{"report_id":"025463bc-bfe6-4e18-84d1-633a58677005","version":6,"status":"done","tags":[],"date":"2026-03-25T15:56:56Z","url":{"schema":"http","addr":"teamssdtop.top","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"teamssdtop.top/","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"title":"Your request has been blocked. This could be due to several reasons.","dom":{"size":346893,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (590)","md5":"a17dd86029561468448a41bfe7ab4753","sha1":"77d62218cd26f7171226e47ace4be9702d3d41a9","sha256":"5b85642b4bf1a46f0e3defd76aa3aa93c3bd47b294ccf1c263a9f0df903c6dae","sha512":"638e0cd8fe7093755b887637f45ef345a04218860ebec9b46aefb476bf0b2bbf4524f7d8b7092f662047d82bdf801f5d8be709c5c3f2ce07683eb17d24a5bed1","ssdeep":"768:/BiwltXqC/whsqQ3fmeFFGQGvTCEyecVpRXW0HLkH9VX2ERFASPcLDSiFZDe1Fkx:nqdhWF2yIeBVKWuS","tlshash":"87740074a0b2ea3a04df36d5d55f1b666a83e7438b8513f9b25f01782fc79286d8306c","dom_hash":"domhash3f0b3ae51586236f61bfe44cb9b3e762","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"teamssdtop.top","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T15:56:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-25T15:56:33Z","timestamp":1774454193,"ip_dst":{"addr":"Client IP","port":47916,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 1","source":"{\"timestamp\":\"2026-03-25T15:56:33.453347+0000\",\"flow_id\":807206986540917,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"14.128.47.20\",\"src_port\":443,\"dest_ip\":\"172.18.0.17\",\"dest_port\":47916,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400000,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 1\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-03-25T15:56:33.157557+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"tm3.zywlkj.asia","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-08-21","domain_rank":0,"first_seen":"2026-03-25T12:32:52.105871Z","last_seen":"2026-03-25T12:32:52.105871Z","alert_count":46,"request_count":23,"received_data":0,"sent_data":11961,"comment":"","tags":null,"fingerprints":null},{"fqdn":"teamssdtop.top","ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2026-03-14","domain_rank":0,"first_seen":"2026-03-25T12:32:52.116961Z","last_seen":"2026-03-25T12:32:52.116961Z","alert_count":64,"request_count":32,"received_data":3679219,"sent_data":15436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"www.microsoft.com","ip":{"addr":"96.6.17.223","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1991-05-02","domain_rank":812,"first_seen":"2012-05-21T04:29:41Z","last_seen":"2026-03-19T07:18:50.490085Z","alert_count":0,"request_count":1,"received_data":17926,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"teamssdtop.top/static/js/jquery.min.js","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93100,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-07T15:25:09.633455Z","times_seen":20836,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"234515f89f1e11da5f20e451ba01865f","sha1":"9a1b08eaea6b19f7efa1d521e9e8289f981017ad","sha256":"dd5cb1619663d79e12b7bdd0f9c503cf27e43aeb46cbdd689f30de8d546dd1d1","sha512":"f5af59c612476fd67754ba6d558f9407883e2082e80913c4eb18bf1b8b2d36a079328092e313ccc7cdac01dc9b974deae6862bf49687cbee501328139ec1b8b0","ssdeep":"","tlshash":"03e02bd926956146ac7731b4025f7020361b104b0145c904bf4cb5902fc523851c309e","size":371,"data":"","first_seen":"2026-03-25T12:32:59.181422Z","last_seen":"2026-03-26T00:11:52.93872Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/js/jquery-1.9.1.min.js","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-07T16:13:57.760108Z","times_seen":68513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/js/4615ce16494a4248bd337231247ef65d.js","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7362ab5ec7cc3cd86b6fba94b4ef4922","sha1":"1217f8ca9614e78123ef20875cff2affe37bf3e2","sha256":"28394675c2e6201ee5a6340c2ed9800ec7e29ea024a673ed625642957c6eb18f","sha512":"f1e67e6f98c80b23c1242723a2ffd6c9383478be2cf296153893cb536401d494a6dc8f1dd5618e46aee9c6795a6b79504af3b898a87e43a6d0e795a78f390409","ssdeep":"3072:Ff/HuF3CpxEIqQ0/9d1EwgXAnKxnKKvim:Ff/HuZ1ILGm","tlshash":"83d33ba9b158357a8bdf80f89b4f1409b3330929944e6058b86cdded1874e4e21b7ff9","size":131521,"data":"","first_seen":"2026-03-25T12:32:59.163035Z","last_seen":"2026-03-26T00:11:52.93733Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/js/script.js","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"602c381194795dfc124facdf48492ef1","sha1":"90d594b7b5af217824f2974514548c95fecfbfa5","sha256":"bf450798fb52e2458a1e10749577e5334f3e1d7907a47fdfea5430cb71fa19e6","sha512":"8837f6bd2a11387d31a866d07b66a0ff2e58d2edc2682a582919a1896ce9b4cb683a795d91968b41fa46c31ce62d34414e1f3318d4f5dda2999447f4bca6133d","ssdeep":"","tlshash":"d2f00eaf68462007467f60a5f4ae23c27022df1bd1504e50d08b3d1c5acf350dba1c4c","size":513,"data":"","first_seen":"2024-04-30T05:36:29Z","last_seen":"2026-03-26T00:11:52.934899Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASH5159c53c51b8174d966c8790d21c48a1.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.546Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASH5159c53c51b8174d966c8790d21c48a1.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":1087,"timings":{"blocked":1087,"dns":0,"connect":287,"send":0,"wait":0,"receive":0,"ssl":295},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/latest2.woff2","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:35.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/latest2.woff2 HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/ae-f1ac0c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30132\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\netag: \"69a6b2ba-75b4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30132,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30132, version 0.0","md5":"4c38c2a78502af8dfbfe0f71cc49a1ae","sha1":"4b8c845263b3696e28cf3f313e0214e22688a750","sha256":"1232bbdbc5d205f3c5a40efa5ed92839c79e7879d5168445cc47645bb93f7d1b","sha512":"e60ffea855bba4241daf68af6bd3c1967211a215ef281c7dac8311756a0781d00f529ff0ac5ce789238a4215eb1540c6c61c69d650cb2027c3c72cd475dd7b9b","ssdeep":"768:oE6QnF5iqE+5HV38V+SnObhyTt0VyxVQoZaFjNpa5euFhfbwV:oE9nF5nE+JVMV+fAu2VQoZaROj0V","tlshash":"f2d2e03106e377e194d8360ed63dfc17ceb08166aca3b0e822b741a32f35f585e4a049","first_seen":"2023-05-02T10:00:41Z","last_seen":"2026-06-07T06:24:15.853746Z","times_seen":4603,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":314,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/picture/340650-icon-featured-chat-24x24.svg","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:41.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/picture/340650-icon-featured-chat-24x24.svg HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 03 Mar 2026 10:06:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2bd-5c9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1481,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c3dd727f103263c268ff088ae87b89b","sha1":"5926007be35339cd45c787a7589e8a28bbbce609","sha256":"1336a9ac5090c7f963f97c8c3b8046b25c64f29219d4911f05420d6b59cd772d","sha512":"b08ce8205d9a0d25add361480b67891bb501e321706af9a1b9234349f981b5d2e5c84ae6c5906cebbc3bf68978d40c625b90997863911513fed00ec5d3873d4f","ssdeep":"","tlshash":"8f3140ef97ad43d4a884e345df247444160e30eb38c38e64db7d691938a93aaec1bdc1","first_seen":"2024-12-12T19:57:47.87938Z","last_seen":"2026-05-19T09:15:25.887553Z","times_seen":57,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.microsoft.com/favicon.ico?v2","fqdn":"www.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"96.6.17.223","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:44.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 04","organization":"Microsoft Corporation"},"validity":{"start":"Thu, 22 Jan 2026 19:55:21 GMT","end":"Sun, 17 Jan 2027 19:55:21 GMT"},"fingerprint":{"sha1":"AD:A5:F2:7D:8E:CE:C5:41:6F:5F:E1:90:43:31:0D:DD:30:5C:02:4B","sha256":"9F:17:B5:48:F7:D2:4F:30:9D:BC:AA:B5:71:57:6C:0C:A7:3B:80:55:9C:E6:9F:27:FE:29:5F:64:08:CC:57:BF"}}},"request":{"raw":"GET /favicon.ico?v2 HTTP/1.1\r\nHost: www.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 17174\r\ncontent-md5: EuPayFgGHQiAI7K9SOL6lg==\r\nlast-modified: Tue, 24 Mar 2026 17:52:44 GMT\r\netag: \"0x8DE89CE26F9A34F\"\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment\r\nx-vhost: publish_golf-microsoft_s\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31557600\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-timer: S1774375928.514921,VS0,VS0,VE45\r\ncache-control: public, max-age=225\r\ndate: Wed, 25 Mar 2026 15:56:45 GMT\r\ntls_version: tls1.3\r\nms-cv: CASMicrosoftCVf7fb04b2.0\r\nms-cv-esi: CASMicrosoftCVf7fb04b2.0\r\ncontent-type: image/vnd.microsoft.icon\r\nx-edgescape-location: country_code=NO\r\nx-rtag: OneRoute_Default\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17174,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors","md5":"12e3dac858061d088023b2bd48e2fa96","sha1":"e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5","sha256":"90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21","sha512":"c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01","ssdeep":"24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO","tlshash":"b772e35b1f5f4981ec4b0db80b125e80c5e49c973854dffbdb76b62888b0364ab845eb","first_seen":"2023-04-05T03:19:57Z","last_seen":"2026-06-06T19:57:53.094445Z","times_seen":165621,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":86,"connect":1,"send":0,"wait":14,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/picture/RE1Mu3b.png","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/picture/RE1Mu3b.png HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 03 Mar 2026 10:06:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2bd-fd6\"\r\nexpires: Fri, 24 Apr 2026 15:56:34 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced","md5":"9f14c20150a003d7ce4de57c298f0fba","sha1":"daa53cf17cc45878a1b153f3c3bf47dc9669d78f","sha256":"112fec798b78aa02e102a724b5cb1990c0f909bc1d8b7b1fa256eab41bbc0960","sha512":"d4f6e49c854e15fe48d6a1f1a03fda93218ab8fcdb2c443668e7df478830831acc2b41daefc25ed38fcc8d96c4401377374fed35c36a5017a11e63c8dae5c487","ssdeep":"","tlshash":"d0816d07ff018801919ee9570485507acb618cd1e7f91061a987c825c9b5cf82abcde7","first_seen":"2023-04-05T04:39:01Z","last_seen":"2026-06-07T06:24:15.868074Z","times_seen":11586,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASH2add065651afb45e8c80967dd7b86a41.css","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.549Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASH2add065651afb45e8c80967dd7b86a41.css HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":1088,"timings":{"blocked":1087,"dns":1,"connect":288,"send":0,"wait":0,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/clientlibs/clientlib-action.min.ACSHASH9eea5f80fed74a300ccbbaa4dc41df2a.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.550Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/clientlibs/clientlib-action.min.ACSHASH9eea5f80fed74a300ccbbaa4dc41df2a.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":1677,"timings":{"blocked":1088,"dns":0,"connect":289,"send":0,"wait":0,"receive":0,"ssl":297},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/static/css/resources/fonts/segoe-sans/west-european/latest.woff2","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:41.411Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /static/css/resources/fonts/segoe-sans/west-european/latest.woff2 HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://teamssdtop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":0,"dns":0,"connect":293,"send":0,"wait":0,"receive":0,"ssl":297},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/static/fonts/MWFFluentIcons.woff2","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:41.413Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /static/fonts/MWFFluentIcons.woff2 HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://teamssdtop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":844,"dns":0,"connect":289,"send":0,"wait":0,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/css/edc3c78cec41454489459210ca169370.css","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/css/edc3c78cec41454489459210ca169370.css HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 10:06:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2b9-28af8\"\r\nexpires: Thu, 26 Mar 2026 03:56:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166648,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64258)","md5":"3f64b1b5967017ff80665ef37bf6a669","sha1":"19561b01f283ef743fd9dba261160b5a7480aad1","sha256":"f1d502a39d404621ea8f3b659d8f016f039c9dc6b80c8526cc719fe127bb3b4a","sha512":"aa8aa6038db594de6dc54103045e1f584063cde666455f663db227b1679550cc183d61d1b078143ac1aeabc544419680a8cb71c5d1bf8c0202665c75689bf59d","ssdeep":"3072:gzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxp:qlZAhZkeedJ","tlshash":"c3f384f2a5b02cb9127b855bfc82623cbb3cf096d55338e6f785a1846ec1445e2db346","first_seen":"2026-03-25T12:32:59.16937Z","last_seen":"2026-03-26T00:11:52.93241Z","times_seen":3,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/clientlibs/clientlib-localstorage.min.ACSHASHb884ef4864d6867bd00aa4a7a5cfb368.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.550Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/clientlibs/clientlib-localstorage.min.ACSHASHb884ef4864d6867bd00aa4a7a5cfb368.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":1088,"timings":{"blocked":1088,"dns":0,"connect":290,"send":0,"wait":0,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/latest.woff2","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:36.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/latest.woff2 HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/edc3c78cec41454489459210ca169370.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34052\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\netag: \"69a6b2ba-8504\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-06-07T06:24:15.844944Z","times_seen":12064,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASHa34586f5be96a2ea15fe00541db2cdf3.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:41.382Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASHa34586f5be96a2ea15fe00541db2cdf3.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":847,"timings":{"blocked":847,"dns":0,"connect":289,"send":0,"wait":0,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/components/content/reimagine/blade/faqs/v2/faqs/clientlib/faqs.min.ACSHASHfe68b59e840a1a274393b3ab03c85e96.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.551Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/components/content/reimagine/blade/faqs/v2/faqs/clientlib/faqs.min.ACSHASHfe68b59e840a1a274393b3ab03c85e96.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":2768,"timings":{"blocked":1933,"dns":835,"connect":1124,"send":0,"wait":0,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/static/css/resources/fonts/segoe-sans/west-european/latest.woff2","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:43.441Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /static/css/resources/fonts/segoe-sans/west-european/latest.woff2 HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://teamssdtop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":846,"timings":{"blocked":846,"dns":0,"connect":288,"send":0,"wait":0,"receive":0,"ssl":297},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/latest.woff2","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:35.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/latest.woff2 HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/ae-f1ac0c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34052\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\netag: \"69a6b2ba-8504\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-06-07T06:24:15.844944Z","times_seen":12064,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/picture/340650-hero-bg-1600x580.webp","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:37.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/picture/340650-hero-bg-1600x580.webp HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 614252\r\nlast-modified: Tue, 03 Mar 2026 10:06:53 GMT\r\netag: \"69a6b2bd-95f6c\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":614252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"050a54e271e7668d51db9dde817b5157","sha1":"d87150abc550cf6a2376f31722627363859f3b9d","sha256":"5355057a7597ee25b4f44599ef904b1290869eb2c86f9fe77a273e16f2cf93ea","sha512":"6beb6f0f5460bc5a37fed4a824a48b9c70a1ce494c2f5e321a4e84a6d206cde1a8a6f2d3970e1ad39597f8732c74e4b7645ba71fbaf658aa51f8e891aca3120c","ssdeep":"12288:b6arIdSFPrvMI7c0ZkFvexw1uAB2xt8dmkgKNPThPyE2jKSJw8AUPF:dIsFPrvMI7cFv1TB2x+YpKXJ2jDJxAcF","tlshash":"50d4239c6f100dcc9abb5b1635ab71cbe024881a0a789d42f6bc62e05c33de4bf755e5","first_seen":"2026-03-25T12:32:59.142931Z","last_seen":"2026-03-26T00:11:52.909983Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1050,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":310,"receive":740,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/components/content/reimagine/blade/faqs/v2/faqs/clientlib/faqs.min.ACSHASHfe68b59e840a1a274393b3ab03c85e96.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:42.825Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/components/content/reimagine/blade/faqs/v2/faqs/clientlib/faqs.min.ACSHASHfe68b59e840a1a274393b3ab03c85e96.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":0,"dns":1,"connect":288,"send":0,"wait":0,"receive":0,"ssl":294},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/static/js/jsll-4.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:43.419Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /static/js/jsll-4.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":835,"dns":0,"connect":293,"send":0,"wait":0,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/components/content/market-selector/v1/market-selector/clientlibs/sites/base.min.ACSHASH42fffab3acd04ea132f8c11d5e26059f.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.547Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/components/content/market-selector/v1/market-selector/clientlibs/sites/base.min.ACSHASH42fffab3acd04ea132f8c11d5e26059f.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":857,"timings":{"blocked":0,"dns":263,"connect":292,"send":0,"wait":0,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/js/script.js","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/js/script.js HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 516\r\nlast-modified: Tue, 03 Mar 2026 10:06:52 GMT\r\netag: \"69a6b2bc-204\"\r\nexpires: Thu, 26 Mar 2026 03:56:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":516,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (513), with no line terminators","md5":"602c381194795dfc124facdf48492ef1","sha1":"90d594b7b5af217824f2974514548c95fecfbfa5","sha256":"bf450798fb52e2458a1e10749577e5334f3e1d7907a47fdfea5430cb71fa19e6","sha512":"8837f6bd2a11387d31a866d07b66a0ff2e58d2edc2682a582919a1896ce9b4cb683a795d91968b41fa46c31ce62d34414e1f3318d4f5dda2999447f4bca6133d","ssdeep":"","tlshash":"d2f00eaf68462007467f60a5f4ae23c27022df1bd1504e50d08b3d1c5acf350dba1c4c","first_seen":"2024-04-30T05:36:29Z","last_seen":"2026-03-26T00:11:52.934899Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":565,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASHa34586f5be96a2ea15fe00541db2cdf3.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:37.917Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASHa34586f5be96a2ea15fe00541db2cdf3.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":839,"dns":0,"connect":289,"send":0,"wait":0,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/picture/340650-icon-featured-call-24x24.svg","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:41.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/picture/340650-icon-featured-call-24x24.svg HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 03 Mar 2026 10:06:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2bd-641\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1601,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77e9e7c69f23821ee79746290aee0366","sha1":"47d337bdfa45476e9a6f3b1d426691d3c003076b","sha256":"235a74286d92933b70775038f4a960172d7ebc7640734e428e3a846b561599ae","sha512":"b86e2ee3eb663228e79b09fed406bfa9b988856d206cd17bf38a5718c1f1a2a1ee8950ff376953990e64eb3bf65bc7c6666e086314955b029cfcbadd3312da94","ssdeep":"","tlshash":"243178fc63264779c442c7c1db8106843d5b74f7b9805e30c791b66e701e5595658cda","first_seen":"2024-12-12T19:57:47.874874Z","last_seen":"2026-05-19T09:15:25.887091Z","times_seen":57,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASH2add065651afb45e8c80967dd7b86a41.css","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:42.822Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASH2add065651afb45e8c80967dd7b86a41.css HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":0,"dns":1,"connect":293,"send":0,"wait":0,"receive":0,"ssl":296},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/MWFFluentIcons.woff","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:42.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/MWFFluentIcons.woff HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/main-light.min.ACSHASH561c834597fb9bc5aac4021e21e006be.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:42 GMT\r\ncontent-type: font/woff\r\ncontent-length: 33120\r\nlast-modified: Tue, 03 Mar 2026 10:06:51 GMT\r\netag: \"69a6b2bb-8160\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33120,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 33120, version 0.0","md5":"ea94f9e28c26c32200fa83768edfb3f2","sha1":"66a85c1357a9ce39639420b0c6159a3e0d0f8c0a","sha256":"2efe4515a8c1416c1a6ac23bc0d750e98a58a6572719f31afeb4e49415c89264","sha512":"de50fa71dbcf764718d13e91a0c563712ae8f9bf58b679691efaf01f987a826dd71888ca66711063c7f10de94735303f9f59ab568e0aa6cc04be185c767b3e93","ssdeep":"768:Dw5/fPmMxyyk73WQVz1bDk8IcMHgoD3++LFdZLh3Vx:cRfPmMUl73vV5fkKfoCcZL9","tlshash":"eae2f1ea810f16b7cc4365b5cc65339d0698e8f08b1adc58224765bed40e4a74e7e947","first_seen":"2026-03-25T12:32:59.172673Z","last_seen":"2026-03-26T00:11:52.915416Z","times_seen":3,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":592,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/static/css/resources/fonts/segoe-sans/west-european/latest.ttf","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:42.014Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /static/css/resources/fonts/segoe-sans/west-european/latest.ttf HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://teamssdtop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":1084,"timings":{"blocked":0,"dns":1,"connect":291,"send":0,"wait":0,"receive":0,"ssl":295},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/latest.woff2","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:36.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/latest.woff2 HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/ae-f1ac0c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34052\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\netag: \"69a6b2ba-8504\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-06-07T06:24:15.844944Z","times_seen":12064,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/js/jquery-1.9.1.min.js","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/js/jquery-1.9.1.min.js HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 10:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2bc-169d8\"\r\nexpires: Thu, 26 Mar 2026 03:56:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92632,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-07T16:13:57.760108Z","times_seen":68513,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/latest4.woff2","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:39.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/latest4.woff2 HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/main-light.min.ACSHASH561c834597fb9bc5aac4021e21e006be.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 29388\r\nlast-modified: Tue, 03 Mar 2026 10:06:51 GMT\r\netag: \"69a6b2bb-72cc\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29388, version 0.0","md5":"6e75a94d5f7170a1ab532d32c2a35755","sha1":"9c1b6fff544089941bbeddbcf529c3f0b46d853a","sha256":"d87d0a7a7fe2c36d1dc093bfe56e9b81b311988789dbd3b65abf811d551ef02f","sha512":"27cdbf98a3f42510eaeb28437e3c4661734b685d63eff5e47364ac46b73de617894edcb19ddd9afd955de192cfd8bb755998ed609ec2c279e9afab3db2583175","ssdeep":"768:2075f+Dti4JBZRdp49Z5wmWPb2O7a35bAvDWIfe:2k5fOtiCXvb2OG3I1e","tlshash":"f0d2e1ceb288a6b2cf6f2234d60344d63a3be647565d38b4adc49d918b20d0fe4dd04b","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-06-07T06:24:15.849713Z","times_seen":11393,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/picture/340650-cta-banner-1600x568.webp","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:41.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/picture/340650-cta-banner-1600x568.webp HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 104\r\nlast-modified: Tue, 03 Mar 2026 10:06:52 GMT\r\netag: \"69a6b2bc-68\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"560ad57acb99b2e96e9b497af43e4806","sha1":"de4e1eed0a342297d5e21abbe4948ae8e60d6c85","sha256":"a7268a8afdcf022d33f2ee69718b4360e05cfefa454195f9b9a9817712ab5115","sha512":"00f899b9f535bb6093c92d27ce2785ee6ca3baa21e9a90a6db5617ace9c5b34538aa1b59c76afc74f1acfb50279fe637bbde2a931dad7b70eb18c43f87dd6613","ssdeep":"","tlshash":"ccb001d84729a52d0f5e1c3e7fef8a5210352492619c8ae60447cc60333b374ef60578","first_seen":"2026-03-25T12:32:59.155122Z","last_seen":"2026-03-26T00:11:52.927429Z","times_seen":3,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/static/css/resources/fonts/segoe-sans/west-european/latest.ttf","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:44.882Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /static/css/resources/fonts/segoe-sans/west-european/latest.ttf HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://teamssdtop.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":0,"dns":1,"connect":291,"send":0,"wait":0,"receive":0,"ssl":296},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASHa8a3710424dc6e0dff393c6964441bdb.css","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.543Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASHa8a3710424dc6e0dff393c6964441bdb.css HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":1082,"timings":{"blocked":1081,"dns":1,"connect":290,"send":0,"wait":0,"receive":0,"ssl":298},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASHa34586f5be96a2ea15fe00541db2cdf3.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.548Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASHa34586f5be96a2ea15fe00541db2cdf3.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":861,"timings":{"blocked":0,"dns":265,"connect":292,"send":0,"wait":0,"receive":0,"ssl":300},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/picture/340650-icon-featured-meet-24x24.svg","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:41.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/picture/340650-icon-featured-meet-24x24.svg HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 03 Mar 2026 10:06:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2bd-b81\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2945,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3236cdac34962730a4a756ecef3f3d50","sha1":"7a55b3d06f8748370dbd1d49e82acd3722bd0eec","sha256":"6693ef016fd8f4a720ec2ce02bb2d6cf471ace9aed95c3187bb7b2e689ba1765","sha512":"2ec3de8b5eec31b8eaa8143462c582cbf8b26d3cc2a295461013919780523abf65ce63c6b042e5af4c84240172d4a827159ffed991f6b231874fcf26a3c08be1","ssdeep":"","tlshash":"195130fd763407e9f93417c56ef228ce611a80f1da625670c2a6df0af5db8588e45c12","first_seen":"2024-12-12T19:57:47.872355Z","last_seen":"2026-05-19T09:15:25.903322Z","times_seen":57,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/latest2.woff2","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:36.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/latest2.woff2 HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/ae-f1ac0c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 30132\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\netag: \"69a6b2ba-75b4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30132,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30132, version 0.0","md5":"4c38c2a78502af8dfbfe0f71cc49a1ae","sha1":"4b8c845263b3696e28cf3f313e0214e22688a750","sha256":"1232bbdbc5d205f3c5a40efa5ed92839c79e7879d5168445cc47645bb93f7d1b","sha512":"e60ffea855bba4241daf68af6bd3c1967211a215ef281c7dac8311756a0781d00f529ff0ac5ce789238a4215eb1540c6c61c69d650cb2027c3c72cd475dd7b9b","ssdeep":"768:oE6QnF5iqE+5HV38V+SnObhyTt0VyxVQoZaFjNpa5euFhfbwV:oE9nF5nE+JVMV+fAu2VQoZaROj0V","tlshash":"f2d2e03106e377e194d8360ed63dfc17ceb08166aca3b0e822b741a32f35f585e4a049","first_seen":"2023-05-02T10:00:41Z","last_seen":"2026-06-07T06:24:15.853746Z","times_seen":4603,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T15:56:32.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:33 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 12 Mar 2026 08:13:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b27591-53437\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Adobe Experience Manager","description":"Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.","website":"https://www.adobe.com/marketing/experience-manager.html","common_platform_enumeration":"cpe:2.3:a:adobe:experience_manager:*:*:*:*:*:*:*:*","icon":"Adobe Experience Platform.svg","categories":["CMS"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":341047,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (590)","md5":"aad50b26c35a1731b0710d8b56b12157","sha1":"eb270a882470d6742acc42d818f5a4092cbc14de","sha256":"f2fb4da405212cfd15aee2d4efae9b21f6b36072077e1a8497d420964429f6ee","sha512":"6d9a1ee47467a671c4725a8db72155baaed2c8d63de30080a0c7bded0b0ee3a3d31eeebfe9cb6bea31b90932fe7656487db7036f9fc4d021bae8176824d03ac7","ssdeep":"768:nGiw+XqkwhJQfmElP7My4uigWdcX28xHjp9ce0Qh6CG1BufoPx8WC/EgStBaIfvr:BqDhNu+Nt06tSjJE","tlshash":"dc740f34a0f2ea3940df7585e66f0b176a83e7438b8513f9b19f05786f879689e4306c","first_seen":"2026-03-25T12:32:59.150386Z","last_seen":"2026-03-26T00:11:52.930842Z","times_seen":3,"resource_available":false,"data":null}},"time_used":2175,"timings":{"blocked":938,"dns":337,"connect":296,"send":0,"wait":299,"receive":0,"ssl":302},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/js/jquery.min.js","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/js/jquery.min.js HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 10:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2bc-16baf\"\r\nexpires: Thu, 26 Mar 2026 03:56:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93103,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"e0e0559014b222245deb26b6ae8bd940","sha1":"e2f3603e23711f6446f278a411d905623d65201e","sha256":"89a15e9c40bc6b14809f236ee8cd3ed1ea42393c1f6ca55c7855cd779b3f922e","sha512":"60740da8f871b8263675db2421b0e565fc18e95c772f7c3d5916f224263cd71a6a2e6acceab2f6f8ba1c0607951f0198f525d87d0589fa57045b1d5f292dacf0","ssdeep":"1536:q4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:qGsKXlI2p0WPSbDrstfam","tlshash":"ba93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-07T15:25:09.633455Z","times_seen":20836,"resource_available":true,"data":null}},"time_used":613,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":613,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/css/main-light.min.ACSHASH561c834597fb9bc5aac4021e21e006be.css","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/css/main-light.min.ACSHASH561c834597fb9bc5aac4021e21e006be.css HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 10:06:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2b9-4a3b1\"\r\nexpires: Thu, 26 Mar 2026 03:56:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":304049,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65314), with CRLF line terminators","md5":"e3c9dc13f952e73b55c13e5d40da1f06","sha1":"cc3096112c054b047149549e8f2ee65a38256749","sha256":"66e575c9160b34d12f135f71ab946993d178d6aad923cd7aabfb52bb17dd62a6","sha512":"2feca919866d9166ba64811650a1ae45d02cefdf3c746017b97f0f0ff78dd1bf188146fabe4a0f9a7022e167bfa0b7dc69bcc0fde2c69e7669d3c93297d5f664","ssdeep":"6144:mkH1b3b99G9gR7N1xf6iKyqsNHHlYXklLHdkmBHV6ysv9S/NYWme0QWufThQWB3Q:w8vfThQ","tlshash":"d354c7f9b5a12059a763c13d64d17b78422e2598f315bdbbf1c372ac8f8a38e1112b1d","first_seen":"2026-03-25T12:32:59.177291Z","last_seen":"2026-03-25T15:56:58.734058Z","times_seen":2,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":651,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/picture/340650-featured-1600x594-1.webp","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:41.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/picture/340650-featured-1600x594-1.webp HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:41 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8200\r\nlast-modified: Tue, 03 Mar 2026 10:06:52 GMT\r\netag: \"69a6b2bc-2008\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x785, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"df75a363f85d99ed4ccf1f90654aa111","sha1":"d578425631d197cb52bdf504fa245fe678f1838f","sha256":"8e1d2fb59cdcc26e9e02577623e4224040e17735e668e7ebf02105b4b9c62529","sha512":"45328c5ead802ad38dd34a891a8d77d6a30f3e44c43d315f5aa4b5c94284ecae09b3ab5d39f3e45375a8d4f32b6f45cbc0659aa558a64ce91cc06c32114af3bd","ssdeep":"192:5iiiiiiiiiiiiqwiiiiiiiiiid1Uiiiiiiiiif8iiiiiiiiiBiiiiiiiiiiCiiiO:gI1rcomOeMX2Q9qjF","tlshash":"d90229efe20b69f90c7e3711131d7e1ad830620161f60741ca12a9ea44fffa37c8a911","first_seen":"2026-03-25T12:32:59.14685Z","last_seen":"2026-03-26T00:11:52.936739Z","times_seen":3,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/mwfmdl2-v3.54.woff","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:35.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/mwfmdl2-v3.54.woff HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/ae-f1ac0c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:36 GMT\r\ncontent-type: font/woff\r\ncontent-length: 26288\r\nlast-modified: Tue, 03 Mar 2026 10:06:51 GMT\r\netag: \"69a6b2bb-66b0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 26288, version 0.0","md5":"d0263dc03be4c393a90bda733c57d6db","sha1":"8a032b6deab53a33234c735133b48518f8643b92","sha256":"22b4df5c33045b645cafa45b04685f4752e471a2e933bff5bf14324d87deee12","sha512":"9511bef269ae0797addf4cd6f2fec4ad0c4a4e06b3e5bf6138c7678a203022ac4818c7d446d154594504c947da3061030e82472d2708149c0709b1a070fdd0e3","ssdeep":"768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/","tlshash":"20c2e197c410d15dd123f2b5592b2f6c9a9220ac775e2a2606ce730b1ceeb3253a7357","first_seen":"2023-04-05T04:14:48Z","last_seen":"2026-06-07T06:24:15.883959Z","times_seen":10414,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASH2add065651afb45e8c80967dd7b86a41.css","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:39.355Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.min.ACSHASH2add065651afb45e8c80967dd7b86a41.css HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":0,"dns":2,"connect":289,"send":0,"wait":0,"receive":0,"ssl":295},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/css/main-teams.min.ACSHASHab5234a80034a084146cb7584c9402cf.css","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/css/main-teams.min.ACSHASHab5234a80034a084146cb7584c9402cf.css HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 10:06:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2b9-bf5a3\"\r\nexpires: Thu, 26 Mar 2026 03:56:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":783779,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2823), with CRLF line terminators","md5":"b4e9b527f7aae7accbd02c8d3d3eb125","sha1":"b2244f24b51e196d7eb34abd2d587695152c13a0","sha256":"979cc4c2bdb9907bacfb565c67eba68c420fa6e4891c6d5b4222f48aa2668d34","sha512":"4bdd71b109993b49fe98a0eae4ef1a54d73c5eb6bb7b0e66d41170bf0c4d34cbff3779e1b3881c52a0f068b5d9d8116bc5def0705c9fc11bfc451012bc6ff673","ssdeep":"6144:mOMbw4pnd3CF1YnedLiAqDHusCcCpih8jEesZ9eCi6o:mC","tlshash":"51f4a524667121fa2a339377a3dab31af66874734e0035d0b9dea01d0ffe2b55062e5d","first_seen":"2026-03-25T12:32:59.151328Z","last_seen":"2026-03-26T00:11:52.933076Z","times_seen":3,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/css/ae-f1ac0c.css","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/css/ae-f1ac0c.css HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 10:06:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2b9-29b3f\"\r\nexpires: Thu, 26 Mar 2026 03:56:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170815,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64250)","md5":"b711722748129ecf8e377ff232754061","sha1":"161f121deedd577c29c56910ea37d5014366a07b","sha256":"2a7c818cb20ace5ec383ece206cb085b4f58a0da820bd4e6724416c6cbb23601","sha512":"d0a1d635ba79e51402e3342b50f39be7759a0c7b8b6be7f9e8da3ee6ec6e1a250204d3e65b7c9737332f98e4cd722626d058cfcb4c8f0876f62519e2259d9dda","ssdeep":"3072:bzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxd:LlZAAqkJeqt","tlshash":"5cf384f2a5b028b9127b455bfc82623cbb3cf096d55338e6f785a1846ec1449e2db346","first_seen":"2026-03-25T12:32:59.152557Z","last_seen":"2026-03-26T00:11:52.911657Z","times_seen":3,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/picture/Blog-1.webp","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/picture/Blog-1.webp HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 662\r\nlast-modified: Tue, 03 Mar 2026 10:06:53 GMT\r\netag: \"69a6b2bd-296\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":662,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 40x40, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a20259645fcffc1a4f016d8fc11d035","sha1":"1c9aa658fe9636fb2972cb73ae878d52412825ea","sha256":"d1e7a29ff5176aa4e6d6cefe7e20df9d12276d67be4e2c3ad7fe3045156c5e98","sha512":"4f4bc4d90746fd79346c2218dfea2944a2dbf7c0de87c97f6d84c1e0d654e4a37bc721f103550bdbc2b4c6f0ee923884e304d73bc38be36600b3a8b8506700b5","ssdeep":"","tlshash":"0d01832a9367fdf157147c727124a05f4c09032b8426fa250038d440f2058d27b88be7","first_seen":"2026-03-25T12:32:59.171557Z","last_seen":"2026-03-26T00:11:52.929422Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":566,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/static/js/jsll-4.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.553Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /static/js/jsll-4.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":1919,"timings":{"blocked":1071,"dns":848,"connect":1140,"send":0,"wait":0,"receive":0,"ssl":304},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/clientlibs/clientlib-localstorage.min.ACSHASHb884ef4864d6867bd00aa4a7a5cfb368.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:39.359Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/clientlibs/clientlib-localstorage.min.ACSHASHb884ef4864d6867bd00aa4a7a5cfb368.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":839,"dns":0,"connect":291,"send":0,"wait":0,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/latest.woff2","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:39.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/latest.woff2 HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/mwf-west-european-default.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34052\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\netag: \"69a6b2ba-8504\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-06-07T06:24:15.844944Z","times_seen":12064,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/css/mwf-west-european-default.min.css","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/css/mwf-west-european-default.min.css HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2ba-881d2\"\r\nexpires: Thu, 26 Mar 2026 03:56:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":557522,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"d981d2d47e674751461fb32161e45c0a","sha1":"6aaca3bda8ac5f7cc6a1b1bbd756fd269dd9350b","sha256":"e0552ad53b298847a303037fd5bbdae8fc8b1cec1805ee107571716c50983c31","sha512":"597a61a5638c20f05d3b42d631d7bc22210b79cc0aae6f72443312977563817edc1e0288f87df13abe0255d10987ad97429a9faef9e2c5575e47c72cd6398140","ssdeep":"6144:7VR57iqbPXlB5UR5vWenR5xWeMFdBjL+ks0EcU0MWEsuWe5fXbHfxlN/FNCn/Lp4:6Tv0BK3Hf","tlshash":"a1c4b3b971a069bcd0f78227e441a618f735ffd7eb1374e9e94451983fa048922eb384","first_seen":"2026-03-25T12:32:59.174352Z","last_seen":"2026-03-26T00:11:52.916372Z","times_seen":3,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/components/content/market-selector/v1/market-selector/clientlibs/sites/base.min.ACSHASH42fffab3acd04ea132f8c11d5e26059f.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:36.241Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/components/content/market-selector/v1/market-selector/clientlibs/sites/base.min.ACSHASH42fffab3acd04ea132f8c11d5e26059f.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":1083,"timings":{"blocked":237,"dns":846,"connect":1134,"send":0,"wait":0,"receive":0,"ssl":298},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/latest.woff2","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:36.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/latest.woff2 HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/mwf-west-european-default.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34052\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\netag: \"69a6b2ba-8504\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-06-07T06:24:15.844944Z","times_seen":12064,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/css/override.css","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/css/override.css HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: text/css\r\ncontent-length: 18\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\netag: \"69a6b2ba-12\"\r\nexpires: Thu, 26 Mar 2026 03:56:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"39a19d0882684989864fa50bced6a2d1","sha1":"5ced55dac2e0427e9dc605cec1fedab0949eb15e","sha256":"8fbeded073249c3611742297ee96a976a95ee113f33b9a422a5d3a7a2deb63e5","sha512":"e795cb7de27b42948b7ddff19f3b401a8f95753ac7d37d9b5f52d8dacd2aa43a2ad9eacec29f77d28080e20c21c48b9fa88a733fac108939fb2f0eb036c7aeee","ssdeep":"","tlshash":"c06000000000c300c0f0cc030fc0000fc00cc030f0300003000000000c0c330033c0c0","first_seen":"2023-10-14T18:42:24Z","last_seen":"2026-06-06T16:46:22.995663Z","times_seen":65,"resource_available":false,"data":null}},"time_used":902,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/latest.woff2","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:36.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/latest.woff2 HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/main-light.min.ACSHASH561c834597fb9bc5aac4021e21e006be.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34052\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\netag: \"69a6b2ba-8504\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-06-07T06:24:15.844944Z","times_seen":12064,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/font/latest.woff2","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:39.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/font/latest.woff2 HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/static/css/edc3c78cec41454489459210ca169370.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34052\r\nlast-modified: Tue, 03 Mar 2026 10:06:50 GMT\r\netag: \"69a6b2ba-8504\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34052, version 0.0","md5":"36397a3bc139c6e9f81d383f060f080a","sha1":"3f4f86c10920d4ed345f4858b6cde9f93e1aeb81","sha256":"4f7f4afe26e71fa9ca1dac4a43b557a554a46f53251d849f07ed08a04829d74b","sha512":"7fff4870e9142e6e1921f8dd78e3b049547ec1d540efe573c2938f8b855db61ba908fa9d3c8da1bb2aae6d95217a586d256b9ea2bd8a8f706b1db75bc21f2cb9","ssdeep":"768:WHH8jjaseVFXnmQ8njOkV5c4d7DOgx1J89JzHNBbFOlsy0kQ6lhe:kH8jj3uWxKe5c4xz69hNalP0kQ6lhe","tlshash":"9ae2e155279c3669bc505e7f05bc2586072ca2d6fa7be0e90bb9d05333ac69f24cde04","first_seen":"2023-04-18T11:30:37Z","last_seen":"2026-06-07T06:24:15.844944Z","times_seen":12064,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/js/4615ce16494a4248bd337231247ef65d.js","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:34.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/js/4615ce16494a4248bd337231247ef65d.js HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 03 Mar 2026 10:06:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2bc-201c4\"\r\nexpires: Thu, 26 Mar 2026 03:56:34 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131524,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41663)","md5":"7362ab5ec7cc3cd86b6fba94b4ef4922","sha1":"1217f8ca9614e78123ef20875cff2affe37bf3e2","sha256":"28394675c2e6201ee5a6340c2ed9800ec7e29ea024a673ed625642957c6eb18f","sha512":"f1e67e6f98c80b23c1242723a2ffd6c9383478be2cf296153893cb536401d494a6dc8f1dd5618e46aee9c6795a6b79504af3b898a87e43a6d0e795a78f390409","ssdeep":"3072:Ff/HuF3CpxEIqQ0/9d1EwgXAnKxnKKvim:Ff/HuZ1ILGm","tlshash":"83d33ba9b158357a8bdf80f89b4f1409b3330929944e6058b86cdded1874e4e21b7ff9","first_seen":"2026-03-25T12:32:59.163035Z","last_seen":"2026-03-26T00:11:52.93733Z","times_seen":3,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tm3.zywlkj.asia/etc.clientlibs/onecloud/clientlibs/clientlib-action.min.ACSHASH9eea5f80fed74a300ccbbaa4dc41df2a.js","fqdn":"tm3.zywlkj.asia","domain":"zywlkj.asia","tld":"asia"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:40.793Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /etc.clientlibs/onecloud/clientlibs/clientlib-action.min.ACSHASH9eea5f80fed74a300ccbbaa4dc41df2a.js HTTP/1.1\r\nHost: tm3.zywlkj.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T16:34:13.86913Z","times_seen":16216314,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":0,"dns":1,"connect":288,"send":0,"wait":0,"receive":0,"ssl":292},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"tm3.zywlkj.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teamssdtop.top/static/picture/340650-icon-featured-collaborate-24x24.svg","fqdn":"teamssdtop.top","domain":"teamssdtop.top","tld":"top"},"ip":{"addr":"14.128.47.20","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://teamssdtop.top/","date":"2026-03-25T15:56:41.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teamssdtop.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:14:50 GMT","end":"Fri, 12 Jun 2026 07:14:49 GMT"},"fingerprint":{"sha1":"44:85:FB:38:37:0F:55:BD:62:87:6E:6B:8E:2F:85:96:3E:8D:11:AE","sha256":"1B:D0:F5:61:07:17:76:BB:23:A3:D9:0B:BE:39:0D:8B:63:0F:D6:2C:D7:CA:74:47:0E:A8:11:4A:FA:B6:80:A5"}}},"request":{"raw":"GET /static/picture/340650-icon-featured-collaborate-24x24.svg HTTP/1.1\r\nHost: teamssdtop.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://teamssdtop.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:56:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 03 Mar 2026 10:06:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a6b2bd-72d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1837,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"831aeaa2a97582b14c9659f3a0c74352","sha1":"a0b6db543390122c611e90c0fed11a79f714872d","sha256":"31376c473affd3be5d4c5b67cb670bb2782cd9b8c543d11d25d346d4ba9d9bab","sha512":"dff63a085e70d5646ed6b66f42a3fd86729944c6ea578ec8b7079e6210b7c09824eab21c56e7e45227d3824c9ca9e3026716aff265f53affcf4da74dbfc0549f","ssdeep":"","tlshash":"933142cc6b3886a0a46083aff56490af760da0e569430670c95a1f4df40b9f9cf16acb","first_seen":"2024-12-12T19:57:47.877269Z","last_seen":"2026-05-19T09:15:25.906198Z","times_seen":57,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"teamssdtop.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}