{"report_id":"16b9453b-708b-4568-a5d5-de0c08e462ef","version":6,"status":"done","tags":[],"date":"2026-03-28T05:58:10Z","url":{"schema":"http","addr":"officeonline.com-s02.net/","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.129","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"officeonline.com-s02.net/","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"title":"officeonline.com-s02.net/","dom":{"size":1174,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"fda3645aa041ef76376451813980e688","sha1":"492cd704e958d1d84a0ae5ed925d2439edd60925","sha256":"a7f72e4d3eb1a6857145abee462ca1068bc602249067a0a6b11b27f41338b47d","sha512":"fdfddff20320c5b0d67a693e7ad4944db2cf14c927f8240c173336a512631c80d91c4ea975fcb218a72d863c634e1d17f77d32b631c59a955d60ebe855b1a67e","ssdeep":"","tlshash":"5a2198094990464f324022339d9a9238cea2624bd35cfc34b83900a95f667af817fce8","dom_hash":"domhashf313a5113040a1b8673a7db791936a7f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"officeonline.com-s02.net/","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.129","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T05:58:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"officeonline.com-s02.net","ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2019-04-24","domain_rank":0,"first_seen":"2019-12-20T18:51:26Z","last_seen":"2023-05-25T10:48:05Z","alert_count":40,"request_count":40,"received_data":827263,"sent_data":19914,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"api.sosafe.de","ip":{"addr":"3.123.49.19","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":1593613,"first_seen":"2019-04-16T14:26:15Z","last_seen":"2026-03-28T04:46:50.777464Z","alert_count":0,"request_count":1,"received_data":628,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sentry.sosafe.de","ip":{"addr":"52.29.48.103","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":2075445,"first_seen":"2020-04-01T16:57:48Z","last_seen":"2026-03-28T04:46:50.788209Z","alert_count":0,"request_count":1,"received_data":301,"sent_data":640,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/js/bundle.min.js?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"402925ff5a5f933ddf594154e889825f","sha1":"9dd6c50ac287e20d08f243a743d7bfd7ce35a857","sha256":"2955400b8d0bdf3e4f5d2120e9cce06c6434cf0268d0bc66bb32e92026c414d5","sha512":"520c11a3fbaa90f0942dfa111ff6b03e26b075ebec3a72ea50739b126bead234fbb7482925c70253b8063aee12ef6ac9e2e4dfaf18882d1bb832a102b5016e84","ssdeep":"6144:XQngo99zlfzQhZ5dLxw/1Ii3r8KyKdnmYPfSr5qIExiqDB3LwG9Pg9vZbPv1qAIj:XQRShZwipGD10/v1qhY3zY","tlshash":"0784c64a39f21162052321785b1fb045f33185673219ea9578aecb5c3f89a3997fbbcc","size":398614,"data":"","first_seen":"2026-03-28T05:58:12.471749Z","last_seen":"2026-03-28T05:58:12.471749Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/js/jquery.min.js","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-05T07:43:24.080116Z","times_seen":445213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/fonts/fontawesome-all.min.css?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/fonts/fontawesome-all.min.css?ver=1772793744190 HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:27 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"81a0b4338f791f33588b3b8a7672dd4b\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: WqPn7H45ZghzgqoIN41_zjNjbItdyiM6bgPeF1zDsyWe3VDP9sfQ9g==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41011,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40830)","md5":"81a0b4338f791f33588b3b8a7672dd4b","sha1":"c766be0c45c27e3e7ea6863f9b2bc2522d9836f4","sha256":"fd702d8d6882cc47c74308ec46b1476035492c3d887741b279bb830c49b9b2bf","sha512":"322792c8b8092095b7fd728abb17f84e31c68c26106a3f3e21ba4ad7b4370d62213959b0a770a104ae91389400a403f141cb597ff10f8417aa8223a0a3e844a3","ssdeep":"384:R++rB31vxRjTQ6K4WTdaam31pM/h4DwIkbAp/B1MH9j3BmWS/7QPUBl/fo:h31vxRXQ6exUc/skcp/TMdj3tcQAl/A","tlshash":"78031cb8e54c41c6a731c44fff82b2b862baf73ce5851d95f00e691c2ad16a811c5fb9","first_seen":"2023-04-18T07:38:34Z","last_seen":"2026-04-01T22:58:27.785087Z","times_seen":312,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/js/jquery.min.js","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Mon, 09 Mar 2026 11:15:30 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\netag: W/\"8fb8fee4fcc3cc86ff6c724154c49c42\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: p7SJGUId0X2cd1L7xGfzdFM8bw1eotUiY-fM_mr244euF1rwCmbKGQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-05T07:43:24.080116Z","times_seen":445213,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/user.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/user.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"10c7e3ab32552ea42e0820cfcad473b2\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: bImX13yaPbwA5dWeTsolv9kcRnJ4NHn7UBj_9LY_aqUdEcBZJFSwOA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1792,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10c7e3ab32552ea42e0820cfcad473b2","sha1":"800c76f887fd38be3ec4675840cb9b2a83d03852","sha256":"fc003f7292bb9d9c29f4af43247a81bfe4a278e64ed05f7799369911cdf85801","sha512":"5d10fca832265299936844f3b26a403a15d8819283df04ac7b75f2643d3638a074038a2a0264a69e89c9991b455b2129cdaac052c70409aa4f7e0aff78ba190a","ssdeep":"","tlshash":"823187c8e7f450797cd59399873ca999378ba0bb11108a34f2acdd4c2f036446288ccd","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.458172Z","times_seen":20,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/bulletpoint-list.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/bulletpoint-list.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 674\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\netag: \"e42834278e2488c674365e064718982a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: Zvnfv4uL_IX9TL5FvzhEOZEEYTbKGs-j414_uRoi4yj70-c3TnJDSA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e42834278e2488c674365e064718982a","sha1":"c9a83c20340dab6ccf33a172b450a01f1217826c","sha256":"d6cc56628bb74caba618d6e80aad75d55472f67ae9a2ff160d028f4dde90c8b0","sha512":"0ec39d512e500d843626fac8123d7599ab6694032fadb28b56df18fab7331083988fc7eeaa4d934d21724cbcdcf8cf003c14fa6f4cfe56a7fcd81055af67ff79","ssdeep":"","tlshash":"ce01f93ca8c1f93d1d5d4385d7569ac8501fd2608d203d8a6c8d4e66ac80f5e7431fb8","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.459488Z","times_seen":20,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.sosafe.de/v1/user/ip","fqdn":"api.sosafe.de","domain":"sosafe.de","tld":"de"},"ip":{"addr":"3.123.49.19","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 06 Jun 2025 00:00:00 GMT","end":"Sun, 05 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"72:FF:0D:1F:E8:6A:37:DB:FA:B9:98:68:39:49:E8:BD:E0:D2:AE:FF","sha256":"B0:99:70:82:AB:44:69:9E:37:B4:40:AC:09:4B:83:C9:2A:AB:7F:A3:67:22:C5:B8:E7:2F:BC:FD:5E:1E:9F:DC"}}},"request":{"raw":"GET /v1/user/ip HTTP/1.1\r\nHost: api.sosafe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nOrigin: https://officeonline.com-s02.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 76\r\nx-dns-prefetch-control: off\r\nexpect-ct: max-age=0\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: no-referrer\r\nx-xss-protection: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"4c-tbQ7cjwp/lghkJm0MtedODOxOcw\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"edfbd102dd818e11bce9740c3260f608","sha1":"b5b43b723c29fe58219099b432d79d3833b139cc","sha256":"957c24bd324d60081456a437df66bcbc8dc167368dd2749acda20438297df41f","sha512":"d13a1b7f83e6ca2533bedd343e019693791e6d38b06bd4bb7f55ed74f5ff4e3c30d9c47a432581ee2b791f8e01e755faa9fd745d6008954c03f3ee637c6e5de5","ssdeep":"","tlshash":"45a02451041040130fc05c0dd3cf434d1dd10403410f05004c5c03d1005df37530503d","first_seen":"2023-12-01T19:38:06Z","last_seen":"2026-03-31T12:40:04.597645Z","times_seen":326,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":221,"dns":5,"connect":21,"send":0,"wait":32,"receive":0,"ssl":194},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/cursive.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/cursive.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 506\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\netag: \"782144107c53f75c1555e61113827f16\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: GQTmf3x4cbkLHJ5p0pxNEHYEr-X_CUu2uUp8jt3iWhUMABCKJ6ONBw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":506,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"782144107c53f75c1555e61113827f16","sha1":"6e061b24980a46c408161d47b19c22ad7d1bea9d","sha256":"ad13d05c55c58dd374f9ba184a6032f18fae6622647a7750f467111f1dd3befe","sha512":"a04be2c992729f72a27e425613f6e8931828d8720ed130823d96d62c290b03072b07b34c9a7941358779661ccb463571329e81e1d4e5b8fdd54b278b9ec4e7da","ssdeep":"","tlshash":"9ef05014981d4e12013e53c972aa9ec820257bc54241344ba9bd375395c0f4f3706e8c","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.460999Z","times_seen":20,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/font-color.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/font-color.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 900\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\netag: \"c1abf08fd12966e6c9d8000e01e16a96\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: ecsaMB8KVrJftUMgCFyWnXm64dGb-_YC4CrXMkIHiR7PgjkF2M6lbw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":900,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1abf08fd12966e6c9d8000e01e16a96","sha1":"60ef0c10c4fa1a13244cadbe3a9d2940f904fdb5","sha256":"5138cf0295e40cf22d48632850847677717922ddba32aae23723327eb8a62ead","sha512":"8cc9d34a5f2db3575d5fd8ab9ee887b5771d12f0a2e8e915d2da0424ea53a1b8f1a865874b894b72a14262b504cee44c5244e3fd58e3c355e42853189e6d2eb2","ssdeep":"","tlshash":"79119c209c8c8e77140f13814baf4e091412738285103cc7f86d09a7cbc58cfa567eec","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.461786Z","times_seen":19,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/menu.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/menu.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/navigation-bar.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"6662d83d581a28d6cda7a67de6fd6b01\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: oMO53pEjf-Gd_ejqE4PN7Ne182bbs_XTJN-90y_G9pSf20MkszDg3A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6662d83d581a28d6cda7a67de6fd6b01","sha1":"4eddba772f00a076a4b04f0c3d0a9a0a024c819e","sha256":"36014dcf99324ed5780ee73976f037d266397673fb15df5dc74dd18778ccd545","sha512":"cdf3ecc47d0c334edcd65e600d1cdd0c8e21fda438c28f56a4cb723c040f67a2571344e79b8eacbe008380008a670af2d512eed45fab8d07851f1e20cfbd3ace","ssdeep":"","tlshash":"9d21b286329fe48314e15f58caef0f5367220afcd84611b877464b583e1f7705970ea4","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.462724Z","times_seen":20,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/fonts/material-icons.min.css?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/fonts/material-icons.min.css?ver=1772793744190 HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\ncontent-length: 671\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\netag: \"153cb0236d11634c653d18181b3a1613\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: KD5FibL_K4Wx3qJtp5a9Gcmp2FsEGXIvGRHNtkQqPmeAvfOB-RqQ1w==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (671), with no line terminators","md5":"153cb0236d11634c653d18181b3a1613","sha1":"c172b0d031ca071a42478626bc78cdd44f26b2cb","sha256":"e8e23ea893b24b7b7cfef869d747e400f8f9b0f8c5580a59ce729665daec03fc","sha512":"b4a994327d4dc0c6ba6209a900c166e544e05a76920b562af03b486fd04100164c94a18da78f4fff16a20a77996addb42152b9e3198f7b92984db103651051e2","ssdeep":"","tlshash":"640147559afd214f90620ca2798e3b150902323fc427c4edc6152f3c28e746a137cb1d","first_seen":"2023-04-18T07:38:34Z","last_seen":"2026-03-31T12:40:04.584656Z","times_seen":246,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/fonts/typicons.min.css?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/fonts/typicons.min.css?ver=1772793744190 HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"5d68383bd41df3b979ee00688e6e8821\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: 0nWQJ0TxTcqzOD85VIDDoywaMbsah_S4QIOGBQn7B7GdQmgJ9k2Mqw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":14985,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14985), with no line terminators","md5":"5d68383bd41df3b979ee00688e6e8821","sha1":"cc754446b7fc19de41d3a2012d37c8281afce9be","sha256":"8660ed12799916f277ccbb1fa1ba74dc2483dffa91089998ddfed5a9feb32200","sha512":"4626da33caece5c3afcdffa90f0f413a21f8772f954cec71cdfc0e34c90e39dfe515b296722ae15e459c49dd12e863f07d0453e0eae34fc8802950b9888bcc44","ssdeep":"192:rqkJPV8GWPVkGXbMIlzlJWNC8an3bM6sV:7hWtxrtWwxs","tlshash":"3362e1e4d64800ea73b9e80383d1a34ae0daf27ab7458ed1fc0b591d2dc632516d1b7e","first_seen":"2023-04-18T07:38:34Z","last_seen":"2026-04-01T09:11:34.403903Z","times_seen":316,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/css/navigation-bar.css?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/css/navigation-bar.css?ver=1772793744190 HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:27 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"b8239c6b7faba7a4d1374be0d854e896\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: ThcgwQ3zjioqO4lwnpDjsE85ZGSIxmVCktx8LqCLscK2JxFLP6p0kQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b8239c6b7faba7a4d1374be0d854e896","sha1":"1bed3d81db3ff866f35685a341c8a1cb27d1b226","sha256":"59cdfd9fafa426f6919d48fc0fada06cbf4b04ffea5a13938076b77b61748c09","sha512":"3605586f108d951d85c6b964ea484583122111146b81def6fa312781d87a988fd1010b3d0c6fcece2ff6a5c80682aa4606e81524efc2c9ddedd16462061d38ea","ssdeep":"","tlshash":"3a4122c6a27339155a17d4885fe98606a2aee04bc10ed45d3dd621cc4fce2d594f37cc","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.464729Z","times_seen":20,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/big-font.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/big-font.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 782\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\netag: \"04d5470578f2be3725b95575edc0802d\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: Ld84R17eRQpvTpmgbOCqwtS7yW2QMLa4vQML7Vsmjflayo98ApekCQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":782,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04d5470578f2be3725b95575edc0802d","sha1":"9a0b343affc33e6f4e6e88453566d5749bc5492e","sha256":"cab5dee61ca4be26d7b214f07d8f194369cc23d183761dabe8a3d6f8db36b5be","sha512":"6ded65e08423d427cf405cff254dabe6a54bbb5b85364aab6bf413c11e035c6e0f60767eee67d357a3aef0ade90094d314aa1fe185a5827ba7e8bd98dade9a94","ssdeep":"","tlshash":"c101bd15a80d5f35dd4d83ef8a5bde450155a3cd801238abdab109c99ac1f8737aad4c","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.465588Z","times_seen":20,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/underline.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/underline.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 534\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\netag: \"1695de2fbbc0b0e87cd9042c06c72f5c\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: ZHCbNm27mNNF53yWGEWROGHqBBLIJ4Grh4chR3RyaXGDwQmzwpNe7w==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":534,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1695de2fbbc0b0e87cd9042c06c72f5c","sha1":"1043765f966688cc76cf1101f3ba940d8a1444c9","sha256":"19e18e93e2bde6320265af55a537a920de6da1f5b8c6e452c64a9f178c38fe9c","sha512":"0a94cd89da0292f210d6ae92071c5dfd8108a4b48f90ecc58ec9cbd38b5681c09e3ee6dc850faf5cf7a3c681d704e5e709d0fc76df044ef6aa1d9b37e42e117f","ssdeep":"","tlshash":"eef02b106c0ee90d49af1340321bd55418de73c1c1603db75cdb1d27da496ebe4a1b84","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.466448Z","times_seen":20,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/bootstrap/css/bootstrap.min.css?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/bootstrap/css/bootstrap.min.css?ver=1772793744190 HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Mon, 09 Mar 2026 11:15:27 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\netag: W/\"d5b85a4a84702977b70e32ce38f6bf30\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: 3Redtw5Jyq1N2l-P1lOUAp2iRjVcB0YAQhysPZj50pWRHvSYPG7azg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140870,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"d5b85a4a84702977b70e32ce38f6bf30","sha1":"ee6efb12cc93fd0f78ebc047600b7f2559395b11","sha256":"46b4721c80749cc5e1ec6cf4c5fec78a2c51fdfc4ee9c94f2223cdaf4fbd8ced","sha512":"e904f92e3c9f65d79dbb818066ab95d8ed6760330ba0f6a6507317e71376dd486b7b61479a1ea29cdbf5094e2492efc9556c0cd6dd637fe7ff3d91c84d54c53e","ssdeep":"1536:ux1dwyUPAy+QYYDnDEBi82NcuSEz/9OOL/gIENM6HN26B:q1ObPnTLYIENM6HN26B","tlshash":"98d362a7f5a0312da467c61960d0bafe156f8285d7221bfbf42737644b895cb0a73e0c","first_seen":"2023-04-18T07:38:34Z","last_seen":"2026-03-31T12:40:04.580073Z","times_seen":264,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/bold.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/bold.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 384\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\netag: \"323a024fe1063e8db8cb94222d251e48\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: 5i44x5UjOuaGpi-M_RuzPHcsFt-MFVvOw9hcNn6jSXOI19P_R-qobw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":384,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"323a024fe1063e8db8cb94222d251e48","sha1":"39aaccdaf7732410e2fd1d66a23045c9aea16420","sha256":"5d554ec3b97cd0e9f4a9617b2d17b7d64fe470aab7f64521b2ed497b4d8687cd","sha512":"0999aa0f3f6ce6ac3c637019c81b0319cdcfce5c7dfe1c2d5c1bed788f5d7241d531f7513ebf23ff4ab2dc0d0622174fa879880915e3b54717ea39b651e1a0ca","ssdeep":"","tlshash":"12e068019c064c2a442f1385aadbee44213b708282222cdb4cb71f5bd1cdeea7842e9c","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.467989Z","times_seen":20,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/brush.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/brush.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"a0be6e40c2748ca3f79ff3422059324a\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: eU2HpPqwPJ2fVNt50pBQqyCm2piIq7-F1h0dRyWGcrGZHXK4uUuZog==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1932,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0be6e40c2748ca3f79ff3422059324a","sha1":"2aaa7442fb1bdbf64c5c95a0ec0475007b7d0db5","sha256":"532e4655d2ad661e4cf5fc4b66dd658a6bed2cfd4861c19baed0a2dc0db8bbff","sha512":"dd2bb1e21102fe8c1504b4a178159a5707562e712bbf0c39499134d579f67b491c9f6434f846232412b0ced037627dbf13664a6f1eae8a97cce1348aa1980071","ssdeep":"","tlshash":"6b41ed26dd1954ba85ede3c047bf86868738c39e81213c13b8ad0e704f46d4f9767e65","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.468901Z","times_seen":20,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/word/icons/release.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/word/icons/release.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"8c88cb3357b77db659d800a474a0662d\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: 8RlHgGhwj4JbJVlxBMPT30cjX8JUSh95_ClP8NCGAW1etNJKDy9Zpw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1586,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c88cb3357b77db659d800a474a0662d","sha1":"d37fd4176591f1a48e4b8dfdfb549a8d02b1521f","sha256":"eef76b1a917772290c4f6e6e3d3264cdc99183992c3190e564d055636ce55dee","sha512":"ef35462db9d682593ea6f5e7ca3d0e4c9b3766e5fdea6be5fa50dbe9cd486169bbb34f9f609c3ebbbdfd0662b0dadf5661372903340b0ffc409a0738d611d7f8","ssdeep":"","tlshash":"8231b1258808c53855df93867e0f4ec2876ee34e4a113c53545fd9b09e06f666773e0a","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.469655Z","times_seen":20,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/config.json","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/config.json HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json\r\ncontent-length: 247\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:27 GMT\r\netag: \"123040f831382df569a9542a8a7d25f8\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: lu0yXze7h-uU4hzVLdpQWF64cLTGnkZuBV1JQ7Bo9NbIj-okwpD8Ng==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"123040f831382df569a9542a8a7d25f8","sha1":"d44c59e8742aac8823f291c862b54a5ceba5209a","sha256":"490a414650813a17279c850719444ddc15b9ca4a266a4122e840d19d85f2ea4f","sha512":"c90928b449dfd9bc964adb8bf0fe2f2a006ef5886fb15925da5638985b1e63ef0bcaae5d5c4930af222de3c1c190c1810f29fab6c8068c6033191927d216c810","ssdeep":"","tlshash":"b6d02beb5056350d51c722a0c037168177220c0915f0110af74781212dfcab618f061d","first_seen":"2025-04-18T14:22:43.230884Z","last_seen":"2026-03-31T12:40:04.595522Z","times_seen":249,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/css/utils.css?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/css/utils.css?ver=1772793744190 HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\ncontent-length: 586\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:27 GMT\r\netag: \"a6bcb12e682e12d6a39d68ca2d0417cb\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: JQzoew09X8MjGQrlQxXLawdiKx5egbKfTBI3yK6JzoCzTmyQMmff4g==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a6bcb12e682e12d6a39d68ca2d0417cb","sha1":"98bc33b4ffe867817fc225820f21dde8613e49b2","sha256":"1dbd794effcef3893ac830daeb68136dd5548f9b58a0eff001b11def2b677685","sha512":"2a0c2e1f3631ae16e668079ee0b91cd0e9f5f7ccba0b8605fb76282f908c22f374dae95ac99eeee9f114fbc5eb9c6ad99ee8db5a791e459a0ba15e7558e4f196","ssdeep":"","tlshash":"fcf08b2004f20d34867ed5a6447df566f2ce71cb8c8f4ca4324b282c5fc938a1266f5d","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.470974Z","times_seen":20,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/js/bundle.min.js?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/js/bundle.min.js?ver=1772793744190 HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: br\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\netag: W/\"402925ff5a5f933ddf594154e889825f\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: 6ctCHCAf8H8l1px_LQdNz34_6i9B60BKb51MSxjOfKFeCFDR2ZA96A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":398614,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1708)","md5":"402925ff5a5f933ddf594154e889825f","sha1":"9dd6c50ac287e20d08f243a743d7bfd7ce35a857","sha256":"2955400b8d0bdf3e4f5d2120e9cce06c6434cf0268d0bc66bb32e92026c414d5","sha512":"520c11a3fbaa90f0942dfa111ff6b03e26b075ebec3a72ea50739b126bead234fbb7482925c70253b8063aee12ef6ac9e2e4dfaf18882d1bb832a102b5016e84","ssdeep":"6144:XQngo99zlfzQhZ5dLxw/1Ii3r8KyKdnmYPfSr5qIExiqDB3LwG9Pg9vZbPv1qAIj:XQRShZwipGD10/v1qhY3zY","tlshash":"0784c64a39f21162052321785b1fb045f33185673219ea9578aecb5c3f89a3997fbbcc","first_seen":"2026-03-28T05:58:12.471749Z","last_seen":"2026-03-28T05:58:12.471749Z","times_seen":1,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/lightbulp.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/lightbulp.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"a62635b9ea52f93395acde9645ccade5\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: z30XaLdvtLy7DfdahluIa-HeDa3HgkWXifsdUylU64Hqgb2E5eJ0-A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a62635b9ea52f93395acde9645ccade5","sha1":"73646b5bd732c28d3e746353060e8edc8867cf34","sha256":"3134b7f5d27f1a31e83af178883e426aa9e5042f080caa33cf5f1dfaceecadc6","sha512":"88285e243ba89deaf1adea4888b1a5bec8f09df00912ec59b61c075379d0ca1bca0968f454af139a269c5bedd3f3ea160ae721131a7574470f09cb69231ee4fa","ssdeep":"","tlshash":"9e41b9389c0058b8dadd83c12a3f4a85472ee14e45113c631d1fe5a1ae49b5ee3fbf21","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.472601Z","times_seen":20,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/word/icons/comment.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/word/icons/comment.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 535\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\netag: \"7b0aa6b07b6d428a88bb7a0f451c87f8\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: ZZUKLTCIV6Ad7NLbi3Gy9X51bXJOAa9WhH7B6ftIaX8l6Y-LmAJT_g==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b0aa6b07b6d428a88bb7a0f451c87f8","sha1":"4a3fc299cd11a470369a1ff82294e5fa749ead29","sha256":"863f69a9d80d6fc1f7d3426e87dfac146c334e15de4f51d34b7d8e5526000b52","sha512":"d6ca364d1df28f99e6a8571526c635333b33f8a73e0a86837dc3c6e1a272a74f028feba2b8bb828f3798f51e2650acb3db6ac0f46564045d741e0406a65dc149","ssdeep":"","tlshash":"00f059155c14c93a8b0f1386269a1a672937f10041b22ca68d6a0f3e8246d5127a2eec","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.473433Z","times_seen":20,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/back.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/back.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 666\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\netag: \"3467766dca2addc054f124c1e1eeeb41\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: 3S-FDiIllimpCQZwxgwmwQhejXcse3-dq6Sb4SWKfGRPiDu_PUpAKA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":666,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3467766dca2addc054f124c1e1eeeb41","sha1":"993e3c6f5d8c976a05bea80346d3cee6c0d1a291","sha256":"0f7ad20f67050c0cfb60b55da7c9477483186451348bf832d3a49cf7e7d6724f","sha512":"3c1b1a782107f4a92aa71fd05246cf641c60cf401103f3f943607c534542e1510c3c2acefee202ad89eb727792ce8bed2ab1707a396649e789d489f439a25d48","ssdeep":"","tlshash":"9401fe399cc864546988d3800b7f8e21015ed38d40103d53b89fe7501f095c0f677e0a","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.474312Z","times_seen":20,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/file.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/file.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"029c398ae9328f71cc28e41f15dd48f6\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: 92vn_YEl8AaeUR1nyWLQm3Q8TCcZ1QA7hjPE1RO7dDXkd1dcohW5lQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1277,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"029c398ae9328f71cc28e41f15dd48f6","sha1":"c0f94b273adac76503282b10f6ac113c56ed575e","sha256":"ecb120de6bb1030a9160f71196b3f1c761b314ceedf23f77bf7a3ca5538c5b14","sha512":"473aa63613810948afd2fc0e6455c58d2c43c5360b852c5fdad0918cd080cdf79b1e408d6305b93a823d49dadbc6f166202c1581885c8a5c166cdb7506b0fee6","ssdeep":"","tlshash":"96218b39bca04059862a93c05b2fc282642d929e80303e377ecd0a615f09f59a9aff64","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.475128Z","times_seen":20,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/delete.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/delete.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"93717f6dbcb913a30a64538721217125\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: vWABTnziQWhIM1hHjEJWwrXmrk7teCJDkvcTVAcGNP-f1-XiM2gTEA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1260,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93717f6dbcb913a30a64538721217125","sha1":"004574362f30f68028640b6ad75b55e9a5fee56c","sha256":"6162b7a3457b42b5d7672fdc501c83785c174ea5c080f217b4907c52832bcc09","sha512":"9be64f74abfd1cafb4405a6ee2dd0d8734cb13bd5343a5ab6af53a3e2636dea98b695788735c8ab61e580a4a0ee78af4255dfbb431d074440424edb876917097","ssdeep":"","tlshash":"7621c224887c9e22158d63d126df9d06052bf5ed83013c53b65c0a51df8199b63afe9c","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.475875Z","times_seen":20,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/css/styles.css?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/css/styles.css?ver=1772793744190 HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:27 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"31f497066ddd5874b79a68dd73fd732f\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: hdxBVSzT7xLG2ATUEp3qonACTgaOYkWFqIY4UNMsh78QcGNI6-1daA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2659,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"31f497066ddd5874b79a68dd73fd732f","sha1":"981e396259a8cdaa08d474011813cfb42d32b0d7","sha256":"cdf9ae120bfe7b446bfcc903bf5809c6e25fe9cfbcaee723f194c4686cbc9c26","sha512":"435a7ae759529619157f321ab5961f374937bd0a4a6227e9adc330127439254db8a541c45246c27a169c3962d78cd3b72917928ac069f3a39c2cccc996e6b783","ssdeep":"","tlshash":"a451af15aaf31686a807c42c27faea5933ae5057830fea6c3f9173508f4e38059727dd","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.477144Z","times_seen":20,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/dott-menu.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/dott-menu.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"db6d86fb3010db9fb1ec0dcd6ae3d43c\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: p69XrIsGz1dqFwCEMLI5Q66ChxKM4BgvHovmPsVknwbz4WiEglYq4A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1796,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"db6d86fb3010db9fb1ec0dcd6ae3d43c","sha1":"170b550a903654dd6906c126cffe28f0e4067dbd","sha256":"dd6713be57ae5759e009ad605f45f4d9c056652578eeb864ed3f75aa6b5a73a9","sha512":"8679741275b282ae32da135871026c0df75e1b438b83f4b2ba489b68d97531b5b30265aad4646ccb1b8f78bb5f64838c480e13ce8eb1c07cb447c5b02021a479","ssdeep":"","tlshash":"16315c1fbd9150ada26ae381193a91b05d0727dcc079253397ed29718e4ce20ee7ff15","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.47796Z","times_seen":20,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/tab-right.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/tab-right.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 770\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\netag: \"f8ada785589c7fda7e0c4bbb7c81ae6e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: SrT3kjT2FZgISlI1NYiDDr4cLCXnig709WSmXxD8zhWX-KEckJrjEg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":770,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8ada785589c7fda7e0c4bbb7c81ae6e","sha1":"078647e5b2892e7392d2291c11ce3ae8cb9aae51","sha256":"14db40ea764e952a5267edbdec782cb8c6b80009ea26294c437525cb02ca101f","sha512":"2bc83a9a1313ca6c4ed8ac2e2e6b3d426d750fe78d6a0d25c7c154964801ac966d67dccb5b9ddf60855da5770ad7669384730f9eb887eb1e048c2aba164d8e8d","ssdeep":"","tlshash":"eb0124304d44ec6e490e038986eac9c1511e70f58152be5bcc1d0f1ab8c989ea9fbe99","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.478806Z","times_seen":19,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/arrow-down.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/arrow-down.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 244\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\netag: \"1e364d83772e5c77d248aaacc7e2d42e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: oglpb9a1VBZTzJK7LPryt-LCvmaQFSGNbM5OA-Z5_HBAlDb8XG9qIg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":244,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e364d83772e5c77d248aaacc7e2d42e","sha1":"39add3ec9970633b72071e44571c6b5f7a51eee1","sha256":"3085a16fe597e3fe3ba01b833db28c9d9659e5b2fbba2ff5e7d6da299c304524","sha512":"d2736354e674e14fbc61c0549705f07bbf16e20d882cc12803867c7e871faab62a156149027af256eff64513fbef335cb5955f2cdd59f5d54c1322c21339500d","ssdeep":"","tlshash":"45d0a75998ea6c9e71fed3002d6699c8186951d385540d9bb5ac1195df04cd3a818bcc","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.479693Z","times_seen":20,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/highlight.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/highlight.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"2a4923974a7d22e93f7dac7a62d583cb\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: h5bO5DcllLd-VIUSaKOUVHWyZ9Fn1ycGRMo4VNoqD2kzkw6Nr3CRgw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1217,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a4923974a7d22e93f7dac7a62d583cb","sha1":"44bfdb227586593ffd156cb27bfffe201af69fed","sha256":"8ac5a29e191c2bb935c8f78ccebb79e9b1121d0d1872061d47b5fc0f83b30742","sha512":"2a04f35309ccb4d97f567ac895e3e977ca093d775d034cdac29f04434af3ba08395c022e31ecbc05f64911bf9a65af5989ee8d92d4a57db21da0541059901bd4","ssdeep":"","tlshash":"ae21af10bca85926181f93865bba49896a15b1cec1002d93f09d4d21cf82c8ef6b3fdd","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.480427Z","times_seen":20,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sentry.sosafe.de/api/25/envelope/?sentry_version=7\u0026sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_client=sentry.javascript.browser%2F9.14.0","fqdn":"sentry.sosafe.de","domain":"sosafe.de","tld":"de"},"ip":{"addr":"52.29.48.103","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"sentry.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Thu, 11 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"DE:81:FC:D6:5D:D4:3A:2B:88:DB:B4:42:14:A5:8F:41:5C:83:DF:A7","sha256":"D2:3A:CE:A2:3A:50:98:ED:7D:D2:62:46:71:1D:E8:D3:86:43:34:61:06:6E:13:C3:63:53:C8:3C:9F:0B:E5:BD"}}},"request":{"raw":"POST /api/25/envelope/?sentry_version=7\u0026sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_client=sentry.javascript.browser%2F9.14.0 HTTP/1.1\r\nHost: sentry.sosafe.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 446\r\nOrigin: https://officeonline.com-s02.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":446,"data":"{\"sent_at\":\"2026-03-28T05:57:49.164Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"9.14.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"2cdfe9123188449aad7925f47d4196aa\",\"init\":true,\"started\":\"2026-03-28T05:57:49.163Z\",\"timestamp\":\"2026-03-28T05:57:49.164Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"fe-app-login-pages@2.16.0\",\"environment\":\"production\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nserver: nginx\r\naccess-control-allow-origin: https://officeonline.com-s02.net\r\naccess-control-expose-headers: x-sentry-error, x-sentry-rate-limits, retry-after\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-05T07:47:19.139081Z","times_seen":555632,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":357,"dns":4,"connect":21,"send":0,"wait":25,"receive":0,"ssl":335},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T05:57:47.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 09 Mar 2026 11:15:31 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\netag: W/\"8ef951a960caafccd74f07c936bdbb2d\"\r\nvary: Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 5ed6c615030689b753623a96db36dbd0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -jploojavPcE-Oza-wQ4L_24zd5vC6W04TmGMIsvy26A1eCuCJYUDQ==\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11871,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"8ef951a960caafccd74f07c936bdbb2d","sha1":"9cff9948ec40c72afe75bef5ef918db0f7194a9a","sha256":"7432433d9ead261d635661528fff8c6f6428a12348232092cc689ee330e9f4f9","sha512":"035854a65f55abdd252f0faa68053706f4a4a5bdc4bbf5b2554038448720b948596295bda7a9fb9efbeca954e692bdec829681fd0c1ae6d3bb3986480b854284","ssdeep":"48:um4bAc6peJIRua5N4qTFh90Jw0j2goE260IO0004XZEKX4U2oS3mxkqhjbFyxADS:9peE1A3foEx71wEKIroS2Kij5yxWzu","tlshash":"5e32896580f150e2049392c32dbe97bbbe01a647e746596436ac0fd08fcfe86dc775a8","first_seen":"2026-03-28T05:58:12.481734Z","last_seen":"2026-03-28T05:58:12.481734Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1030,"timings":{"blocked":443,"dns":51,"connect":12,"send":0,"wait":143,"receive":0,"ssl":378},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/small-font.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/small-font.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 750\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\netag: \"2581d0502202def34971ee9721153bae\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: -OBc1zziQcpBx1TbwEgRSzTA352XVxleyZqgTtt8ThFWrHx59UcXKw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":750,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2581d0502202def34971ee9721153bae","sha1":"fca6b10f4c1d8abdbffa77bbf78df9cf5e3d87cd","sha256":"abe698e0dc55478898037bba99f35fe62c939a79b5626759c7d5d8fb130f4806","sha512":"fda91f74cac81f6945e8f7600220d9c06d958385365a0a2b038e11a94367af16b349d86b434b773f05ec268d48d29a7f1daf35b3e6620e8ea1b29891110226fd","ssdeep":"","tlshash":"4e016819a82ccf3585ce934d516a4e090056e29b8d003de78c360b2983c1aca7fddead","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.482612Z","times_seen":20,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/numbered-list.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/numbered-list.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"ed97d7719ec15ee7d12c2fa69df941ce\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: MvO3mhF0uLm7ddQwKq3sdVgsY70NA-00Bt10S0ZlWmpMBy1DXmhwDA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2144,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed97d7719ec15ee7d12c2fa69df941ce","sha1":"86245789aa03cb5d464561742d5347d99b2a5b99","sha256":"1b9177196284d0c5c80e305397257f690394dd1f0bc37d5b35cf8eca409b076c","sha512":"2bf080d4b4fc31fcec0aa36829c4a0d1c234c3db2f4ce894af138a9f4c0e4031a44e4398f566d4131964cecbcdaf5bb0677fcb7551b5f3796e11a25d81e540a0","ssdeep":"","tlshash":"14416721ac41a4bd858de3c09a7f85d1462ea3cdc0213da3988dab905e4fe5db37af15","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.483961Z","times_seen":18,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/line-height.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/line-height.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 558\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:28 GMT\r\netag: \"58f2ec7dd51a2f2d15ff25d4ba4a171d\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: 5lqRpCLykxe__M6V7suXJGGbCs7KstWTJS2s_5sz7TDmJEDdtV1uXg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":558,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58f2ec7dd51a2f2d15ff25d4ba4a171d","sha1":"f6538e2e83ffaae620449d64bad5cd0ade2efdfe","sha256":"90907fcd72f678ed65542d5198c21b89f508a9c0de389bdb0a32a1c1f42684f5","sha512":"0a49c724f2d22b809977a75131d1f1a9e60adda85d763b3ca5d943fc6102b4e2039dc1abf299e84152f3a131983ab297750b5d8a726027ab7020e3a25d1f7230","ssdeep":"","tlshash":"75f0bb346884dd22650d038037ed8ba5d41ef6b2c103fe477ca92e5641cd9d5f551f44","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.484804Z","times_seen":19,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/search.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/search.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"31c313fa9a8f3b5283ffa6573ba23cd8\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: 3voWeLoiPSjx5lL8B4zA7KDOb9PG0_MtbpPbrdF3Z3y_4sfoDWjggA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2197,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31c313fa9a8f3b5283ffa6573ba23cd8","sha1":"69c677ad649c148a54e25c4733a92688121bbd3e","sha256":"24952843aee3e35006fd9da8125ee191dcc554509bffef4eea47b26d459d0e6c","sha512":"5a3164625eb12a224a0db0623d82922b4fa0e74a415e0f37879e018d0a2a1123bbe7437f08fb127ac3fbc77bd1ade404b72df4a806109612206acf01f71c9e6f","ssdeep":"","tlshash":"89416928dd4c29f859cce3c029bf87c5491ae38e85113a634e4fd9200ec6a95d7bee04","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.485673Z","times_seen":20,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/css/icons.css?ver=1772793744190 HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:27 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"b8e21412c79d5d098966b756274c7e7f\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: pm6ThQcxQKBS_u2qYNGV356OJIPlTvj1xCVep0v7seWVVzwftQmK-g==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3018,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"b8e21412c79d5d098966b756274c7e7f","sha1":"2e746ecf77a67f5c1b53387872a7954680b9d0bd","sha256":"e91ddafdd733ba17e5b7ea8796c62867a5f03bf4ed1e93ded3f750aa9cc1fed6","sha512":"0f63bd1cf72f600a688ece015aa6dfde04d14d5cb1d39d9410b34e4017b64b41af665b42c5ca0ad065de890117e5f8b341b163e2696764211ba9fedab15984d4","ssdeep":"","tlshash":"b2519414d2f76ccb3e2a8dba6e7d9202e19c1887850c8e1d7ebd32d53f780459876d06","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.486631Z","times_seen":20,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/css/page-content.css?ver=1772793744190","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/css/page-content.css?ver=1772793744190 HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:27 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"562afc3007f083e651c116e8cd94dc4e\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: 7ITFo8-dTXKYaN6ftUHwtKMCF25c8F7324CSJwl3YrDZNt-_1v00Yg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4738,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"562afc3007f083e651c116e8cd94dc4e","sha1":"c09fb8586d8453616d10bfb2a6483579d621035d","sha256":"ab639531c30baee6cd367155b5003d007d6433de86450413b005fa2deeb4cbd8","sha512":"9ac9a6467346e182c7cfcd49a4a6446f1d308b5d6747179ffa8119ad5be5ebb2f38e2e70fdf2973b64e86e86c27f664c2bf9296849c1bde5475ad038bc1a4384","ssdeep":"96:7MSR66XJXc6d//8sqJkJIkeuwpgZefEe8oOaE0ILlJndI8KtR:7MSR665XPhqJkJIkeuwkZvjT0A7nu","tlshash":"dea1de970ea32248a817e0a4afbd66a462c94083570fdda17dcc2189df8d29155b3fc8","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.487456Z","times_seen":20,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/warning-logo.png","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:48.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/warning-logo.png HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 11110\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:49 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\netag: \"dea0b66b0fb910bcf3d56d83f080de0f\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: HgpHUYs2NsHwBH9moCdEWSG1X9oHEHALgk-ZA6uAI-fFjLST1zZNPw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":11110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, interlaced","md5":"dea0b66b0fb910bcf3d56d83f080de0f","sha1":"990c10c5916f1664cf3340cfab1526b875b33a8a","sha256":"05d0dc2afaa429d61cece3b19356637e31de65e7de36809a22585b83560cddf8","sha512":"5998d45f68b4d821353984e174abf8b7da7f61712ee6cca1284d547b4a9b720e73b19ae53d19c7d1dc08ad939b4c40e1e6147197257c58a1db321d6064eb2d0a","ssdeep":"192:imNY9hpZK81F5xU0wU8B6mldJWKmplr+Rau9gAbr2pV6OBhn40oUdK6:iBZH1FzUtU87dS+Rau9gAbqyO/nFoUdj","tlshash":"0232afa42d5c3a19d522df3b38de62f551e005ff1c620e2d43c860e545aedfbe4066a9","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.488383Z","times_seen":20,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/tab-left.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/tab-left.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 764\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\netag: \"2abfb3953f422de7a4aa8547a328180d\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: OiJTE-IoG25JhU4pS_VqYBzr9KDoyQWVPTsgq2WRxrFzfS7VUBa_-Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":764,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2abfb3953f422de7a4aa8547a328180d","sha1":"492c53c2180527e07b45219e06fd6ebda73d6393","sha256":"72fa4affba17304f5aad9cf8d87c643b61ea18741660e50aff92a9ac3cbebab7","sha512":"95129bf9776c48b30ce0bb24abf211a79ca594e8041812e3c118c21a0add0b42604b707a0f5607ccc869bdb26930454a082c008017a28650c9c0d7c2a29e7ea4","ssdeep":"","tlshash":"54019c200e84ed2f4d2d0368a2b59dc1512db1f19010bd4bcc5d0a1eb8c4caea9f3f98","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.489319Z","times_seen":19,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/icons/mic.svg","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/icons/mic.svg HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/assets/css/icons.css?ver=1772793744190\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/svg+xml\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\ncontent-encoding: br\r\netag: W/\"eb551a654a77e9cad57beab4318629c4\"\r\nvary: Accept-Encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-amz-cf-id: mWuquu4A2sVT3PblkF6H7jQxeBltbEnWHrLNr0sECumS9frvQ2QVYw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb551a654a77e9cad57beab4318629c4","sha1":"dd23cea722c13ac7908625f792adaedf97ece6cf","sha256":"8478ac8ff6794f953486b0c84c2f3f3e2d70b4948e79b6ce745c342de99fae21","sha512":"9e9c7f41723c3a890568b427bd46791d04fb953f1a6414a468d6d592d798488299272cd23735272e227dbb88b7e1450fa922e90895ca07a55308e4e95bafcbf6","ssdeep":"","tlshash":"96414834bca1941d426ed3c01a2b85a01a1de3df80313d33aa9e6a608f4dc58da7ff15","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.490153Z","times_seen":19,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"officeonline.com-s02.net/assets/img/word/word-icon.png","fqdn":"officeonline.com-s02.net","domain":"com-s02.net","tld":"net"},"ip":{"addr":"65.9.46.89","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://officeonline.com-s02.net/","date":"2026-03-28T05:57:49.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"officeonlinev2.login-pages.sosafe.de","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Dec 2025 00:00:00 GMT","end":"Thu, 28 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"07:82:57:E1:49:66:68:8D:E4:4F:8D:6E:94:68:D9:2F:5D:95:84:51","sha256":"FE:3E:63:94:B2:A7:8A:7C:7B:93:67:0B:D2:2B:A0:B6:5E:A1:BD:9D:55:2F:5D:C4:28:17:D8:3D:F7:16:5F:33"}}},"request":{"raw":"GET /assets/img/word/word-icon.png HTTP/1.1\r\nHost: officeonline.com-s02.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://officeonline.com-s02.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 6164\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 28 Mar 2026 05:57:50 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:15:29 GMT\r\netag: \"db5ba5770e51982fb70a561b29008d02\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=0, s-maxage=300, stale-while-revalidate=300\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9e31b5485ee028c6eace731c46b799a4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy-report-only: child-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; worker-src 'self' blob: https://*.sosafe.de https://*.sosafe-test.com; script-src 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; style-src-elem 'self' 'report-sample' https://*.sosafe.de https://*.sosafe-test.com; img-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; connect-src 'self' https://*.sosafe.de https://*.sosafe-test.com; default-src 'self'; font-src 'self' data: https://*.sosafe.de https://*.sosafe-test.com; frame-src 'self' https://*.sosafe.de https://*.sosafe-test.com; report-uri https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development; report-to https://sentry.sosafe.de/api/23/security/?sentry_key=f4fcbdbd596c4b2cb672b939a7ee93c6\u0026sentry_environment=development;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-amz-cf-id: o1ZleYsWyBsZfj5KUVtfmt_hFt1j2lfBjmhZvuZiD6Fg5uCD6gfA_A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGBA, interlaced","md5":"db5ba5770e51982fb70a561b29008d02","sha1":"8760a7db37973f94c7e2e3b2098c165017be5944","sha256":"0f1798f642680cf2fe93c04506f490c0928450d28c280eb84c63a675ad1b7c94","sha512":"cd300cf28ce1fa4df4bb9e317aba891396a56d77571e28a8963e8e7657bcf604f5d117b0c0f8ad3eb4372825f192c3e9e6768709210bb33b2689e3ef2ecafdbd","ssdeep":"192:iRP9kszQCpfTmkvTMscatyyl3MvZlSH9mu:icssCpLmkwsBhlglSku","tlshash":"46d18e68a62344ed7096ccaffed08d4a4c0ce39119c99f266e718db244f25b9b1c15dc","first_seen":"2023-05-25T10:48:36Z","last_seen":"2026-03-28T05:58:12.491037Z","times_seen":18,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-28","alert":"Sinkholed","trigger":"officeonline.com-s02.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}