861026b755b8340c433c","sha1":"38cf8bd4bf79981b9a242973977fbb3cb5ff5b18","sha256":"47f3edf6ffe21688cba4fcc764eebb816d07062d5c1a694aa231631ab4855204","sha512":"201537c5f38f0dd936ecc05fca4cd05cdaa5f2a8deab1ddc4f541f1f76f3ec39a97b4cdf9b922c2a46c636a03f270344f19515de4a5aa6fa9d42f58a9e012574","ssdeep":"","tlshash":"68411166126610710d7333a28f17e156e716826b0215860a7c3d87cc2f71834b765eff","size":2276,"data":"","first_seen":"2024-10-17T16:36:49.832778Z","last_seen":"2026-06-20T12:31:05.379977Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c28e1a713da25d2088d3305294ff6df","sha1":"ddc97df485e2f0aed1660704266dca05d671eed4","sha256":"1e9b08065ee24a58aef84e475131935c05ea53f4d58b5a716ceba258c4366999","sha512":"13cab6d34bd5cc571dcaf6a1bc7d7e0dfe51f3d118b0be87e53abdfabb401ffdf34895e4f3c9282a27cd8085af9da52447c30bdfa7eb5004324db788dfa7e77b","ssdeep":"","tlshash":"91c0922b61baa801422710a9bbab68142f1978528202aa90390dea491f593a5055d59c","size":140,"data":"","first_seen":"2026-06-09T19:59:15.509191Z","last_seen":"2026-06-20T12:31:05.389078Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"459ba207f9e28cdd8e0c1dcde0dae0cc","sha1":"b15cc1f2f73923867607f333cc487680fb4ce107","sha256":"64511e38db8c9de4583969b40f0cf4a37e567551d2842dadf9030b8c61ac431d","sha512":"864c3f028c7af0549f4196431655bf82187c0b2bc8ecf2b4f9243bdd32a9746397f9e24e255176c95c8bf6c9a2ede4449c15a8c409c1d6197057d8adfb7bbb51","ssdeep":"","tlshash":"eaa0223b0020800a23cbf3e82e8c0c20a0203020aa2030cb3c0c0320cb8200820c0a88","size":72,"data":"","first_seen":"2026-06-09T19:59:15.510811Z","last_seen":"2026-06-20T12:31:05.393081Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0b12fbc94a653908cb55cf9005f9f3","sha1":"74bc71dcf11951359f781da6b35038e84d93e6f2","sha256":"214e1064ecba6bfdf8f31e3b038658a90d143ef5a7562fa8b8f1035b47db3d47","sha512":"e0304c83afd6a71ea354c405d267a1708b8051d807997934a0d281a086d9d99b4cbc5735e503ec367344eb660c5cfa6d7ea2a47c332e10cfe196d6c223ac049b","ssdeep":"","tlshash":"bac0123b0c1309a056b744294727b144cd209f330300ecacfa2c057c8f419001a9c733","size":137,"data":"","first_seen":"2026-06-09T19:59:15.51206Z","last_seen":"2026-06-20T12:31:05.395596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e6dd87fc55bd583ae39dd3fde8e8b34","sha1":"eccfe0842785c2ee3dee3665b20c30637b339c72","sha256":"7ec708dec24c2344589258028f3732dd324195536605aa6424983e0b425b9d6e","sha512":"3617ab12f076cb2656c699715cd868bff2adb98db1f2649be284299badd58760aced5cd8e3bdb9bf4ab21f9447ad92ddf3f6f4047fa44cb035978dcbb622c581","ssdeep":"","tlshash":"101129b378f31062057f61bb112b9318ba73c5170944ce51b96c89948f68e705e6a7c9","size":1072,"data":"","first_seen":"2026-06-10T13:02:23.002667Z","last_seen":"2026-06-20T12:31:05.397431Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c28e1a713da25d2088d3305294ff6df","sha1":"ddc97df485e2f0aed1660704266dca05d671eed4","sha256":"1e9b08065ee24a58aef84e475131935c05ea53f4d58b5a716ceba258c4366999","sha512":"13cab6d34bd5cc571dcaf6a1bc7d7e0dfe51f3d118b0be87e53abdfabb401ffdf34895e4f3c9282a27cd8085af9da52447c30bdfa7eb5004324db788dfa7e77b","ssdeep":"","tlshash":"91c0922b61baa801422710a9bbab68142f1978528202aa90390dea491f593a5055d59c","size":140,"data":"","first_seen":"2026-06-09T19:59:15.509191Z","last_seen":"2026-06-20T12:31:05.389078Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"459ba207f9e28cdd8e0c1dcde0dae0cc","sha1":"b15cc1f2f73923867607f333cc487680fb4ce107","sha256":"64511e38db8c9de4583969b40f0cf4a37e567551d2842dadf9030b8c61ac431d","sha512":"864c3f028c7af0549f4196431655bf82187c0b2bc8ecf2b4f9243bdd32a9746397f9e24e255176c95c8bf6c9a2ede4449c15a8c409c1d6197057d8adfb7bbb51","ssdeep":"","tlshash":"eaa0223b0020800a23cbf3e82e8c0c20a0203020aa2030cb3c0c0320cb8200820c0a88","size":72,"data":"","first_seen":"2026-06-09T19:59:15.510811Z","last_seen":"2026-06-20T12:31:05.393081Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0b12fbc94a653908cb55cf9005f9f3","sha1":"74bc71dcf11951359f781da6b35038e84d93e6f2","sha256":"214e1064ecba6bfdf8f31e3b038658a90d143ef5a7562fa8b8f1035b47db3d47","sha512":"e0304c83afd6a71ea354c405d267a1708b8051d807997934a0d281a086d9d99b4cbc5735e503ec367344eb660c5cfa6d7ea2a47c332e10cfe196d6c223ac049b","ssdeep":"","tlshash":"bac0123b0c1309a056b744294727b144cd209f330300ecacfa2c057c8f419001a9c733","size":137,"data":"","first_seen":"2026-06-09T19:59:15.51206Z","last_seen":"2026-06-20T12:31:05.395596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e6dd87fc55bd583ae39dd3fde8e8b34","sha1":"eccfe0842785c2ee3dee3665b20c30637b339c72","sha256":"7ec708dec24c2344589258028f3732dd324195536605aa6424983e0b425b9d6e","sha512":"3617ab12f076cb2656c699715cd868bff2adb98db1f2649be284299badd58760aced5cd8e3bdb9bf4ab21f9447ad92ddf3f6f4047fa44cb035978dcbb622c581","ssdeep":"","tlshash":"101129b378f31062057f61bb112b9318ba73c5170944ce51b96c89948f68e705e6a7c9","size":1072,"data":"","first_seen":"2026-06-10T13:02:23.002667Z","last_seen":"2026-06-20T12:31:05.397431Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/webworker.js?hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"af9f3488f93134a3e9836d9706d69e45","sha1":"19e15d0daca43a60e4ba298fbe5e9eef12605fc2","sha256":"1483dfd25df66f35227468860b9228ec6f96599b988c8aee215ff3ead1a0a281","sha512":"6fdee59d973bbdd40213d419e2530e6df768458a9e4d3203c813af37f6220fdf460c33b1023b50bc06302ca3cc2cd0997d622533a94cfa77a399e9c8e3b9e43f","ssdeep":"","tlshash":"e1b012231d10c91c0d204782c42b9ba8e0015028ea5080f045740fdc1e583734025400","size":102,"data":"","first_seen":"2026-06-10T15:44:34.295228Z","last_seen":"2026-06-20T16:28:16.615157Z","times_seen":5680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"971d701c98497d86115e7fc7be8f9de2","sha1":"87af30c5f948810ae741e2088769b53b9dfb8fbd","sha256":"e9fe4b018ad7c2f77dd07201f5a96b15f9737e730e76bc9b727f9d07669ad827","sha512":"bf0cecbe4ada5ac698a684b30787e4bc2c6f06e747181440742e587309134135cdc304ed8494b017a87e90f9c5027a3656001931244a7157f93b6c599f1832c4","ssdeep":"12288:CqGf5BvnyWJkwGlInrmP1m1580nszaM34HMpc0FWac68Dp0zHipQOpDe3:EBvzk9q5sFWIcp0zCFe3","tlshash":"b01518e9709170f28332b9fa6067205d933d906ac4dc4e5db1a985f12fb588d607aef3","size":895587,"data":"","first_seen":"2026-06-10T15:44:34.29654Z","last_seen":"2026-06-20T16:28:16.587411Z","times_seen":7960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c28e1a713da25d2088d3305294ff6df","sha1":"ddc97df485e2f0aed1660704266dca05d671eed4","sha256":"1e9b08065ee24a58aef84e475131935c05ea53f4d58b5a716ceba258c4366999","sha512":"13cab6d34bd5cc571dcaf6a1bc7d7e0dfe51f3d118b0be87e53abdfabb401ffdf34895e4f3c9282a27cd8085af9da52447c30bdfa7eb5004324db788dfa7e77b","ssdeep":"","tlshash":"91c0922b61baa801422710a9bbab68142f1978528202aa90390dea491f593a5055d59c","size":140,"data":"","first_seen":"2026-06-09T19:59:15.509191Z","last_seen":"2026-06-20T12:31:05.389078Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"459ba207f9e28cdd8e0c1dcde0dae0cc","sha1":"b15cc1f2f73923867607f333cc487680fb4ce107","sha256":"64511e38db8c9de4583969b40f0cf4a37e567551d2842dadf9030b8c61ac431d","sha512":"864c3f028c7af0549f4196431655bf82187c0b2bc8ecf2b4f9243bdd32a9746397f9e24e255176c95c8bf6c9a2ede4449c15a8c409c1d6197057d8adfb7bbb51","ssdeep":"","tlshash":"eaa0223b0020800a23cbf3e82e8c0c20a0203020aa2030cb3c0c0320cb8200820c0a88","size":72,"data":"","first_seen":"2026-06-09T19:59:15.510811Z","last_seen":"2026-06-20T12:31:05.393081Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d0b12fbc94a653908cb55cf9005f9f3","sha1":"74bc71dcf11951359f781da6b35038e84d93e6f2","sha256":"214e1064ecba6bfdf8f31e3b038658a90d143ef5a7562fa8b8f1035b47db3d47","sha512":"e0304c83afd6a71ea354c405d267a1708b8051d807997934a0d281a086d9d99b4cbc5735e503ec367344eb660c5cfa6d7ea2a47c332e10cfe196d6c223ac049b","ssdeep":"","tlshash":"bac0123b0c1309a056b744294727b144cd209f330300ecacfa2c057c8f419001a9c733","size":137,"data":"","first_seen":"2026-06-09T19:59:15.51206Z","last_seen":"2026-06-20T12:31:05.395596Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e6dd87fc55bd583ae39dd3fde8e8b34","sha1":"eccfe0842785c2ee3dee3665b20c30637b339c72","sha256":"7ec708dec24c2344589258028f3732dd324195536605aa6424983e0b425b9d6e","sha512":"3617ab12f076cb2656c699715cd868bff2adb98db1f2649be284299badd58760aced5cd8e3bdb9bf4ab21f9447ad92ddf3f6f4047fa44cb035978dcbb622c581","ssdeep":"","tlshash":"101129b378f31062057f61bb112b9318ba73c5170944ce51b96c89948f68e705e6a7c9","size":1072,"data":"","first_seen":"2026-06-10T13:02:23.002667Z","last_seen":"2026-06-20T12:31:05.397431Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d140d9278a201b8ccea389fb5e43f99e","sha1":"38875a2ed5cedb9108cf89a00aa2a3c5cbae8977","sha256":"7ee16cffdeb91144eeb0f7120196ffd5be0899310c08bb3dba7ccf02e948b2ec","sha512":"2b59652c32623047973591ff2e0506bdf84406de2079906215d810ea3770401c270a893362c370b3da580a471f8071c3ff2d670e3ba46d139e830f0931f33bba","ssdeep":"","tlshash":"dfa002f3193584218e6285508943fa98e593611dfd45c59870254fdea3e19d7c100990","size":65,"data":"","first_seen":"2023-03-10T15:14:43Z","last_seen":"2026-06-20T12:31:05.400424Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2992ff5acf497c11d82a625e981c202","sha1":"8171841e3960d42b2e52832fcc14d9960ec1467c","sha256":"980a66d2979f479f0a7b83f6094b5832a149e0ddc2113fa68d00f5619b13eaf2","sha512":"b85672a5f1bbbf14da25e54249436df4622e12967a9087be0dc0d25aa48377ba8f0bb93cde4379ce42e28b76ac530ee67681feecb50862360088872b1ef8302d","ssdeep":"768:/EHBqXTWnv+6mwyfqK7gCJlTdGpt6KlRqcrZUuG+l6qQGp:/EHBqXTWn7yyKsCvTe/RqcdPfD","tlshash":"5df29e5ce81b24fbeead43f34ee11b9811bc4269854b15bc70fd05d35a4a687b60b4dc","size":36279,"data":"","first_seen":"2026-06-20T12:31:05.4023Z","last_seen":"2026-06-20T12:31:05.4023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"971d701c98497d86115e7fc7be8f9de2","sha1":"87af30c5f948810ae741e2088769b53b9dfb8fbd","sha256":"e9fe4b018ad7c2f77dd07201f5a96b15f9737e730e76bc9b727f9d07669ad827","sha512":"bf0cecbe4ada5ac698a684b30787e4bc2c6f06e747181440742e587309134135cdc304ed8494b017a87e90f9c5027a3656001931244a7157f93b6c599f1832c4","ssdeep":"12288:CqGf5BvnyWJkwGlInrmP1m1580nszaM34HMpc0FWac68Dp0zHipQOpDe3:EBvzk9q5sFWIcp0zCFe3","tlshash":"b01518e9709170f28332b9fa6067205d933d906ac4dc4e5db1a985f12fb588d607aef3","size":895587,"data":"","first_seen":"2026-06-10T15:44:34.29654Z","last_seen":"2026-06-20T16:28:16.587411Z","times_seen":7960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d140d9278a201b8ccea389fb5e43f99e","sha1":"38875a2ed5cedb9108cf89a00aa2a3c5cbae8977","sha256":"7ee16cffdeb91144eeb0f7120196ffd5be0899310c08bb3dba7ccf02e948b2ec","sha512":"2b59652c32623047973591ff2e0506bdf84406de2079906215d810ea3770401c270a893362c370b3da580a471f8071c3ff2d670e3ba46d139e830f0931f33bba","ssdeep":"","tlshash":"dfa002f3193584218e6285508943fa98e593611dfd45c59870254fdea3e19d7c100990","size":65,"data":"","first_seen":"2023-03-10T15:14:43Z","last_seen":"2026-06-20T12:31:05.400424Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2992ff5acf497c11d82a625e981c202","sha1":"8171841e3960d42b2e52832fcc14d9960ec1467c","sha256":"980a66d2979f479f0a7b83f6094b5832a149e0ddc2113fa68d00f5619b13eaf2","sha512":"b85672a5f1bbbf14da25e54249436df4622e12967a9087be0dc0d25aa48377ba8f0bb93cde4379ce42e28b76ac530ee67681feecb50862360088872b1ef8302d","ssdeep":"768:/EHBqXTWnv+6mwyfqK7gCJlTdGpt6KlRqcrZUuG+l6qQGp:/EHBqXTWn7yyKsCvTe/RqcdPfD","tlshash":"5df29e5ce81b24fbeead43f34ee11b9811bc4269854b15bc70fd05d35a4a687b60b4dc","size":36279,"data":"","first_seen":"2026-06-20T12:31:05.4023Z","last_seen":"2026-06-20T12:31:05.4023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/js/recaptcha.js","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c84b2ef5c7f7bc0d24bebaa2b2aa19a","sha1":"203d2dc676fc1cb34d3a2083b0d26929d0dc7d3c","sha256":"561208968098ef019f6b94a63a516fba9c22af0772a1656ed9afdd56911521d9","sha512":"09637e5c4ff7a514794517a51ebd487f32680e1c002099c627271a962610503643236381dba92bf4eae500fa60b67a9734a0801af35a5c35e4264c3160652b74","ssdeep":"","tlshash":"ef41612f227112b00c337af5cb0fe592f749422ba12086053c6edb804f324ad97d2ee9","size":2125,"data":"","first_seen":"2024-10-17T16:36:49.835842Z","last_seen":"2026-06-20T12:31:05.356725Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d377836d678ab0dfe348416f4dd5b6a","sha1":"1666f09c59733bd2e3b28bdfc3ecf4a7e91f7079","sha256":"5f8f92bbc5bee66ed362e860747c7d5f010d18c5e4b493f7d73ca0f6528a3b22","sha512":"7e3decf1c8b041eb305047d2d6e7fe07ced6553c56287e7a5b51a19994443cd7c565e1534664933712b78cf40738a757eb2818462168b6ce9a367bbf65b668fe","ssdeep":"","tlshash":"69110eb71904a0394b3209e1e2fbcab5e852701cb1588dece915dad82e69dcbce15545","size":1006,"data":"","first_seen":"2026-06-11T02:32:24.644919Z","last_seen":"2026-06-20T12:31:05.328792Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/bootstrap/css/bootstrap.css","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.511Z","timestamp":1781958565511,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/bootstrap/css/bootstrap.css HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 23025\r\nContent-Type: text/css\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173441,"size_decoded":24307,"mime_type":"text/css","magic":"ASCII text, with very long lines (540), with CRLF line terminators","md5":"cb7bd9e2b45319f4e7c2e613b8f6c0e8","sha1":"6175c12bf84a28c6a281ab923752481b6fe58056","sha256":"2797160125a75dddc44d8cbee398bad6770dbfe2f57479ca65c3f4142e1a9df0","sha512":"dcdc72d350803257cfe7729215a4b3ac99ad9c6cdd04d466b570eea3cde3f5225d82ffba496ee7f171dc65650314fa95f2a4132840ec74c9cf060027295fc9fa","ssdeep":"768:yER2n1QySUVLqqkXZTMegYFomDquiMRNTHU44DMIMETn5VBKCkcuZGB2Vcx/cXiC:Wn1QyiLZGB2VKcXihoiL3yFITMK4fWS","tlshash":"0504769de60131c22633d768bba38d42ff062263c606c97abfed62544fb94545631f8e","first_seen":"2023-10-13T13:05:14Z","last_seen":"2026-06-20T12:31:05.302877Z","times_seen":387,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/jqueryui/jquery-ui.min.css","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.514Z","timestamp":1781958565514,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/jqueryui/jquery-ui.min.css HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 7882\r\nContent-Type: text/css\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":32109,"size_decoded":9163,"mime_type":"text/css","magic":"ASCII text, with very long lines (29164), with CRLF line terminators","md5":"4ef4ec09fd03e96ac23fb3cb85c16746","sha1":"a1a208b1ef92c7e604ae53ea283492eeb045d1d7","sha256":"b0b53ea606e7397f37666242cd8d63d17186b3cc8513d49a9852bf4828a1fc46","sha512":"cc021c31550069f904fa63dcde06124cd77c74b61976f68c40756c80835ca51e06f3f7886fab886cef861eb7ff3b22a492cde7ea705206f0aa388967d3d9649d","ssdeep":"384:6CwiEtw1cR8lOXHc11evBMzymUh+4x6GcOzDBSc7nfZBhVi:plEtPXHcEBMznURx6GcOzDfBhA","tlshash":"dee25430a5c2242dfe33c23061e11ef4523bc146eda65fbda09af65953ea8e4c47b971","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-06-20T12:31:05.306896Z","times_seen":159,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/media/a/tgmedia_E739D1203ED44F9DB274416423504937/l226f_bg.jpg","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.590Z","timestamp":1781958565590,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/a/tgmedia_E739D1203ED44F9DB274416423504937/l226f_bg.jpg HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 10273\r\nContent-Type: image/jpeg\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: public, max-age=2550\r\nExpires: Sat, 20 Jun 2026 13:11:55 GMT\r\nLast-Modified: Sat, 20 Jun 2026 12:11:55 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10273,"size_decoded":11627,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"3d695f1ab41583c8c5b02364ccc65ab8","sha1":"6ce45e24679d03ed7074a5246557b84ccdf127c9","sha256":"eff9ccfde119d4795e8511c8c5d750219942cb8b10529959702e565a3f7127fc","sha512":"14b9df34654c724479bae01a472f7e5c173b44cf069e358a54bd5b758e1d819607fe67310b7d7c187c93fc561368e984ac104142db3d5e4c8a2a6e96d52d49bc","ssdeep":"192:JM/C1VZcTdkD18HDxKB755Tanv/gGR+dTY8ZaGRY2AG:JjDEDUh55Tav/WytGRPz","tlshash":"9f22a623ef83d256cc5f26308ac713193b1104b9a36408b7a3a8993dd9aa7d57c6e395","first_seen":"2026-04-09T01:08:00.351186Z","last_seen":"2026-06-20T12:31:05.310283Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","date":"2026-06-20T12:29:26.067Z","timestamp":1781958566067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 384187\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Jun 2026 22:23:50 GMT\r\nexpires: Tue, 15 Jun 2027 22:23:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 396336\r\nlast-modified: Mon, 08 Jun 2026 02:01:37 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":895587,"size_decoded":385074,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (548)","md5":"971d701c98497d86115e7fc7be8f9de2","sha1":"87af30c5f948810ae741e2088769b53b9dfb8fbd","sha256":"e9fe4b018ad7c2f77dd07201f5a96b15f9737e730e76bc9b727f9d07669ad827","sha512":"bf0cecbe4ada5ac698a684b30787e4bc2c6f06e747181440742e587309134135cdc304ed8494b017a87e90f9c5027a3656001931244a7157f93b6c599f1832c4","ssdeep":"12288:CqGf5BvnyWJkwGlInrmP1m1580nszaM34HMpc0FWac68Dp0zHipQOpDe3:EBvzk9q5sFWIcp0zCFe3","tlshash":"b01518e9709170f28332b9fa6067205d933d906ac4dc4e5db1a985f12fb588d607aef3","first_seen":"2026-06-10T15:44:34.29654Z","last_seen":"2026-06-20T16:28:16.587411Z","times_seen":7960,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","date":"2026-06-20T12:29:26.320Z","timestamp":1781958566320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 02:17:06 GMT\r\nexpires: Fri, 18 Jun 2027 02:17:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209540\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-20T16:28:16.586693Z","times_seen":889655,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":19,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T12:29:25.136Z","timestamp":1781958565136,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/i/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 28769\r\nContent-Type: text/html; charset=utf-8\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":111658,"size_decoded":30085,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (62270), with CRLF line terminators","md5":"e23587ccb6f3e7999ee3553235ce02fc","sha1":"31f55df019bc706e20d56e5f7e4a1314161a38b8","sha256":"5d83f8db3776b26af7493b93dc8d51f6d5c6819b92ab0771e0008fe57d539bf8","sha512":"b7c2997fda41f5a4e3b815e470b330162b1f313d2f60a9a11ff000afb7c474bda76b89a3eb7647504f2a4d0df4361ca0b9f23be3411193fffb252ddb7bec2379","ssdeep":"1536:1kuhw+ExiazA/PWrF7qvEAFiQcpmaB9sG6yVUnI:1EBgyVUI","tlshash":"18b3d99069243c269037873561d1bd4b62211503e737aebbf62e3db9cf9968b0f32e45","first_seen":"2026-06-20T12:31:05.32151Z","last_seen":"2026-06-20T12:31:05.32151Z","times_seen":1,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/i/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T12:29:24.919Z","timestamp":1781958564919,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /i/acacbe21d011740f988665175a1f3ddff HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 345\r\nContent-Type: text/html; charset=utf-8\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: private\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T16:29:48.02362Z","times_seen":16584092,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/jquery/jquery.min.js?tn=261214474892","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.534Z","timestamp":1781958565534,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/jquery/jquery.min.js?tn=261214474892 HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 39759\r\nContent-Type: application/x-javascript\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"c6114c0d1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":89503,"size_decoded":41057,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"0732e3eabbf8aa7ce7f69eedbd07dfdd","sha1":"4cd5ddc413b3024d7b56331c0d0d0b2bd933f27f","sha256":"ce9d07500ad91ec2b524c270764ec4c9a33e78320d8d374ec400ede488f6251b","sha512":"41d24c426abcf913be59917591d906318a547661280036b098a2b1b948bcf9ff14f268b140db10956730d64a857a61b81034d888ed7f857419dee6b8d327447c","ssdeep":"1536:ejExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vE:eIh8GgP3hujzwbhd3XvSiDQ47GKq","tlshash":"e19309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-06-20T16:30:21.171698Z","times_seen":19984,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":33,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.542Z","timestamp":1781958565542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:28 GMT","end":"Mon, 17 Aug 2026 08:36:27 GMT"},"fingerprint":{"sha1":"E7:51:4F:91:9A:48:E8:45:5A:7A:64:2F:97:26:D4:33:CE:C7:01:89","sha256":"5A:8E:04:C3:1E:AD:E5:2E:66:07:07:1F:3E:5B:BD:CD:B6:1C:36:19:BB:EF:38:E6:77:B1:98:44:4E:A5:D7:CB"}}},"request":{"raw":"GET /recaptcha/api.js?render=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://copilotupgrade.offices-support.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sat, 20 Jun 2026 12:29:25 GMT\r\ndate: Sat, 20 Jun 2026 12:29:25 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1006,"size_decoded":1317,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1006), with no line terminators","md5":"5d377836d678ab0dfe348416f4dd5b6a","sha1":"1666f09c59733bd2e3b28bdfc3ecf4a7e91f7079","sha256":"5f8f92bbc5bee66ed362e860747c7d5f010d18c5e4b493f7d73ca0f6528a3b22","sha512":"7e3decf1c8b041eb305047d2d6e7fe07ced6553c56287e7a5b51a19994443cd7c565e1534664933712b78cf40738a757eb2818462168b6ce9a367bbf65b668fe","ssdeep":"","tlshash":"69110eb71904a0394b3209e1e2fbcab5e852701cb1588dece915dad82e69dcbce15545","first_seen":"2026-06-11T02:32:24.644919Z","last_seen":"2026-06-20T12:31:05.328792Z","times_seen":5,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":2,"connect":34,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","date":"2026-06-20T12:29:26.065Z","timestamp":1781958566065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Jun 2026 22:23:54 GMT\r\nexpires: Tue, 15 Jun 2027 22:23:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 396332\r\nlast-modified: Mon, 08 Jun 2026 02:01:37 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":82857,"size_decoded":43195,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5f560f8d2c809ce612b74b6d18d0db25","sha1":"3cf54f4034cc068b5fac03f2f0e602b5731c6828","sha256":"a496dccb4ce177f05d032531eb10d7c0cd05130041218a060d305bde5509100f","sha512":"507f5d8aa1020e1a7d2b21563d857e0fe1bb0a7037f9c85f811e018858e7dfb764cf759460f473038d8d6e98e0f6bb317305a8777954279f02654c889a3f738b","ssdeep":"1536:d7Rpgh9C9ToL9gTNfWNfK4RxrnHZzhXwWxd1bx7:d7ArC9ULiTYNC4Rz9Xt","tlshash":"8b837e7338513a1afc279b616196bdfdf21cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-06-10T15:44:34.306702Z","last_seen":"2026-06-20T16:28:16.601006Z","times_seen":6224,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","date":"2026-06-20T12:29:26.305Z","timestamp":1781958566305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 02:29:48 GMT\r\nexpires: Thu, 25 Jun 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 208778\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-20T16:28:16.585933Z","times_seen":659736,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/webworker.js?hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","date":"2026-06-20T12:29:26.401Z","timestamp":1781958566401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:28 GMT","end":"Mon, 17 Aug 2026 08:36:27 GMT"},"fingerprint":{"sha1":"E7:51:4F:91:9A:48:E8:45:5A:7A:64:2F:97:26:D4:33:CE:C7:01:89","sha256":"5A:8E:04:C3:1E:AD:E5:2E:66:07:07:1F:3E:5B:BD:CD:B6:1C:36:19:BB:EF:38:E6:77:B1:98:44:4E:A5:D7:CB"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28 HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sat, 20 Jun 2026 12:29:26 GMT\r\ndate: Sat, 20 Jun 2026 12:29:26 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"af9f3488f93134a3e9836d9706d69e45","sha1":"19e15d0daca43a60e4ba298fbe5e9eef12605fc2","sha256":"1483dfd25df66f35227468860b9228ec6f96599b988c8aee215ff3ead1a0a281","sha512":"6fdee59d973bbdd40213d419e2530e6df768458a9e4d3203c813af37f6220fdf460c33b1023b50bc06302ca3cc2cd0997d622533a94cfa77a399e9c8e3b9e43f","ssdeep":"","tlshash":"e1b012231d10c91c0d204782c42b9ba8e0015028ea5080f045740fdc1e583734025400","first_seen":"2026-06-10T15:44:34.295228Z","last_seen":"2026-06-20T16:28:16.615157Z","times_seen":5680,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/jqueryui/jquery-ui.structure.min.css","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.516Z","timestamp":1781958565516,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/jqueryui/jquery-ui.structure.min.css HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 4962\r\nContent-Type: text/css\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":15552,"size_decoded":6243,"mime_type":"text/css","magic":"ASCII text, with very long lines (15418), with CRLF line terminators","md5":"909ce025471e11a770dfeb266d02384a","sha1":"b915957fc131db3ec221e130af9b2023d039d458","sha256":"4e2ec0490ffa766a812249114b99f7b2b578c750619f3175d948be265f07af11","sha512":"82888f071c8f992d6e33f2bf3e7e8a19bd1cedd4d7f9923151d02947cac846e61b061dbe855706d12ead3dac762e16d4429ff675c5192c9af86239acd58fe77d","ssdeep":"192:Ly4ncR8lOG1bRCNPbtqxlhIuxrjv572hk/k52bZuQEjQDMsrsUR9P:L1cR8lOXHc11evs","tlshash":"c6629730e6572d3ebc33c25064a19efea319c167ebb291eff146910287ad49146bf858","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-06-20T12:31:05.353559Z","times_seen":147,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/js/recaptcha.js","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.541Z","timestamp":1781958565541,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/js/recaptcha.js HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1062\r\nContent-Type: application/x-javascript\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"dea712c0d1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":2125,"size_decoded":2360,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2c84b2ef5c7f7bc0d24bebaa2b2aa19a","sha1":"203d2dc676fc1cb34d3a2083b0d26929d0dc7d3c","sha256":"561208968098ef019f6b94a63a516fba9c22af0772a1656ed9afdd56911521d9","sha512":"09637e5c4ff7a514794517a51ebd487f32680e1c002099c627271a962610503643236381dba92bf4eae500fa60b67a9734a0801af35a5c35e4264c3160652b74","ssdeep":"","tlshash":"ef41612f227112b00c337af5cb0fe592f749422ba12086053c6edb804f324ad97d2ee9","first_seen":"2024-10-17T16:36:49.835842Z","last_seen":"2026-06-20T12:31:05.356725Z","times_seen":76,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.955Z","timestamp":1781958565955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:28 GMT","end":"Mon, 17 Aug 2026 08:36:27 GMT"},"fingerprint":{"sha1":"E7:51:4F:91:9A:48:E8:45:5A:7A:64:2F:97:26:D4:33:CE:C7:01:89","sha256":"5A:8E:04:C3:1E:AD:E5:2E:66:07:07:1F:3E:5B:BD:CD:B6:1C:36:19:BB:EF:38:E6:77:B1:98:44:4E:A5:D7:CB"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840 HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://copilotupgrade.offices-support.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 20 Jun 2026 12:29:25 GMT\r\ncontent-security-policy: script-src 'nonce-SIp_i6zyZBRdH0Qqrbmn1Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":54718,"size_decoded":29469,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36285)","md5":"c94ad4ee1eb356cf2717c32ae2bdec68","sha1":"09ee366c0e83917b8294700eef1f8a8fdf35bb0c","sha256":"89a20986aac89be01e5b4dfe2cbdf58818f789f4ebf2a00445c361ea607a6adc","sha512":"2a2d93fe4f564cfb91f4cefdbf8715a8e20a4b756263d29188681a9bec84a67c9d1fa5072ed8a2bee74fda3c80e5a5136aca8fb2e09e1e8020240137cdd1a7e3","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/BvaAEHBqXTWnv+6mwyfqK7gCJlTdGpW:y+kKvaAEHBqXTWn7yyKsCvTe/RqcdPf6","tlshash":"43338c44481b1452efdb49e213d92f74fa5e8220614690b873fd47e7aecbd87a21a3dc","first_seen":"2026-06-20T12:31:05.359882Z","last_seen":"2026-06-20T12:31:05.359882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/jqueryui/jquery-ui.theme.min.css","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.517Z","timestamp":1781958565517,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/jqueryui/jquery-ui.theme.min.css HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2328\r\nContent-Type: text/css\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]}],"data":{"size":13880,"size_decoded":3609,"mime_type":"text/css","magic":"ASCII text, with very long lines (13746), with CRLF line terminators","md5":"74fb9452a91ef09555eb92aa59516997","sha1":"b74731af5b28a90cca86fa1097c75d8f8419ab87","sha256":"11e1cf2b2ee76191e1556d414a6eebb8e9a357b5930ebbc06858162174b1683d","sha512":"0107fde1e003f418b9da20d5dc38ae6d6397e70c239406343ed995470c934e032c833a4b01fe6e776c699646d64c3d2d376c2a21d9b1180cd4b3d41764b6f318","ssdeep":"192:LwGIzlzymUh+4pQ8l6GcIPRBGWLTxBm9v5B6xBpYPzFhCNBjVs5y6sybYw9QoFYG:L7MzymUh+4x6GcOzDBSc7nfZBhVi","tlshash":"8652e850a4c2212dff13d53161e11ef0513b9281eda61f7c64aafbad62d28f8c4779b2","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-06-20T12:31:05.36506Z","times_seen":145,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/css/rp_bubbles.css","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.519Z","timestamp":1781958565519,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/css/rp_bubbles.css HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2399\r\nContent-Type: text/css\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12677,"size_decoded":3680,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"e9b944b679bc0716e7c506ac6684ba28","sha1":"b7d753886ac0e8aa16f792ab354025f60376516e","sha256":"4bc5a823bc0d699486b8da7c703f02935d4e050fdf7e139ca77c6e744f9899f6","sha512":"50362fa9c95e04b2e32eb154429ca1d30e1777120d47d8f64f0b177bf47739bb53c7369eac6cf7888f3ad94bd885ec8eb8980b90214e56c181f507da2fdeddcf","ssdeep":"192:yxN1jBGISrhFui5bAmhfQYquf2ssl1eFSm5TvzSFUMGTyjsDt5E2YeFdpOHej:yxHjBcFFAmhJYet","tlshash":"8f42f1b8e50122095317dac7abdc4aede6945013be0b3694b5fc143fabcabbc0e614c5","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-06-20T12:31:05.3675Z","times_seen":145,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/media/a/cmedia_41ac983ed05048a981748291a9d2f045/microsoft_logo.png","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.543Z","timestamp":1781958565543,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /media/a/cmedia_41ac983ed05048a981748291a9d2f045/microsoft_logo.png HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 50850\r\nContent-Type: image/png\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nAccess-Control-Expose-Headers: Request-Context\r\nCache-Control: public, max-age=2550\r\nExpires: Sat, 20 Jun 2026 13:11:55 GMT\r\nLast-Modified: Sat, 20 Jun 2026 12:11:55 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nRequest-Context: appId=cid-v1:88651b45-7e69-426f-91f9-e9f4b66f72b7\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50850,"size_decoded":52203,"mime_type":"image/png","magic":"PNG image data, 2560 x 545, 8-bit/color RGBA, non-interlaced","md5":"1a629996fba3a1564999cfd130c01e1a","sha1":"e647b070f564652ebb33694636b10a9c4a06af77","sha256":"f5ee50165db7c936e7024f2eee564a69039fe283c76ebfda89075ae67e0c66a1","sha512":"a5915665df4f4d4b5f6bde026469d12744cb231f52a1a036a087aed471910c282d0c04bab060cd9be4b8c61e1e27d68295d3f3c09ad1354ae0456fd28e3b4a69","ssdeep":"1536:vmcSXZ/ro6gcEM9lMUDmT/WhPsX+FoPIWrzMd:vTSp/ro6gcnlMEFhPlUIWrzMd","tlshash":"e233cfbb4d42dcacec75a3f14097791b37264c6457a9b391c2be32988f4b2b0d405f9a","first_seen":"2023-11-28T19:57:40Z","last_seen":"2026-06-20T12:31:05.373195Z","times_seen":24,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":36,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.690Z","timestamp":1781958565690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://copilotupgrade.offices-support.com/\r\nOrigin: http://copilotupgrade.offices-support.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 384187\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Jun 2026 22:23:50 GMT\r\nexpires: Tue, 15 Jun 2027 22:23:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 396335\r\nlast-modified: Mon, 08 Jun 2026 02:01:37 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":895587,"size_decoded":385094,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (548)","md5":"971d701c98497d86115e7fc7be8f9de2","sha1":"87af30c5f948810ae741e2088769b53b9dfb8fbd","sha256":"e9fe4b018ad7c2f77dd07201f5a96b15f9737e730e76bc9b727f9d07669ad827","sha512":"bf0cecbe4ada5ac698a684b30787e4bc2c6f06e747181440742e587309134135cdc304ed8494b017a87e90f9c5027a3656001931244a7157f93b6c599f1832c4","ssdeep":"12288:CqGf5BvnyWJkwGlInrmP1m1580nszaM34HMpc0FWac68Dp0zHipQOpDe3:EBvzk9q5sFWIcp0zCFe3","tlshash":"b01518e9709170f28332b9fa6067205d933d906ac4dc4e5db1a985f12fb588d607aef3","first_seen":"2026-06-10T15:44:34.29654Z","last_seen":"2026-06-20T16:28:16.587411Z","times_seen":7960,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":2,"connect":14,"send":0,"wait":15,"receive":60,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"copilotupgrade.offices-support.com/i/acacbe21d011740f988665175a1f3ddff","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-20T12:29:22.322Z","timestamp":1781958562322,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /i/acacbe21d011740f988665175a1f3ddff HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T16:29:48.02362Z","times_seen":16584092,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/bootstrap/js/bootstrap.min.js?tn=261214474892","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.536Z","timestamp":1781958565536,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/bootstrap/js/bootstrap.min.js?tn=261214474892 HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 14370\r\nContent-Type: application/x-javascript\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"559cdbbfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39685,"size_decoded":15669,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (39553), with CRLF line terminators","md5":"105a4995b8777aeaf68bff64bf7d2ae0","sha1":"e21390f730eb97d3d26b908aaacecd0a00a433e0","sha256":"a915d483b99af421f4813e6b60599b4e39faff120e54b5e9838386d4ae1a4c60","sha512":"6beed488f5bc341194df23cc5a1133efff442c30e0e80811ff7dab1bbb73e809d1ca2a7a4fd02160364e8ce781baa788c0f47c291946a32b06af8e64435e74d8","ssdeep":"768:np/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:OorXfURXiUrmq5YW","tlshash":"2f03950ab22031a107efa1a5414b020e73366a7df94791ac78a9d9f22db4c49717bf7d","first_seen":"2023-03-07T01:11:58Z","last_seen":"2026-06-20T14:51:48.471987Z","times_seen":2272,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/js/userInteraction.js","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.539Z","timestamp":1781958565539,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/js/userInteraction.js HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 1181\r\nContent-Type: application/x-javascript\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"dea712c0d1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2276,"size_decoded":2479,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"ff6837888c07861026b755b8340c433c","sha1":"38cf8bd4bf79981b9a242973977fbb3cb5ff5b18","sha256":"47f3edf6ffe21688cba4fcc764eebb816d07062d5c1a694aa231631ab4855204","sha512":"201537c5f38f0dd936ecc05fca4cd05cdaa5f2a8deab1ddc4f541f1f76f3ec39a97b4cdf9b922c2a46c636a03f270344f19515de4a5aa6fa9d42f58a9e012574","ssdeep":"","tlshash":"68411166126610710d7333a28f17e156e716826b0215860a7c3d87cc2f71834b765eff","first_seen":"2024-10-17T16:36:49.832778Z","last_seen":"2026-06-20T12:31:05.379977Z","times_seen":95,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lfq5lQqAAAAAC75CEdAPbHGoZn-ruOHGoH-Zp7e\u0026co=aHR0cDovL2NvcGlsb3R1cGdyYWRlLm9mZmljZXMtc3VwcG9ydC5jb206ODA.\u0026hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=e012nj6ic840","date":"2026-06-20T12:29:26.319Z","timestamp":1781958566319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 02:17:06 GMT\r\nexpires: Fri, 18 Jun 2027 02:17:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209540\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-20T16:28:16.586693Z","times_seen":889655,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":17,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/css/rp_tooltips.css","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.520Z","timestamp":1781958565520,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/css/rp_tooltips.css HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Length: 2514\r\nContent-Type: text/css\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"0c9b9bfd1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13532,"size_decoded":3795,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4b2f2bce67a3c4ab9b0f17372f010918","sha1":"eb379f291a848680ddd5d3ecb4e59818f9a602e3","sha256":"9bddcf9a5fc7baf7e7bdfe849437591ee53dca4206b1b8af6a705ada50fbadba","sha512":"0c6ddfcdb4ee038c98c1eb9faa6af8df0d55bd5f74704f2ab51b20e6c107b8757be11640fd5753c4a955a64e451fff661357c2c61c769ed9b6209416bf9bcb27","ssdeep":"384:yxiQ952UOM7FEOBO57QNZhgfR6H9CWXkOX:s52UOM7FEOBO57QNZhgfR6H9CWXkOX","tlshash":"6152755ade1220825333d35cebf20754eb653023ca824479faec619ddfb8758aa51fc9","first_seen":"2023-04-18T21:53:37Z","last_seen":"2026-06-20T12:31:05.382432Z","times_seen":145,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":27,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"copilotupgrade.offices-support.com/common/jqueryui/jquery-ui.min.js?tn=261214474892","fqdn":"copilotupgrade.offices-support.com","domain":"offices-support.com","tld":"com"},"ip":{"addr":"20.50.64.14","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff","date":"2026-06-20T12:29:25.538Z","timestamp":1781958565538,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /common/jqueryui/jquery-ui.min.js?tn=261214474892 HTTP/1.1\r\nHost: copilotupgrade.offices-support.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://copilotupgrade.offices-support.com/home/b3951379e8864d44bb521dae23d4e65b/acacbe21d011740f988665175a1f3ddff\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/x-javascript\r\nDate: Sat, 20 Jun 2026 12:29:24 GMT\r\nServer: Microsoft-IIS/10.0\r\nAccept-Ranges: bytes\r\nContent-Encoding: gzip\r\nETag: \"b6e5dc0d1bddb1:0\"\r\nLast-Modified: Mon, 05 May 2025 15:24:10 GMT\r\nTransfer-Encoding: chunked\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=31536000\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'unsafe-inline' 'self' https://www.google.com https://dc.services.visualstudio.com *.msecnd.com blob: https://www.youtube.com; img-src 'unsafe-inline' 'self' * blob: data: https://*.userpilot.io ; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.google.com https://www.gstatic.com https://dc.services.visualstudio.com https://*.userpilot.io blob: ; script-src-elem 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' * https://*.userpilot.io https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'unsafe-inline' *; font-src * data: ; connect-src * data: 'unsafe-inline' https://*.userpilot.io *.userpilot.io wss: ; media-src 'self' * data: ; frame-src 'self' * data: mailto: ;\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: geolocation=()\r\nCross-Origin-Opener-Policy: unsafe-none\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":255089,"size_decoded":92603,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64394), with CRLF line terminators","md5":"b4baecb73b7a75044853d7f4d363cb49","sha1":"cee14f8598c3c7f75ed141896f976fe94ed286a0","sha256":"9d9b75e6bf99296f7797ed12f73137f52966dbb02180ff054c6c01680c7bdb1d","sha512":"b5e6510052414b90c694c0a01835a7b49c73801757bc12f0afa7bb96808fc63e474a38cc7c28adcf3a4a43d145be9dccf0a1923a405777fe3d2fd06474583229","ssdeep":"3072:nDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:TNdIVWjNS9cdzAV","tlshash":"c344f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-11T15:29:49Z","last_seen":"2026-06-20T12:31:05.384698Z","times_seen":1999,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":36,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-20","alert":"Sinkholed","trigger":"copilotupgrade.offices-support.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://google.com/recaptcha/api2/webworker.js?hl=en\u0026v=MerVUtRoajKEbP7pLiGXkL28","date":"2026-06-20T12:29:26.453Z","timestamp":1781958566453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /recaptcha/releases/MerVUtRoajKEbP7pLiGXkL28/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 384187\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 15 Jun 2026 22:23:50 GMT\r\nexpires: Tue, 15 Jun 2027 22:23:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 396336\r\nlast-modified: Mon, 08 Jun 2026 02:01:37 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":895587,"size_decoded":385074,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (548)","md5":"971d701c98497d86115e7fc7be8f9de2","sha1":"87af30c5f948810ae741e2088769b53b9dfb8fbd","sha256":"e9fe4b018ad7c2f77dd07201f5a96b15f9737e730e76bc9b727f9d07669ad827","sha512":"bf0cecbe4ada5ac698a684b30787e4bc2c6f06e747181440742e587309134135cdc304ed8494b017a87e90f9c5027a3656001931244a7157f93b6c599f1832c4","ssdeep":"12288:CqGf5BvnyWJkwGlInrmP1m1580nszaM34HMpc0FWac68Dp0zHipQOpDe3:EBvzk9q5sFWIcp0zCFe3","tlshash":"b01518e9709170f28332b9fa6067205d933d906ac4dc4e5db1a985f12fb588d607aef3","first_seen":"2026-06-10T15:44:34.29654Z","last_seen":"2026-06-20T16:28:16.587411Z","times_seen":7960,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}